last executing test programs: 5.598550928s ago: executing program 0 (id=4689): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="67000000000000007bef7ad1b1447ea3d578c68dd8704b70dacae7acf19a3acc480642753c488bfec60b403e828b7aae0d7adff6b692671f5df0b589fbd6ded272c665e9dad8362a634cdd5eee3a23f1cb180689e16952b4a859fad75d2bb57b839530d0ff38f4f00ec77b4cb93f9dca928d1ba655efa962b512fd30f8d826ec441558"], 0x8) (async) sendto$inet6(r0, &(0x7f0000000080)='(', 0x1, 0x40500c1, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @mcast2, 0x879}, 0x1c) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000b00)=[{0x3, 0x1, {0x2, 0x1, 0x1}, {0x1, 0xff, 0x1}, 0xfd, 0xfd}, {0x3, 0x0, {0x1, 0x0, 0x9ac8546e0387b197}, {0x1, 0xf0, 0x4}, 0x2}, {0x1, 0x0, {0x1, 0xff, 0x2}, {0x0, 0xff, 0x1}, 0x1}, {0x3, 0x0, {0x0, 0x0, 0x4}, {0x1, 0x1}, 0x1, 0x2}], 0x80) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x70}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1c}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x23}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x4}}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) 5.385029324s ago: executing program 2 (id=4690): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}}, 0x0) syz_emit_ethernet(0xd4, &(0x7f0000000140)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fbff00", 0x9e, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x4]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "1259047d6d34c601c07aae7b4662a26ff33e31997932c8e406c7027c093aa7f2da436d2a015f95efb9711113d781c2e1b2989a09826ee45e75594f07f2579d3c57ce6e2e27f1c3158bcf53d41fb4988aa25b0d2667043c21"}, {0xa888, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x2}}}}}}}}}, 0x0) 5.351160341s ago: executing program 0 (id=4691): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r7 = socket$netlink(0x10, 0x3, 0xc) r8 = socket$inet(0x2, 0x2, 0x1) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r9 = socket$inet(0x2, 0x2, 0x1) bind$inet(r9, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) close(0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r10) sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5e4d2006ac75533f11", @ANYRESDEC=r2, @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) 5.273217076s ago: executing program 2 (id=4694): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) (async) connect$tipc(r0, &(0x7f0000000000), 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000064000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61147c00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x23) 5.126545111s ago: executing program 0 (id=4697): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @link_local}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.125060486s ago: executing program 3 (id=4698): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x1000, "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"}, &(0x7f0000001480)=0x1008) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000040), 0xc, &(0x7f00000026c0)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x9b4, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1b0, 0x3, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x7c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xca, 0x6, 0x1, 0x0, "f5555faa954449d2e6c3db3fc4b216f694eee01d70b184935b916cb29d3b9f1790dcef8a5a221011a4dfd09dbc5625d14a138202d4a7188d001a8fce96753415f1240897e3c2e59b217d73938332426a0a61ca48e90623bfdab89ad71b61c12839ed6a027631167398b35f8ab00ef4a85d2d074cdd7c3128c7536a47d92993881a4862d76286a98170783f1741617a80fd9b29f9969e3e62f7c23c65d16c63e24e0d0ca2a26bae632a2c55df0c7c4f0c11b3284d64e7909049af6a6e657b352042148a557a4a"}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7ac, 0x3, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x78, 0x6, 0x1, 0x0, "ff0aeabd9c2e732885ade00a062ddb7aac66d2cb7966b752a57d4df2913882a2fb251103638acd08d3a187e6d9cfe7310205fdd2dba6e4a6d0759ce8bcc7a6ae592ec15939de38b2185b67538dbc75d3cc9b439d6523a673de62fec7d08e98a46b9c7d7b34c18e95c2a403ca7dda671dd1caeb87"}]}, {0x72c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xbbf}, @NFTA_SET_ELEM_KEY_END={0x298, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x72, 0x1, "05d47f8600dcff3e5e64ebfa7fd037cbeb57fa236cd5dcd5fe36a91e82bbfb51109ca36c157918443027d93619d13dd6ac5e95caa01f135fc89329b65788419161f2c665bb3af126ae87192a9b5f10dc24f9ed3a3ac3bfb9771cc421ddb9225fc456ea4070147585df657278c6d6"}, @NFTA_DATA_VALUE={0xb8, 0x1, "ee5798dab1db9a2e8ed70b608a18378ad90117fab29dab7c1a94ce0cb232084056bad1fdfedd125ffebdf9aab919edb769c7c37a1370a432e9bd5a7e9e2967383b45a39d867449835ee2cd8a86ac0a5982bb47c62822008cc765761e6613e6f32d7c4e0d3a851e75728b2cc3577e725c8dfacb4613bf7e9474589de4c87c94d1fb0bb1e75b389f7af02a90b1c2c137af66ea8cd0340703092e8a21812a5bf950d0135f0212057c79fa99600561608b0f1591de74"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "7480d6791560fe598da50562569529117446812494ef609f944e1987a13d701af0d91e548f001558b30cceaa9d8c866716e084bd9864c5d3010983c3011d454b66c6786e8968e50994ace6091340b5228af1740fe7d1cd1d6c57fc6736abf0575d9727d6eff8307bb10f59a97b4fb107e404f90cafaafdde4162cb7c14cbe4be10f6f1ac8be42e5a4a686e09ce8455ed3279eda0c1f6e74cc128a0a2ef25391229bab5afaf72f94b315924cc"}]}, @NFTA_SET_ELEM_USERDATA={0xc6, 0x6, 0x1, 0x0, "e6e4564f6e97f5b3bda5ac60bfd6bfbf8ef5165b2ccea6d3e0869a4c8edd336c247e8db2d8ec78c4c99ad6a523375f69a2ec4224bc433b6a7287b4002e26e8bd24fa19e05aa6051087260458ff15290cc19fc95eb546e869d521b7d40befb19f3900708758a20dd3b0bddf81f9b32dd5451b70914cf799003b2d149a933842476add1b2e203e4fcf7643c2957fae25d0a00a779e8ff80c857b2718f04d2479e3eaa0515ad5080a9f071b98a85888f5daff496b7a918285ab1e7c8320efa5494c862a"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x384, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "0cd8b3e00fb4a3499a12c7fbabc43ba61f681fd3722f1c153abf878b29a513e5e90a5b49301c7c4db651095d28b77da5e28fc48e10c152cdf67dc31b7e2c3126774321eb6f668efdc3a22f0dc0cbb603a5bab6b8652e5b72c4d5bd2612d940ba0a81fbc880eda254f653fb303889fcd84ad97f1039"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "585cc1b7ff9fc275ba4dcbd7816d01230ee2edca3e5631f0a7ef6a6385773c784656bc2b9d33b17c6119cded7756799398850132bff6c60e55a2757ea65fa43a3714a3c0a5ae76daea298765db6554a81213ecbf2160da22d5c730421cc844dec5cd24b0b5c2fb3dd183c38b1a682f3352a82b71510fc07c6b9a060c0e6b3a399a834f8e349a11404d29292bf8b3304bbff3339270c64dd485026eddb124d80e84ec3500aacc3153645d074ff3aaeef135616ea628dfcce0731add0ae4bd20ef8037a606d6"}, @NFTA_DATA_VALUE={0xc8, 0x1, "e6e6dd38527fa720f28c077e2c70f85241b292f5261830d282a7b16d5ddddd7f747f7c73c97902c15eb798e3701fdf545390be429bd41ddb45fffeee46ddc60981cd122305a5b202c7c887c5c7ceb963f5e3420cca82c429d5341477e9c4b3de1b02bf77adff9ef9cafe4df191fe5acdfac2bd71ea25e47c9a33fb24daa8e8dab7c5103cc0685753f2901bf239706ad7ac357c70cb47a10cf9459c87f31322eca926076995399ad52f4fbddd94e62a0cb86519b29bade32bb11d708b449d5a4050599495"}, @NFTA_DATA_VALUE={0xa1, 0x1, "f8a4b60a1aa0c9ab9ebcc0747cf74e212dd49c973db65118fb3dbf29206241d95eac400808a6a161baa69ab570078d0e47b23f10902f18ca6c494a95931d8f11329cb2a5ecd77a38f03a6009fd4d038150968feec3c649be76ae745249564ac5c89cddc36bda4316af8934952f0567196e51489f7a5118294ee5557415d8e6c7fbc76e34801a00d5c9425c8ea28b4da04797ff4350ad66f5f3ff10cf5d"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}]}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x32c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc8, 0x6, "e54ec4637d8536d6493e658d1a1caf39498337f9f96601de0d1bc204af9517551f7408f796915ff9eb191740a1e03eab2a5582a30c7a45b28407fea344444862f708e78d024513a893b642f05e747a07f00db682c8c2c6d903b67b4720f1d7da57195f66e931259b27022244d70aa15fc76051e3c199883199107e4fe6c0c4c15492389a7baeda4180c9d32f9e4a49e6ccbe26cac1ca9ef7ebbf3724e9c70d5d164e43f9b73eb5f8a0cb8e70e15a81b636f063cc5171a6d984f3139d637d20d5e26882a9"}, @NFTA_TABLE_USERDATA={0xbb, 0x6, "dc6e92ffc9271361771b66f6d21985d7a06a5ac04aced97d047d98c36fea2ab0764c8bb1eb9e6cbc5948aeba73ab56ad52c3c9235fc436240ae16c1d8994a056309d90e474f8255f55939550a21f94d3f9aaa92de1d5fc2824d1739ff1186e25bf51b21668ebae63cbbedf50d6a75f6c6196eca507480819ee7e5090f43cb89c2ea9ab5db6b340a762de1b6e628de82a57c9443b75cf5f41369dc998901c5f451dd36d921f72575db0135026189a37d17fdbd1c799048d"}, @NFTA_TABLE_USERDATA={0xc3, 0x6, "3b9364e0afd45d8902402b1d65fff5ae524c02a9a64c10be887d67c288aa4fcc80dc61333c5960efc3d47f3b0f58ed982079c2dd2caaf84366d2e052c3920a5834e00a63d7e02110211636c15491d889064e4bf2593ae34709fa74500115f4a1e61bac1eac7fd41d5eb90e84f9c7c3b6b9ff12b3653aad3b48d084d91bc8174eaee3fb23dccdf7fb43faef9da376ae788de33713f62db33916ff75f1d11954480362b81bfcd35055bfd9f73ca1a2092d12c3634e0f7be68e0740c06c364de7"}, @NFTA_TABLE_USERDATA={0xba, 0x6, "9c244943e3a94d3e9695fc4ea004d6f2430578a424e715f1b8a0f2754574787e85f907583b9c9ea7a5acde63f4b2ebc2b1947a4ff342734a1132b277735f1a7cf1ee8631f8d2eeaa2dcfb5dfd7a82911cc65708f4371300d93acf143ab7623ae3c1d740b452a8962ad0647c7fc530a16b17a4f29beb060aa7fefba6450cc7e8b715894499479dbf52c1ad783c6ca289835b448bc92e59c9512a25c36ec953c3f06a26dd3bb3eeff801b3d80a04732c0a95226158704c"}]}, @NFT_MSG_DELRULE={0xbc, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xe80b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6005}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x888e}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0xf0, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2800}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPRESSIONS={0x60, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x134, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x108, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1118}, 0x1, 0x0, 0x0, 0x81}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000014c0)={r1, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x8, 0x8000, 0x8, 0x80000001, 0x1e, 0x5, 0xc3}, 0x9c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a01010001000000000000010040000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000140000000140800034000000002080002400000001208000800000000000900010073797a30"], 0x108}}, 0x0) 5.040917398s ago: executing program 3 (id=4699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x20004000) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}], 0x1, 0x8000) (async) recvmsg(r2, 0x0, 0x0) (async) poll(&(0x7f0000000040)=[{r2, 0x10}], 0x1, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x1000, 0x3}, 0x20) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r3, 0x60d1a000) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000306010300000000000000fbc10000050500010007000000", @ANYRES32=r5, @ANYRESOCT=r1, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20004005}, 0x10) 4.941969576s ago: executing program 2 (id=4701): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x404, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {0xf, 0xffff}, {0x10, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x2c}}, 0x24044010) 4.941109225s ago: executing program 4 (id=4702): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) (async) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r4, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x18, 0xbd, [0x3, 0xffff, 0x9, 0xbff8, 0xff, 0x7, 0x800, 0x401, 0x6, 0xc119]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008844}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) close(0xffffffffffffffff) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) r6 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r6, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}], 0x2, 0x1c000) (async) shutdown(r6, 0x0) (async) ppoll(&(0x7f0000000140)=[{r6, 0x5}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000001340)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x1c, 0x0}}], 0x1, 0xc040) (async) close(0x4) (async) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={r1, r2/1000+60000}, 0x10) accept4(r0, 0x0, 0x0, 0x80800) (async) shutdown(r0, 0x1) 4.926745927s ago: executing program 0 (id=4703): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) close(0x3) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 4.813738969s ago: executing program 3 (id=4704): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x3, 0x20000008, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1d, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x1c, r4, 0x1, 0x70bd28, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd49920d352518f4a}, 0x4000040) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}}, 0x20000000) 4.81250771s ago: executing program 4 (id=4705): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800140000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.023019101s ago: executing program 3 (id=4707): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{&(0x7f0000000480)={0xa, 0x0, 0x0, @private0, 0x7fffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000580)='3', 0x1}], 0x1}}], 0x1, 0x44191) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000100)={0x3523, {{0xa, 0x4e20, 0x5, @local, 0xc0a}}}, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff000000000008000400", @ANYRES32=r2, @ANYBLOB="0600150008000000100016800c"], 0x3c}}, 0x0) listen(r0, 0x100) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000240)={0x3b, 0x5, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x40}, @hao={0xc9, 0x10, @mcast2}, @generic={0xd, 0x6, "5f39af3fe8f4"}]}, 0x38) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x50}, 0x1, 0x7}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 957.866723ms ago: executing program 1 (id=4708): syz_emit_ethernet(0x113, &(0x7f0000000000)={@empty, @empty, @void, {@mpls_uc={0x8847, {[{0x4}, {0x8, 0x0, 0x1}, {0x7f800}, {0x0, 0x0, 0x1}], @ipv4=@tipc={{0x37, 0x4, 0x2, 0x15, 0xf5, 0x65, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x1b, 0x68, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010100, @remote, @loopback, @local]}, @timestamp={0x44, 0xc, 0xbb, 0x0, 0xd, [0x2b6e6b8, 0x4]}, @rr={0x7, 0x17, 0xcc, [@rand_addr=0x64010101, @broadcast, @broadcast, @multicast1, @local]}, @noop, @end, @timestamp_addr={0x44, 0x34, 0x3d, 0x1, 0x1, [{@empty, 0xb11d}, {@local, 0xfc}, {@remote, 0x5}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa5}, {@rand_addr=0x64010101, 0x6}]}, @cipso={0x86, 0x51, 0x3, [{0x5, 0xc, "e6dfdf9277b4aded6f79"}, {0x6, 0x8, "dba96d7ef159"}, {0x6, 0xb, "ddb7e9eefe5d4f9419"}, {0x2, 0xa, "c7bc6f2a71eb9ce6"}, {0x1, 0x2}, {0x6, 0x7, "9fd416645b"}, {0x7, 0x12, "ddb8dbe0e561aad449c93b2de6a543e3"}, {0xe2c587025d1ffe43, 0x7, "1a407eff0e"}]}]}}, @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x2, 0x3, 0x0, 0x0, 0x9, 0x4, 0x0, 0xfff9, 0x1, 0x3, 0x4e21, 0x4e24}}, [0x0]}}}}}}, &(0x7f0000000140)={0x0, 0x4, [0x698, 0x477, 0x143, 0xf46]}) socketpair(0xf, 0x0, 0x200, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', r2, 0x2f, 0x6, 0x9, 0x9, 0x2, @local, @remote, 0x1, 0x8, 0x8, 0x4}}) r3 = socket(0x8, 0x800, 0xe3) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg2\x00'}) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) r4 = accept4(r3, &(0x7f00000003c0)=@qipcrtr, &(0x7f0000000440)=0x80, 0xc0800) splice(r4, &(0x7f0000000480)=0x4, 0xffffffffffffffff, &(0x7f00000004c0)=0x4, 0x5, 0x3) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r4) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x5}, @GTPA_TID={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x5) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000680), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x8000880) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000840)=@buf={0x1, &(0x7f0000000800)='B'}) sendmsg$nl_route_sched(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@gettaction={0x20, 0x32, 0x20, 0x70bd28, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c010}, 0x20008004) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000980), &(0x7f00000009c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@remote, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x1, 0x2, 0x80, 0xa0, 0x89, r2}, {0x9, 0x33, 0x7, 0x576, 0xf, 0xf06, 0x6, 0x8}, {0x9, 0x5, 0xfffffffffffffff7, 0x3431}, 0x3, 0x6e6bba, 0x1, 0x1, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x6c}, 0x2, @in=@private=0xa010101, 0x34ff, 0x2, 0x2, 0x80, 0x400, 0x2, 0xff}}, 0xe8) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b80)={0x168, r9, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x230}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe7}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x79e}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb82}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffb48}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7090c00c}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1d4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x70}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfddd}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x5893a6b90e5ec7fc}, 0x4011) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000d80)={'macvlan1\x00', 0x90b}) r10 = accept4$packet(r4, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000e00)=0x14, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000e40)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000e80)=0x18) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000ec0)={0x4, 0x10}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r11) splice(r3, &(0x7f0000000f40)=0x5, r10, &(0x7f0000000f80)=0x80, 0x36, 0x2) sendmsg$NFC_CMD_ENABLE_SE(r11, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x34, r12, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) 957.238468ms ago: executing program 4 (id=4709): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="6d9311000000f8dbdf2501"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x210, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xcff, 0x3, 0x2, 0x0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1ff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8000}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x31b3f90}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7ff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x4, 0x0, 0x1f1, 0x0, 0x5, 0x7, 0x7]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe1d0}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0xffffffff, 0x1000, 0x8, 0x0]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x0, 0x9, 0x9, 0x4, 0x0, 0x67d, 0xef2, 0x10000, 0x33]}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xe}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x6, 0x5687, 0x4, 0x9, 0xe]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x402}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x800}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xd28}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffa}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xf8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x8, 0x1e, 0xc6da, 0x6, 0x9, 0x7f, 0x5, 0xb9]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1f4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8001}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x8004}, 0xc050) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 909.910615ms ago: executing program 1 (id=4710): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20004802) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 906.166034ms ago: executing program 4 (id=4711): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x44, 0x11, 0x1, 0x800000, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8, 0xa}, {0x7, 0xf}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0xa}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 673.347296ms ago: executing program 1 (id=4712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x102, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x2f3b}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'erspan0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x8000, 0x8, 0xb8e8, 0xd4, {{0x2a, 0x4, 0x2, 0x6, 0xa8, 0x66, 0x0, 0x3e, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x2c, 0x45, 0x3, 0xb, [{@empty}, {@broadcast, 0x3}, {@multicast1, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe130}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa49}]}, @ssrr={0x89, 0x1f, 0xc1, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010100, @multicast2, @multicast2, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x44, 0x49, 0x3, 0xf, [{@multicast1, 0x4}, {@empty, 0xc}, {@broadcast, 0x9}, {@multicast2, 0x189}, {@multicast1, 0x5}, {@broadcast, 0x9}, {@local, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}]}]}}}}}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000304000000ac16b0e62d38d0a700", @ANYRES32=0x0, @ANYBLOB="a428040000000000140035007767300000000000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wg1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x9, 0x34, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x66, 0x0, 0x9, 0x4, 0x0, @loopback, @loopback, {[@noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'gre0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x5e588d92bacc9633, 0x10, 0x0, 0x0, {{0x31, 0x4, 0x1, 0x2b, 0xc4, 0x65, 0x0, 0xdd, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0x1f}, {[@timestamp_prespec={0x44, 0x1c, 0xcc, 0x3, 0x4, [{@rand_addr=0x64010102, 0xb4}, {@local, 0x5}, {@local, 0x6}]}, @cipso={0x86, 0x26, 0x3, [{0x7, 0xa, "f0f9f5f50c76798c"}, {0x7, 0xa, "d34dd846435f3be9"}, {0x6, 0x4, "97b1"}, {0x7, 0x3, '*'}, {0x403c25275fe5fb12, 0x5, "2a9785"}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x99, 0x3, 0x7, [{@private=0xa010102, 0x7}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x200}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x7, 0xc5, [@empty]}, @lsrr={0x83, 0x3, 0x22}, @timestamp_addr={0x44, 0x34, 0x81, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6b5}, {@empty, 0xfff0}, {@local, 0xe1c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2cd4}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="a8050000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="08010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000e00000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004007f00000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004002d00000008000600", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400fd2e0000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000500000008000100", @ANYRES32=r6, @ANYBLOB="c40102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYRESOCT, @ANYRES32=r8, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="6401028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74001f0000000000000000000000000500030003000000080004000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000008000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB], 0x5a8}, 0x1, 0x0, 0x0, 0x40080}, 0x851) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r11, 0x1) (async) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async, rerun: 32) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r13, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r12, 0x112, 0x10, &(0x7f0000000100)=0x40000, 0x4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) 672.753031ms ago: executing program 2 (id=4713): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f0000000500)="1a4cf331728a2ab98f4b19a5a033e412b2a11fbbb6a3a9c9e6bea5f37dbca046"}) (async) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x1, 0x0, 0x103, 0x0, 0x1}, 0x48) select(0x40, &(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff, 0x0, 0x40000000000, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x2}) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) sendmmsg$unix(r1, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000014) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000001340)={0x0, 'lo\x00', {0x4}, 0x5}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911a800000000001e0000000000009500000c0000ffff00"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 562.697835ms ago: executing program 3 (id=4714): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r2}, &(0x7f0000000380)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) (async) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) 460.729091ms ago: executing program 1 (id=4715): r0 = socket(0x2, 0x3, 0xff) connect$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, 0x3}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={'gretap0\x00', {0x2, 0x4e20, @loopback}}) bind$inet(r0, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x1ff) 329.621362ms ago: executing program 4 (id=4716): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x22020600) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@private0, 0x0}, &(0x7f0000000140)=0x14) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{r0, &(0x7f0000000500)='\x1a\xe9\xe3%u\x80\x1c\xc1\xed\xed\xb9;\xe7\x93W\xde\x9bs\n\xb4\x92m\nk\xad\xa3\xfb}\x02eQ?\x00\xaf\xe8\xa1\x96\x8a\xbf(@\x83\xd5i,\xef\xae\xdd\xe4A\xe7\xa4\xb72|\xf7Q]\xfegX\xfen\x8aE\xf8X\x02lLne\xd1\xebi\xe34(5,\xc8L\xb5I\xb5\x13\x83\x8ff_&\xf2\x8f(\xe7J\xb7\x80\x93t\xe2@\xe9\xfe\x8b\xc1\xae\xe8\x9c_\xc7X\xc0\x9b\xe5\xe4s\xbfv\xd9\xa4z\x1fr+\xad\x1e\xa5.\xa4\x9d\x8db\xa0m1\xd9\x86\xcf\x05\x820\f\xe3\xa7F\xb6\xba\x82\xcf\xc1\xad\xff\xc8a\xd4\xb9K\xfe\xd4c\x11\xa7f\x84\xfaf\xe7\xc2\xa0\x0f\xba\xa8\xc6V(x\x86Va\xa2\x1bQ]v\xd7\xd00\x03\x93\xaf\xc9\xfd\x01g\x1b\x84M\xa0\xe6-\x00\b\xe98\"\xf8\xccJ\x8c*-,\xa0\xfb\xc26\xe5\be\xe5\x9a\xebE\x0f\xc4\xdd\xae\x05\x83v\xf7r', 0x40, &(0x7f00000001c0)={@align=0xffffffff80000001, {0xfff, 0xb, 0x0, 0x5}}, 0x3, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x5}, {[0x153, 0x24, 0x9]}, 0x6, 0x1a, &(0x7f0000000280)=""/26}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00006a9000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r6, 0x75202000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1a00000009000000aefc00000500000000910400", @ANYRES32=r3, @ANYBLOB="080000000000000000000000000000000000ff07", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="04000000020000000100"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) getsockopt$nfc_llcp(r6, 0x118, 0x4, &(0x7f00000003c0)=""/30, 0x1e) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r10, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239fa7, '\x00', 0x0, 0x2}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000400)=r13) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) (async) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) 329.298764ms ago: executing program 2 (id=4717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 328.140387ms ago: executing program 0 (id=4718): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000414010027bd7000fbdbdf25080001000000000008000300"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETFILTER(r2, 0x801054db, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x38, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x38}}, 0x0) 282.662515ms ago: executing program 4 (id=4719): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @empty, @remote, @empty, @multicast2}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000700)="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", 0x2c1}], 0x2, 0x0, 0xfffffffffffffde0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x70bd28, 0x0, {}, [{0xbd, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 250.856798ms ago: executing program 1 (id=4720): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r1, 0x9}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000007110bb000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)=@newtaction={0x18, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x21dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000040)={0x5, [0x9, 0x2, 0x0, 0x2, 0x9]}, &(0x7f0000000080)=0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r6], 0x50}}, 0x0) 182.350724ms ago: executing program 3 (id=4721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xcbd}, @CTA_PROTOINFO={0x4c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x48, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x40}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x70}}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268", 0x5}], 0x2}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002ebd700e000600001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x12, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0xfffffff3}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xc8}}, 0x4800) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000240)={r5, r6}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xcbd}, @CTA_PROTOINFO={0x4c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x48, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x40}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x70}}, 0x48) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268", 0x5}], 0x2}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002ebd700e000600001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x12, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0xfffffff3}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xc8}}, 0x4800) (async) socket$kcm(0x29, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000240)={r5, r6}) (async) 133.723017ms ago: executing program 2 (id=4722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280)="b7", 0x1) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000100)=""/188, &(0x7f0000000200)=0xbc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) r5 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r5, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000080003008e860584caec1583729bdaeeb0c35aaf35d89963bde26c72e18d1affcd79bdab8da4eb873754e8cc1146b99807a1d4", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a0008a16000008009f000d000000080026000816"], 0x40}}, 0x0) 55.398587ms ago: executing program 1 (id=4723): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180806a"], 0x30}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'batadv_slave_1\x00', 0x100}) (async) sendmmsg$inet(r0, &(0x7f0000001f40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)}}, {{&(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000240)="c4abc65268a510745e8c592855b8ada65d74faf871d0c4e865a64bedc766ab", 0x1f}, {&(0x7f0000000280)="81836f198327ac11ad1c5256ae571a4cfa1acfd0ba6135640e838d3759e07343c00b1f28c317958ab8fedbe1f820c3eb78e5ed05dff939f5191ed84b5a8fc85afd26a770b81017143c4bc0f56b6a4034bf20ebb0df4f6ab9d8d980fabe39b58f35fb3a6f9f76f171154330c96c538b71c7992420d649fd023af47889a7d76a02ca68e72d80473180e90d0f7c02d156f89e54dfbf336dbb90a95cb90610c06869fbde9782cfbef9edb83e1fb57fb7d1998e6adfcec7487c729f0732dd8df415271713675c7711e0", 0xc7}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="e004bd54547cc8155c65ac17e8272933b6f3ab04fd9c629dd7529814113f0ffda6706487026e89b2d94359c15468559035481cc37fcfb30407f917142763918beb71d5de9760f778f523ddb4d75dc9dad8d213c0958664a25bf43014be821507ea7ef3c4bc3fe13a626bab94283f4ef728d69b2cc94fb3c8fb41f2fe0d6322ce745cd8213c849b33f14c838a06cd6af10b421a3286f9934488ac7d9afac2", 0x9e}], 0x4}}, {{&(0x7f0000001480)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000015c0)=[{&(0x7f00000014c0)="3bfb44c757960000000000000f5c0bfa71f77f52", 0x14}, {&(0x7f0000001500)="f713e8e495c0ee093ce406d3c9b073302ddf9abbaacfa815015808570a5421102194687a8ba6752756919c697fe2a9fcc28a1e1ecacddc2d2a2d7629082ba3fcd07653108bb8cae2cf3a7303eeea48851a5706e3606d1c190fd26e8e60c89cebd2082a46686dfb0b2bebdb47561d01069f90ed3cbebb5897e1740eed32375ae3c94e514c8c4920e5ed70fbef5d3e2f19effdc7e6d7ecd919406234340ccb8284ec20e2169a96cb03e7f92f1a434825b0d174e31655e554e87b833b85", 0xbc}], 0x2, &(0x7f0000001600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x38, 0x0, 0xe, [0x3, 0x9, 0xb5]}, @timestamp_prespec={0x44, 0x24, 0xb0, 0x3, 0x8, [{@loopback, 0x8}, {@loopback, 0x2}, {@private=0xa010102, 0x9}, {@multicast1, 0x10}]}, @timestamp_addr={0x44, 0x44, 0x4b, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x34}, 0xf}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@multicast2, 0x8}, {@empty, 0x8}, {@multicast2, 0x9}, {@empty, 0xd3b}, {@remote, 0x6}]}, @noop, @timestamp_addr={0x44, 0x4, 0x6c, 0x1, 0x2}, @rr={0x7, 0x13, 0xdd, [@broadcast, @broadcast, @loopback, @private=0xa010101]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x100}}, {{&(0x7f0000001740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001780)="fde31ef0ee7425e4fcf14599212f9e6154b857800ee9d5a06d64c3a39edeb430ab0204661519dd5f4021df8b1cb355daafa3dde321a7498af4194d7a3e3efd9e6ee0698d8dc1c5cf8d03ed494b883ac5823cd2ea3629ec28ac386a59b439c1baaa64229bda778fd7f61bc7e71ee5dc52421ba63090f99765ab273787ae324cbfba7836bb9367dbad3ea6fe8c399c6e1ec4b0f6e780fe00fc33b2b21476ab821ad03ddfb312ee5906a1f62a84fa91a878a92fe641217fabb406a9468bf3738177eaf7d163a28c37d54f3530c4e11ad922d5ba84b7a8d6f53aed4c0adae826b701c5dcd5c1b1a34d553f50e676f83041301e879ffe8fa3d67379", 0xf9}, {&(0x7f0000001880)="918a4abba1c941bcc7b4254f53deebc78450f2fd5c32182bbc70f91204df07e030ec32855b83d29bc9339aa615517a1989f2c72fb4e78777408ce52c8070781cf5baf6bbc8624952e37f455a56afdc4eda6e6108ea4b0e492c0c1b5b20f60f5d6498d4099d0f87ff80f55cee81a44220cd96ee9be9744e722987eeb6748e396dd8d7c70ad44d1a11f580babf66a2db6fb7e2af21e72cd37187cfb055ee0a588c055a1ad256", 0xa5}, {&(0x7f0000001940)="6e45905b56a907b6e91b1aebf8a5c00a04a115e85f9d8e8a555361cc9f86da371c8f18ea07f8988acd774af3dadbd9c50e22eb4418319f241cfe8680c1b3e661a783753f72761b4035ac655877f90c1a1ef5ba2561f97d9bf146acf9ed577d7bad72332ca979", 0x66}], 0x3, &(0x7f0000001a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14}}], 0x30}}, {{&(0x7f0000001a40)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000001a80)="328c05c73313c61774e17fe2fd51cc8e52c3d89c40e1803ed06aeab8b5839ab7e281c2eac40d27ebcf5e44d55c604647532797685fec093cfcbe52f1174d6590318d02fa28c1f59096e95696c9524448e0ff81c6999dedda638c", 0x5a}], 0x1, &(0x7f0000001b40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001b80)="3bb93f0aaed8b31d19aeb4811e0250b961334c9e3e58dc53a314401f9c0f28abb0905a6e3c93c002bbf0aad6c4501b40", 0x30}, {&(0x7f0000001bc0)="780b042784ad7032a5a3e746b66b31b3f5c3113f7f46bd1937046b11976c2ce9cf2aea17bed9c18a1d4a31b79a6660a87fa8f1258b92ecb7c7369557ad1f0878fc5c1c8c7d782c9abf5629d4999efa582739d6f00451c0c6b024c55a792411a757fb8bcc7b330360ba2af9786aba282b5e4467e151435844078c0fe887c8172ed5224e384287830408bac7807fcd73405e32d726", 0x94}, {&(0x7f0000001c80)="cc7e8b8d4ee4b3848494283a4c0dcba41995c4910434f86db864f5f65445c01dbf8855ac949059ca83fcab1acd5dd2d3c6b17b8125651af07234679e50700f1017e97bd9f70414bbff99615db501f78710bc6c6a109ae56e4ea8be34683ab83ce949bdac96272ca6ec49efe1d5", 0x6d}, {&(0x7f0000001d00)="de46bf389e8d6a22704aed9a3e955d85373c79f10258acebeb735b66ecaf37296c3b1e313f831e3cdd3fbe3442a4c334db5d730cab1e09abf003d652f8dc74ae06a2bfdb5662b1c01e605bf9aa16d3cb8e", 0x51}, {&(0x7f00000022c0)="e23036fa128557f701107b8e6ea817f54e09d10f0413994f01d44022a24d112403c2e3039bac080e6d792505ab65440491688713549026c5a318daddbe42ea2350fd3f5928dd803d401fe8dfa5271e406520b54828b0d55b182dae388d81c2e1be5181f12bbe939954d3bbc314e177d08939e5fd297e17271bd96d0f8f34ec622ad6621109c898", 0x87}], 0x5, &(0x7f0000001dc0)=[@ip_retopts={{0x40, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x24, 0xe2, 0x3, 0x2, [{@rand_addr=0x64010101, 0x8}, {@multicast2, 0x3f0c}, {@empty, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5c8f}]}, @cipso={0x86, 0x8, 0x1, [{0x1, 0x2}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x74, 0x0, 0x7, {[@generic={0x83, 0x12, "87d1c6e5f39b1cc30872d8ac804e78a9"}, @lsrr={0x83, 0x2b, 0x10, [@remote, @loopback, @empty, @empty, @multicast2, @local, @rand_addr=0x64010100, @broadcast, @multicast2, @rand_addr=0x64010100]}, @timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x3, 0x8]}, @cipso={0x86, 0x18, 0x3, [{0x5, 0x10, "e0521878e3ad13011a72099f2241"}, {0x7, 0x2}]}]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@generic={0x44, 0x7, "065eebab8b"}, @lsrr={0x83, 0x13, 0x3e, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x160}}], 0x6, 0x20000010) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'gre0\x00', 0x2000}) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002400), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000024c0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002100), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x200, 0x42}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x19af7f58d24b3d6d}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wpan1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000002180)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000021c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000002280)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x2020}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x38, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc8850}, 0x0) 0s ago: executing program 0 (id=4724): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)) kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 580.033793][T17800] __nla_validate_parse: 16 callbacks suppressed [ 580.033817][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 580.049020][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 580.164193][T17581] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.173765][T17581] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.234341][T17789] veth1_macvtap: entered allmulticast mode [ 580.726628][T17581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 580.746377][T17581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 580.790299][T17581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 580.828908][T17581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.843523][T17581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 580.859875][T17581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 580.894520][T17581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 580.933905][T17581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 580.951293][ T5631] Bluetooth: hci1: command tx timeout [ 581.373973][T17581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.393546][T17581] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.464868][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.472232][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.490003][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.497220][T10111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.719002][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'. [ 581.730648][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'. [ 582.604798][T17878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3399'. [ 582.716615][T17872] bond1 (unregistering): Released all slaves [ 583.011896][ T5631] Bluetooth: hci1: command tx timeout [ 583.190123][T17581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.274032][T17581] veth0_vlan: entered promiscuous mode [ 583.317700][T17581] veth1_vlan: entered promiscuous mode [ 583.437021][T17581] veth0_macvtap: entered promiscuous mode [ 583.493847][T17581] veth1_macvtap: entered promiscuous mode [ 583.629940][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'. [ 583.638979][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3403'. [ 583.650795][T17581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.777291][T17581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.875880][ T1172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.945868][ T1172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.955272][ T1172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.978759][ T1172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.396656][T17907] pim6reg527: entered allmulticast mode [ 584.409861][T10111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.455155][T10111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.654998][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.662896][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.612328][T17940] netlink: 408 bytes leftover after parsing attributes in process `syz.1.3416'. [ 585.864364][T17946] netlink: 'syz.2.3418': attribute type 1 has an invalid length. [ 585.949117][T17946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.968159][T17951] syzkaller0: entered promiscuous mode [ 585.973707][T17951] syzkaller0: entered allmulticast mode [ 587.041189][T17985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3427'. [ 587.358811][T18024] netlink: 408 bytes leftover after parsing attributes in process `syz.4.3430'. [ 587.757496][T18043] FAULT_INJECTION: forcing a failure. [ 587.757496][T18043] name failslab, interval 1, probability 0, space 0, times 0 [ 587.770189][T18043] CPU: 1 UID: 0 PID: 18043 Comm: syz.4.3434 Not tainted syzkaller #0 PREEMPT(full) [ 587.770219][T18043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 587.770233][T18043] Call Trace: [ 587.770242][T18043] [ 587.770253][T18043] dump_stack_lvl+0xe8/0x150 [ 587.770298][T18043] should_fail_ex+0x40c/0x560 [ 587.770333][T18043] should_failslab+0xa8/0x100 [ 587.770370][T18043] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 587.770399][T18043] ? skb_clone+0x212/0x3a0 [ 587.770434][T18043] ? skb_clone+0x212/0x3a0 [ 587.770474][T18043] skb_clone+0x212/0x3a0 [ 587.770511][T18043] bpf_clone_redirect+0x170/0x4b0 [ 587.770548][T18043] ? bpf_test_run+0x1d1/0x830 [ 587.770582][T18043] bpf_prog_4653d16e8163849f+0x22/0x2a [ 587.770605][T18043] bpf_test_run+0x354/0x830 [ 587.770662][T18043] ? __pfx_bpf_test_run+0x10/0x10 [ 587.770715][T18043] ? csum_partial+0x239/0x2c0 [ 587.770759][T18043] ? bpf_prog_test_run_skb+0x903/0x2230 [ 587.770791][T18043] ? convert___skb_to_skb+0x3d/0x5b0 [ 587.770827][T18043] bpf_prog_test_run_skb+0xe35/0x2230 [ 587.770882][T18043] ? __fget_files+0x3a2/0x420 [ 587.770911][T18043] ? __fget_files+0x2a/0x420 [ 587.770944][T18043] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 587.770978][T18043] bpf_prog_test_run+0x2c5/0x340 [ 587.771014][T18043] __sys_bpf+0xa22/0xd90 [ 587.771052][T18043] ? __pfx___sys_bpf+0x10/0x10 [ 587.771094][T18043] ? __fget_files+0x2a/0x420 [ 587.771141][T18043] ? ksys_write+0x242/0x270 [ 587.771177][T18043] ? __pfx_ksys_write+0x10/0x10 [ 587.771216][T18043] __x64_sys_bpf+0xba/0xd0 [ 587.771242][T18043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.771268][T18043] do_syscall_64+0x174/0x580 [ 587.771298][T18043] ? trace_irq_disable+0x3b/0x140 [ 587.771325][T18043] ? clear_bhb_loop+0x40/0x90 [ 587.771353][T18043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.771375][T18043] RIP: 0033:0x7fa8daf9de59 [ 587.771396][T18043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.771416][T18043] RSP: 002b:00007fa8dbf2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 587.771439][T18043] RAX: ffffffffffffffda RBX: 00007fa8db225fa0 RCX: 00007fa8daf9de59 [ 587.771462][T18043] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 587.771476][T18043] RBP: 00007fa8dbf2a090 R08: 0000000000000000 R09: 0000000000000000 [ 587.771490][T18043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.771502][T18043] R13: 00007fa8db226038 R14: 00007fa8db225fa0 R15: 00007ffe567bf468 [ 587.771538][T18043] [ 588.414692][T18057] sctp: [Deprecated]: syz.3.3437 (pid 18057) Use of int in max_burst socket option deprecated. [ 588.414692][T18057] Use struct sctp_assoc_value instead [ 588.752921][T18077] netlink: 'syz.1.3440': attribute type 1 has an invalid length. [ 588.768403][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3440'. [ 588.782187][T18077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3440'. [ 589.023948][T18090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3448'. [ 590.334592][T18140] netlink: 524 bytes leftover after parsing attributes in process `syz.2.3463'. [ 590.584855][T18141] syzkaller0: entered promiscuous mode [ 590.629695][T18141] syzkaller0: entered allmulticast mode [ 591.120621][T18167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3470'. [ 591.630642][T18185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3470'. [ 591.656277][T18185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3470'. [ 592.112412][T18231] netlink: 'syz.4.3482': attribute type 21 has an invalid length. [ 592.151270][T18231] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3482'. [ 592.191546][T18231] netlink: 'syz.4.3482': attribute type 5 has an invalid length. [ 592.227071][T18231] netlink: 'syz.4.3482': attribute type 6 has an invalid length. [ 592.258847][T18231] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3482'. [ 592.305392][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3486'. [ 592.387586][T18245] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3488'. [ 592.388851][T18235] "syz.2.3485" (18235) uses obsolete ecb(arc4) skcipher [ 592.397024][T18240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3486'. [ 592.727680][T18252] batadv0: entered promiscuous mode [ 592.739613][T18252] macsec1: entered promiscuous mode [ 592.746515][T18252] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 592.755079][T18260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3491'. [ 592.803397][T18252] batadv0: left promiscuous mode [ 592.804808][T18260] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3491'. [ 593.317675][ T5757] IPVS: starting estimator thread 0... [ 593.360531][T18297] netlink: 'syz.4.3498': attribute type 9 has an invalid length. [ 593.501586][T18294] IPVS: using max 24 ests per chain, 57600 per kthread [ 594.133301][T18328] FAULT_INJECTION: forcing a failure. [ 594.133301][T18328] name failslab, interval 1, probability 0, space 0, times 0 [ 594.152437][T18328] CPU: 0 UID: 0 PID: 18328 Comm: syz.0.3511 Not tainted syzkaller #0 PREEMPT(full) [ 594.152467][T18328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 594.152480][T18328] Call Trace: [ 594.152489][T18328] [ 594.152498][T18328] dump_stack_lvl+0xe8/0x150 [ 594.152535][T18328] should_fail_ex+0x40c/0x560 [ 594.152564][T18328] should_failslab+0xa8/0x100 [ 594.152596][T18328] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 594.152621][T18328] ? local_lock_release+0x9c/0x160 [ 594.152649][T18328] ? __alloc_skb+0x1d7/0x7a0 [ 594.152673][T18328] ? __alloc_skb+0x1d7/0x7a0 [ 594.152703][T18328] __alloc_skb+0x1d7/0x7a0 [ 594.152735][T18328] netlink_sendmsg+0x5d4/0xb40 [ 594.152777][T18328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.152815][T18328] ? aa_sock_msg_perm+0xf1/0x1b0 [ 594.152843][T18328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.152872][T18328] sock_sendmsg_nosec+0x13a/0x180 [ 594.152898][T18328] ____sys_sendmsg+0x54e/0x850 [ 594.152932][T18328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.152970][T18328] ? import_iovec+0x73/0xa0 [ 594.153002][T18328] ___sys_sendmsg+0x2a5/0x360 [ 594.153031][T18328] ? __lock_acquire+0x683/0x2cf0 [ 594.153063][T18328] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.153130][T18328] ? __fget_files+0x2a/0x420 [ 594.153157][T18328] ? __fget_files+0x3a2/0x420 [ 594.153194][T18328] __x64_sys_sendmsg+0x1b1/0x290 [ 594.153225][T18328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 594.153282][T18328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.153306][T18328] do_syscall_64+0x174/0x580 [ 594.153333][T18328] ? trace_irq_disable+0x3b/0x140 [ 594.153360][T18328] ? clear_bhb_loop+0x40/0x90 [ 594.153385][T18328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.153407][T18328] RIP: 0033:0x7fc31159de59 [ 594.153428][T18328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.153446][T18328] RSP: 002b:00007fc3124c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.153470][T18328] RAX: ffffffffffffffda RBX: 00007fc311825fa0 RCX: 00007fc31159de59 [ 594.153489][T18328] RDX: 0000000020000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 594.153503][T18328] RBP: 00007fc3124c5090 R08: 0000000000000000 R09: 0000000000000000 [ 594.153517][T18328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.153529][T18328] R13: 00007fc311826038 R14: 00007fc311825fa0 R15: 00007ffdc600d488 [ 594.153563][T18328] [ 594.456043][T18326] openvswitch: netlink: Missing valid actions attribute. [ 594.463169][T18326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.960486][T18357] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 595.256562][T18369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.382654][T18375] tipc: Enabling of bearer rejected, failed to enable media [ 595.823509][T18388] syzkaller1: entered promiscuous mode [ 595.829071][T18388] syzkaller1: entered allmulticast mode [ 596.056713][T18397] FAULT_INJECTION: forcing a failure. [ 596.056713][T18397] name failslab, interval 1, probability 0, space 0, times 0 [ 596.069402][T18397] CPU: 1 UID: 0 PID: 18397 Comm: syz.0.3530 Not tainted syzkaller #0 PREEMPT(full) [ 596.069431][T18397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 596.069446][T18397] Call Trace: [ 596.069455][T18397] [ 596.069464][T18397] dump_stack_lvl+0xe8/0x150 [ 596.069503][T18397] should_fail_ex+0x40c/0x560 [ 596.069542][T18397] should_failslab+0xa8/0x100 [ 596.069576][T18397] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 596.069604][T18397] ? skb_clone+0x212/0x3a0 [ 596.069635][T18397] ? skb_clone+0x212/0x3a0 [ 596.069674][T18397] skb_clone+0x212/0x3a0 [ 596.069711][T18397] __netlink_deliver_tap+0x413/0x860 [ 596.069758][T18397] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.069792][T18397] netlink_deliver_tap+0x19c/0x1b0 [ 596.069827][T18397] netlink_unicast+0x77f/0x940 [ 596.069869][T18397] netlink_sendmsg+0x813/0xb40 [ 596.069913][T18397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.069951][T18397] ? aa_sock_msg_perm+0xf1/0x1b0 [ 596.069980][T18397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.070011][T18397] sock_sendmsg_nosec+0x13a/0x180 [ 596.070039][T18397] ____sys_sendmsg+0x54e/0x850 [ 596.070077][T18397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.070119][T18397] ? import_iovec+0x73/0xa0 [ 596.070158][T18397] ___sys_sendmsg+0x2a5/0x360 [ 596.070188][T18397] ? __lock_acquire+0x683/0x2cf0 [ 596.070222][T18397] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.070292][T18397] ? __fget_files+0x2a/0x420 [ 596.070319][T18397] ? __fget_files+0x3a2/0x420 [ 596.070358][T18397] __x64_sys_sendmsg+0x1b1/0x290 [ 596.070393][T18397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 596.070445][T18397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.070469][T18397] do_syscall_64+0x174/0x580 [ 596.070497][T18397] ? trace_irq_disable+0x3b/0x140 [ 596.070531][T18397] ? clear_bhb_loop+0x40/0x90 [ 596.070558][T18397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.070580][T18397] RIP: 0033:0x7fc31159de59 [ 596.070602][T18397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.070621][T18397] RSP: 002b:00007fc3124c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.070644][T18397] RAX: ffffffffffffffda RBX: 00007fc311825fa0 RCX: 00007fc31159de59 [ 596.070661][T18397] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 596.070675][T18397] RBP: 00007fc3124c5090 R08: 0000000000000000 R09: 0000000000000000 [ 596.070689][T18397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.070702][T18397] R13: 00007fc311826038 R14: 00007fc311825fa0 R15: 00007ffdc600d488 [ 596.070737][T18397] [ 596.867318][T18427] __nla_validate_parse: 5 callbacks suppressed [ 596.867343][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3535'. [ 596.958199][T18427] bond2: option lp_interval: invalid value (0) [ 596.964455][T18427] bond2: option lp_interval: allowed values 1 - 2147483647 [ 597.005409][T18427] bond2 (unregistering): Released all slaves [ 597.099472][T18439] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3538'. [ 597.676520][T18459] FAULT_INJECTION: forcing a failure. [ 597.676520][T18459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.699057][T18459] CPU: 0 UID: 0 PID: 18459 Comm: syz.4.3541 Not tainted syzkaller #0 PREEMPT(full) [ 597.699088][T18459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 597.699102][T18459] Call Trace: [ 597.699111][T18459] [ 597.699121][T18459] dump_stack_lvl+0xe8/0x150 [ 597.699162][T18459] should_fail_ex+0x40c/0x560 [ 597.699193][T18459] _copy_from_user+0x2d/0xb0 [ 597.699226][T18459] generic_map_update_batch+0x651/0x9a0 [ 597.699260][T18459] ? __pfx_generic_map_update_batch+0x10/0x10 [ 597.699284][T18459] ? __fget_files+0x2a/0x420 [ 597.699321][T18459] ? __pfx_generic_map_update_batch+0x10/0x10 [ 597.699343][T18459] bpf_map_do_batch+0x391/0x630 [ 597.699380][T18459] __sys_bpf+0xbe5/0xd90 [ 597.699417][T18459] ? __pfx___sys_bpf+0x10/0x10 [ 597.699457][T18459] ? __fget_files+0x2a/0x420 [ 597.699503][T18459] ? ksys_write+0x242/0x270 [ 597.699543][T18459] ? __pfx_ksys_write+0x10/0x10 [ 597.699582][T18459] __x64_sys_bpf+0xba/0xd0 [ 597.699607][T18459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.699632][T18459] do_syscall_64+0x174/0x580 [ 597.699667][T18459] ? trace_irq_disable+0x3b/0x140 [ 597.699695][T18459] ? clear_bhb_loop+0x40/0x90 [ 597.699726][T18459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.699749][T18459] RIP: 0033:0x7fa8daf9de59 [ 597.699771][T18459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.699790][T18459] RSP: 002b:00007fa8dbf2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.699818][T18459] RAX: ffffffffffffffda RBX: 00007fa8db225fa0 RCX: 00007fa8daf9de59 [ 597.699835][T18459] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 000000000000001a [ 597.699849][T18459] RBP: 00007fa8dbf2a090 R08: 0000000000000000 R09: 0000000000000000 [ 597.699862][T18459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.699876][T18459] R13: 00007fa8db226038 R14: 00007fa8db225fa0 R15: 00007ffe567bf468 [ 597.699911][T18459] [ 598.136354][T18473] FAULT_INJECTION: forcing a failure. [ 598.136354][T18473] name failslab, interval 1, probability 0, space 0, times 0 [ 598.149140][T18473] CPU: 1 UID: 0 PID: 18473 Comm: syz.2.3542 Not tainted syzkaller #0 PREEMPT(full) [ 598.149169][T18473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 598.149182][T18473] Call Trace: [ 598.149190][T18473] [ 598.149198][T18473] dump_stack_lvl+0xe8/0x150 [ 598.149237][T18473] should_fail_ex+0x40c/0x560 [ 598.149266][T18473] should_failslab+0xa8/0x100 [ 598.149295][T18473] __kmalloc_noprof+0xfe/0x720 [ 598.149319][T18473] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 598.149342][T18473] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 598.149371][T18473] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 598.149400][T18473] genl_family_rcv_msg_doit+0xda/0x340 [ 598.149427][T18473] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 598.149455][T18473] ? apparmor_capable+0x126/0x170 [ 598.149572][T18473] ? bpf_lsm_capable+0x9/0x20 [ 598.149596][T18473] ? security_capable+0x7e/0x2c0 [ 598.149670][T18473] genl_rcv_msg+0x614/0x7a0 [ 598.149697][T18473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.149720][T18473] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 598.149817][T18473] ? __pfx_ref_tracker_free+0x10/0x10 [ 598.149848][T18473] netlink_rcv_skb+0x226/0x4a0 [ 598.149876][T18473] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.149897][T18473] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.149936][T18473] ? down_read+0x2be/0x330 [ 598.149993][T18473] genl_rcv+0x28/0x40 [ 598.150011][T18473] netlink_unicast+0x7bb/0x940 [ 598.150045][T18473] netlink_sendmsg+0x813/0xb40 [ 598.150080][T18473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.150111][T18473] ? aa_sock_msg_perm+0xf1/0x1b0 [ 598.150134][T18473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.150159][T18473] sock_sendmsg_nosec+0x13a/0x180 [ 598.150183][T18473] ____sys_sendmsg+0x54e/0x850 [ 598.150213][T18473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.150247][T18473] ? import_iovec+0x73/0xa0 [ 598.150276][T18473] ___sys_sendmsg+0x2a5/0x360 [ 598.150301][T18473] ? __lock_acquire+0x683/0x2cf0 [ 598.150328][T18473] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.150384][T18473] ? __fget_files+0x2a/0x420 [ 598.150406][T18473] ? __fget_files+0x3a2/0x420 [ 598.150438][T18473] __x64_sys_sendmsg+0x1b1/0x290 [ 598.150466][T18473] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.150509][T18473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.150528][T18473] do_syscall_64+0x174/0x580 [ 598.150551][T18473] ? trace_irq_disable+0x3b/0x140 [ 598.150573][T18473] ? clear_bhb_loop+0x40/0x90 [ 598.150595][T18473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.150613][T18473] RIP: 0033:0x7f38f299de59 [ 598.150631][T18473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.150647][T18473] RSP: 002b:00007f38f3875028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.150667][T18473] RAX: ffffffffffffffda RBX: 00007f38f2c26090 RCX: 00007f38f299de59 [ 598.150680][T18473] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 598.150691][T18473] RBP: 00007f38f3875090 R08: 0000000000000000 R09: 0000000000000000 [ 598.150702][T18473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.150712][T18473] R13: 00007f38f2c26128 R14: 00007f38f2c26090 R15: 00007ffc3736fc38 [ 598.150739][T18473] [ 598.163070][T18475] nftables ruleset with unbound set [ 598.620974][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3549'. [ 598.676807][T18482] bond2: option lp_interval: invalid value (0) [ 598.683054][T18482] bond2: option lp_interval: allowed values 1 - 2147483647 [ 598.693259][T18482] bond2 (unregistering): Released all slaves [ 598.804364][T18496] syzkaller0: entered promiscuous mode [ 598.810484][T18496] syzkaller0: entered allmulticast mode [ 598.817748][T18498] bridge_slave_1: entered promiscuous mode [ 598.842784][T18496] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3553'. [ 599.264680][T18515] xt_hashlimit: invalid interval [ 599.760457][T18541] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3566'. [ 599.857043][T18550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3569'. [ 600.111308][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3572'. [ 600.331553][T18573] FAULT_INJECTION: forcing a failure. [ 600.331553][T18573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.382933][T18573] CPU: 0 UID: 0 PID: 18573 Comm: syz.3.3577 Not tainted syzkaller #0 PREEMPT(full) [ 600.382964][T18573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 600.382977][T18573] Call Trace: [ 600.382985][T18573] [ 600.382995][T18573] dump_stack_lvl+0xe8/0x150 [ 600.383034][T18573] should_fail_ex+0x40c/0x560 [ 600.383065][T18573] _copy_from_user+0x2d/0xb0 [ 600.383098][T18573] kstrtouint_from_user+0xd6/0x180 [ 600.383136][T18573] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 600.383182][T18573] proc_fail_nth_write+0x8e/0x210 [ 600.383238][T18573] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 600.383277][T18573] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 600.383314][T18573] vfs_write+0x296/0xba0 [ 600.383356][T18573] ? __pfx_vfs_write+0x10/0x10 [ 600.383391][T18573] ? __fget_files+0x2a/0x420 [ 600.383424][T18573] ? __fget_files+0x3a2/0x420 [ 600.383450][T18573] ? __fget_files+0x2a/0x420 [ 600.383488][T18573] ksys_write+0x150/0x270 [ 600.383523][T18573] ? __pfx_ksys_write+0x10/0x10 [ 600.383569][T18573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.383594][T18573] do_syscall_64+0x174/0x580 [ 600.383622][T18573] ? trace_irq_disable+0x3b/0x140 [ 600.383650][T18573] ? clear_bhb_loop+0x40/0x90 [ 600.383677][T18573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.383699][T18573] RIP: 0033:0x7fe3cf95e68e [ 600.383721][T18573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 600.383740][T18573] RSP: 002b:00007fe3d087bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 600.383764][T18573] RAX: ffffffffffffffda RBX: 00007fe3d087c6c0 RCX: 00007fe3cf95e68e [ 600.383780][T18573] RDX: 0000000000000001 RSI: 00007fe3d087c0a0 RDI: 000000000000000a [ 600.383793][T18573] RBP: 00007fe3d087c090 R08: 0000000000000000 R09: 0000000000000000 [ 600.383806][T18573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.383819][T18573] R13: 00007fe3cfc26038 R14: 00007fe3cfc25fa0 R15: 00007ffe8ad71358 [ 600.383855][T18573] [ 600.698913][T18582] syzkaller0: entered promiscuous mode [ 600.752264][T18582] syzkaller0: entered allmulticast mode [ 601.011708][T18596] syzkaller0: entered promiscuous mode [ 601.017535][T18596] syzkaller0: entered allmulticast mode [ 601.731151][T18627] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 601.764967][T18627] bond2 (unregistering): Released all slaves [ 602.233658][T18652] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 602.494042][T18668] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 602.797782][T18675] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3607'. [ 602.811704][T18680] pim6reg: entered allmulticast mode [ 603.042756][T18692] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3614'. [ 603.482388][T18704] dummy0 speed is unknown, defaulting to 1000 [ 603.494820][T18704] dummy0 speed is unknown, defaulting to 1000 [ 603.518643][T18704] dummy0 speed is unknown, defaulting to 1000 [ 603.699241][T18708] can: request_module (can-proto-0) failed. [ 603.709690][T18708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.730312][T18708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3621'. [ 603.742797][T18709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3620'. [ 603.885553][ T5757] dummy0 speed is unknown, defaulting to 1000 [ 603.918903][T18704] infiniband syz1: set active [ 603.937687][T18704] infiniband syz1: added dummy0 [ 604.029661][T18704] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 604.044788][T18704] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 604.078684][T18704] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 604.148837][T18704] RDS/IB: syz1: added [ 604.152972][T18704] smc: adding ib device syz1 with port count 1 [ 604.159229][T18704] smc: ib device syz1 port 1 has no pnetid [ 604.165973][ T5359] dummy0 speed is unknown, defaulting to 1000 [ 604.248262][T18721] bond2 (unregistering): Released all slaves [ 604.281598][T18704] dummy0 speed is unknown, defaulting to 1000 [ 604.608531][T18704] dummy0 speed is unknown, defaulting to 1000 [ 604.775028][T18748] netlink: 'syz.4.3633': attribute type 83 has an invalid length. [ 605.149684][T18704] dummy0 speed is unknown, defaulting to 1000 [ 605.575050][T18774] netlink: 'syz.4.3638': attribute type 32 has an invalid length. [ 605.594176][T18776] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3639'. [ 605.933973][T18704] dummy0 speed is unknown, defaulting to 1000 [ 606.115325][T18788] netlink: 'syz.1.3642': attribute type 26 has an invalid length. [ 606.123233][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3642'. [ 606.140382][T18788] netlink: 'syz.1.3642': attribute type 26 has an invalid length. [ 606.148291][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3642'. [ 607.595396][T18840] tipc: Enabling of bearer rejected, failed to enable media [ 607.757267][T18704] dummy0 speed is unknown, defaulting to 1000 [ 608.479706][ C1] bridge0: port 3(dummy0) entered forwarding state [ 608.486367][ C1] bridge0: topology change detected, propagating [ 612.969449][T18704] dummy0 speed is unknown, defaulting to 1000 [ 613.561087][T18863] erspan0: entered promiscuous mode [ 613.631961][T18863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3652'. [ 613.910306][ T29] audit: type=1800 audit(1783066309.945:8): pid=18870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3654" name="memory.events" dev="tmpfs" ino=541 res=0 errno=0 [ 613.956120][T18870] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3654'. [ 614.061702][T18704] dummy0 speed is unknown, defaulting to 1000 [ 614.785879][T18704] dummy0 speed is unknown, defaulting to 1000 [ 615.344061][T18893] syzkaller0: entered promiscuous mode [ 615.349624][T18893] syzkaller0: entered allmulticast mode [ 616.214105][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3667'. [ 619.075722][T18927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 620.660321][T18923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3666'. [ 621.000573][ T808] dummy0 speed is unknown, defaulting to 1000 [ 621.183751][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3672'. [ 621.231658][T18947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 621.451759][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3672'. [ 621.460696][T18951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 621.661558][T18956] openvswitch: netlink: Missing key (keys=40, expected=100) [ 621.775521][T18958] syzkaller0: entered promiscuous mode [ 621.781078][T18958] syzkaller0: entered allmulticast mode [ 622.256422][T18967] pimreg3: entered allmulticast mode [ 622.310831][T18967] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 622.358925][T18973] tipc: Started in network mode [ 622.363886][T18973] tipc: Node identity 5e8839e6cf3d, cluster identity 4711 [ 622.371218][T18973] tipc: Enabled bearer , priority 0 [ 622.395138][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3679'. [ 622.560934][T18973] syzkaller0: entered promiscuous mode [ 622.572640][T18973] syzkaller0: entered allmulticast mode [ 622.599630][T18973] tipc: Resetting bearer [ 622.712647][T18989] netlink: 408 bytes leftover after parsing attributes in process `syz.1.3688'. [ 622.843975][T18970] tipc: Resetting bearer [ 624.557019][ T1319] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 624.725061][ T5631] Bluetooth: hci1: link tx timeout [ 624.743156][ T5631] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 626.898998][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 627.640360][T18970] tipc: Disabling bearer [ 627.660669][ T24] tipc: Node number set to 2444573158 [ 628.214200][T19043] bond2: entered promiscuous mode [ 628.345191][T19043] macvlan2: entered promiscuous mode [ 628.350580][T19043] macvlan2: entered allmulticast mode [ 628.357167][T19043] bond2: (slave macvlan2): Opening slave failed [ 628.596097][T19056] tls_set_device_offload: netdev not found [ 628.712485][T19061] IPVS: set_ctl: invalid protocol: 46 172.30.0.3:20004 [ 628.775062][T19063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3712'. [ 628.784877][T19063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3712'. [ 628.815186][T19063] geneve2: entered promiscuous mode [ 629.229927][T19077] FAULT_INJECTION: forcing a failure. [ 629.229927][T19077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.243375][T19077] CPU: 1 UID: 0 PID: 19077 Comm: syz.0.3717 Not tainted syzkaller #0 PREEMPT(full) [ 629.243422][T19077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 629.243440][T19077] Call Trace: [ 629.243448][T19077] [ 629.243457][T19077] dump_stack_lvl+0xe8/0x150 [ 629.243497][T19077] should_fail_ex+0x40c/0x560 [ 629.243529][T19077] _copy_from_user+0x2d/0xb0 [ 629.243561][T19077] generic_map_update_batch+0x651/0x9a0 [ 629.243596][T19077] ? __pfx_generic_map_update_batch+0x10/0x10 [ 629.243620][T19077] ? __fget_files+0x2a/0x420 [ 629.243657][T19077] ? __pfx_generic_map_update_batch+0x10/0x10 [ 629.243680][T19077] bpf_map_do_batch+0x391/0x630 [ 629.243717][T19077] __sys_bpf+0xbe5/0xd90 [ 629.243753][T19077] ? __pfx___sys_bpf+0x10/0x10 [ 629.243794][T19077] ? __fget_files+0x2a/0x420 [ 629.243840][T19077] ? ksys_write+0x242/0x270 [ 629.243875][T19077] ? __pfx_ksys_write+0x10/0x10 [ 629.243914][T19077] __x64_sys_bpf+0xba/0xd0 [ 629.243940][T19077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.243963][T19077] do_syscall_64+0x174/0x580 [ 629.243992][T19077] ? trace_irq_disable+0x3b/0x140 [ 629.244020][T19077] ? clear_bhb_loop+0x40/0x90 [ 629.244047][T19077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.244069][T19077] RIP: 0033:0x7fc31159de59 [ 629.244091][T19077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.244110][T19077] RSP: 002b:00007fc3124c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 629.244133][T19077] RAX: ffffffffffffffda RBX: 00007fc311825fa0 RCX: 00007fc31159de59 [ 629.244149][T19077] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 000000000000001a [ 629.244163][T19077] RBP: 00007fc3124c5090 R08: 0000000000000000 R09: 0000000000000000 [ 629.244176][T19077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 629.244196][T19077] R13: 00007fc311826038 R14: 00007fc311825fa0 R15: 00007ffdc600d488 [ 629.244229][T19077] [ 629.655382][T19082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3718'. [ 629.665713][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3718'. [ 629.675185][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3718'. [ 629.873105][T19091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3721'. [ 629.950983][T19067] syzkaller0: entered promiscuous mode [ 629.957476][T19067] syzkaller0: entered allmulticast mode [ 630.027315][T19095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3722'. [ 630.043629][T19095] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 630.153181][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3723'. [ 630.404298][T19101] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3724'. [ 632.800153][ T5643] Bluetooth: hci4: command tx timeout [ 634.849004][T19097] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 634.873304][T19102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.889042][T19102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.900147][T19102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.907613][T19102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.251183][T19124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3729'. [ 635.260233][T19124] ipip0: entered promiscuous mode [ 635.271933][T19124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3729'. [ 635.395155][T19130] Cannot find set identified by id 65534 to match [ 635.578017][T19136] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3732'. [ 635.587126][T19136] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3732'. [ 635.596129][T19136] netlink: 'syz.4.3732': attribute type 6 has an invalid length. [ 635.604197][T19136] netlink: 'syz.4.3732': attribute type 5 has an invalid length. [ 635.611968][T19136] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3732'. [ 635.696604][T19132] SET target dimension over the limit! [ 635.808974][T19141] sctp: [Deprecated]: syz.2.3734 (pid 19141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.808974][T19141] Use struct sctp_sack_info instead [ 635.846762][T19141] sctp: [Deprecated]: syz.2.3734 (pid 19141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.846762][T19141] Use struct sctp_sack_info instead [ 635.906939][T19141] sctp: [Deprecated]: syz.2.3734 (pid 19141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.906939][T19141] Use struct sctp_sack_info instead [ 635.923685][T19141] sctp: [Deprecated]: syz.2.3734 (pid 19141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.923685][T19141] Use struct sctp_sack_info instead [ 635.931688][T19147] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3737'. [ 635.964263][T19141] sctp: [Deprecated]: syz.2.3734 (pid 19141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.964263][T19141] Use struct sctp_sack_info instead [ 635.994637][T19141] sctp: [Deprecated]: syz.2.3734 (pid 19141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.994637][T19141] Use struct sctp_sack_info instead [ 636.015347][T19141] sctp: [Deprecated]: syz.2.3734 (pid 19141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.015347][T19141] Use struct sctp_sack_info instead [ 636.034762][T19141] sctp: [Deprecated]: syz.2.3734 (pid 19141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.034762][T19141] Use struct sctp_sack_info instead [ 636.054308][T19141] sctp: [Deprecated]: syz.2.3734 (pid 19141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.054308][T19141] Use struct sctp_sack_info instead [ 636.302826][T19157] tipc: Started in network mode [ 636.307784][T19157] tipc: Node identity 96555fd19f5, cluster identity 4711 [ 636.353995][T19157] tipc: Enabled bearer , priority 0 [ 636.424431][T19157] syzkaller0: entered promiscuous mode [ 636.447183][T19157] syzkaller0: entered allmulticast mode [ 636.453713][T19157] tipc: Resetting bearer [ 636.460264][T19161] netlink: 'syz.1.3741': attribute type 1 has an invalid length. [ 636.481236][T19156] tipc: Resetting bearer [ 636.705649][T19164] xt_hashlimit: size too large, truncated to 1048576 [ 637.032012][T19173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.076339][T19180] IPVS: set_ctl: invalid protocol: 115 172.20.20.55:20000 [ 637.185440][T19174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.380748][T19189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3749'. [ 641.854849][T19156] tipc: Disabling bearer [ 641.895457][ T5359] tipc: Node number set to 151347153 [ 641.942904][T19201] bond0: entered promiscuous mode [ 641.958698][T19201] bond_slave_0: entered promiscuous mode [ 641.988106][T19201] bond_slave_1: entered promiscuous mode [ 641.996153][T19201] batadv0: entered promiscuous mode [ 642.002251][T19201] debugfs: 'hsr1' already exists in 'hsr' [ 642.008081][T19201] Cannot create hsr debugfs directory [ 642.014426][T19201] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 642.738968][T19226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3760'. [ 642.839489][ T5631] block nbd2: Receive control failed (result -107) [ 642.895799][T19204] nbd2: detected capacity change from 0 to 63 [ 642.935214][ T5643] block nbd2: Receive control failed (result -32) [ 642.947750][ T1610] block nbd2: Dead connection, failed to find a fallback [ 642.955765][ T1610] block nbd2: shutting down sockets [ 642.962422][ T1610] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 642.972827][ T1610] Buffer I/O error on dev nbd2, logical block 0, async page read [ 642.981358][ T1610] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.032854][ T1610] Buffer I/O error on dev nbd2, logical block 1, async page read [ 643.041420][ T1610] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 643.050637][ T1610] Buffer I/O error on dev nbd2, logical block 2, async page read [ 643.058483][ T1610] Buffer I/O error on dev nbd2, logical block 3, async page read [ 643.070332][ T1610] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 643.079616][ T1610] Buffer I/O error on dev nbd2, logical block 0, async page read [ 643.087464][ T1610] Buffer I/O error on dev nbd2, logical block 1, async page read [ 643.095300][ T1610] Buffer I/O error on dev nbd2, logical block 2, async page read [ 643.103290][ T1610] Buffer I/O error on dev nbd2, logical block 3, async page read [ 643.127148][ T1610] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 643.136351][ T1610] Buffer I/O error on dev nbd2, logical block 0, async page read [ 643.176076][ T1610] Buffer I/O error on dev nbd2, logical block 1, async page read [ 643.184317][ T1610] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 643.195861][ T1610] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 643.205869][ T1610] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 643.215504][ T1610] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 643.243646][ T1610] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 643.253006][T19220] ldm_validate_partition_table(): Disk read failed. [ 643.262465][T19220] Dev nbd2: unable to read RDB block 0 [ 643.270010][T19220] nbd2: unable to read partition table [ 643.369339][T19220] ldm_validate_partition_table(): Disk read failed. [ 643.378744][T19220] Dev nbd2: unable to read RDB block 0 [ 643.387158][T19220] nbd2: unable to read partition table [ 643.431724][T19234] batadv1: entered allmulticast mode [ 643.619949][T19241] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3765'. [ 643.644793][T19242] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3764'. [ 643.896876][T19247] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 643.963560][T19247] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 643.971461][T19247] gretap1: entered promiscuous mode [ 643.977327][T19247] gretap1: entered allmulticast mode [ 643.988396][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 644.008019][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 644.017686][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 644.121930][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 644.131147][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3766'. [ 644.406815][T19265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.505361][T19264] bridge_slave_0: left allmulticast mode [ 644.511099][T19264] bridge_slave_0: left promiscuous mode [ 644.517029][T19264] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.651756][T19264] bridge_slave_1: left allmulticast mode [ 644.657590][T19264] bridge_slave_1: left promiscuous mode [ 644.663444][T19264] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.793092][T19264] bond0: (slave bond_slave_0): Releasing backup interface [ 644.805702][T19264] bond0: (slave bond_slave_1): Releasing backup interface [ 644.893318][T19264] team0: Port device team_slave_0 removed [ 644.919309][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'. [ 644.924901][T19264] team0: Port device team_slave_1 removed [ 644.963264][T19264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.971960][T19264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.981842][T19264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.989289][T19264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.998531][T19264] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 645.135510][T19280] bond2: option lp_interval: invalid value (0) [ 645.141780][T19280] bond2: option lp_interval: allowed values 1 - 2147483647 [ 645.180351][T19280] bond2 (unregistering): Released all slaves [ 645.955187][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888069681c00: rx timeout, send abort [ 645.996341][T19313] syzkaller0: entered promiscuous mode [ 646.011484][T19313] syzkaller0: entered allmulticast mode [ 646.210426][T19327] netlink: 408 bytes leftover after parsing attributes in process `syz.2.3786'. [ 646.597110][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888069681c00: abort rx timeout. Force session deactivation [ 646.723253][T19337] bridge2: entered promiscuous mode [ 646.728567][T19337] bridge2: entered allmulticast mode [ 646.791250][T19337] team0: Port device bridge2 added [ 646.882240][T19337] bridge0: port 3(team0) entered blocking state [ 646.888776][T19337] bridge0: port 3(team0) entered disabled state [ 646.895304][T19337] team0: entered allmulticast mode [ 646.900485][T19337] team_slave_0: entered allmulticast mode [ 646.906262][T19337] team_slave_1: entered allmulticast mode [ 646.936261][T19337] team0: entered promiscuous mode [ 646.941384][T19337] team_slave_0: entered promiscuous mode [ 646.947296][T19337] team_slave_1: entered promiscuous mode [ 646.954169][T19337] bridge0: port 3(team0) entered blocking state [ 646.960564][T19337] bridge0: port 3(team0) entered forwarding state [ 647.064991][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 647.075945][T19344] vlan3: entered allmulticast mode [ 647.115688][T19344] bond0: entered allmulticast mode [ 647.221053][T19346] syzkaller0: entered promiscuous mode [ 647.226878][T19346] syzkaller0: entered allmulticast mode [ 647.632981][T19367] tipc: Enabling of bearer rejected, failed to enable media [ 648.065659][T19381] __nla_validate_parse: 2 callbacks suppressed [ 648.065681][T19381] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3803'. [ 648.081030][T19381] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3803'. [ 648.113888][T19387] mac80211_hwsim hwsim28 ÿ: renamed from wlan1 (while UP) [ 648.138560][T19387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3805'. [ 648.199100][T19390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3806'. [ 648.959655][T19413] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3812'. [ 649.434468][T19426] netlink: 'syz.2.3816': attribute type 1 has an invalid length. [ 649.540004][T19429] xfrm1: entered allmulticast mode [ 649.550245][T19426] tc_dump_action: action bad kind [ 649.739762][T19436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3818'. [ 649.799817][T19437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3818'. [ 649.940350][T19444] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 649.949459][T19444] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 649.961289][T19444] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 650.345041][T19461] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.393806][T19463] batadv_slave_0: entered promiscuous mode [ 650.403843][T19463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3824'. [ 650.564310][T19466] IPVS: lc: FWM 3 0x00000003 - no destination available [ 650.605432][T19466] netlink: 'syz.0.3826': attribute type 1 has an invalid length. [ 650.779914][T19466] 8021q: adding VLAN 0 to HW filter on device bond3 [ 650.796454][T19466] bond2: (slave bond3): making interface the new active one [ 650.820673][T19466] bond2: (slave bond3): Enslaving as an active interface with an up link [ 650.906143][T19479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3828'. [ 651.103254][T19486] siw: device registration error -23 [ 651.125896][T19486] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3831'. [ 651.177976][T19484] vcan1: entered promiscuous mode [ 651.183098][T19484] vcan1: entered allmulticast mode [ 651.203054][T19486] ±ÿz0: renamed from lo (while UP) [ 651.338009][T19494] veth0_to_bond: entered allmulticast mode [ 652.142023][T19511] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 652.195138][T19511] bond3 (unregistering): Released all slaves [ 652.220468][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 652.544028][T19529] netlink: 'syz.0.3844': attribute type 1 has an invalid length. [ 652.599338][T19533] netlink: 'syz.2.3842': attribute type 21 has an invalid length. [ 652.617663][T19529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 652.686785][T19529] bond4: (slave veth0_to_bond): making interface the new active one [ 652.696793][T19529] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 653.440975][T19570] __nla_validate_parse: 8 callbacks suppressed [ 653.440999][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3853'. [ 653.815354][T19588] netlink: 408 bytes leftover after parsing attributes in process `syz.2.3859'. [ 653.879000][T18011] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.887862][T18011] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.896654][T18011] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 653.905572][T18011] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.347777][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3863'. [ 654.457360][T19614] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 654.474528][T19614] bond1 (unregistering): Released all slaves [ 655.562981][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3866'. [ 656.457237][T19681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.280297][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 657.515340][T19719] netlink: 'syz.4.3884': attribute type 7 has an invalid length. [ 657.598645][T19726] netlink: 'syz.3.3887': attribute type 3 has an invalid length. [ 658.396221][T19745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3890'. [ 658.868485][T19752] syzkaller1: entered promiscuous mode [ 658.874044][T19752] syzkaller1: entered allmulticast mode [ 660.041811][T19773] netlink: 'syz.3.3898': attribute type 11 has an invalid length. [ 660.524639][T19780] xt_hashlimit: size too large, truncated to 1048576 [ 660.797096][T19784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3900'. [ 660.881755][T19791] macsec1: entered allmulticast mode [ 660.887141][T19791] bond0: entered allmulticast mode [ 660.892297][T19791] bond_slave_0: entered allmulticast mode [ 660.898064][T19791] bond_slave_1: entered allmulticast mode [ 660.903999][T19791] bond_slave_0: entered promiscuous mode [ 660.910649][T19791] bond_slave_1: entered promiscuous mode [ 660.917634][T19791] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 660.990463][T19780] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3900'. [ 661.018688][T19791] bond0: left allmulticast mode [ 661.023630][T19791] bond_slave_0: left allmulticast mode [ 661.029144][T19791] bond_slave_1: left allmulticast mode [ 661.089992][ T808] bond_slave_0: left promiscuous mode [ 661.096405][ T808] bond_slave_1: left promiscuous mode [ 661.214478][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3905'. [ 661.231323][T19802] netlink: 81 bytes leftover after parsing attributes in process `syz.1.3905'. [ 661.786332][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3913'. [ 661.817365][T19820] bond1: option lp_interval: invalid value (0) [ 661.823609][T19820] bond1: option lp_interval: allowed values 1 - 2147483647 [ 661.855179][T19822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3910'. [ 661.882310][T19820] bond1 (unregistering): Released all slaves [ 662.386811][T19830] netlink: 408 bytes leftover after parsing attributes in process `syz.4.3915'. [ 663.020713][T19849] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3920'. [ 663.348784][T19850] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 663.713633][T19873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3927'. [ 663.796509][T19879] netlink: 'syz.3.3929': attribute type 11 has an invalid length. [ 663.804411][T19879] netlink: 'syz.3.3929': attribute type 11 has an invalid length. [ 663.812268][T19879] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3929'. [ 663.821634][T19879] netlink: 'syz.3.3929': attribute type 11 has an invalid length. [ 663.889066][T19879] netlink: 'syz.3.3929': attribute type 11 has an invalid length. [ 664.014903][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.162702][T18018] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.182007][T18018] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.238503][T18011] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.247305][T18011] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.592419][T19904] bond2 (unregistering): Released all slaves [ 664.630679][T19900] netlink: 'syz.3.3936': attribute type 4 has an invalid length. [ 664.664400][T18011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.673961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.824741][T19913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.845553][T19913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.854631][T19913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.864195][T19913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.965664][T19913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.975044][T19913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.983904][T19913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.196317][T19920] syzkaller1: entered promiscuous mode [ 665.201869][T19920] syzkaller1: entered allmulticast mode [ 665.373098][ T5832] page_pool_release_retry() stalled pool shutdown: id 95, 1 inflight 60 sec [ 665.414453][T19927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 665.815227][T19951] __nla_validate_parse: 6 callbacks suppressed [ 665.815251][T19951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3951'. [ 665.851409][T19951] bond5: option lp_interval: invalid value (0) [ 665.857716][T19951] bond5: option lp_interval: allowed values 1 - 2147483647 [ 665.868599][T19951] bond5 (unregistering): Released all slaves [ 666.330638][T19962] netlink: 408 bytes leftover after parsing attributes in process `syz.4.3955'. [ 666.393335][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3956'. [ 666.408770][T19966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3956'. [ 666.595123][T19975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3957'. [ 666.666781][T19975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3957'. [ 666.682535][T19980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3960'. [ 666.715134][T19980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3960'. [ 666.740046][T19981] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 666.748891][T19975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3957'. [ 667.202198][T20002] x_tables: duplicate underflow at hook 1 [ 667.269747][T20004] block nbd3: Unsupported socket: should be TCP or UNIX. [ 667.441884][T20015] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3970'. [ 668.643364][T20060] sctp: [Deprecated]: syz.0.3983 (pid 20060) Use of int in max_burst socket option. [ 668.643364][T20060] Use struct sctp_assoc_value instead [ 668.663294][T20060] netlink: 'syz.0.3983': attribute type 10 has an invalid length. [ 668.675301][T20060] bridge0: port 3(team0) entered disabled state [ 668.682287][T20060] team0: left allmulticast mode [ 668.687202][T20060] team_slave_0: left allmulticast mode [ 668.692713][T20060] team_slave_1: left allmulticast mode [ 668.698274][T20060] team0: left promiscuous mode [ 668.703108][T20060] team_slave_0: left promiscuous mode [ 668.767032][T20060] team_slave_1: left promiscuous mode [ 668.773184][T20060] bridge0: port 3(team0) entered disabled state [ 668.792552][T20060] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.818093][T20060] bond0: (slave team0): Enslaving as an active interface with an up link [ 669.136488][T20075] syzkaller0: entered promiscuous mode [ 669.142046][T20075] syzkaller0: entered allmulticast mode [ 669.203697][ T5744] net_ratelimit: 108 callbacks suppressed [ 669.203738][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.524961][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880691fd800: rx timeout, send abort [ 669.535411][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880691fd800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 669.691806][T20083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.231061][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.586242][T18022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.594667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.318431][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.408852][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.096991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.464665][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.742519][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.379358][T20110] __nla_validate_parse: 6 callbacks suppressed [ 674.379377][T20110] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3994'. [ 674.607762][ T5757] net_ratelimit: 1 callbacks suppressed [ 674.613500][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.742286][T20126] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4000'. [ 674.759383][T20126] vlan3: entered allmulticast mode [ 674.764611][T20126] erspan0: entered allmulticast mode [ 674.811439][T20127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.824411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.840281][T20127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3999'. [ 674.872597][T20127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3999'. [ 674.909452][T20126] netlink: 'syz.3.4000': attribute type 6 has an invalid length. [ 674.918702][T20126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4000'. [ 675.204882][T20133] team0 (unregistering): Port device team_slave_0 removed [ 675.275220][T20140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.282699][T20133] team0 (unregistering): Port device team_slave_1 removed [ 675.287885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.526356][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4008'. [ 675.602644][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.969032][T20165] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4010'. [ 676.077397][T20162] syzkaller0: entered promiscuous mode [ 676.086467][T20162] syzkaller0: entered allmulticast mode [ 676.298712][T20180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.362993][T18022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.373995][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.431080][T20184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4021'. [ 676.639426][T20194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4020'. [ 676.656041][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.095569][T20209] Bluetooth: MGMT ver 1.23 [ 679.852882][ T1227] net_ratelimit: 5 callbacks suppressed [ 679.852918][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.863288][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.688594][T20214] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4027'. [ 681.775124][T20218] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4028'. [ 681.908079][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.064075][T18021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.074983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.486986][T20230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.502981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.835930][T20253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4039'. [ 682.847042][T20254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4038'. [ 682.945026][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.964773][T20254] hsr_slave_1 (unregistering): left promiscuous mode [ 683.220325][T20269] "syz.1.4043" (20269) uses obsolete ecb(arc4) skcipher [ 683.257880][T20270] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4043'. [ 683.266913][T20270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4043'. [ 683.290464][T20270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4043'. [ 683.695963][T20283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 683.705324][T20283] bond1: entered allmulticast mode [ 683.711403][T20283] bond0: (slave bond1): Enslaving as an active interface with an up link [ 684.033261][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.147889][T20293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.161170][T20293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4051'. [ 684.242321][T20304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4049'. [ 684.462597][T20311] netlink: 'syz.2.4049': attribute type 13 has an invalid length. [ 684.869526][T20324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4058'. [ 685.121819][ T5832] net_ratelimit: 4 callbacks suppressed [ 685.121841][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.135829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.202541][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.268750][T20323] syzkaller0: entered promiscuous mode [ 685.274307][T20323] syzkaller0: entered allmulticast mode [ 685.301599][T20325] syzkaller1: entered promiscuous mode [ 685.307162][T20325] syzkaller1: entered allmulticast mode [ 685.578552][T20340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.635129][T20342] syzkaller0: entered promiscuous mode [ 685.640772][T20342] syzkaller0: entered allmulticast mode [ 685.704538][T20337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.923337][ T1319] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 686.277281][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.590299][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.614189][T20352] syzkaller0: entered promiscuous mode [ 686.619727][T20352] syzkaller0: entered allmulticast mode [ 686.856305][T20377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.864723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.986505][T20386] Cannot find del_set index 4 as target [ 687.115703][T20387] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 687.319069][T20394] netlink: 'syz.4.4075': attribute type 9 has an invalid length. [ 687.402241][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.644381][T20400] __nla_validate_parse: 3 callbacks suppressed [ 687.644413][T20400] netlink: 684 bytes leftover after parsing attributes in process `syz.0.4077'. [ 687.822568][T18022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.879556][T20410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4079'. [ 687.898728][T20410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4079'. [ 688.247104][T20423] netlink: 'syz.2.4081': attribute type 20 has an invalid length. [ 688.255093][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4081'. [ 688.330858][T20423] netlink: 'syz.2.4081': attribute type 20 has an invalid length. [ 688.338760][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4081'. [ 688.591972][T20434] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4088'. [ 688.601400][T20434] unsupported nlmsg_type 40 [ 688.643535][T20437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4090'. [ 688.982571][T20444] sit0: Caught tx_queue_len zero misconfig [ 689.048814][T20450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4094'. [ 689.094241][T20450] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 689.105748][T20450] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 689.119475][T20450] gretap1: entered promiscuous mode [ 689.126828][T20450] gretap1: entered allmulticast mode [ 689.243531][T20455] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4096'. [ 689.374027][T20461] netlink: 'syz.3.4098': attribute type 10 has an invalid length. [ 689.495425][T20461] team0: Port device dummy0 added [ 689.583968][ T808] dummy0 speed is unknown, defaulting to 1000 [ 689.699083][ T5832] dummy0 speed is unknown, defaulting to 1000 [ 689.707406][ T24] dummy0 speed is unknown, defaulting to 1000 [ 689.723416][T20475] netlink: 'syz.2.4101': attribute type 8 has an invalid length. [ 689.934675][T20481] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 690.049830][T20489] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4103'. [ 690.513338][T20499] netlink: 'syz.1.4108': attribute type 11 has an invalid length. [ 690.604156][T20499] netlink: 'syz.1.4108': attribute type 4 has an invalid length. [ 690.622204][T20499] sctp: [Deprecated]: syz.1.4108 (pid 20499) Use of int in maxseg socket option. [ 690.622204][T20499] Use struct sctp_assoc_value instead [ 690.647504][ T9] net_ratelimit: 3 callbacks suppressed [ 690.647526][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.882218][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.968518][T20514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.074007][T20514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.082544][T20514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.151486][T20525] netlink: 'syz.0.4116': attribute type 63 has an invalid length. [ 691.161162][T20514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.169460][T20514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.178228][T20525] netlink: 'syz.0.4116': attribute type 63 has an invalid length. [ 691.280416][T20514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.344348][T20514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.352774][T20514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.504195][T20531] FAULT_INJECTION: forcing a failure. [ 691.504195][T20531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.517389][T20531] CPU: 1 UID: 0 PID: 20531 Comm: syz.0.4119 Not tainted syzkaller #0 PREEMPT(full) [ 691.517417][T20531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.517431][T20531] Call Trace: [ 691.517440][T20531] [ 691.517449][T20531] dump_stack_lvl+0xe8/0x150 [ 691.517492][T20531] should_fail_ex+0x40c/0x560 [ 691.517526][T20531] _copy_from_user+0x2d/0xb0 [ 691.517561][T20531] ___sys_sendmsg+0x1c6/0x360 [ 691.517595][T20531] ? __lock_acquire+0x683/0x2cf0 [ 691.517632][T20531] ? __pfx____sys_sendmsg+0x10/0x10 [ 691.517702][T20531] ? __fget_files+0x2a/0x420 [ 691.517734][T20531] ? __fget_files+0x3a2/0x420 [ 691.517785][T20531] __x64_sys_sendmsg+0x1b1/0x290 [ 691.517821][T20531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 691.517873][T20531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.517898][T20531] do_syscall_64+0x174/0x580 [ 691.517928][T20531] ? trace_irq_disable+0x3b/0x140 [ 691.517955][T20531] ? clear_bhb_loop+0x40/0x90 [ 691.517981][T20531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.518003][T20531] RIP: 0033:0x7fc31159de59 [ 691.518024][T20531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.518043][T20531] RSP: 002b:00007fc3124c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 691.518066][T20531] RAX: ffffffffffffffda RBX: 00007fc311825fa0 RCX: 00007fc31159de59 [ 691.518089][T20531] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 691.518109][T20531] RBP: 00007fc3124c5090 R08: 0000000000000000 R09: 0000000000000000 [ 691.518123][T20531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.518136][T20531] R13: 00007fc311826038 R14: 00007fc311825fa0 R15: 00007ffdc600d488 [ 691.518171][T20531] [ 692.071495][T20540] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 692.271548][T20544] Cannot find set identified by id 65534 to match [ 692.684714][T20564] syzkaller1: entered promiscuous mode [ 692.690276][T20564] syzkaller1: entered allmulticast mode [ 692.796955][T20569] netlink: 'syz.1.4128': attribute type 4 has an invalid length. [ 692.974792][T20574] __nla_validate_parse: 5 callbacks suppressed [ 692.974816][T20574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4131'. [ 693.133162][T20574] bond1: option lp_interval: invalid value (0) [ 693.139413][T20574] bond1: option lp_interval: allowed values 1 - 2147483647 [ 693.165745][T20574] bond1 (unregistering): Released all slaves [ 693.229509][T20580] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4132'. [ 693.238592][T20580] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4132'. [ 694.049485][T18021] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 694.403282][T20631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4144'. [ 694.611412][T20609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.656447][T20636] netlink: 'syz.2.4145': attribute type 1 has an invalid length. [ 694.710384][T20636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4145'. [ 694.719513][T20636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4145'. [ 694.973027][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 695.068112][T20646] bond3: option lp_interval: invalid value (0) [ 695.074352][T20646] bond3: option lp_interval: allowed values 1 - 2147483647 [ 695.099186][T20646] bond3 (unregistering): Released all slaves [ 695.128130][T20647] netlink: 'syz.3.4148': attribute type 4 has an invalid length. [ 695.130331][T20655] tipc: Enabling of bearer rejected, failed to enable media [ 695.187655][T20650] netlink: 'syz.0.4150': attribute type 1 has an invalid length. [ 695.231630][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4148'. [ 695.250660][T20649] macvtap1: entered allmulticast mode [ 695.361421][T20649] macvtap2: entered allmulticast mode [ 695.876561][T20682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4159'. [ 695.982928][T20686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4160'. [ 696.083699][T20684] nbd: illegal input index -8454144 [ 696.090310][ T1227] net_ratelimit: 105 callbacks suppressed [ 696.090330][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.178788][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.739358][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.134653][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.458715][T20725] bond2: option lp_interval: invalid value (0) [ 697.464967][T20725] bond2: option lp_interval: allowed values 1 - 2147483647 [ 697.475869][T20725] bond2 (unregistering): Released all slaves [ 697.503561][T20740] A link change request failed with some changes committed already. Interface 26±ÿz0 may have been left with an inconsistent configuration, please check. [ 698.229698][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.466406][T20779] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.592503][T20779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.606826][T20779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.695604][T20779] veth1_macvtap: left allmulticast mode [ 698.794814][T20779] bridge2: left promiscuous mode [ 698.800165][T20779] bridge2: left allmulticast mode [ 698.810746][T20779] macvtap1: left allmulticast mode [ 698.816061][T20779] macvtap2: left allmulticast mode [ 698.822539][T18028] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.831575][T18028] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.844033][T18028] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.853009][T18028] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.076633][T20793] __nla_validate_parse: 5 callbacks suppressed [ 699.076651][T20793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4190'. [ 699.210709][T20795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.221393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.234637][T20794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.243416][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.255393][T20794] netlink: 'syz.1.4189': attribute type 3 has an invalid length. [ 700.636413][T20748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 700.875701][T20805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.917599][T20805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.956321][T20805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.981429][T20805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.179445][T20824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4198'. [ 701.269469][ C0] net_ratelimit: 3 callbacks suppressed [ 701.269491][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.330452][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.420393][T20829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.487949][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.814492][T20846] netlink: 'syz.4.4202': attribute type 12 has an invalid length. [ 701.823927][T20846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4202'. [ 701.839496][T20846] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 701.863902][T20846] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 701.871690][T20846] gretap1: entered promiscuous mode [ 701.876957][T20846] gretap1: entered allmulticast mode [ 701.995380][T20851] IPVS: ip_vs_edit_dest(): server weight less than zero [ 702.026818][ T1227] IPVS: starting estimator thread 0... [ 702.034391][T20851] netlink: 'syz.2.4203': attribute type 4 has an invalid length. [ 702.180367][T20852] IPVS: using max 30 ests per chain, 72000 per kthread [ 702.468599][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.519792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.560595][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.571245][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.902329][T20893] netlink: 'syz.3.4215': attribute type 1 has an invalid length. [ 703.111890][T20904] netlink: 'syz.2.4218': attribute type 1 has an invalid length. [ 703.290893][T20904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 703.431768][T20928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4222'. [ 703.656894][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.676625][T20938] syzkaller0: entered promiscuous mode [ 703.682178][T20938] syzkaller0: entered allmulticast mode [ 703.755304][T20941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.767754][T20944] netlink: 'syz.4.4231': attribute type 10 has an invalid length. [ 703.856723][T20947] netlink: 'syz.2.4230': attribute type 1 has an invalid length. [ 703.867511][T20947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4230'. [ 703.881675][T20952] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4232'. [ 703.917541][T20952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4232'. [ 703.991024][T20952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4232'. [ 704.189515][T20967] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4236'. [ 704.226277][T20967] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4236'. [ 704.243990][T20965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4235'. [ 704.541938][ T1227] IPVS: starting estimator thread 0... [ 704.647865][T20990] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4244'. [ 704.670036][T20988] IPVS: using max 25 ests per chain, 60000 per kthread [ 704.945907][T21009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4250'. [ 704.965646][T21009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4250'. [ 705.112477][T21014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4251'. [ 705.159016][T21017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4252'. [ 705.232772][T21014] bond6: option lp_interval: invalid value (0) [ 705.239023][T21014] bond6: option lp_interval: allowed values 1 - 2147483647 [ 705.248252][T21014] bond6 (unregistering): Released all slaves [ 705.346230][T21021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4254'. [ 705.768415][T21047] syzkaller0: entered promiscuous mode [ 705.773972][T21047] syzkaller0: entered allmulticast mode [ 705.821636][T21047] bond3: peer notification delay (25) is not a multiple of miimon (28933), value rounded to 0 ms [ 705.851263][T21047] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 705.911324][T21047] bond3 (unregistering): Released all slaves [ 705.953079][T21060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4265'. [ 706.537424][T21086] bond4: option lp_interval: invalid value (0) [ 706.543686][T21086] bond4: option lp_interval: allowed values 1 - 2147483647 [ 706.555455][T21086] bond4 (unregistering): Released all slaves [ 706.805568][ T9] net_ratelimit: 7 callbacks suppressed [ 706.805589][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.816633][T21096] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 707.070441][T21108] netlink: 'syz.3.4279': attribute type 1 has an invalid length. [ 707.218857][T21108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 707.232816][T21117] netlink: 'syz.3.4279': attribute type 1 has an invalid length. [ 707.243615][T21115] bond1: (slave gretap2): making interface the new active one [ 707.252663][T21115] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 707.290340][T21119] sctp: [Deprecated]: syz.2.4281 (pid 21119) Use of int in max_burst socket option deprecated. [ 707.290340][T21119] Use struct sctp_assoc_value instead [ 707.592230][T21135] bond3: option lp_interval: invalid value (0) [ 707.613744][T21135] bond3: option lp_interval: allowed values 1 - 2147483647 [ 707.674514][T21135] bond3 (unregistering): Released all slaves [ 707.704903][T21140] netlink: 'syz.0.4288': attribute type 11 has an invalid length. [ 707.712437][T21143] netlink: 'syz.3.4287': attribute type 6 has an invalid length. [ 707.929689][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.228493][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.264571][T21159] hsr0: entered allmulticast mode [ 708.269875][T21159] hsr_slave_0: entered allmulticast mode [ 708.275576][T21159] hsr_slave_1: entered allmulticast mode [ 708.284901][T21166] Cannot find set identified by id 65534 to match [ 708.417233][T21170] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 708.846072][T21189] gre1: entered promiscuous mode [ 708.851110][T21189] gre1: entered allmulticast mode [ 709.050054][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.089762][T21204] FAULT_INJECTION: forcing a failure. [ 709.089762][T21204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.125013][T21203] syzkaller0: entered promiscuous mode [ 709.130566][T21203] syzkaller0: entered allmulticast mode [ 709.137263][T21204] CPU: 1 UID: 0 PID: 21204 Comm: syz.2.4306 Not tainted syzkaller #0 PREEMPT(full) [ 709.137300][T21204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 709.137314][T21204] Call Trace: [ 709.137322][T21204] [ 709.137332][T21204] dump_stack_lvl+0xe8/0x150 [ 709.137372][T21204] should_fail_ex+0x40c/0x560 [ 709.137403][T21204] _copy_from_user+0x2d/0xb0 [ 709.137436][T21204] __sys_sendto+0x2a9/0x5a0 [ 709.137467][T21204] ? ksys_write+0x1e6/0x270 [ 709.137505][T21204] ? __pfx___sys_sendto+0x10/0x10 [ 709.137531][T21204] ? __mutex_unlock_slowpath+0x731/0x900 [ 709.137593][T21204] ? __pfx_ksys_write+0x10/0x10 [ 709.137631][T21204] __x64_sys_sendto+0xde/0x100 [ 709.137661][T21204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.137686][T21204] do_syscall_64+0x174/0x580 [ 709.137714][T21204] ? trace_irq_disable+0x3b/0x140 [ 709.137743][T21204] ? clear_bhb_loop+0x40/0x90 [ 709.137769][T21204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.137790][T21204] RIP: 0033:0x7f38f299de59 [ 709.137810][T21204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.137830][T21204] RSP: 002b:00007f38f3896028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 709.137854][T21204] RAX: ffffffffffffffda RBX: 00007f38f2c25fa0 RCX: 00007f38f299de59 [ 709.137870][T21204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 709.137882][T21204] RBP: 00007f38f3896090 R08: 0000200000e68000 R09: 0000000000000010 [ 709.137897][T21204] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 709.137910][T21204] R13: 00007f38f2c26038 R14: 00007f38f2c25fa0 R15: 00007ffc3736fc38 [ 709.137946][T21204] [ 709.153040][T21203] netlink: 'syz.3.4308': attribute type 1 has an invalid length. [ 709.483901][T21214] __nla_validate_parse: 8 callbacks suppressed [ 709.483922][T21214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4310'. [ 709.623522][T21211] tipc: Enabling of bearer rejected, media not registered [ 709.637889][T21221] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 709.646873][T21222] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 709.655802][T21221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4313'. [ 709.668107][T21221] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4313'. [ 709.763522][T21221] geneve2: entered promiscuous mode [ 710.134054][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4321'. [ 710.148710][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.170446][T21252] netlink: 'syz.4.4321': attribute type 1 has an invalid length. [ 710.197335][T21245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4321'. [ 710.218029][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4321'. [ 710.227234][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4321'. [ 710.254137][T21252] netlink: 'syz.4.4321': attribute type 1 has an invalid length. [ 710.255073][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.262057][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4321'. [ 710.320025][T21255] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4323'. [ 710.338174][T18028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.395370][T21257] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4322'. [ 711.170977][T21291] gtp0: entered promiscuous mode [ 711.176055][T21291] gtp0: entered allmulticast mode [ 711.202257][T21295] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 711.223128][T21295] bond4: (slave lo): Enslaving as an active interface with an up link [ 711.303326][T21289] bond4 (unregistering): (slave lo): Releasing backup interface [ 711.329742][T21289] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 711.431177][T21289] bond4 (unregistering): Released all slaves [ 712.068887][T21330] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 712.217490][ T9] net_ratelimit: 4 callbacks suppressed [ 712.217509][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.292685][T21342] netlink: 'syz.1.4347': attribute type 13 has an invalid length. [ 712.316647][T21350] netlink: 'syz.3.4348': attribute type 15 has an invalid length. [ 712.341637][T21342] netlink: 'syz.1.4347': attribute type 13 has an invalid length. [ 712.388440][T21352] lo: Caught tx_queue_len zero misconfig [ 712.521098][T21355] syzkaller0: entered promiscuous mode [ 712.563250][T21355] syzkaller0: entered allmulticast mode [ 712.786707][T21378] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 713.287714][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.331980][T21398] block nbd3: Unsupported socket: should be TCP or UNIX. [ 713.922212][T21423] syzkaller1: entered promiscuous mode [ 713.927780][T21423] syzkaller1: entered allmulticast mode [ 714.000311][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.240268][T21439] netlink: 'syz.0.4374': attribute type 1 has an invalid length. [ 714.262943][T21442] netlink: 'syz.2.4375': attribute type 10 has an invalid length. [ 714.289196][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.475094][T21434] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.482622][T21434] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.606080][T21434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.649270][T21434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.833881][T21423] geneve3: entered promiscuous mode [ 714.855134][T21423] geneve3: entered allmulticast mode [ 714.909308][ T5824] dummy0 speed is unknown, defaulting to 1000 [ 714.933659][T18022] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.957542][T18022] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 714.980597][T18021] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.997330][T18021] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 715.150804][T18021] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.159741][T18021] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 715.168581][T18021] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.177473][T18021] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 715.204810][T21472] tipc: Enabling of bearer rejected, failed to enable media [ 715.216844][T21472] tipc: Enabling of bearer rejected, failed to enable media [ 715.256844][T21472] __nla_validate_parse: 15 callbacks suppressed [ 715.256873][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4382'. [ 715.394107][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.407736][T21480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4383'. [ 715.729475][T21497] xt_hashlimit: size too large, truncated to 1048576 [ 715.926224][T21506] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.4388'. [ 715.951236][T21506] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 715.980803][T18021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.021525][T21506] 0ªX¹¦Dö»: entered allmulticast mode [ 716.469291][T21533] syzkaller0: entered promiscuous mode [ 716.486959][T21533] syzkaller0: entered allmulticast mode [ 716.497431][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.581398][T21540] netlink: 'syz.4.4399': attribute type 2 has an invalid length. [ 716.594061][T21541] netlink: 'syz.4.4399': attribute type 2 has an invalid length. [ 716.611601][T18022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.670371][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.957798][T21557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4403'. [ 717.180027][T21569] netlink: 'syz.4.4407': attribute type 61 has an invalid length. [ 717.506023][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.698546][T21590] syz_tun: refused to change device tx_queue_len [ 717.939266][T21604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4418'. [ 717.967322][T21605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4418'. [ 718.213607][T21616] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4423'. [ 718.358024][T21619] netlink: 284 bytes leftover after parsing attributes in process `syz.2.4424'. [ 718.367231][T21619] ip6tnl0: Caught tx_queue_len zero misconfig [ 718.530203][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.599445][T21629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4428'. [ 718.827977][T21641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4433'. [ 718.889295][T21644] syzkaller0: entered promiscuous mode [ 718.894851][T21644] syzkaller0: entered allmulticast mode [ 719.597620][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.605880][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.647741][T21674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.721648][T21668] nbd: nbd64 already in use [ 719.729035][T20216] block nbd64: NBD_DISCONNECT [ 719.813524][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.844330][T20411] udevd[20411]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 719.951251][T21682] gretap2: entered promiscuous mode [ 719.956537][T21682] gretap2: entered allmulticast mode [ 720.390902][T21699] __nla_validate_parse: 7 callbacks suppressed [ 720.390923][T21699] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4452'. [ 720.482982][T21707] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4452'. [ 720.497382][T21707] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4452'. [ 720.621221][T21712] bond3: option lp_interval: invalid value (0) [ 720.627694][T21712] bond3: option lp_interval: allowed values 1 - 2147483647 [ 720.636919][T21715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4455'. [ 720.657427][T21712] bond3 (unregistering): Released all slaves [ 720.665253][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.674975][T21715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4455'. [ 720.763710][T21715] openvswitch: netlink: Missing valid actions attribute. [ 720.771077][T21715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.154833][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.266793][ T5643] Bluetooth: hci1: link tx timeout [ 721.272002][ T5643] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 721.486672][T21756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4468'. [ 721.567900][T21760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4471'. [ 721.578556][T21760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4471'. [ 721.646780][T21760] netlink: 'syz.1.4471': attribute type 1 has an invalid length. [ 721.654592][T21760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4471'. [ 721.726397][T21768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4473'. [ 722.407365][T21808] xt_bpf: check failed: parse error [ 722.478140][T21810] netlink: 'syz.1.4485': attribute type 1 has an invalid length. [ 722.529853][T21810] netlink: 'syz.1.4485': attribute type 1 has an invalid length. [ 722.562153][T21810] net_ratelimit: 5 callbacks suppressed [ 722.562173][T21810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.609616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.863365][T21829] FAULT_INJECTION: forcing a failure. [ 722.863365][T21829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.905552][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.934239][T21829] CPU: 0 UID: 0 PID: 21829 Comm: syz.3.4491 Not tainted syzkaller #0 PREEMPT(full) [ 722.934271][T21829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 722.934284][T21829] Call Trace: [ 722.934293][T21829] [ 722.934302][T21829] dump_stack_lvl+0xe8/0x150 [ 722.934342][T21829] should_fail_ex+0x40c/0x560 [ 722.934374][T21829] _copy_from_user+0x2d/0xb0 [ 722.934407][T21829] kstrtouint_from_user+0xd6/0x180 [ 722.934438][T21829] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 722.934484][T21829] proc_fail_nth_write+0x8e/0x210 [ 722.934515][T21829] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 722.934561][T21829] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 722.934591][T21829] vfs_write+0x296/0xba0 [ 722.934634][T21829] ? __pfx_vfs_write+0x10/0x10 [ 722.934670][T21829] ? __fget_files+0x2a/0x420 [ 722.934704][T21829] ? __fget_files+0x3a2/0x420 [ 722.934731][T21829] ? __fget_files+0x2a/0x420 [ 722.934770][T21829] ksys_write+0x150/0x270 [ 722.934806][T21829] ? __pfx_ksys_write+0x10/0x10 [ 722.934850][T21829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.934874][T21829] do_syscall_64+0x174/0x580 [ 722.934903][T21829] ? trace_irq_disable+0x3b/0x140 [ 722.934932][T21829] ? clear_bhb_loop+0x40/0x90 [ 722.934964][T21829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.934987][T21829] RIP: 0033:0x7fe3cf95e68e [ 722.935007][T21829] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 722.935026][T21829] RSP: 002b:00007fe3d087bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 722.935050][T21829] RAX: ffffffffffffffda RBX: 00007fe3d087c6c0 RCX: 00007fe3cf95e68e [ 722.935066][T21829] RDX: 0000000000000001 RSI: 00007fe3d087c0a0 RDI: 0000000000000009 [ 722.935080][T21829] RBP: 00007fe3d087c090 R08: 0000000000000000 R09: 0000000000000000 [ 722.935093][T21829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 722.935106][T21829] R13: 00007fe3cfc26038 R14: 00007fe3cfc25fa0 R15: 00007ffe8ad71358 [ 722.935143][T21829] [ 723.347432][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 723.985343][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.181787][T21880] netlink: 'syz.0.4504': attribute type 12 has an invalid length. [ 724.200349][T21880] netlink: 'syz.0.4504': attribute type 29 has an invalid length. [ 724.223995][T21880] netlink: 'syz.0.4504': attribute type 1 has an invalid length. [ 724.298638][T21866] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 724.381449][T21866] bond3: (slave syz_tun): Releasing backup interface [ 724.490538][T21866] bond0: (slave bond_slave_0): Releasing backup interface [ 724.501131][T21896] FAULT_INJECTION: forcing a failure. [ 724.501131][T21896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.528646][T21866] bond0: (slave bond_slave_1): Releasing backup interface [ 724.540755][T21896] CPU: 0 UID: 0 PID: 21896 Comm: syz.0.4507 Not tainted syzkaller #0 PREEMPT(full) [ 724.540784][T21896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 724.540797][T21896] Call Trace: [ 724.540806][T21896] [ 724.540815][T21896] dump_stack_lvl+0xe8/0x150 [ 724.540854][T21896] should_fail_ex+0x40c/0x560 [ 724.540885][T21896] _copy_from_user+0x2d/0xb0 [ 724.540919][T21896] ___sys_sendmsg+0x1c6/0x360 [ 724.540951][T21896] ? __lock_acquire+0x683/0x2cf0 [ 724.540987][T21896] ? __pfx____sys_sendmsg+0x10/0x10 [ 724.541059][T21896] ? __fget_files+0x2a/0x420 [ 724.541087][T21896] ? __fget_files+0x3a2/0x420 [ 724.541128][T21896] __x64_sys_sendmsg+0x1b1/0x290 [ 724.541164][T21896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 724.541217][T21896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.541243][T21896] do_syscall_64+0x174/0x580 [ 724.541271][T21896] ? trace_irq_disable+0x3b/0x140 [ 724.541300][T21896] ? clear_bhb_loop+0x40/0x90 [ 724.541335][T21896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.541358][T21896] RIP: 0033:0x7fc31159de59 [ 724.541378][T21896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.541397][T21896] RSP: 002b:00007fc3124c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.541421][T21896] RAX: ffffffffffffffda RBX: 00007fc311825fa0 RCX: 00007fc31159de59 [ 724.541437][T21896] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 724.541452][T21896] RBP: 00007fc3124c5090 R08: 0000000000000000 R09: 0000000000000000 [ 724.541466][T21896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.541479][T21896] R13: 00007fc311826038 R14: 00007fc311825fa0 R15: 00007ffdc600d488 [ 724.541516][T21896] [ 724.749042][T21897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.762736][T21866] team0: Port device team_slave_0 removed [ 724.791629][T21866] team0: Port device team_slave_1 removed [ 724.847722][T21866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 724.887143][T21888] 0ªX¹¦Dö»: entered promiscuous mode [ 724.895182][T21888] 0ªX¹¦Dö»: left promiscuous mode [ 725.008640][ T5744] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.296153][T21891] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 725.358458][T21901] IPv6: sit1: Disabled Multicast RS [ 725.369086][T21901] sit1: entered allmulticast mode [ 725.437188][T21907] netlink: 'syz.1.4511': attribute type 1 has an invalid length. [ 726.083613][T21945] __nla_validate_parse: 11 callbacks suppressed [ 726.083634][T21945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4517'. [ 726.665508][T21964] netlink: 'syz.3.4525': attribute type 10 has an invalid length. [ 726.792840][T21979] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 727.094636][T21989] syzkaller0: entered promiscuous mode [ 727.100494][T21989] syzkaller0: entered allmulticast mode [ 727.545426][T22015] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4537'. [ 727.666596][T22023] FAULT_INJECTION: forcing a failure. [ 727.666596][T22023] name failslab, interval 1, probability 0, space 0, times 0 [ 727.687273][T22023] CPU: 1 UID: 0 PID: 22023 Comm: syz.2.4539 Not tainted syzkaller #0 PREEMPT(full) [ 727.687317][T22023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 727.687331][T22023] Call Trace: [ 727.687340][T22023] [ 727.687351][T22023] dump_stack_lvl+0xe8/0x150 [ 727.687389][T22023] should_fail_ex+0x40c/0x560 [ 727.687420][T22023] should_failslab+0xa8/0x100 [ 727.687453][T22023] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 727.687480][T22023] ? skb_clone+0x212/0x3a0 [ 727.687511][T22023] ? skb_clone+0x212/0x3a0 [ 727.687550][T22023] skb_clone+0x212/0x3a0 [ 727.687586][T22023] __netlink_deliver_tap+0x413/0x860 [ 727.687632][T22023] ? netlink_deliver_tap+0x2e/0x1b0 [ 727.687674][T22023] netlink_deliver_tap+0x19c/0x1b0 [ 727.687706][T22023] netlink_unicast+0x77f/0x940 [ 727.687746][T22023] netlink_sendmsg+0x813/0xb40 [ 727.687789][T22023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.687825][T22023] ? aa_sock_msg_perm+0xf1/0x1b0 [ 727.687855][T22023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.687886][T22023] sock_sendmsg_nosec+0x13a/0x180 [ 727.687914][T22023] ____sys_sendmsg+0x54e/0x850 [ 727.687961][T22023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 727.688003][T22023] ? import_iovec+0x73/0xa0 [ 727.688039][T22023] ___sys_sendmsg+0x2a5/0x360 [ 727.688070][T22023] ? __lock_acquire+0x683/0x2cf0 [ 727.688104][T22023] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.688180][T22023] ? __fget_files+0x2a/0x420 [ 727.688208][T22023] ? __fget_files+0x3a2/0x420 [ 727.688248][T22023] __x64_sys_sendmsg+0x1b1/0x290 [ 727.688283][T22023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 727.688335][T22023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.688360][T22023] do_syscall_64+0x174/0x580 [ 727.688388][T22023] ? trace_irq_disable+0x3b/0x140 [ 727.688415][T22023] ? clear_bhb_loop+0x40/0x90 [ 727.688442][T22023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.688465][T22023] RIP: 0033:0x7f38f299de59 [ 727.688485][T22023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.688504][T22023] RSP: 002b:00007f38f3896028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.688527][T22023] RAX: ffffffffffffffda RBX: 00007f38f2c25fa0 RCX: 00007f38f299de59 [ 727.688543][T22023] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 727.688557][T22023] RBP: 00007f38f3896090 R08: 0000000000000000 R09: 0000000000000000 [ 727.688571][T22023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.688584][T22023] R13: 00007f38f2c26038 R14: 00007f38f2c25fa0 R15: 00007ffc3736fc38 [ 727.688620][T22023] [ 728.213794][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4545'. [ 728.554914][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4548'. [ 728.687195][T22067] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 728.794878][T22074] FAULT_INJECTION: forcing a failure. [ 728.794878][T22074] name failslab, interval 1, probability 0, space 0, times 0 [ 728.844497][T22074] CPU: 1 UID: 0 PID: 22074 Comm: syz.3.4552 Not tainted syzkaller #0 PREEMPT(full) [ 728.844527][T22074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.844545][T22074] Call Trace: [ 728.844553][T22074] [ 728.844562][T22074] dump_stack_lvl+0xe8/0x150 [ 728.844602][T22074] should_fail_ex+0x40c/0x560 [ 728.844632][T22074] should_failslab+0xa8/0x100 [ 728.844667][T22074] __kmalloc_cache_noprof+0xa8/0x660 [ 728.844697][T22074] ? xfrm_policy_alloc+0x78/0x2b0 [ 728.844824][T22074] ? xfrm_policy_alloc+0x78/0x2b0 [ 728.844857][T22074] xfrm_policy_alloc+0x78/0x2b0 [ 728.844886][T22074] xfrm_policy_construct+0x39/0x6b0 [ 728.844987][T22074] ? unwind_next_frame+0x8f/0x2550 [ 728.845045][T22074] xfrm_add_policy+0x273/0x690 [ 728.845082][T22074] ? __pfx_xfrm_add_policy+0x10/0x10 [ 728.845109][T22074] ? apparmor_capable+0x126/0x170 [ 728.845143][T22074] ? __nla_parse+0x40/0x60 [ 728.845176][T22074] xfrm_user_rcv_msg+0x7a8/0xf30 [ 728.845213][T22074] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 728.845277][T22074] ? __mutex_trylock_common+0x15f/0x270 [ 728.845303][T22074] ? __pfx___mutex_trylock_common+0x10/0x10 [ 728.845329][T22074] ? rcu_is_watching+0x15/0xb0 [ 728.845362][T22074] ? trace_contention_end+0x3d/0x140 [ 728.845393][T22074] netlink_rcv_skb+0x226/0x4a0 [ 728.845428][T22074] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 728.845460][T22074] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 728.845510][T22074] ? netlink_deliver_tap+0x2e/0x1b0 [ 728.845542][T22074] ? netlink_deliver_tap+0x2e/0x1b0 [ 728.845578][T22074] xfrm_netlink_rcv+0x79/0x90 [ 728.845607][T22074] netlink_unicast+0x7bb/0x940 [ 728.845650][T22074] netlink_sendmsg+0x813/0xb40 [ 728.845695][T22074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.845732][T22074] ? aa_sock_msg_perm+0xf1/0x1b0 [ 728.845760][T22074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.845792][T22074] sock_sendmsg_nosec+0x13a/0x180 [ 728.845821][T22074] ____sys_sendmsg+0x54e/0x850 [ 728.845860][T22074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 728.845902][T22074] ? import_iovec+0x73/0xa0 [ 728.845938][T22074] ___sys_sendmsg+0x2a5/0x360 [ 728.845968][T22074] ? __lock_acquire+0x683/0x2cf0 [ 728.846002][T22074] ? __pfx____sys_sendmsg+0x10/0x10 [ 728.846096][T22074] ? __fget_files+0x2a/0x420 [ 728.846123][T22074] ? __fget_files+0x3a2/0x420 [ 728.846163][T22074] __x64_sys_sendmsg+0x1b1/0x290 [ 728.846198][T22074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 728.846250][T22074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.846274][T22074] do_syscall_64+0x174/0x580 [ 728.846302][T22074] ? trace_irq_disable+0x3b/0x140 [ 728.846330][T22074] ? clear_bhb_loop+0x40/0x90 [ 728.846357][T22074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.846380][T22074] RIP: 0033:0x7fe3cf99de59 [ 728.846401][T22074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.846420][T22074] RSP: 002b:00007fe3d087c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.846443][T22074] RAX: ffffffffffffffda RBX: 00007fe3cfc25fa0 RCX: 00007fe3cf99de59 [ 728.846460][T22074] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 728.846474][T22074] RBP: 00007fe3d087c090 R08: 0000000000000000 R09: 0000000000000000 [ 728.846488][T22074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.846501][T22074] R13: 00007fe3cfc26038 R14: 00007fe3cfc25fa0 R15: 00007ffe8ad71358 [ 728.846535][T22074] [ 729.368305][T22088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4553'. [ 729.928776][T22113] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4560'. [ 729.947470][T22113] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 730.010590][T22102] FAULT_INJECTION: forcing a failure. [ 730.010590][T22102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.024665][T22102] CPU: 1 UID: 0 PID: 22102 Comm: syz.1.4558 Not tainted syzkaller #0 PREEMPT(full) [ 730.024694][T22102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 730.024708][T22102] Call Trace: [ 730.024718][T22102] [ 730.024727][T22102] dump_stack_lvl+0xe8/0x150 [ 730.024767][T22102] should_fail_ex+0x40c/0x560 [ 730.024798][T22102] _copy_to_user+0x31/0xb0 [ 730.024833][T22102] simple_read_from_buffer+0xe1/0x170 [ 730.024892][T22102] proc_fail_nth_read+0x1bb/0x230 [ 730.024926][T22102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 730.024959][T22102] ? rw_verify_area+0x24a/0x4c0 [ 730.025001][T22102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 730.025030][T22102] vfs_read+0x213/0xa80 [ 730.025068][T22102] ? __pfx___mutex_lock+0x10/0x10 [ 730.025099][T22102] ? __pfx_vfs_read+0x10/0x10 [ 730.025133][T22102] ? __fget_files+0x2a/0x420 [ 730.025166][T22102] ? __fget_files+0x3a2/0x420 [ 730.025192][T22102] ? __fget_files+0x2a/0x420 [ 730.025231][T22102] ksys_read+0x150/0x270 [ 730.025267][T22102] ? __pfx_ksys_read+0x10/0x10 [ 730.025309][T22102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.025333][T22102] do_syscall_64+0x174/0x580 [ 730.025361][T22102] ? trace_irq_disable+0x3b/0x140 [ 730.025388][T22102] ? clear_bhb_loop+0x40/0x90 [ 730.025414][T22102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.025436][T22102] RIP: 0033:0x7faca0f5e68e [ 730.025457][T22102] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 730.025475][T22102] RSP: 002b:00007faca1d9ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 730.025499][T22102] RAX: ffffffffffffffda RBX: 00007faca1da06c0 RCX: 00007faca0f5e68e [ 730.025514][T22102] RDX: 000000000000000f RSI: 00007faca1da00a0 RDI: 0000000000000004 [ 730.025526][T22102] RBP: 00007faca1da0090 R08: 0000000000000000 R09: 0000000000000000 [ 730.025540][T22102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.025552][T22102] R13: 00007faca1226038 R14: 00007faca1225fa0 R15: 00007ffe87636878 [ 730.025588][T22102] [ 730.382112][T22125] sctp: [Deprecated]: syz.1.4565 (pid 22125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 730.382112][T22125] Use struct sctp_sack_info instead [ 730.878379][T22152] netlink: 'syz.3.4571': attribute type 39 has an invalid length. [ 731.113075][T22158] syzkaller0: entered promiscuous mode [ 731.118699][T22158] syzkaller0: entered allmulticast mode [ 731.352398][T22173] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4576'. [ 731.841459][T22191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4578'. [ 735.404945][T22196] kthread_run failed with err -4 [ 735.477131][T22202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4584'. [ 735.495346][T22202] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4584'. [ 735.533148][T22208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4583'. [ 735.581374][T22213] syzkaller1: entered promiscuous mode [ 735.614252][T22213] syzkaller1: entered allmulticast mode [ 735.789515][T22211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4584'. [ 736.040582][T22233] pim6reg: entered allmulticast mode [ 736.046311][T22233] pim6reg: left allmulticast mode [ 736.094258][T22211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4584'. [ 736.201020][T22241] No such timeout policy "syz0" [ 736.207808][T22241] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 736.222688][T22240] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 736.370951][T22240] xt_hashlimit: size too large, truncated to 1048576 [ 736.388119][T22247] vcan0: entered allmulticast mode [ 736.846624][T22267] FAULT_INJECTION: forcing a failure. [ 736.846624][T22267] name failslab, interval 1, probability 0, space 0, times 0 [ 736.859651][T22267] CPU: 1 UID: 0 PID: 22267 Comm: syz.0.4596 Not tainted syzkaller #0 PREEMPT(full) [ 736.859680][T22267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 736.859695][T22267] Call Trace: [ 736.859704][T22267] [ 736.859713][T22267] dump_stack_lvl+0xe8/0x150 [ 736.859754][T22267] should_fail_ex+0x40c/0x560 [ 736.859785][T22267] should_failslab+0xa8/0x100 [ 736.859818][T22267] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 736.859844][T22267] ? local_lock_release+0x9c/0x160 [ 736.859875][T22267] ? __alloc_skb+0x1d7/0x7a0 [ 736.859910][T22267] ? __alloc_skb+0x1d7/0x7a0 [ 736.859946][T22267] __alloc_skb+0x1d7/0x7a0 [ 736.859980][T22267] pfkey_send_policy_notify+0x145/0x980 [ 736.860144][T22267] ? km_policy_notify+0x28/0x200 [ 736.860198][T22267] ? __pfx_pfkey_send_policy_notify+0x10/0x10 [ 736.860227][T22267] km_policy_notify+0x121/0x200 [ 736.860254][T22267] ? km_policy_notify+0x28/0x200 [ 736.860285][T22267] xfrm_add_policy+0x4a1/0x690 [ 736.860322][T22267] ? __pfx_xfrm_add_policy+0x10/0x10 [ 736.860348][T22267] ? apparmor_capable+0x126/0x170 [ 736.860382][T22267] ? __nla_parse+0x40/0x60 [ 736.860415][T22267] xfrm_user_rcv_msg+0x7a8/0xf30 [ 736.860452][T22267] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 736.860518][T22267] ? __mutex_trylock_common+0x15f/0x270 [ 736.860545][T22267] ? __pfx___mutex_trylock_common+0x10/0x10 [ 736.860571][T22267] ? rcu_is_watching+0x15/0xb0 [ 736.860604][T22267] ? trace_contention_end+0x3d/0x140 [ 736.860635][T22267] netlink_rcv_skb+0x226/0x4a0 [ 736.860671][T22267] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 736.860703][T22267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 736.860754][T22267] ? netlink_deliver_tap+0x2e/0x1b0 [ 736.860786][T22267] ? netlink_deliver_tap+0x2e/0x1b0 [ 736.860822][T22267] xfrm_netlink_rcv+0x79/0x90 [ 736.860852][T22267] netlink_unicast+0x7bb/0x940 [ 736.860902][T22267] netlink_sendmsg+0x813/0xb40 [ 736.860948][T22267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.860986][T22267] ? aa_sock_msg_perm+0xf1/0x1b0 [ 736.861014][T22267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.861046][T22267] sock_sendmsg_nosec+0x13a/0x180 [ 736.861075][T22267] ____sys_sendmsg+0x54e/0x850 [ 736.861115][T22267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 736.861158][T22267] ? import_iovec+0x73/0xa0 [ 736.861193][T22267] ___sys_sendmsg+0x2a5/0x360 [ 736.861224][T22267] ? __lock_acquire+0x683/0x2cf0 [ 736.861258][T22267] ? __pfx____sys_sendmsg+0x10/0x10 [ 736.861330][T22267] ? __fget_files+0x2a/0x420 [ 736.861359][T22267] ? __fget_files+0x3a2/0x420 [ 736.861398][T22267] __x64_sys_sendmsg+0x1b1/0x290 [ 736.861434][T22267] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 736.861486][T22267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.861511][T22267] do_syscall_64+0x174/0x580 [ 736.861539][T22267] ? trace_irq_disable+0x3b/0x140 [ 736.861565][T22267] ? clear_bhb_loop+0x40/0x90 [ 736.861591][T22267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.861613][T22267] RIP: 0033:0x7fc31159de59 [ 736.861634][T22267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.861652][T22267] RSP: 002b:00007fc3124c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.861676][T22267] RAX: ffffffffffffffda RBX: 00007fc311825fa0 RCX: 00007fc31159de59 [ 736.861692][T22267] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 736.861706][T22267] RBP: 00007fc3124c5090 R08: 0000000000000000 R09: 0000000000000000 [ 736.861720][T22267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 736.861733][T22267] R13: 00007fc311826038 R14: 00007fc311825fa0 R15: 00007ffdc600d488 [ 736.861766][T22267] [ 737.383819][T22280] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 737.543577][T22282] 8021q: VLANs not supported on ip_vti0 [ 737.658023][T22288] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 738.128823][T22319] FAULT_INJECTION: forcing a failure. [ 738.128823][T22319] name failslab, interval 1, probability 0, space 0, times 0 [ 738.141509][T22319] CPU: 1 UID: 0 PID: 22319 Comm: syz.2.4608 Not tainted syzkaller #0 PREEMPT(full) [ 738.141539][T22319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 738.141552][T22319] Call Trace: [ 738.141561][T22319] [ 738.141571][T22319] dump_stack_lvl+0xe8/0x150 [ 738.141611][T22319] should_fail_ex+0x40c/0x560 [ 738.141643][T22319] should_failslab+0xa8/0x100 [ 738.141677][T22319] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 738.141704][T22319] ? local_lock_release+0x9c/0x160 [ 738.141735][T22319] ? __alloc_skb+0x1d7/0x7a0 [ 738.141760][T22319] ? __alloc_skb+0x1d7/0x7a0 [ 738.141796][T22319] __alloc_skb+0x1d7/0x7a0 [ 738.141830][T22319] pfkey_send_policy_notify+0x145/0x980 [ 738.141857][T22319] ? km_policy_notify+0x28/0x200 [ 738.141887][T22319] ? __pfx_pfkey_send_policy_notify+0x10/0x10 [ 738.141915][T22319] km_policy_notify+0x121/0x200 [ 738.141943][T22319] ? km_policy_notify+0x28/0x200 [ 738.141975][T22319] xfrm_add_policy+0x4a1/0x690 [ 738.142013][T22319] ? __pfx_xfrm_add_policy+0x10/0x10 [ 738.142041][T22319] ? apparmor_capable+0x126/0x170 [ 738.142074][T22319] ? __nla_parse+0x40/0x60 [ 738.142109][T22319] xfrm_user_rcv_msg+0x7a8/0xf30 [ 738.142146][T22319] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 738.142213][T22319] ? __mutex_trylock_common+0x15f/0x270 [ 738.142239][T22319] ? __pfx___mutex_trylock_common+0x10/0x10 [ 738.142265][T22319] ? rcu_is_watching+0x15/0xb0 [ 738.142307][T22319] ? trace_contention_end+0x3d/0x140 [ 738.142339][T22319] netlink_rcv_skb+0x226/0x4a0 [ 738.142374][T22319] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 738.142406][T22319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 738.142456][T22319] ? netlink_deliver_tap+0x2e/0x1b0 [ 738.142489][T22319] ? netlink_deliver_tap+0x2e/0x1b0 [ 738.142524][T22319] xfrm_netlink_rcv+0x79/0x90 [ 738.142554][T22319] netlink_unicast+0x7bb/0x940 [ 738.142593][T22319] netlink_sendmsg+0x813/0xb40 [ 738.142637][T22319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.142676][T22319] ? aa_sock_msg_perm+0xf1/0x1b0 [ 738.142704][T22319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.142736][T22319] sock_sendmsg_nosec+0x13a/0x180 [ 738.142764][T22319] ____sys_sendmsg+0x54e/0x850 [ 738.142804][T22319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 738.142847][T22319] ? import_iovec+0x73/0xa0 [ 738.142882][T22319] ___sys_sendmsg+0x2a5/0x360 [ 738.142912][T22319] ? __lock_acquire+0x683/0x2cf0 [ 738.142946][T22319] ? __pfx____sys_sendmsg+0x10/0x10 [ 738.143016][T22319] ? __fget_files+0x2a/0x420 [ 738.143044][T22319] ? __fget_files+0x3a2/0x420 [ 738.143083][T22319] __x64_sys_sendmsg+0x1b1/0x290 [ 738.143119][T22319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 738.143171][T22319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.143196][T22319] do_syscall_64+0x174/0x580 [ 738.143224][T22319] ? trace_irq_disable+0x3b/0x140 [ 738.143251][T22319] ? clear_bhb_loop+0x40/0x90 [ 738.143287][T22319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.143309][T22319] RIP: 0033:0x7f38f299de59 [ 738.143330][T22319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.143349][T22319] RSP: 002b:00007f38f3896028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.143373][T22319] RAX: ffffffffffffffda RBX: 00007f38f2c25fa0 RCX: 00007f38f299de59 [ 738.143389][T22319] RDX: 000000002c000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 738.143403][T22319] RBP: 00007f38f3896090 R08: 0000000000000000 R09: 0000000000000000 [ 738.143417][T22319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 738.143430][T22319] R13: 00007f38f2c26038 R14: 00007f38f2c25fa0 R15: 00007ffc3736fc38 [ 738.143466][T22319] [ 738.731732][T22329] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 738.749858][T22329] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 738.829192][T22333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4609'. [ 738.867896][T22333] geneve3: entered promiscuous mode [ 738.873194][T22333] geneve3: entered allmulticast mode [ 738.884985][T22336] syzkaller0: entered promiscuous mode [ 738.891676][T22336] syzkaller0: entered allmulticast mode [ 738.902032][T18022] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 738.949256][T18022] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 738.967222][T18022] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 738.985099][T18022] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 739.182996][T22355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4617'. [ 739.192923][T22354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4617'. [ 739.305396][T22360] netlink: 'syz.4.4619': attribute type 12 has an invalid length. [ 740.525096][T22416] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4639'. [ 741.287009][T22461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4652'. [ 741.305762][T22464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4654'. [ 741.351212][T22461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.772523][T22485] sctp: [Deprecated]: syz.4.4659 (pid 22485) Use of int in maxseg socket option. [ 741.772523][T22485] Use struct sctp_assoc_value instead [ 741.922478][T22492] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 742.031689][T22494] veth1_to_bond: entered allmulticast mode [ 742.080342][T22494] veth1_to_bond: left allmulticast mode [ 742.093147][T22499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4666'. [ 742.521539][T22522] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4670'. [ 742.684985][T22533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4674'. [ 742.706557][T22533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4674'. [ 742.740098][T22530] syzkaller0: entered promiscuous mode [ 742.765824][T22530] syzkaller0: entered allmulticast mode [ 742.802253][T22533] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 743.545812][T22572] A link change request failed with some changes committed already. Interface 26±ÿz0 may have been left with an inconsistent configuration, please check. [ 743.580042][T22575] netlink: 'syz.4.4684': attribute type 1 has an invalid length. [ 743.605136][T22575] 8021q: adding VLAN 0 to HW filter on device bond4 [ 743.659731][T22574] bond4: (slave geneve2): making interface the new active one [ 743.669392][T22574] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 743.732108][T22581] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 743.792556][T22586] sock: sock_timestamping_bind_phc: sock not bind to device [ 743.941424][T22581] __nla_validate_parse: 3 callbacks suppressed [ 743.941448][T22581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4685'. [ 743.967336][T22581] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4685'. [ 743.994960][T18021] wlan0: Trigger new scan to find an IBSS to join [ 744.009295][T22581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4685'. [ 744.629556][T22636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4704'. [ 744.659714][T22636] netlink: 13 bytes leftover after parsing attributes in process `syz.3.4704'. [ 744.708196][T22636] veth3: entered promiscuous mode [ 747.394910][ T1319] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 747.986584][T18020] wlan0: Trigger new scan to find an IBSS to join [ 748.492817][T22657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4709'. [ 748.633125][T22668] IPv6: NLM_F_CREATE should be specified when creating new route [ 748.768151][T22672] netlink: 'syz.1.4712': attribute type 1 has an invalid length. [ 748.786283][T22660] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4711'. [ 748.830009][T22677] 8021q: VLANs not supported on lo [ 748.888259][T22672] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 749.183362][T22699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4718'. [ 749.216821][T22700] netlink: 408 bytes leftover after parsing attributes in process `syz.2.4717'. [ 749.300369][T22707] netlink: 'syz.3.4721': attribute type 10 has an invalid length. [ 749.310328][T22707] netlink: 'syz.3.4721': attribute type 10 has an invalid length. [ 749.324992][T22707] team0: Port device dummy0 removed [ 749.381885][T18008] smc: removing ib device syz1 [ 749.429815][ T5832] dummy0 speed is unknown, defaulting to 1000 [ 749.436825][T22708] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4719'. [ 749.463951][T22715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4721'. [ 749.488703][T18001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.498658][T22708] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4719'. [ 749.516197][T22715] netlink: 'syz.3.4721': attribute type 10 has an invalid length. [ 749.523401][ T9] ------------[ cut here ]------------ [ 749.530279][T22716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4722'. [ 749.530608][ T9] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 749.551252][ T9] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#0: kworker/0:0/9 [ 749.561936][ T9] Modules linked in: [ 749.566613][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 749.575836][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 749.585966][ T9] Workqueue: mld mld_ifc_work [ 749.590750][ T9] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 749.597065][ T9] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 749.616793][ T9] RSP: 0018:ffffc900000e6738 EFLAGS: 00010246 [ 749.622976][ T9] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 749.631039][ T9] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90699990 [ 749.639097][ T9] RBP: ffff888078970f40 R08: 0000000000000000 R09: 0000000000000000 [ 749.647111][ T9] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88805109f8e8 [ 749.655194][ T9] R13: dffffc0000000000 R14: ffffffff90699990 R15: ffff888078973258 [ 749.663310][ T9] FS: 0000000000000000(0000) GS:ffff888124f5a000(0000) knlGS:0000000000000000 [ 749.672330][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 749.679096][ T9] CR2: 00005555591f99f8 CR3: 0000000051938000 CR4: 00000000003526f0 [ 749.687126][ T9] Call Trace: [ 749.690496][ T9] [ 749.693484][ T9] rate_control_send_low+0x1a7/0x7b0 [ 749.698866][ T9] ? __lock_acquire+0x683/0x2cf0 [ 749.703877][ T9] rate_control_get_rate+0x20b/0x5d0 [ 749.709308][ T9] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 749.715101][ T9] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 749.721277][ T9] ? __asan_memcpy+0x40/0x70 [ 749.725928][ T9] invoke_tx_handlers_late+0xb5/0x1830 [ 749.731502][ T9] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 749.737543][ T9] ieee80211_tx_dequeue+0x3fb6/0x55a0 [ 749.743096][ T9] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 749.748948][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 749.754398][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 749.759590][ T9] ? ieee80211_queue_skb+0x16e0/0x22c0 [ 749.765148][ T9] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 749.771339][ T9] ieee80211_queue_skb+0x1923/0x22c0 [ 749.776722][ T9] ieee80211_tx+0x2c2/0x4b0 [ 749.781357][ T9] ? __pfx_ieee80211_tx+0x10/0x10 [ 749.786472][ T9] ? ieee80211_xmit+0x2e5/0x3c0 [ 749.791554][ T9] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 749.797612][ T9] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 749.803925][ T9] ? worker_thread+0xa47/0xfb0 [ 749.808815][ T9] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 749.815303][ T9] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 749.821686][ T9] ieee80211_subif_start_xmit+0xf1/0x570 [ 749.827404][ T9] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 749.833769][ T9] ? __pfx_netif_skb_features+0x10/0x10 [ 749.839520][ T9] dev_hard_start_xmit+0x2cd/0x830 [ 749.844726][ T9] __dev_queue_xmit+0x1435/0x37f0 [ 749.849852][ T9] ? __lock_acquire+0x683/0x2cf0 [ 749.854985][ T9] ? __dev_queue_xmit+0x29b/0x37f0 [ 749.860187][ T9] ? ___neigh_create+0x1cd2/0x22b0 [ 749.865433][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 749.870902][ T9] ? neigh_resolve_output+0x428/0x720 [ 749.876331][ T9] ? eth_header+0x11b/0x200 [ 749.881014][ T9] ? __asan_memcpy+0x40/0x70 [ 749.885721][ T9] ? ip6_output+0x11e/0x540 [ 749.890426][ T9] ip6_output+0x337/0x540 [ 749.894823][ T9] ? __pfx_ip6_output+0x10/0x10 [ 749.899764][ T9] NF_HOOK+0x177/0x4f0 [ 749.903899][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 749.908609][ T9] ? icmp6_dst_alloc+0x39b/0x430 [ 749.914119][ T9] ? __pfx_dst_output+0x10/0x10 [ 749.919079][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 749.924448][ T9] ? icmp6_dst_alloc+0x39b/0x430 [ 749.929548][ T9] ? icmp6_dst_alloc+0x39b/0x430 [ 749.934556][ T9] mld_sendpack+0x890/0xe10 [ 749.939329][ T9] ? mld_sendpack+0x206/0xe10 [ 749.944071][ T9] ? __pfx_mld_sendpack+0x10/0x10 [ 749.949230][ T9] mld_ifc_work+0x839/0xe70 [ 749.953816][ T9] ? rcu_is_watching+0x15/0xb0 [ 749.958703][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 749.964529][ T9] process_scheduled_works+0xa8e/0x14e0 [ 749.970251][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 749.976391][ T9] ? assign_work+0x3cf/0x5d0 [ 749.981091][ T9] worker_thread+0xa47/0xfb0 [ 749.985809][ T9] kthread+0x388/0x470 [ 749.990032][ T9] ? __pfx_worker_thread+0x10/0x10 [ 749.995204][ T9] ? __pfx_kthread+0x10/0x10 [ 749.999906][ T9] ret_from_fork+0x514/0xb70 [ 750.004594][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 750.009805][ T9] ? __switch_to+0xc89/0x1420 [ 750.014548][ T9] ? __pfx_kthread+0x10/0x10 [ 750.019239][ T9] ret_from_fork_asm+0x1a/0x30 [ 750.024100][ T9] [ 750.027177][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 750.034502][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 750.043651][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 750.053844][ T9] Workqueue: mld mld_ifc_work [ 750.058587][ T9] Call Trace: [ 750.061914][ T9] [ 750.064895][ T9] vpanic+0x56c/0xa60 [ 750.068983][ T9] ? __pfx__printk+0x10/0x10 [ 750.073643][ T9] ? __pfx_vpanic+0x10/0x10 [ 750.078214][ T9] ? is_bpf_text_address+0x292/0x2b0 [ 750.083570][ T9] ? is_bpf_text_address+0x26/0x2b0 [ 750.088846][ T9] panic+0xc5/0xd0 [ 750.092632][ T9] ? __pfx_panic+0x10/0x10 [ 750.097121][ T9] ? ret_from_fork_asm+0x1a/0x30 [ 750.102225][ T9] __warn+0x315/0x4c0 [ 750.106271][ T9] ? __rate_control_send_low+0x60c/0x8a0 [ 750.111973][ T9] ? __rate_control_send_low+0x60c/0x8a0 [ 750.117682][ T9] __report_bug+0x331/0x530 [ 750.122367][ T9] ? __rate_control_send_low+0x60c/0x8a0 [ 750.128072][ T9] ? __pfx___report_bug+0x10/0x10 [ 750.133178][ T9] ? __lock_acquire+0x683/0x2cf0 [ 750.138172][ T9] report_bug_entry+0x19a/0x290 [ 750.143077][ T9] ? __rate_control_send_low+0x638/0x8a0 [ 750.148752][ T9] ? __rate_control_send_low+0x63d/0x8a0 [ 750.154450][ T9] handle_bug+0xce/0x200 [ 750.158795][ T9] exc_invalid_op+0x1a/0x50 [ 750.163361][ T9] asm_exc_invalid_op+0x1a/0x20 [ 750.168341][ T9] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 750.174655][ T9] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 750.194319][ T9] RSP: 0018:ffffc900000e6738 EFLAGS: 00010246 [ 750.200441][ T9] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 750.208458][ T9] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90699990 [ 750.216471][ T9] RBP: ffff888078970f40 R08: 0000000000000000 R09: 0000000000000000 [ 750.224485][ T9] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88805109f8e8 [ 750.232583][ T9] R13: dffffc0000000000 R14: ffffffff90699990 R15: ffff888078973258 [ 750.240612][ T9] ? __rate_control_send_low+0x600/0x8a0 [ 750.246304][ T9] rate_control_send_low+0x1a7/0x7b0 [ 750.251631][ T9] ? __lock_acquire+0x683/0x2cf0 [ 750.256638][ T9] rate_control_get_rate+0x20b/0x5d0 [ 750.261996][ T9] ieee80211_tx_h_rate_ctrl+0xafa/0x1760 [ 750.267723][ T9] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 750.273859][ T9] ? __asan_memcpy+0x40/0x70 [ 750.278512][ T9] invoke_tx_handlers_late+0xb5/0x1830 [ 750.284048][ T9] ? ieee80211_tx_h_select_key+0xd1c/0x1a90 [ 750.290026][ T9] ieee80211_tx_dequeue+0x3fb6/0x55a0 [ 750.295611][ T9] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 750.301405][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 750.306837][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 750.311967][ T9] ? ieee80211_queue_skb+0x16e0/0x22c0 [ 750.317479][ T9] ieee80211_hwsim_wake_tx_queue+0xbb/0x150 [ 750.323430][ T9] ieee80211_queue_skb+0x1923/0x22c0 [ 750.329068][ T9] ieee80211_tx+0x2c2/0x4b0 [ 750.334592][ T9] ? __pfx_ieee80211_tx+0x10/0x10 [ 750.339688][ T9] ? ieee80211_xmit+0x2e5/0x3c0 [ 750.344592][ T9] __ieee80211_subif_start_xmit+0xf06/0x1690 [ 750.350634][ T9] ? __ieee80211_subif_start_xmit+0x2ca/0x1690 [ 750.356837][ T9] ? worker_thread+0xa47/0xfb0 [ 750.361652][ T9] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 750.368125][ T9] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 750.374410][ T9] ieee80211_subif_start_xmit+0xf1/0x570 [ 750.380099][ T9] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 750.386388][ T9] ? __pfx_netif_skb_features+0x10/0x10 [ 750.391989][ T9] dev_hard_start_xmit+0x2cd/0x830 [ 750.397171][ T9] __dev_queue_xmit+0x1435/0x37f0 [ 750.402237][ T9] ? __lock_acquire+0x683/0x2cf0 [ 750.407251][ T9] ? __dev_queue_xmit+0x29b/0x37f0 [ 750.412411][ T9] ? ___neigh_create+0x1cd2/0x22b0 [ 750.417588][ T9] ? __pfx___dev_queue_xmit+0x10/0x10 [ 750.423000][ T9] ? neigh_resolve_output+0x428/0x720 [ 750.428426][ T9] ? eth_header+0x11b/0x200 [ 750.432969][ T9] ? __asan_memcpy+0x40/0x70 [ 750.437631][ T9] ? ip6_output+0x11e/0x540 [ 750.442189][ T9] ip6_output+0x337/0x540 [ 750.446558][ T9] ? __pfx_ip6_output+0x10/0x10 [ 750.451443][ T9] NF_HOOK+0x177/0x4f0 [ 750.455553][ T9] ? __pfx_NF_HOOK+0x10/0x10 [ 750.460168][ T9] ? icmp6_dst_alloc+0x39b/0x430 [ 750.465139][ T9] ? __pfx_dst_output+0x10/0x10 [ 750.470024][ T9] ? __local_bh_enable_ip+0xd0/0x130 [ 750.475354][ T9] ? icmp6_dst_alloc+0x39b/0x430 [ 750.480334][ T9] ? icmp6_dst_alloc+0x39b/0x430 [ 750.485316][ T9] mld_sendpack+0x890/0xe10 [ 750.489874][ T9] ? mld_sendpack+0x206/0xe10 [ 750.494598][ T9] ? __pfx_mld_sendpack+0x10/0x10 [ 750.499763][ T9] mld_ifc_work+0x839/0xe70 [ 750.504299][ T9] ? rcu_is_watching+0x15/0xb0 [ 750.509109][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 750.514858][ T9] process_scheduled_works+0xa8e/0x14e0 [ 750.520482][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 750.526520][ T9] ? assign_work+0x3cf/0x5d0 [ 750.531170][ T9] worker_thread+0xa47/0xfb0 [ 750.535847][ T9] kthread+0x388/0x470 [ 750.539971][ T9] ? __pfx_worker_thread+0x10/0x10 [ 750.545131][ T9] ? __pfx_kthread+0x10/0x10 [ 750.549864][ T9] ret_from_fork+0x514/0xb70 [ 750.554514][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 750.559677][ T9] ? __switch_to+0xc89/0x1420 [ 750.564405][ T9] ? __pfx_kthread+0x10/0x10 [ 750.569051][ T9] ret_from_fork_asm+0x1a/0x30 [ 750.573887][ T9] [ 750.577561][ T9] Kernel Offset: disabled [ 750.581900][ T9] Rebooting in 86400 seconds..