last executing test programs: 6.037153209s ago: executing program 3 (id=3316): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000290000000000000000000010020000000300000004000004000000000000000001000000040000040900000004000000e7dc00000f00000000000000000000000a00000004000000010100000001238f188df01d825f2c0b9902"], 0x0, 0x62, 0x0, 0x2, 0x4}, 0x28) (async, rerun: 64) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380068000000019078ac1414bbac1414aa03009078030000004500000000000000002f0000ac14140ae0000001040022eb00060000"], 0x0) (rerun: 64) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet(0x2, 0x803, 0x6) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) r2 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) (async, rerun: 64) r6 = accept4$inet(r5, &(0x7f0000000200)={0x2, 0x0, @multicast1}, &(0x7f0000000240)=0x10, 0x0) (rerun: 64) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) tee(r0, r3, 0x5, 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async, rerun: 64) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="a0f4d58d000000070a01020000000000000000020000016300074065156132b8107c90391bdf5b1572b3e84cb90bca4aafe67932a749c3ce7e5ccd553e54f43ff0b6a2bd55cceaf6017449178f0faa273d4fee4efed2cd25a37f405f04e6832c6fe537b1ea4c5dfd3ea1ce9ef0cf2c83e256b9831e1c2e993bd90008000a400000000208400940000000030900020073797a32000000000c0003400000000000000002"], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400804d) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@ipv6_newaddr={0x20, 0x14, 0x8, 0x70bd2c, 0x25dfdbfd, {0xa, 0x40, 0x40, 0xfe, r9}, [@IFA_FLAGS={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000126bd7000ffdbdf250200000008000100", @ANYRES32=r7, @ANYBLOB="2ea517b729c42c2b18892f7947b3a40ad095847fc164445efb024c31852fe21527be031ccc8f01d8396d9dff8ae01941a4"], 0x1c}, 0x1, 0x0, 0x0, 0x20000020}, 0x40000) (async, rerun: 32) socket(0x10, 0x80002, 0x0) (rerun: 32) 5.712157945s ago: executing program 3 (id=3320): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x6) (async) r1 = socket$inet6(0xa, 0xb917b1b09290a57, 0x10000) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r3 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x2, {{0x2, 0x4e22, @local}}, 0x0, 0x1, [{{0x2, 0x4e20, @rand_addr=0x64010101}}]}, 0x110) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000300)) (async) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000940)={&(0x7f0000000700), 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x1b0, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x657f5d6}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @private1, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x324}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9a6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf1}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000a80)={r4, &(0x7f0000000980)='ib', 0x54400, &(0x7f00000009c0)={@_ha_fsid={[0x5, 0x3]}, {0x3, 0xe, 0xf08}}, 0x2, &(0x7f0000000a00)={@_ha_fsid}, &(0x7f0000000a40)=0x8}) ioctl$TUNSETLINK(r5, 0x400454cd, 0xfffe) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000ac0)=0x200, 0x4) (async) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b00)={r5, r5, 0xa, 0x0, @void}, 0x10) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000dc0)=0xe8) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000e40)=0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000e80)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000ec0)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000000fc0)=0xe8) (async) r12 = getgid() (async) r13 = getpid() (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001000)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000001100)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001140)={0x0}, &(0x7f0000001180)=0xc) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000011c0)={0x0, 0x0, 0x0}, &(0x7f0000001200)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001840)={0x0}, &(0x7f0000001880)=0xc) (async) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000018c0)=0x0) (async) r19 = getgid() (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001900)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000001a00)=0xe8) sendmmsg$unix(r5, &(0x7f0000004280)=[{{&(0x7f0000000b40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000bc0)="70154026563e3f4d9dd82f3276f59abae54ba6c58837af1720fb39ae45b425fa634aa863daf85496d515d930a57c4b91bdec6b882be79ccdc392fac6821e247aa1bd6d3f3dac73acf91a745ab65017f8edc01a03c41b9a9a40c88c60e77121c3d85ca57e62ecc7f00a09bd5e57f528bc0b8eefd526795f43e0ccd904ae89808cfede9e97417142a5", 0x88}], 0x1, &(0x7f0000001240)=[@rights={{0x24, 0x1, 0x1, [r2, r2, r6, r0, r6]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x28, 0x1, 0x1, [r6, r2, 0xffffffffffffffff, r1, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r4, r2, r4]}}, @rights={{0x18, 0x1, 0x1, [r5, r4]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xee00, r16}}}], 0x120, 0x80}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001380)="7b0434312fcf33bd96e5d48ffb342ee438b1e8d960a370589cb223", 0x1b}, {&(0x7f00000013c0)="8e5b1a0d01345ec593b06f5f15f41cb1db5fea7625bbd7c22b1e23e2da22cbd9d17c53bd341435b8eb2eb1902b2b905372c6b29c0a754461e9a63c6b9e37a7711cce51434aa98955eb8e5fbbaecf0c9707", 0x51}, {&(0x7f0000001440)="91493b7872150e343d902adbeb390e942ddd3f867e33e0e43a105b0b27efe0096750a695102cfad58f0d7605f7e3a1fe599955841b492a0c80ec092cac1e0fe76342b836cf327bcd28c378d3fb8d074f7d45f7de11aa2aff02c3716e5fc6066c57c937019f93861a9555b0f0c651dd5997042d53d0977c1624cb7f079cb92c919a214ad1ad41c0e0569c6fac0b128055d763ad16ad75593dc9f7bc72b08e2439638b27578b3f4b86bbfa095a780fb112b5", 0xb1}, {&(0x7f0000001500)="306f363b496416a5f62f64abcf7c37651d17f6bc30653790500ca7e9b66d5b5507bf97863b30841554eb8701f04a0183bec3019a861b49c5190a854e9caa775870fbaddbd8252e8b890d7ace3cddd7ac8b77e32e57a0fdc9ad0a8d2ddf3c243c535fdf656516fed5c31c408e6256e0eb853f92174c9dda60d239dd42a219c9bec40961f746693dbeb18ca2543b291349118017b74c6d64a17f9a2c1eb8920cb35ce4aaa8d30793793555fb27718f52242821a65368fb2b2472e4b2ce28659c7da32c1c857364e8126156550e48a19706689bf112e1112bff3e54eaf95435359801", 0xe1}, {&(0x7f0000001600)="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", 0xfb}, {&(0x7f0000001700)="a771feeb3ed71e4e3b4d3b0c6c04ca7da0cdbe994e7c6ac0705fc68f6f8b9f2104160627511f7368af0c112b1a3a917854e0cb0000bae7843078374e38bcf01cef78908de5f090e4a609eff15adecb25c4c06a7fefe11cc86e5987d2c3056facdcd5231258a297550953485977a5748cdb64d033dcc8875b6471048ade7e57e648f63596e16cec4b50ebf939ffc08352b607", 0x92}], 0x6, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r20, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}], 0xb8, 0x4001}}, {{&(0x7f0000001f40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)="37f0fcd728044c5d1219fb6fe118eff85ce45c889b1b60088283d3a66d41cd044eb3c206b75d4b4af795bde1f8dd8bd4206258b0ed0626be756776e38db0b4d2e0a76430708b4b5d63d94e76ad9af3c12b0bc535ef29341d3c85565558bbbfa76e2cd14de2cfe265bd08d5e7ebc68834025c5f73b8d1c5c8bb8eec9205ea0ba1b328da3018846017f23f55a76d5b525c685a92b2af94086566ed3a163e81a43400522dbdc893ac7181c81806ab2954d9523dde808a68c668725c1096598d67dc0e9af5ba0a0333249659ae29871ce9e235a1cd2c747eb107cfdfc6d48eadd39b46233ce5ba7afe7d276508e8cf09908969ae8b463a15811629c17c79a87eac0b82f04266bc7faccd1efddea4607e4fe8fd9cc02fb4f08ba7c1831d854e606fd6415319f3690808ab596e7d0da62ec420bb56111d0b59421ccc2fb601eefeed7dd29d4d64f732c1ffd73f261cfe5a3ecfa5367ff1d27ae2f731d66c7eb59849069e783023af53903bee47502cc562327a47019256709546c43be802621749a5300581599747606db79b070dd12ea0fbf5c307a71855f11151ad82723d352e125df2b06f635aca01a0bdf7c6f6fd75b40b7ef430904a8505f6de74a960c67413c800c71230930e392c50544b294af13aae527bac2707ce07585b6ecb5dd2458297e0fde6813ed68fef9948f996282f05b4ca18adf873ddbf795a22a52d712bbb00aa4fe977a2e2187e5f30ac7e41628830fa15a925267865f86a1b6ac0fcca5e0fea291184f9378ff23647d90e69cdb71a819828a260028964c550e2a8d20ad3b14181a145825814aa1173132e3f4ca4089c26012a796e476c962228fef65a7c76bfa10ea8f51ed7f4112c464e97a490a5eafa01cc3f0f5c13bec2edbe6d9367812d0a074ab4bcdf3e5af9cafa40a21ec5935d31479e6e1ee21f11ea9a81e373db9c273717a4a04f752bfcf820d729ef3e69b7e65f8d8ee83d26134c1fb1bc1c2237504113602cebc3feb45c95274fa91624603acb0158d6f5bb3ce650135693eed62cabc5ac67e5f998b11639b824a1ebf273af9616473bf5dcd45e3718cc630507f7d5758b1f4f404273285057c5050d3d88cf74df694a8bdb70c7050ca93f97caf0d0b328599dfb511945f2dde6ac93b0b8558503aa3e5fd2fd1b68bc3c68fe3ebe7ee21d5f80b1cacd38b1b162943c5fcdc8db5b036e3e6c8eedbbaceb5826f9df8dbea9253c666a74c7897c46437a137fd0c39880c699782fb194ae077bd1f904ee6bd547bbb6813bd094ec31b323d73f2813a3f6d9ac6d10fbb8f92d20f063e0c1287a5f6ef522452ee8f5c0b218111c1809928698804b987aadb9212f8db79adb95b31ec9d78576401181e4366323caa6b2a8a6f026ab001774decc80ae977ef7822b6e1071fcc80d14f10e4b56f57d4501b7beb9927b0aee4c67cb82949b62d60a6118e7f9eca2ca5cacccd8e2fa38881ffa91162eb5ebd4efc56b8e05d550b9638219969bdf279912f7475892127717d78130b2f86a1c771737607d8d90963a945b9299d8a7cc944498c2f13317ebb6f1c0dcd8dad36ffba9dd6c633e8c49446abe7482ce6f180c2e1e351b523ba204b3370f1ea781d535c353db552ea32404c9fa2873fde0523e1b626622fd6a21a64f6e5eab800664e3a39ec0e3f4a47985aa6bb8a1ea1f813f3a049d36bd17640b3b97c1cc04174b442542713671ba20c40e286a7baaac92e712524ac61a88b9661ba51031889a7334ada4e965646e2b145a6e88e44b1f75fb5716fd91130bc9c695f149512f83e6638ff765eae87e2d95e9a20733e48f742bc676560aeb4b82c1639849550d0c39c17b18c9ee0f323c4be84ce55514e21280fb3f6e81b365101bbabb590e51d7c678ad688a352ebfbe3dc43f67294aaa8155303bd94b7000402d50db978876ac0604ac10fcc7f82aec614211101d1a4efcc0536fe27aa1c75cbd24d409ff5e3e371e18d85ecde6420c552d0cd40b6fc0c7c713a9006e06e6f9aa0774398846fbfcbbfa57ca6560bbe803c4aeee10754e3e16950533fd43c26d55e1aedaf70e780c3dec255dc42f9ca423b560d3283678dfd5c16b86eb4af18ae35d8fef04f4d95e279619cd1bc01e77253b6260c6b3c46a0721df580c3da4963eb7514735525b1a2df58437eef4f4cdf240f55f3f7475b1ce584fa97dfc04973728703a877e7d0921e4e7a6e4c186271774816221da844d4a435f4f2d12dad9eef48e3d0c0115f9865fc7bf1c19315d934629cccb0a19e5da69bcb4e12bac04bff482f8faa55598cebdfbbe6de7d2d64a8e68c39075197762b178e9dec230b30c5bd4273ed30623ec85befde74ff180bf403e6aa4df86d849166031f0df5d5ae3d75ebecc768c38deff73278dff9d218d069a0e1230128f4053bc49fe7c4c71dac3a087c9e3e54ae8f3016971898d06d8135531a86627853b5c2141af00d1a1575ac47f7ba90baea2299cc0b48f6ff654de8602ede546177989fc3bca86e1c5c6939a0ee1cc17a80da6e1c34db1b62a40aa70f33254d39a553293bbf4055900098a02c16357bfb9d611ca861b381cc9a55f92ebe53410641c742eaec06d7bec42bd84b2ebbb4eb9faef2dc5b49b3dee335c7d73882c7711519d5d59d328e3f7f284907bfc4ef17d74d2cfa79c5f5842ed61fbb5dd8919805f441305aab9699339e3d7bed19daedaf37b7a67f910fe7c9b5841293c21e5871e2bf440b14d600c3b7b994cbb7ba6fe85b2a09560af9e9a1e233f870977f7e2681ad8bf978d3fca72689d2284bf36173c514f84412869adb3ecd3bea118e0a59d58d57c0a39e64b2bac1c558fe79d469e14baef27f10c27ce642ed0ee3b71d3c14c290ac79b8819fec8170f49e9e10112d154629c856fe5897482ab84300b2d3d13d9de060f1e0b0bef846702aa6111867a8f57ea90aa7cb5695e2af8dc36947a4298b6d00dc20027344f96dfbf9237fa35414a6fdfe4a028a51e4b66b02555dbda483a0258317ca685a4b2c5e446a506d6d44b4dc7f6d638e7e3d0ef7100c0d5c37c4ca3a1f68f6a5e9c83345a933b6447eaf8c730e18108ba45f89955eaf91e53caa879d3eaec712a964d2a511b6ce7e6eb1159e3aaf35365486457d5618168426782c10db45d8fa11b392d5e10c69f63d846a66a638958db2c2e989d3698c8b43a2e4672db750987141292a83bcc2b5c56bdccfcb9a58b6916c03515bfe75cfe45abce844bf0ff2d23fb467b744fd23573b60a64bc161f98d72a3f5c792255cf1b52dfe8f74aa82afb4b8f697bf4203f7c4b689315f61f61202dce29309c6da8bc3f57bc3102d77ae9d9d4048bd9bd16034c453f0317deae373d7b26d60cc1f7700cd050a4aa33c3b3ff187d5833fbbc9d95ebb98372271678d607997e9cd89991c851a7c7ff603aa84628af2bd7d19f499885c06a9beffc4982b745beafaf92f6ab65421c233e8d6d31b3e70fe5e94c187f43b7c11d49ee9d1e79a1636c09443fbe393ddb9d77e3e044b34852d55337e903e2194fa2bf8b56f8c246de6f0bb369820010fe9d6c3099fdcc46782913421c333f45ee77ce4ab15034772f59f81f9c070a2c08f52125b6d23cdb14459afd94a55a6d1f6a133eb42c723d5edc69abf40b43492e2e7fbdbb5be97573b573a4545c7a4895ab367ce99d636f0e184cf5bb87844ede41a33bb7af146c6fceb12797e33063e30066054ad71545d74c25e721cae7ce5901e0f6bd80265d28e9de15590d9240352e1fb66e383023ab9646d49ba3a40ac58e61ac7d7a8068aa051767f17b58fb237d69bf64a1235e44a5196a551aa547c092d03f9329414a7db8e4f1dc658a49e245c85cd8d3e1d93ceabf31861bd7753467a3eda16302c0466a43dd908d862f1313845ab3cfb6b4082799d0848ca5d8a9b9005c0e8b52568143b7f5ab31b2e1920757b2293352b740967cdeeb960629315fa16498dba24fe31740e430f6eab51f5b5a698a0ea79e5c7c87017f55b20ecaaf0b2e78e18b8203fe3f42f29b76a6d28709abeb53f8200e3b6aaed29bcf56be9f334b8e7b469e3c3974a2b288833ef46aabbafcecc5d353ccccf6d266677c53e32d8a0090538994a981999d2b2ea4e4789ab720fcdc9f7f7db8f96739f58a8ade581a01fea1ab18cbd5c31f0337ba01e4f082d94ba4b00517aed3a7483889fefaf7529839a5ae3802bc1cb69b5aa85f9e40077c0f5018573eaf55feadb52ef416097c5cf1513a0c38a75cc672d45be75b7d1bc3a8fc815d1e04d4a5e1344e2f734d2da1db7fe18bdac7e268094d107498b649dec6d0110530d5ada11073cf05d094c5e4dd1a629c29e3955d2e4dc8467b4e3f83127d05bced5b7fa26a33c553963f3aae3d56fa73b0b47105616e01b18a3a62273a286af20eb1a9c4f2ab74443fb7a3a8b89a7049227e86e212e0bdcd8ceae49bc3f275f8355911aabdb48c33158f618c39c8da19eec9609c2dd387e76722e2b773cdb165fe5476a4e0755dd26436551209725054f2220d56e2818b35c15b41b8656db0c464c1914ba45216fba420a731edb8147fb73e46b6d8ac1b8a6500412aad7e7cfb5de9dee79e6ab3aa3f95fe87a36c78013553096290edeb5c13cc78b48d15fcd0530d42006a7d99e94907fb964411a7877486f550fddd58cb9832b2cec43ac387a5441dfd0d510da245d84a731f104dcae922b2122b5a5615ce2d6d98c5b6574c5b5a6ab035a4812fe968efa286d3c46f00caeb0d299a46d8d8f1f30a64f15f220c8038feaa3a18bbb1e649ed7a91a9ada9045cda77d43d7b9bf2e0d6fb6fda07c601691ce93b121d6ff182c03d13d68c381989079473d4e88d7e196f34d72556a0ef48b64e3c9e36f2969ac443f5d1afa54047111a8748e4dc0f21a90b2a818cbea0f5a82539402a680ceabcfe04aaea3907741acee24680a65e1d94f7c10be04cad11ad1e5500ffb8ef01d17d3713267df6860a15424f2c44f6b5fb6442ebf5ba2ebb42581a78cab52ece7656382dc7a5172d4637247e7ed9cbe0473af517be35472e3d8887db53c3eacbeb747273c543c1fbb857b6b0ace34c5459c337688b793f205fc85a4e6d1e4b8a5ee9ffc390f4b821dc85908cddad052c989f0731e373d46fcd4177c9ba260592cf89467d3ae9efe8414bbaafb172fbc50fbd8b96da8256a56d4e46d90e1060d6bef05d0b04eb5c5e9869b1828d6cae75953e43cfc3e8b8bcf33a59c66b27c82c57c62e4bd50a12f5aa2550ed297154bdd5ecade8e0614e0439bd8fcb879b7fb8d9437b73a30a45820788e307cd144da8adaf74fddf434ab132ce5b155b1008eb575dd1dafaa9ad493e81a53c67219aa7749f2f9c117bf39b677f7215b3629a09bf6db597de17c7849dc4e4503a25f6e634e306fc92893762d1984d20229e81fdceff4e74cefd7bfe06eaa41240530414796af06dd0ae21a99a230b60f041e1d4f7c53b399ddf83a2b04db4b7623a96ff1774e5cf179d36b88b591f7ad5e4a99c70aa468ea56a68246daa9a4361edd9d4560a4ccd227f07edf593595cf489bd6ee4200b5580fc3569d1c8a55ba83c7df99b7548aa675f550c943cebe16bf65c50fb6902b3d08dd3c5e58d81329e5c1bd291492651585543109fe43d0c9e10ba413866965a91e5be297c0efa0a67797c55b3491e833aa474616b429b0176be970de6c0850135f8cc5145a5a343a2da2a781f2e82287beaf263987a1fdc2ffebb5fea6a71df4251c205b6efc757f1c3844314e9ee41567f0c6faad7040fb8460fb3e5398ef03699fd5131b3dfce", 0x1000}], 0x1, &(0x7f0000003300)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r5]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r4]}}, @rights={{0x30, 0x1, 0x1, [r5, r4, 0xffffffffffffffff, r5, r2, r4, r2, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r4, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}], 0x110, 0x4000091}}, {{&(0x7f0000003440)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000034c0)="d7c876c14d8e91de639cab31f2259b3ff0b64aeed28f49bb50388adf1bffa463773ef15c4d3336ad929b163dd1fa3cd59e94f025da8f023feb9e905107c7410b61312f39374ec1338d14e3500c33472114d5dc6d5526765362cee1e5e3794d11f3dd50c9", 0x64}, {&(0x7f0000003540)="d5d80c8bb19f9ead370d929e369140508fc96a4ba2a1b928327945f5a9a6e9df42353317b4b688773c08baea0a197d6e12515cf41c1e904499c2ecaf8fbcbc82c3a39849b7fe301ec9752f964edc60d7bdb39a4e0dd20a6a863d98cb659fd2ad769d7e81c6f5065907c5f4f7e2f2e337feb9d20abc50", 0x76}], 0x2, &(0x7f0000003780)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0x58, 0x11}}, {{&(0x7f0000003800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003980)=[{&(0x7f0000003880)="f65f4cf15589b21a3efd4d108d9e49f211195d99a7", 0x15}, {&(0x7f00000038c0)="571e492df276e17f4052", 0xa}, {&(0x7f0000003900)="4ef33f7228e4f8603a552de836765fd28fa805e1f8c10f72bbb7cd5a027adf5bbaf7c855533ad673a1e93c8ba783880b3099840b75a587e8675adb02f535bd12808ca141be653131340305d45ebbf7a5482baf5971997191c5da1aebfbf9d815b474a0", 0x63}], 0x3, 0x0, 0x0, 0x40001}}, {{&(0x7f00000039c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000003a40), 0x0, &(0x7f0000003f80)=[@rights={{0x18, 0x1, 0x1, [r6, r0]}}, @rights={{0x38, 0x1, 0x1, [r5, r3, r0, r5, r2, r5, r5, r6, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r4]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r4, 0xffffffffffffffff, r3, r5]}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x148, 0x2005c844}}, {{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004100)="816b0b2a3e303d59332a89ecbdcbde0c8ff3fef2e18dd52c5e1127d884b5722b145e6dfb4efd218142bd389266965bf5d44b69d6724aa7603b549ea941162a3bbd46758b2855fcf230cdbc8fd5c9c016b9e6d4b91f837ccbe43551f1a0ec93cbbed6189e6dc9459f7ced41645256eaaed8fecf48ff1fc9fe6e6987678105e3bf2f71bbad4c8aa0a82b7e4d08157b538c420457944e", 0x95}], 0x1, &(0x7f0000004240)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [r4, 0xffffffffffffffff, r5, r2, r0]}}], 0x40, 0x40}}], 0x7, 0xc00c010) 5.271963788s ago: executing program 3 (id=3324): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4.948675405s ago: executing program 3 (id=3327): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000210000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f"], 0x254}}, 0x0) 4.777209023s ago: executing program 3 (id=3330): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000fc0)={{}, "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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000180)="a40141", 0x3, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000f40)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'batadv0\x00', 0x1000}) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xa4}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 4.575077963s ago: executing program 3 (id=3334): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 16) 3.23208299s ago: executing program 1 (id=3344): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000000)='nat\x00', 0x400, &(0x7f0000000040)={@align=0x6, {0x35e, 0xffff, 0x34d, 0xd98}}, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x1ff}, {[0xa77, 0x7fffffff, 0x2, 0x5]}, 0x0, 0x66, &(0x7f0000000240)=""/102}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000010000000000000000008500000054000000850000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) 2.969152938s ago: executing program 1 (id=3347): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25440000000800", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) 2.678803671s ago: executing program 1 (id=3352): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000140)}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010411000000bb60dfc6fe019677bda30fe6dffc30f7777e549a6fd9188478de744ae00fbb698291835d4730e72afca8da02b39ffbabd27a329bab55fcd27ee2df1382248381148382ed", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0]}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x8, 0x0, 0x0}}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r4, &(0x7f0000000140)}, 0x20) (async) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010411000000bb60dfc6fe019677bda30fe6dffc30f7777e549a6fd9188478de744ae00fbb698291835d4730e72afca8da02b39ffbabd27a329bab55fcd27ee2df1382248381148382ed", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) (async) 2.497406565s ago: executing program 1 (id=3355): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x300, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2.29588474s ago: executing program 1 (id=3357): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x0, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x58}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xd}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x8880) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r9) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7001fedbdf2530000000180001801400020076657468315f746f5f626f6e640000000800060002"], 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x40040) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) r11 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x170, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r12, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x140, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xf4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfd}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf3}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x80}, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, 0x0, 0x0) r14 = accept4(r13, 0x0, 0x0, 0x0) sendmmsg$alg(r14, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 2.16506767s ago: executing program 4 (id=3360): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000300000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="381100009a1cccb2a3cc9d24600a98cdbf4cfd2bf01d440238903c3fbb5a34843fec921b5158bb7eb06fdc4987cd98ffb484c8cec8a68d42fad993a9219e66c1b8d7d108ee497cd7a35054252a2a071100a1bab7f4cd21f25cb247737f98f9555932dadff4513c509aa0e8badba6ebdf3b277c592b979ca0991cb04a924c85", @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="1c005e80080005004d08000008000600020000000800070037030000"], 0x38}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x9, 0x7, 0xfffffff9, 0x9, 0xffffff56, 0x8, 0x2, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000038c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003880)={&(0x7f0000002300)=@newtaction={0x1580, 0x30, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{0x13b8, 0x1, [@m_gact={0x17c, 0xa, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1c54, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x2, 0x6, 0x2, 0x80000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x1, 0x2, 0x791, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x164e, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffc, 0xd, 0x0, 0x0, 0x8}}]}, {0xed, 0x6, "999099a1f6a5ef50e8b542fd123769b5ccf4156f57a0805e95583a2cd8ced6903a790b02d2dc6c47f03a05335fb69babc19cfd2ff5bfe5082c8a08752c6799fe82212279a55a964bb1ca9cecafdf530d55b3099d1c0cab62de93f53db36b074cf8fe9609f0a149b4e111634ad440e03e5b4644f05856cd193674f2c34574069e42f2b91e7457013ac6d52d4783db4bc1cb15e568b3afca5ada5f275cdbd646fe319af3c1fc55aea87b73512324a274053f1f24b06917711248b8c5c1b1f6da9b2cfe248411df60e4970cc5bf6e11bc5ed4de6bd6f3fc715bc23560804141279159a438c933715389fb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0x1078, 0x7, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xea, 0x7, 0x7, 0x3b43, 0x100}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffe, 0x200, 0x10000008, 0x5, 0x100}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x6, 0x2, 0xb, 0x9}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x1c0, 0x14, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x5, 0xfffffff9, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x249, 0x3, 0x3, 0x6, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x5, 0xa258e3c1c1d3927f, 0x2, 0x3}, 0x2918}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xffffffffffffffff, 0x5}, 0xabb2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x4f2, 0x10000000, 0xfffffff8, 0x5}, 0x56}}]}, {0x102, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x5}}}}]}, {0x98, 0x1, [@m_bpf={0x94, 0x15, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x54, 0x4, [{0x8000, 0x3, 0x2, 0x6}, {0x7ff, 0x5, 0x1, 0x2}, {0x3, 0x10, 0x5, 0x7}, {0x7, 0xfb, 0x57, 0x7}, {0x19, 0xc4, 0x3, 0x4}, {0x40, 0xff, 0x1, 0x7}, {0x7, 0xc0, 0x8, 0x70e3}, {0x40, 0x9, 0x6, 0xfffffffe}, {0x7, 0x9, 0xfe, 0x1}, {0x9, 0xe8, 0x6, 0x93f58c63}]}]}, {0x15, 0x6, "08d321063f7e1c4a8cd12724339391caae"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x11c, 0x1, [@m_simple={0x118, 0x2, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x76, 0xe, 0x0, 0x0, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x6, 0x7, 0x4f69, 0x80}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xb, 0x2, 0xd, 0xfffffffe}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x1, 0x6, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffe, 0x2, 0x4, 0xbe, 0x3}}, @TCA_DEF_DATA={0xa, 0x3, '}--!-\x00'}]}, {0x67, 0x6, "e2c8ddb7d237300ca8823bdff27231b78950d7318364be2c2129063761aa3ec40f19d8b4a5a9c74715c2605c7be88a9ffd426cdb1eb56e4ba1ef7f2ac2f828ff692ae6f5da24349d2bcea82768cb59f784ef91782b47c77f68c5b91180ecb67093b526"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1580}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008810) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 32) close(r10) (async, rerun: 32) socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async, rerun: 64) r11 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r12 = socket(0x400000000010, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r9, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x4) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async, rerun: 32) r15 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f00000001c0), &(0x7f0000000200)=0x10) (async) sendmsg$nl_route(r15, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000305000000000000000095c283a0", @ANYRES32=0x0, @ANYBLOB="1400000000000000140012800b00010067656e6576650000040002800a000100aaaaaaaaaa000000"], 0x40}}, 0x0) 2.128789024s ago: executing program 0 (id=3361): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25440000000800", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) 1.825460027s ago: executing program 0 (id=3363): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 19) 1.790460161s ago: executing program 2 (id=3364): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.704101027s ago: executing program 4 (id=3365): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2005, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x1010, r1, 0xa7528000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024"], 0x108}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.703804169s ago: executing program 1 (id=3366): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000200)="a4c2e7534d78cb17f2a1fa5e26253b0af79c016059eb79999c5c9f1c5c0205cb916fce1288784a5c128a224d657d55ed2812cadaac7ba51c471c840e2bfa0924f95e2fd10e4308865ca083509ea4a38587250a7c7af108e8fd6fb4e7c3abbb8f997054899ac9e517a67c7e277c93de74023815d696d45b0566d99b1d51916c7ddb84f9c6879640a9efb58f7c476e2bf9efabe1263319bf697fb982167389cfe48041e652081cf20db3eac426e0bc057f386705f6f16a28a4d2868602c5f5cfb5a579e68ab6e9e406acfea3", 0xcb}, {&(0x7f0000000300)="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", 0xfe}, {&(0x7f0000000600)="dd2ea193e5f4b2b1d5d8162812957cc845aadb33664e7a0871563cee8b1eb9a062d7252ee09bc27e9190128acac46654cc1d06d546c35bd2bab46ac4e774119327bfb3cc0b00e6b1c395f65b8ddc64f7e98ec29fa6c6afa425da443c6c2213b9f9cd0dbcadd4e3f9ac0a7f8c6bae5ae0c65013b60e592c38f26309be96a51e8fdc3696d6d96e441ab872fd1291230ae115d86d0f6b6dc8389fea7ebf2a7236aa76920d789fb30efae66ad1ddf8a6fdecc64b40dc0c2430d571bc001870deb1c8f0423ecce10e28283efc16aa20f8f872239a76bb6c6732e3bf68e275e149ff292f30da3f921ba0b97313a14792", 0xed}, {&(0x7f0000000bc0)="b9a6ade15fbc296baf9af243160888ca00232d75aca127cb3115e606045f34b2c96228671b7b345ca18b68937081c076b8f18b01667f0ee3882ad9536115ed9d21a3bd7837fd8dcf317b55386a86c9e58c3422fcc6b1ebffa4403b6c89dd44c638a1a63d82f5e5ed5dc138c71e8cb705f3dcc74ebe83367e4e6184ccd3d4ee08e164e89a903cf60df71921066c3e55553e835ed6d2e54fa04dd70205fc1decc4741da203664677bb0c90db23765c2e68ca31bd21c3b46217f3773d21e17172a4485e99c08096fef8672feec1b2eaab88900f098d40", 0xd5}, {&(0x7f0000000800)="f1db9cebabfded1f41c933933f70b09af864c5560b36690df8dfb86bb98c147b67206c2f7080c8f5354776a2d3f366aeea35af443fb26fa347832a5ac6d81b5a497aa6539ff1d1b83df258c0f8b798085cce0ae4f552896ff8b3c04b9177defdbbc6ce0def1429cb467b09b69937f5b2d0e9fa6860a73523f67969b0bc8a06ab434e15cbe3c185b3fd2b", 0x8a}, {&(0x7f00000008c0)="8d7c274a8cf30934becb21f5d9348b3134a7bac674e94a5c9b54fdb0ce102d9d398ba7d58b4f10ea8d7551df0792c83653bb879e09a3ebcad39321724558a59a2db70955b79bea7a0db0148427e9ae044df83a5102eb6800db5318f68dd163e7725987f137b3aa44f42a6b71551a46946390ab02e7bb59700dca71d9a4c617e66c0a7eeefa9a3391c98dc956d79f0d01848b680df576567a16177fe665ee24d981c4b465e5e097a2a62a3f8843bf1656e2ee4d19bc13a8eb3d9e36ef8760367ef6ad8d1649931631", 0xc8}], 0x2, &(0x7f0000000a40)=[@assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @iv={0x80, 0x117, 0x2, 0x65, "9e3baf57ef3e58fc20ba9cd23af069c671308ca3287cefcaa45ac96de5f6b64635922cd46b8c85d72aa0f590ef58ae3c3092f868687094831d414f07669048452e075acc1d110dee3cd076acab1d14d2aedfb125d82a96f59d7fcac5c423ed03f4420e7294"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x128, 0x40}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.609190098s ago: executing program 2 (id=3367): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)="88d8ce92d5ad3dd44a5bb374edbeca0340d4e4a988e635195bd364", 0x1b}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c090) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x20004080) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000200)={r2, &(0x7f0000000040)='&-\x00', 0x10000, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x2]}, {0x5, 0x3e, 0xffffff80, 0x500000000000}}, 0x1ff, &(0x7f0000000100)={@_ha_fsid}, &(0x7f00000001c0)=0x81}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x20, 0x13, 0x1, 0x2000000, 0x25dfdbff}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.588155178s ago: executing program 0 (id=3368): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x4a000) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000200)=""/64, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24b40, r3}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x45}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x4a000) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x40, &(0x7f0000000200)=""/64, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24b40, r3}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x45}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.102659864s ago: executing program 4 (id=3369): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd7002f2dbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/4091, 0xffb}, {&(0x7f0000000000)=""/81, 0x51}], 0x2}, 0x7377e9a917217d18) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a100ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0xfffffffe}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@updsa={0x188, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x20, 0x0}, 0x0, 0x6c}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0x0, 0x844}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0xa}, [@XFRMA_SET_MARK_MASK={0x8}, @migrate={0x50, 0x11, [{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, @in6=@empty, @in6=@local, 0x6c, 0x1, 0x0, 0x3501, 0xa}]}, @policy_type={0xa, 0x10, {0x1}}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback, @in=@multicast2, 0x0, 0xa}}, @tfcpad={0x8, 0x16, 0xf}]}, 0x188}}, 0x0) 981.132537ms ago: executing program 2 (id=3370): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x2b894, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38", 0x9c}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x4}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 886.206427ms ago: executing program 0 (id=3371): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000340)=0x5a, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'veth0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x200}]}}}]}, 0x40}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000c00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000001d40)={0x1, 0x1, @start={r9, 0x1, "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", "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"}, [0x6c2, 0x100000001, 0x3, 0x4, 0x9, 0x5, 0xf, 0x0, 0x8000000000000000, 0x8, 0x3, 0x5, 0x4, 0x0, 0x7, 0x19a0000, 0x3, 0x91e, 0x8, 0x3, 0x5, 0x3, 0x1, 0xe01, 0x100000000, 0x6, 0x0, 0x76f, 0x0, 0x8, 0x8, 0x62, 0x7, 0xf, 0x10001, 0xfffffffffffffffd, 0x0, 0x6, 0x4, 0x6, 0x5, 0xfff, 0xfffffffffffff134, 0x4, 0x1, 0x0, 0xd, 0x0, 0xf, 0x80000001, 0x6, 0x0, 0x0, 0x2, 0x14, 0x6, 0x7fff, 0x200, 0x7, 0xa80e, 0xd, 0x4, 0x0, 0xa2f7]}) recvmsg(r8, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x20000022) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002d80)=""/4101, 0x1005}, {&(0x7f0000004700)=""/4072, 0xfe8}, {&(0x7f0000005700)=""/4103, 0x1007}, {&(0x7f0000000000)=""/205, 0xcd}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000540)=""/123, 0x7b}], 0x6}, 0x10000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd2b, 0x801, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611230000000000061136b0000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) 660.523087ms ago: executing program 2 (id=3372): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25440000000800", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) 660.2513ms ago: executing program 4 (id=3373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x7c}}, 0x91) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0) 595.421228ms ago: executing program 4 (id=3374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xe9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22040000}, 0x800) 442.314191ms ago: executing program 2 (id=3375): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000150001"], 0xe8}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delrng={0x10, 0x14, 0x800, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x24004044}, 0x4004010) 379.97061ms ago: executing program 4 (id=3376): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, r2, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x6c}, 0x1, 0x620b}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x14bc}, 0x1, 0x0, 0x0, 0x42094}, 0x10) clock_gettime(0x0, &(0x7f0000001c80)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, 0x0, 0x29) recvmmsg(r3, &(0x7f0000001bc0)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/112, 0x70}, {&(0x7f0000001400)=""/135, 0x87}, {&(0x7f0000001740)=""/249, 0xf9}, {&(0x7f00000015c0)=""/49, 0x31}], 0x6, &(0x7f0000000000)=""/53, 0x35}, 0x7}, {{&(0x7f00000016c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001d00)=""/244, 0xf4}, {&(0x7f0000001840)=""/12, 0xc}, {&(0x7f0000001880)=""/151, 0x97}, {&(0x7f0000001940)=""/6, 0x6}], 0x4}, 0x1}, {{&(0x7f00000019c0)=@xdp, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/26, 0x1a}, {&(0x7f0000001a80)=""/199, 0xc7}], 0x2}, 0x5}], 0x3, 0x20, &(0x7f0000001cc0)) 268.454762ms ago: executing program 2 (id=3377): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x14000, 0x0) vmsplice(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="4cc346350320f8ee467ab6f1a85b1207c2706508e57a8583ce8ea06f637c5bc76b3df51b2b556a58cfc9401cb5c966a5c374ede68897032c82050f8e189da919cfcb460995f157cd6924b9df97d67ad878a15c5d6dc0aef231183bfddc18b692886159072b2967291a53b1c23247676886451fec14c60059f2f04b7244924f804aab2a7a7d", 0x85}, {&(0x7f0000000500)="648e2dbbe00fe390878e206b8112ea77d8adf94e8dbc8cdd8b283a23db74a3956852a403c070ae4b20c3d9cce57fb7fb1dcece07c0cd9b20d8d9a915ac64e1661e1f15cb5c5b4e9730ba87631338293bc11e6aa2f2c3c7b60ee71d966a3fed0586510d5795241d12efb3c8fbdf416f5012c1d306f411177085cd17c6159ccf1d812bef", 0x83}, {&(0x7f00000005c0)="8a9ee116108422a17ec3aed045d0c450e1a1511d297d214e4ce02335945a1ecfdfae6f96f81a2eeaf21822cabbb6e5b8fc35de4ce4e962c7a4f363035d76607609418169ede8547f622dc63cb8aab01a689720ee32360cc6e7716eecd706f7db3bad22622d59408e26cd1922aec204f33de967d16151850f38012e6574b7cf591eeb8fa2df9bf1ab7671dd8b34a8c63b494c5a53a2324e3da3d6f6747639f20c04fcacb3905cb23672b5b307b3b2d9c183c466211e8d2fadf31797758e21a678005668f1dd5e2015f25e2386bcb185380d10161409e5cc86e80a6fd4", 0xdc}], 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}]}, 0xf8}}, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003}, 0x18) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x2070, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2}, [@typed={0xc, 0x10c, 0x0, 0x0, @u64=0x9}, @typed={0xa, 0x131, 0x0, 0x0, @str='vcan0\x00'}, @generic="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", @nested={0x1255, 0x96, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @u32=0x3}, @generic="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", @nested={0x4, 0x132}, @typed={0x8, 0xb1, 0x0, 0x0, @u32=0x2}, @generic="a0f95a3b544fa6e72627b669bfc4517affc35533d3620c695f760f097544323b5427bd1666cb5f8ff4cfe8550c3535b9e29a0a4be6fdcd30de4f8222d5cb80869d2bcf3cf2313dd69e293a24e00e4ddd224a2c622b900869426f17a7497ce303ad6d3c187333e1e639651f11", @generic="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", @generic="ea3956933b1b0595c34d80c0e787036b85e41e52cb17439dec444659e24c9873d6c601a08b8702e0e46e4eec61c6ed75326a0a2ecbc7171fa4177a8c0efe409d108321472bf0d81bab140716b6c2ad02da1949ea4f9485e96381a535559fe92b8c0d619860abdbdb07a5f89d97f16ae2d3d9044a80e6b31f837f0c5b1e598388b4736a991136dfe21c88202d62571d0beaf96884bba03f758c0f5b3e7ac53d1e3c29608b00cc10e0c677a044684b276962a6852c0f1dfb921acdba22343a", @typed={0x14, 0x118, 0x0, 0x0, @ipv6=@remote}]}, @generic="935510d862d66faab93b0f9f89dfa897211bd1f473a6672ee9d8f4f7f75488617de40196e43580a119d5b81281750c16722242a4a00e071385c98de754d902a4546658f1ba2db9baabab4b214db2eb24addebba8f41ad46f7ddf308fbb644c0e678e0fd22b2389ab1a2f0cc4cc42f77ab1aa310f355987ff1ca37847baaf1fc42a1d2b808a0277e473a2ded918865e8c2eb5c567d89229ec02ee28d29b68126d96cf98a8f9ece3ba1f4b359aa79e1eed37af97a4884edced86a86bc9eac772f7891a52c32b016e843203403e585b5152b2bd8474bd67fe5240f32068e71edc2125916b76d79280f2af2cc1c8dd21b60aead1e6", @generic="d903073f2814863caa6ed5419a0f33d19f4118e665b4df3b43138d6d56ba264b2a65c4276caa91f7db5dc265cc0279aa59c8228b3cd395164cbd2d97293d15cbc143d44ca7d4a6cf1c3452fd1bfe06c6100a33df8567a25a50ff8efbf7671bee6fe488abccabbdb9a1010d076260c9f953c6d6d9d77fddd8bf63bbdb23aa08c3c4441e40e512cfeba6020e2876f06dfc891be248870e089f9295b8ad2111fa3017c32444c0bdf7d0dfe05502e4c06504f56eeb5122c5c9992828ab1fb883de2dad1cbb6d233033793e6a554ab094c5543be2ef6f2a784e0b320b3afb4c23ddb5b47a0253cfca4457ade6c1b4fd39e444a33fbeff5c1bb5aa71d71909ed50c9fcd8533fdf17a9493ab6b81fc010bb54f5b1e434a8e5337659ac988b7e777cce76a0067d98c5083b67957738c37ef27fd0f0dbd7948a7119d3f1d5d92168be5480a719d8bfdf18d89a2363caf5588b1955664661a8daa2a218747226463d051ef36b3d8e3233d2796e4ee3559fd4593d8a98281f984b558a6650c21ddffbd50630273c9ecbd0ced365393d48bd7207e08964de19d7536787dc01182551cd17ff74100fe47030dce70b43e6fb109edb3eb4ebc26e6f650d6fe2f48dbf10abd8da3a74734e1ce0de2916a88fb7baf2e3a667d9c84cc832ef722bf3f0158659e6ee4d54578568b7e4286ecf5d28657cd7255599271de02de750a3e4db9c861cd6cb0d31a62de7d1f883c81707a7b1b1e73cacb6f89e757abf476827ee68b665990930e2378d9f71cffbe85136b2dd41a37e3dfad20abdd61e638dba4734bd373b5a7e2231cef7fd7290f5f5176744973f51d57256459a87bc398fa50d35b0ec9d4af2586d8589bc60de4c8749b4c05570d6bd348423f3e6130dbd82db51ab59faa567ef5c508c42dc4d65c31328e9e1748060f94ac7da9e66e51f2267d472fb88d3a2cd382bc1abfa36a41053154050d3dd107f44ee6ad7d336370bd2e2f277bac9ae98736e3a1a23c711e40294217175d22e004a4c259cbdb6e979636bda65fba76bacf70831da02da182d02188b77c7e3786936a00d76c083ba03880a497677083d19be6bde9e24b82f8439de814782dbc17c1df750ac9b91acf0c3275f359015e9c87265c1a6ad3885d37d38184b2bee4412d2a7b718c0da2df38c32ff001f5832b8fd26d9881b7511737bfc31f61c7ffdbde1302b13b21c02cd0e205594613b2928b2365d43d1f7ef48c4ce456b4193fbd78c156bbd33ba8be512c72b3d24e776c4b11ce9fc227aa234ba9fcf9ed8ca9542c7f1dbfd5cb03f3b9c3590a835f4287ad209a7f277010883ed5d2cfd14dd39e82ee105634d12aa17369a53456ec7494d0d77213c5041851b6071b64cb54461d7b80bb990a58918d401e18ff778a6f96b9f161df37023f026c221dee245840b4ac5ce5c9862dedb315254e6a2763cf4874ea6d0e95dcbc7a1ff99a824b52cf300872ed1eb0d07adbc434a895a21bd5034ca3ad82ed6b1393ba87d1943dcf8eeb1143b98b018d92c76e80391ff3a78429c983a5e9b402eaa8a1bf1aed72674f259d6de53c1d8bf59ec10021807c22ab1a3ebc80223977b340974bfd23cd10ef221c728b01d8a391fddb07b33df75717633642c873ab81b0cc298ef08cebb62e148cf6ff3075faf35e96877d70af857edc611bfee4d8e52a556a3e1cdcff90b677ec06d91642c07a616b99e49ca480736a76eb89e66429a99f3cbf7efc41c2cfbcd70005d35490dc4616c0bcab1f11c34be27444e95de0b4d2cfcebc20378d99f433379b484d9904658fb341c66b5e8524475867a56ce06ee2f4793a4ba8086bb3875b87ea32095d69a83f11163ee63c5676ec249f4b31febaf5165bcff2c50bd9a80efd696e5c02b9da782e315ea47a4e6ba46159a8b31062e8f737b59e2b2e1793ca5b11f1ffb323394656725df638db0c5b47c7879084493ca92499be283a6ce9b3b749db5436cf731d4f56252bad7658789ce5e56100c9c16c9c75fcdba8448db1c444815e60e98f498f02727ed1adf6fa8f70e7d7123b1e69a6ef48af614cef73dd2a16a9020b377f9762f0b233419b41eb0625b1b4f6be4fe0a8b5e44dfc2bcd976d121ce7facbaf73414ab92f1ade959fd80afec427e003caaa37c875ffbb00342ab461d47ea628d93f8f7a053724dda6c2c85e11334b528323144efd081257aeac769791d25c99ad81381c9d4c9af97f4cfe5a5b0370b3a3ec6a7503a7d732753ee7ecbf3ed91e05c34a526bb5cb19ee346b9d6e7edbf8564289af59169b517df7778666359827516f295d6392f200d8e0feae69c31cc3d8a1c51d26315de96a08a7f26c587de54ec6b5832b77108736a4b4fee7e14754b17d15a406ceba02039e7378286f4a0a8c801d710561c8339b78576c0702a89a26f179c1946f0bdc26acfced75d34b3ffa2311e3c9a0096f960691c9e9a95734936473dfd44fb42653b3b9c7bf900e718de7ffdd47744ef44142fec2d90189bc3c5ef768ddbc01cdc615d2fe5d6aaf6d846a3fa694e71ba9e51d0fdeb73eacb2f5d8c035e1f14dfdf3e98332bf7ccd2fff37a387a963e39c3e02c61036ce91db95ef5407c9645ca0dcc3edda9061c43d6eb2fe3dc0f62c1c1bd31f9ccf8f0d853e3d40d4569eed66522bcd6002ee322dcec1a10ec3a06f02f6eae7e6795aaec272f9679510eafe89eb1aea4c1801f22dda078801739d2d8278b53a96bd616ec9a5418bb15cd3861df094f0b7a8c269658600218ff272732b5bac5193eb115681b01abb4b98993c13559d780a8f3058ff1c84e7b2ac90ba5393be3d8126a28c6fc9a85b4c50a353b0b9715ad8995cb6968ac88021463cc8411c3914ba91710c9ae77ab39811d5260338c2a15fbc684b08cebecdd906c4a6914ebdfce5396bc4465ccd1990f3846ae8d3fbb601d9feae4425f68af3878d33290429ab48396dccbdc8a51be183d5318af9502fae1af27e051cd0a87312a7f9fc78d7c2b1f280758ed7a67b743d8bf65036d034e40b65a7d6b4cdb7561b7b7c84392a79eea34e40c540d3009e16d5f81daf7d7279c8c5e44c53bb05f4d1abe46dd6e965454f88c5a60a348c9bb94acf92b160a1f9d5967f649cef93e76727ed74425c325f2674babfb81fbf8aa68dc3e112d332b7c97348a7f0d9781ede9aaa1504443bd1cd9bf43190e1a21de3fa8a245c3bb0a9d9a497db268f2b86c3613a8a556e6042b9d0a17813907c96f0003ecbef8fa14d29eb8b892b04fbc909da18c18b803ea8626502720a387062381290dd3e4b9b62b8749bbe696eb0e330fce3f0ff75c59fbb212341a899c66f433bb386ecbde15ae837df4aa5b8726365c2c982ddf812f8afa4beba641439763f1465c0024bc6101c91fdf9f9074d106b4935db6d46aeec12b8289daf8503a9475979607dcc5d396b706e3ffce46aba020a723620759da9485a917a3ba7b2df692e4cb121c4b405b713b6345908725d81d556eb75c0fd6178d32bbda1edc3fa86449e4f901fcc354d58a27971591e732b1590cadc0ac9ac126845bb91686e8909dd14852ffe8053e3cfc9de4928f315ab117d02e996c27e1b487e3d1cb230885a497f2b2f561609052346378835206f19632b9a7831138c5e706d3ba3e640845245fd6e5ef39abde8cb642ef6e1eb1cf2f276348b7bccb21544d46556b4bb018694bdad724a4e5efc71c7be0a38cb1c9c1b8ccfcff17872dbe4d2c6b5695094389bc602457f47df60faad7d6931ed403ad5b5b47e0f20ff7be0e85ac712984094c62209d7235888eac0fc4e843a888b368a827d9a290486a7283e26e518d5ee9f43857b864023a8abc66fbe5ae42ac577531ab588e476a6962c929ddac48cafd978359dcbaaa508c710b9e07b6933df6602d8c77a19fe6f738e1de34c81f73559232340384e748271f6b4a966a75d4024fe3afb7e9533dfecb965d412d5b4ac507ab42e638b80a8048abd0b2ca0a9a7b047cdc18751a53c8dbfd2fe4737bfd6fcdd544e7dbaf8ed0f97286e151bf52f2efc5b01b29ad55859ecfd0500a8ffdf077d26c2603c25a666ad100ae4823b7e72c12f130bd29d083fade9db5e76dfbb1ccae77c5f613e925e577dfdcbb1226a7e515d41927427ba44636ca7a5d9942562dba2e3f01961e974179f51b977f5d93d78b7117facc303ba1e02a4e85aa9cbc6ea116f2b7b73fcce8672d3ef677c3ba168c65363a948c34d5a70c3d2845a59e9ed132cf15f04934884269b9527d4e7e90f53a2d46a96c7b0ffbe69657f028b38ef634693c74359efe1be0ad7a74bf93fcb5953b5c5f7cced1370f0412976c66e61af6cb0229afae3a"]}, 0x2070}, 0x1, 0x0, 0x0, 0x8054}, 0x80) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbdf74b9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xe9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22040000}, 0x800) 111.396349ms ago: executing program 0 (id=3378): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000ffffe000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f"], 0x254}}, 0x0) 0s ago: executing program 0 (id=3379): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x64}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}}, 0x400c010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030"], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000700000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) kernel console output (not intermixed with test programs): up backlog [ 249.421410][T12427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.446629][T12427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.568163][T12417] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 249.700793][T12424] bond9 (unregistering): Released all slaves [ 249.825145][T12433] veth0: entered promiscuous mode [ 249.964542][T12444] vxcan3: entered promiscuous mode [ 250.361210][T12431] veth0: left promiscuous mode [ 250.412224][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2003'. [ 251.114667][T12495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2010'. [ 251.807238][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2016'. [ 252.515776][ T5905] net_ratelimit: 259 callbacks suppressed [ 252.515799][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.309922][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.566005][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.594458][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.635527][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.872201][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.878588][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.350346][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.674422][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.712595][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.752648][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.389529][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.792645][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.832669][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.640046][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.872682][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.429570][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.918145][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.952582][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.992691][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.470189][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.032823][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.074029][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.112541][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.509773][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.152545][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.193283][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.252451][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.260632][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.549573][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.272457][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.509475][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 273.312501][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.869630][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2025'. [ 273.927850][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2024'. [ 273.958287][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2024'. [ 274.161894][T12661] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 274.356317][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.519836][T12688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.589783][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.633858][T12692] batadv2: entered allmulticast mode [ 274.725765][T12691] batadv2: entered allmulticast mode [ 274.770190][T12702] netlink: 'syz.1.2040': attribute type 32 has an invalid length. [ 275.092264][T12715] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2043'. [ 275.101666][T12717] netlink: 'syz.3.2045': attribute type 1 has an invalid length. [ 275.178934][T12717] bond10: entered promiscuous mode [ 275.195473][T12717] macvlan3: entered promiscuous mode [ 275.200949][T12717] macvlan3: entered allmulticast mode [ 275.207637][T12717] bond10: (slave macvlan3): Opening slave failed [ 275.262536][T12728] netlink: 'syz.0.2047': attribute type 2 has an invalid length. [ 275.284524][T12724] netem: incorrect ge model size [ 275.294459][T12724] netem: change failed [ 275.314816][T12728] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2047'. [ 275.395986][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.664389][T12738] netlink: 'syz.1.2049': attribute type 1 has an invalid length. [ 275.734836][T12738] 8021q: adding VLAN 0 to HW filter on device bond7 [ 275.772216][T12749] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 275.822588][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2049'. [ 275.890837][T12738] bond7: entered promiscuous mode [ 275.909552][T12738] bond7: entered allmulticast mode [ 276.018485][T12766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2058'. [ 276.276086][T12778] TC_ACT_REPEAT abuse ? [ 276.430578][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.990835][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 277.217807][T12818] netlink: 'syz.0.2078': attribute type 11 has an invalid length. [ 277.313246][T12820] bond0: entered promiscuous mode [ 277.337833][T12820] bond_slave_0: entered promiscuous mode [ 277.354067][T12827] netlink: 'syz.4.2081': attribute type 16 has an invalid length. [ 277.362404][T12820] bond_slave_1: entered promiscuous mode [ 277.368325][T12827] netlink: 'syz.4.2081': attribute type 17 has an invalid length. [ 277.378939][T12820] bridge_slave_1: entered promiscuous mode [ 277.387779][T12820] batadv0: entered promiscuous mode [ 277.394713][T12820] debugfs: 'hsr1' already exists in 'hsr' [ 277.402629][T12820] Cannot create hsr debugfs directory [ 277.408520][T12820] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 277.420174][T12820] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 277.430230][T12820] bond0: left promiscuous mode [ 277.435362][T12820] bond_slave_0: left promiscuous mode [ 277.442974][T12820] bond_slave_1: left promiscuous mode [ 277.448808][T12820] bridge_slave_1: left promiscuous mode [ 277.457979][T12820] batadv0: left promiscuous mode [ 277.473592][T12823] netlink: 'syz.3.2079': attribute type 2 has an invalid length. [ 277.475745][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.578956][T12827] 8021q: adding VLAN 0 to HW filter on device .` [ 277.629994][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.673971][T12827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.921424][T12816] infiniband sy1: set active [ 277.927126][T12849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.937604][T12816] infiniband sy1: added bond0 [ 278.005148][T12816] RDS/IB: sy1: added [ 278.035662][T12816] smc: adding ib device sy1 with port count 1 [ 278.074672][T12816] smc: ib device sy1 port 1 has no pnetid [ 278.125609][T12860] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 278.162067][T12860] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2091'. [ 278.521617][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.975079][T12896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.149553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.238354][T12910] netlink: 'syz.3.2107': attribute type 1 has an invalid length. [ 279.256932][T12910] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2107'. [ 279.294700][T12915] openvswitch: netlink: IP tunnel dst address not specified [ 279.368069][T12916] bridge_slave_0: left allmulticast mode [ 279.383312][T12916] bridge_slave_0: left promiscuous mode [ 279.389912][T12916] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.443150][T12916] bridge_slave_1: left allmulticast mode [ 279.448962][T12916] bridge_slave_1: left promiscuous mode [ 279.460270][T12916] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.549639][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.571262][T12916] .`: (slave bond_slave_0): Releasing backup interface [ 279.612444][T12916] .`: (slave bond_slave_1): Releasing backup interface [ 279.668362][T12916] team0: Port device team_slave_0 removed [ 279.726639][T12916] team0: Port device team_slave_1 removed [ 279.744722][T12916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.752330][T12916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.762773][T12916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.772914][T12916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.782730][T12916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 279.977472][T12944] netlink: 'syz.3.2119': attribute type 1 has an invalid length. [ 280.170218][T12944] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 280.197694][T12952] dvmrp0: entered allmulticast mode [ 280.308431][T12960] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2123'. [ 280.596696][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.669555][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.721134][T12980] sctp: [Deprecated]: syz.4.2133 (pid 12980) Use of int in max_burst socket option. [ 280.721134][T12980] Use struct sctp_assoc_value instead [ 280.725459][T12981] netlink: 'syz.3.2132': attribute type 3 has an invalid length. [ 280.831863][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.974723][T12991] netlink: 'syz.1.2135': attribute type 16 has an invalid length. [ 280.991440][T12991] netlink: 'syz.1.2135': attribute type 17 has an invalid length. [ 281.034789][T12991] tunl0: left promiscuous mode [ 281.122234][T12991] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.136342][T12991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.181429][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'. [ 281.501478][T13017] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 281.837381][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2147'. [ 281.903448][T13030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2146'. [ 282.126036][T13046] xt_hashlimit: size too large, truncated to 1048576 [ 282.193728][T13049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2151'. [ 282.205131][T13051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2151'. [ 282.369884][T13061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2156'. [ 282.873715][T13072] syzkaller0: entered promiscuous mode [ 282.899320][T13072] syzkaller0: entered allmulticast mode [ 283.715828][ T5964] net_ratelimit: 5 callbacks suppressed [ 283.715852][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.729619][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.562225][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2165'. [ 284.572194][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2165'. [ 284.588577][ T5488] veth0_vlan: left promiscuous mode [ 284.626264][ T5488] veth0_vlan: entered promiscuous mode [ 284.776704][ T5964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.820390][T13127] netlink: 'syz.0.2169': attribute type 1 has an invalid length. [ 284.949518][T13143] netlink: 'syz.4.2171': attribute type 1 has an invalid length. [ 285.007444][T13127] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 285.414628][T13158] bridge_slave_0: left allmulticast mode [ 285.505580][T13158] bridge_slave_0: left promiscuous mode [ 285.534557][T13158] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.600024][T13158] bond0: (slave bridge_slave_1): Releasing backup interface [ 285.638576][T13158] bond0: (slave bond_slave_0): Releasing backup interface [ 285.678557][T13158] bond0: (slave bond_slave_1): Releasing backup interface [ 285.736970][T13158] team0: Port device team_slave_0 removed [ 285.763187][T13158] team0: Port device team_slave_1 removed [ 285.771984][T13158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.778460][T13192] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2180'. [ 285.782366][T13158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.796493][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.819167][T13158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.827073][T13158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.837311][T13158] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.867779][ T5905] syz1: Port: 1 Link DOWN [ 285.867790][T13190] netlink: 'syz.1.2181': attribute type 12 has an invalid length. [ 285.885206][T13190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2181'. [ 286.116526][T13207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.207184][T13211] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2186'. [ 286.480106][T13220] vlan3: entered allmulticast mode [ 286.492045][T13220] bond0: entered allmulticast mode [ 286.497228][T13220] bond_slave_0: entered allmulticast mode [ 286.522032][T13220] bond_slave_1: entered allmulticast mode [ 286.531199][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2191'. [ 286.547891][T13222] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2191'. [ 286.557952][T13222] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 286.591625][T13228] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 286.639947][T13229] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2190'. [ 286.674877][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 286.708837][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2195'. [ 286.741189][T13229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.761607][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.771466][T13229] bond_slave_0: left allmulticast mode [ 286.816429][T13229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.841895][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.861747][T13229] bond_slave_1: left allmulticast mode [ 286.869603][T13229] bond0 (unregistering): Released all slaves [ 287.370980][T13261] netlink: 'syz.4.2209': attribute type 2 has an invalid length. [ 287.449075][T13265] bond15: entered promiscuous mode [ 287.479026][T13265] bond15: entered allmulticast mode [ 287.877289][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.067789][T13296] netlink: 'syz.0.2219': attribute type 1 has an invalid length. [ 288.089719][T13296] netlink: 'syz.0.2219': attribute type 3 has an invalid length. [ 288.107831][T13296] NCSI netlink: No device for ifindex 813332851 [ 288.120881][T13299] tipc: Started in network mode [ 288.136471][T13299] tipc: Node identity 010000000000000001, cluster identity 4711 [ 288.155641][T13299] delete_channel: no stack [ 288.174933][T13299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.649291][T13311] bond16: entered promiscuous mode [ 288.667593][T13311] bond16: entered allmulticast mode [ 288.911905][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.955782][T13330] Unknown options in mask b7f2 [ 289.150548][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.748028][T13338] __nla_validate_parse: 13 callbacks suppressed [ 289.748050][T13338] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2233'. [ 289.754273][T13337] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2232'. [ 289.790351][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.798774][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.904156][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2236'. [ 289.917071][T13344] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2236'. [ 289.936187][T13344] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 289.964435][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.000977][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'. [ 290.149671][T13357] bond8: entered promiscuous mode [ 290.159611][T13352] netlink: set zone limit has 4 unknown bytes [ 290.212394][T13357] bond8: entered allmulticast mode [ 290.390059][T13369] xt_connbytes: Forcing CT accounting to be enabled [ 290.430289][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.473877][T13373] xt_CT: No such helper "netbios-ns" [ 290.501107][T13369] xt_CT: No such helper "netbios-ns" [ 290.800637][T13387] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2247'. [ 290.953787][T13395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.013282][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.181003][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2253'. [ 291.209441][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 291.238052][T13405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2253'. [ 291.266328][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2253'. [ 292.122226][T13438] macvtap2: entered promiscuous mode [ 292.129556][T13438] macvtap2: entered allmulticast mode [ 292.143616][T13438] veth1_vlan: entered allmulticast mode [ 292.190725][T13435] geneve2: entered promiscuous mode [ 292.210332][T13444] netlink: 'syz.2.2266': attribute type 1 has an invalid length. [ 292.243795][T13441] macvtap3: entered promiscuous mode [ 292.269921][T13441] macvtap3: entered allmulticast mode [ 292.302794][T10152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 35788 - 0 [ 292.314441][T13444] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 292.339320][T10152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 35788 - 0 [ 292.377601][T10152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 35788 - 0 [ 292.412923][T10152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 35788 - 0 [ 293.395212][T13499] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 293.411602][T13499] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 294.117328][ T5881] net_ratelimit: 5 callbacks suppressed [ 294.117352][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.633231][T13547] x_tables: duplicate underflow at hook 2 [ 295.163681][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.352234][T13575] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 295.407313][T13575] bond11: (slave lo): Enslaving as an active interface with an up link [ 295.458570][T13575] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 295.842270][T13595] __nla_validate_parse: 8 callbacks suppressed [ 295.842293][T13595] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2316'. [ 295.880366][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.905507][T13598] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2318'. [ 295.926007][T13596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.935397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.945827][T13596] netlink: 'syz.0.2317': attribute type 1 has an invalid length. [ 295.954860][T13596] netlink: 'syz.0.2317': attribute type 3 has an invalid length. [ 295.959775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.971865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.973375][T13596] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2317'. [ 296.003982][T13601] bond0: (slave gre0): refused to change device type [ 296.049750][T13602] syzkaller1: entered promiscuous mode [ 296.060701][T13602] syzkaller1: entered allmulticast mode [ 296.196763][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.202103][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2323'. [ 296.237850][T13610] netlink: 'syz.2.2320': attribute type 72 has an invalid length. [ 296.586903][T13630] netlink: 'syz.2.2327': attribute type 2 has an invalid length. [ 296.675453][T13630] syz_tun: refused to change device tx_queue_len [ 296.729851][T13636] netlink: 4316 bytes leftover after parsing attributes in process `syz.2.2327'. [ 297.121089][T13652] netlink: 'syz.2.2337': attribute type 72 has an invalid length. [ 297.606176][T13675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2344'. [ 297.677346][T13679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2345'. [ 297.771883][T13683] tipc: Enabled bearer , priority 25 [ 297.804798][T13685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.093443][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2351'. [ 298.187044][T13706] netlink: 'syz.4.2352': attribute type 10 has an invalid length. [ 298.206636][T13706] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 298.227978][T13708] netlink: 'syz.0.2353': attribute type 10 has an invalid length. [ 298.252999][T13706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 298.275864][T13708] netlink: 396 bytes leftover after parsing attributes in process `syz.0.2353'. [ 298.291384][T13706] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 298.712079][T13715] bond17: invalid ARP target 0.0.0.0 specified for addition [ 298.772073][T13715] bond17: option arp_ip_target: invalid value (0) [ 298.870317][T13715] bond17 (unregistering): Released all slaves [ 299.034581][ T796] tipc: Node number set to 16777216 [ 299.286392][T13751] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2363'. [ 300.013441][T13789] bond9: entered promiscuous mode [ 300.022681][T13789] bond9: entered allmulticast mode [ 302.733316][T13778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.002440][T13879] __nla_validate_parse: 5 callbacks suppressed [ 303.002463][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2384'. [ 303.123115][T13889] netlink: 'syz.2.2384': attribute type 3 has an invalid length. [ 303.292292][T13904] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2390'. [ 303.325337][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 303.351236][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2388'. [ 303.364421][T13906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 303.726644][T13922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2395'. [ 303.789019][T13922] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2395'. [ 304.023887][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 304.034283][T13936] netlink: 'syz.1.2399': attribute type 3 has an invalid length. [ 304.043419][T13936] netlink: 'syz.1.2399': attribute type 1 has an invalid length. [ 304.054808][T13941] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2401'. [ 304.059367][T13936] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2399'. [ 304.078796][T13939] macsec2: entered promiscuous mode [ 304.084677][T13939] bridge0: entered promiscuous mode [ 304.105677][T13936] NCSI netlink: No device for ifindex 813332851 [ 304.106129][T13939] macsec2: entered allmulticast mode [ 304.141821][T13939] bridge0: entered allmulticast mode [ 304.147987][T13939] bridge0: port 1(macsec2) entered blocking state [ 304.175100][T13939] bridge0: port 1(macsec2) entered disabled state [ 304.192962][T13939] bridge0: left allmulticast mode [ 304.202099][T13939] bridge0: left promiscuous mode [ 304.651771][T13968] openvswitch: netlink: Key 6 has unexpected len 161 expected 2 [ 305.384448][T14003] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 305.633277][T14015] syzkaller1: entered promiscuous mode [ 305.661797][T14015] syzkaller1: entered allmulticast mode [ 305.819923][T14022] wireguard0: entered promiscuous mode [ 305.840066][T14018] syzkaller0: entered promiscuous mode [ 305.845582][T14018] syzkaller0: entered allmulticast mode [ 306.298630][T14043] vlan3: entered allmulticast mode [ 306.311341][T14043] bridge_slave_0: entered allmulticast mode [ 306.521545][T14053] netlink: 'syz.3.2434': attribute type 51 has an invalid length. [ 306.674175][T14049] openvswitch: netlink: Tunnel attr 152 out of range max 16 [ 307.407323][T14088] syzkaller0: entered promiscuous mode [ 307.437769][T14088] syzkaller0: entered allmulticast mode [ 307.472676][T14088] 0: reclassify loop, rule prio 0, protocol 800 [ 308.603197][T14138] __nla_validate_parse: 9 callbacks suppressed [ 308.603219][T14138] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2459'. [ 308.643644][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2460'. [ 308.787203][T14142] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 308.822363][T14140] macvlan3: entered promiscuous mode [ 308.830816][T14140] macvlan3: entered allmulticast mode [ 308.852895][T14140] bond9: entered promiscuous mode [ 308.858148][T14140] bridge2: entered promiscuous mode [ 308.868813][T14140] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 308.888483][T14140] bond9: left promiscuous mode [ 308.894115][T14140] bridge2: left promiscuous mode [ 308.939988][T14124] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 309.080425][T14155] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2465'. [ 309.575478][T14185] IPVS: length: 239 != 24 [ 311.132830][T14222] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2483'. [ 311.316494][T14228] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 311.330712][T14228] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 311.367364][T14229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.344069][ T29] audit: type=1107 audit(1775868433.857:2): pid=14234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 312.482444][T14239] dvmrp0: entered allmulticast mode [ 312.585711][T14184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.840879][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'. [ 312.865112][T14247] netlink: 'syz.2.2492': attribute type 1 has an invalid length. [ 312.884232][T14248] netlink: 'syz.2.2492': attribute type 1 has an invalid length. [ 312.946891][T14248] 8021q: adding VLAN 0 to HW filter on device bond11 [ 313.016577][T14260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2496'. [ 313.283212][T14268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2501'. [ 313.367666][T14279] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2499'. [ 313.373589][T14281] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.2501'. [ 313.412735][T14282] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2500'. [ 313.993294][T14317] wg1 speed is unknown, defaulting to 1000 [ 314.007568][T14317] wg1 speed is unknown, defaulting to 1000 [ 314.025696][T14317] wg1 speed is unknown, defaulting to 1000 [ 314.068391][T14317] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 314.122077][T14317] wg1 speed is unknown, defaulting to 1000 [ 314.181912][T14317] wg1 speed is unknown, defaulting to 1000 [ 314.215333][T14317] wg1 speed is unknown, defaulting to 1000 [ 314.245190][T14317] wg1 speed is unknown, defaulting to 1000 [ 314.288018][T14317] wg1 speed is unknown, defaulting to 1000 [ 314.437036][T14332] netlink: 'syz.1.2517': attribute type 1 has an invalid length. [ 314.448310][T14329] __nla_validate_parse: 4 callbacks suppressed [ 314.448330][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2516'. [ 314.479488][T14332] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2517'. [ 314.506285][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2516'. [ 314.514111][T14340] netlink: 'syz.3.2520': attribute type 12 has an invalid length. [ 314.545076][T14340] netlink: 'syz.3.2520': attribute type 29 has an invalid length. [ 314.564175][T14340] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2520'. [ 314.598164][T14340] netlink: 'syz.3.2520': attribute type 2 has an invalid length. [ 314.617682][T14340] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2520'. [ 314.644429][T14342] IPVS: Unknown mcast interface: rose0 [ 314.923647][T14351] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 314.932592][T14351] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 314.997461][T14355] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2525'. [ 315.539993][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2534'. [ 315.542636][T14377] syzkaller0: entered promiscuous mode [ 315.565513][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'. [ 315.574928][T14377] syzkaller0: entered allmulticast mode [ 315.602267][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2534'. [ 315.603150][T10160] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.624270][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'. [ 315.634827][T10160] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.168470][T14399] netlink: 'syz.1.2539': attribute type 1 has an invalid length. [ 317.315329][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.328184][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.421464][T10160] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.430531][T10160] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.464461][T14399] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 318.664094][T14482] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 318.914652][T14489] xt_hashlimit: size too large, truncated to 1048576 [ 319.148598][T14496] bond12: option arp_all_targets: invalid value (18446744073709551613) [ 319.262233][T14496] bond12 (unregistering): Released all slaves [ 319.334305][T14515] netlink: 'syz.1.2566': attribute type 1 has an invalid length. [ 319.516810][T14515] 8021q: adding VLAN 0 to HW filter on device bond10 [ 320.967639][T14579] xt_cgroup: invalid path, errno=-2 [ 322.930317][T14630] __nla_validate_parse: 4 callbacks suppressed [ 322.930338][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2581'. [ 323.086901][T14636] x_tables: duplicate underflow at hook 2 [ 323.105216][T14640] bridge0: port 1(batadv1) entered blocking state [ 323.149416][T14640] bridge0: port 1(batadv1) entered disabled state [ 323.169524][T14640] batadv1: entered allmulticast mode [ 323.176915][T14640] batadv1: entered promiscuous mode [ 323.223698][T14648] netlink: 'syz.2.2588': attribute type 1 has an invalid length. [ 323.330554][T14657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2589'. [ 323.402882][T14648] bond12: entered promiscuous mode [ 323.430611][T14648] 8021q: adding VLAN 0 to HW filter on device bond12 [ 323.527824][T14670] bond11: entered promiscuous mode [ 323.535062][T14670] bond11: entered allmulticast mode [ 323.543835][T14649] syzkaller1: entered promiscuous mode [ 323.555431][T14649] syzkaller1: entered allmulticast mode [ 323.570099][T10155] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 323.579514][T10155] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 324.001079][T14646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.438204][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2601'. [ 324.444773][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'. [ 324.453417][T14709] tipc: Enabling of bearer rejected, already enabled [ 324.494502][T14724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2602'. [ 324.551021][T14733] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2602'. [ 324.600958][T14733] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 324.667301][T14735] bond12: entered promiscuous mode [ 324.702236][T14735] bond12: entered allmulticast mode [ 325.058675][T14751] netlink: 'syz.2.2605': attribute type 1 has an invalid length. [ 325.085191][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2605'. [ 325.210611][T14751] syzkaller1: entered promiscuous mode [ 325.216254][T14751] syzkaller1: entered allmulticast mode [ 325.290354][T14766] netlink: 'syz.4.2611': attribute type 1 has an invalid length. [ 325.451630][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2613'. [ 325.457876][T14766] bond12: entered promiscuous mode [ 325.468439][T14766] 8021q: adding VLAN 0 to HW filter on device bond12 [ 325.519823][T14771] netlink: 'syz.0.2613': attribute type 4 has an invalid length. [ 325.547948][T14781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2614'. [ 325.594305][T14777] netlink: 'syz.0.2613': attribute type 4 has an invalid length. [ 325.650763][T14781] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2614'. [ 325.700683][T14781] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 325.793100][T14788] bond13: entered promiscuous mode [ 325.798298][T14788] bond13: entered allmulticast mode [ 325.844639][T14794] netlink: 'syz.0.2617': attribute type 1 has an invalid length. [ 326.752521][T14842] netlink: 'syz.2.2629': attribute type 21 has an invalid length. [ 326.762067][T14844] netlink: 'syz.0.2630': attribute type 1 has an invalid length. [ 326.858656][T14842] netlink: 'syz.2.2629': attribute type 6 has an invalid length. [ 326.929270][T14854] bond13: entered promiscuous mode [ 326.934482][T14854] bond13: entered allmulticast mode [ 327.403974][T14877] netlink: 'syz.4.2635': attribute type 1 has an invalid length. [ 327.479060][T14874] tc_dump_action: action bad kind [ 327.661095][T14831] ip6tnl4: entered promiscuous mode [ 327.744171][T14897] openvswitch: netlink: Missing valid actions attribute. [ 327.780841][T14897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.807521][ T5881] hid-generic 0005:0C45:0006.0003: item fetching failed at offset 0/1 [ 327.823065][ T5881] hid-generic 0005:0C45:0006.0003: probe with driver hid-generic failed with error -22 [ 328.306286][T14926] __nla_validate_parse: 8 callbacks suppressed [ 328.306309][T14926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2645'. [ 328.461053][T14926] bond0: entered promiscuous mode [ 328.466124][T14926] bond0: entered allmulticast mode [ 328.616223][T14944] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2651'. [ 328.655019][T14944] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2651'. [ 328.709606][T14956] bond3: (slave lo): Releasing backup interface [ 328.725132][T14956] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 328.768609][T14955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2655'. [ 328.781867][T14963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2655'. [ 328.794549][T14956] bridge_slave_0: left allmulticast mode [ 328.802954][T14956] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.814876][T14956] bridge_slave_1: left allmulticast mode [ 328.822088][T14956] bridge_slave_1: left promiscuous mode [ 328.828314][T14956] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.877621][T14956] team0: Port device team_slave_0 removed [ 328.907788][T14956] team0: Port device team_slave_1 removed [ 328.918109][T14956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.926603][T14956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.938229][T14956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.947027][T14956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.957699][T14956] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 328.975639][T14954] tipc: Enabling of bearer rejected, failed to enable media [ 329.553803][T14997] bond18: entered promiscuous mode [ 329.659403][T15004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2665'. [ 329.697936][T15007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2668'. [ 329.712015][T15009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2667'. [ 329.780211][T15012] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2667'. [ 329.804912][T15012] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 329.898958][T15013] bond14: entered promiscuous mode [ 329.905321][T15013] bond14: entered allmulticast mode [ 329.920581][T15022] netlink: 'syz.3.2670': attribute type 29 has an invalid length. [ 330.223030][T15039] syzkaller0: entered promiscuous mode [ 330.236910][T15039] syzkaller0: entered allmulticast mode [ 330.248684][T15042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.274992][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2679'. [ 330.296492][T15045] bridge0: entered promiscuous mode [ 330.308018][T15045] macsec1: entered promiscuous mode [ 330.313637][T15045] macsec1: entered allmulticast mode [ 330.319046][T15045] bridge0: entered allmulticast mode [ 330.325652][T15045] bridge0: port 4(macsec1) entered blocking state [ 330.332999][T15045] bridge0: port 4(macsec1) entered disabled state [ 330.344902][T15045] bridge0: left allmulticast mode [ 330.358379][T15045] bridge0: left promiscuous mode [ 330.387394][T15047] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 330.623387][T15061] tipc: Enabled bearer , priority 0 [ 330.702486][T15061] syzkaller0: entered promiscuous mode [ 330.708142][T15061] syzkaller0: entered allmulticast mode [ 330.714911][T15061] tipc: Resetting bearer [ 330.739458][T15060] tipc: Resetting bearer [ 330.890301][T15076] openvswitch: netlink: Flow actions attr not present in new flow. [ 331.268947][T15090] netlink: 'syz.4.2693': attribute type 21 has an invalid length. [ 331.284986][T15090] netlink: 'syz.4.2693': attribute type 22 has an invalid length. [ 331.297728][T15090] netlink: 'syz.4.2693': attribute type 23 has an invalid length. [ 331.305776][T15090] netlink: 'syz.4.2693': attribute type 25 has an invalid length. [ 331.862234][T15082] delete_channel: no stack [ 332.398361][T15060] tipc: Disabling bearer [ 333.284158][T15146] syz.0.2708 uses old SIOCAX25GETINFO [ 333.976192][T15183] netlink: 'syz.3.2719': attribute type 12 has an invalid length. [ 334.445300][T15165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.937351][T15220] __nla_validate_parse: 12 callbacks suppressed [ 334.937374][T15220] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2731'. [ 334.986564][T15220] sctp: [Deprecated]: syz.3.2731 (pid 15220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.986564][T15220] Use struct sctp_sack_info instead [ 335.431212][T15242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2738'. [ 336.170273][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2749'. [ 336.200299][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2749'. [ 336.384315][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2751'. [ 336.421528][T15274] netlink: 'syz.3.2753': attribute type 1 has an invalid length. [ 336.432905][T15272] netlink: 'syz.4.2751': attribute type 51 has an invalid length. [ 336.470528][T15278] ip6t_srh: unknown srh match flags 4000 [ 336.505337][T15274] bond11: (slave bridge4): Enslaving as a backup interface with an up link [ 336.567180][T15278] netem: incorrect ge model size [ 336.592883][T15278] netem: change failed [ 336.663015][T15282] bond11: (slave bridge5): Enslaving as a backup interface with a down link [ 336.708142][T15274] netlink: 'syz.3.2753': attribute type 1 has an invalid length. [ 336.714511][T15290] netlink: 'syz.2.2756': attribute type 1 has an invalid length. [ 336.744220][T15290] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2756'. [ 337.195176][T15316] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2766'. [ 337.496315][T15319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.998966][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.035546][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.045485][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.064518][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.073681][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.135362][T15373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.373548][T15383] veth0: entered promiscuous mode [ 338.393165][T15383] veth0: left promiscuous mode [ 338.422400][T15363] syz.0.2781 (15363) used greatest stack depth: 15752 bytes left [ 338.865561][T15365] wg1 speed is unknown, defaulting to 1000 [ 338.927850][T15405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2794'. [ 339.000125][T15409] netlink: 'syz.0.2795': attribute type 21 has an invalid length. [ 339.008004][T15409] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2795'. [ 339.095568][T15412] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2797'. [ 339.215510][T15409] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 339.254515][T15409] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 339.458806][T15365] chnl_net:caif_netlink_parms(): no params data found [ 339.796299][T15365] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.803798][T15365] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.812257][T15365] bridge_slave_0: entered allmulticast mode [ 339.820370][T15365] bridge_slave_0: entered promiscuous mode [ 339.840986][T15423] syzkaller1: entered promiscuous mode [ 339.846520][T15423] syzkaller1: entered allmulticast mode [ 339.872340][T15365] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.885780][T15365] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.893890][T15365] bridge_slave_1: entered allmulticast mode [ 339.911374][T15365] bridge_slave_1: entered promiscuous mode [ 340.018037][T15445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.068517][T15365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.082472][T15365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.109948][ T5143] Bluetooth: hci5: command tx timeout [ 340.147279][T15365] team0: Port device team_slave_0 added [ 340.157014][T15365] team0: Port device team_slave_1 added [ 340.196128][T15365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.205221][T15365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.242219][T15365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.277391][T15365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.298758][T15365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.337818][T15365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.523727][T15365] hsr_slave_0: entered promiscuous mode [ 340.555122][T15365] hsr_slave_1: entered promiscuous mode [ 340.568357][T15365] debugfs: 'hsr0' already exists in 'hsr' [ 340.574962][T15365] Cannot create hsr debugfs directory [ 341.226650][T15365] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.239885][T15365] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.258671][T15365] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 341.347343][T15365] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.383132][T15365] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.404643][T15365] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 341.444527][T15525] ipt_REJECT: ECHOREPLY no longer supported. [ 341.501479][T15365] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.529356][T15365] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.540454][T15365] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 341.636232][T15365] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.648930][T15365] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.660443][T15365] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 341.685637][T15538] wg1: entered promiscuous mode [ 341.692576][T15538] wg1: entered allmulticast mode [ 341.706325][T15536] syzkaller0: entered promiscuous mode [ 341.712049][T15536] syzkaller0: entered allmulticast mode [ 342.025508][T15554] __nla_validate_parse: 2 callbacks suppressed [ 342.025528][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2839'. [ 342.038030][T15365] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 342.054998][T15365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.069669][T15365] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 342.078457][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'. [ 342.090364][T15556] openvswitch: netlink: Flow key attr not present in new flow. [ 342.134291][T15365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 342.158750][T15365] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 342.187163][T15365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 342.199539][ T5143] Bluetooth: hci5: command tx timeout [ 342.221141][T15365] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 342.288815][T15365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 342.421045][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2846'. [ 342.819904][T15365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.872300][T15365] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.902684][T10160] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.909913][T10160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.964964][T10159] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.972185][T10159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.391741][T15365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.492738][T15365] veth0_vlan: entered promiscuous mode [ 343.521995][T15365] veth1_vlan: entered promiscuous mode [ 343.592238][T15365] veth0_macvtap: entered promiscuous mode [ 343.615302][T15365] veth1_macvtap: entered promiscuous mode [ 343.646553][T15365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.675627][T15365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.701033][T10152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.720555][T10152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.731039][T10152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.749129][T10152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.777388][T15645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2863'. [ 343.938052][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.959299][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.035196][T15661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2866'. [ 344.269710][ T5143] Bluetooth: hci5: command tx timeout [ 346.349800][ T5143] Bluetooth: hci5: command tx timeout [ 346.723229][T15648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.832733][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.872580][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.998080][T15684] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2872'. [ 347.160151][T15698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2876'. [ 347.182446][T15694] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 347.227271][ T5881] wg1 speed is unknown, defaulting to 1000 [ 347.290100][T15706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2878'. [ 347.427355][T15713] FAULT_INJECTION: forcing a failure. [ 347.427355][T15713] name failslab, interval 1, probability 0, space 0, times 0 [ 347.478994][T15713] CPU: 1 UID: 0 PID: 15713 Comm: syz.1.2879 Not tainted syzkaller #0 PREEMPT(full) [ 347.479023][T15713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 347.479035][T15713] Call Trace: [ 347.479042][T15713] [ 347.479050][T15713] dump_stack_lvl+0xe8/0x150 [ 347.479085][T15713] should_fail_ex+0x412/0x560 [ 347.479121][T15713] should_failslab+0xa8/0x100 [ 347.479154][T15713] __kmalloc_noprof+0xe8/0x760 [ 347.479178][T15713] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 347.479215][T15713] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 347.479250][T15713] genl_family_rcv_msg_doit+0xd9/0x330 [ 347.479286][T15713] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 347.479323][T15713] ? apparmor_capable+0x126/0x170 [ 347.479351][T15713] ? bpf_lsm_capable+0x9/0x20 [ 347.479378][T15713] ? security_capable+0x7e/0x2c0 [ 347.479414][T15713] genl_rcv_msg+0x61c/0x7a0 [ 347.479448][T15713] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.479474][T15713] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 347.479501][T15713] ? __pfx_nl80211_set_station+0x10/0x10 [ 347.479520][T15713] ? __pfx_nl80211_post_doit+0x10/0x10 [ 347.479549][T15713] ? __lock_acquire+0x6b5/0x2cf0 [ 347.479596][T15713] netlink_rcv_skb+0x232/0x4b0 [ 347.479621][T15713] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.479651][T15713] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.479693][T15713] ? down_read+0x272/0x2e0 [ 347.479710][T15713] ? genl_rcv+0xd/0x40 [ 347.479739][T15713] genl_rcv+0x28/0x40 [ 347.479764][T15713] netlink_unicast+0x80f/0x9b0 [ 347.479797][T15713] ? __pfx_netlink_unicast+0x10/0x10 [ 347.479820][T15713] ? netlink_sendmsg+0x650/0xb40 [ 347.479842][T15713] ? skb_put+0x11b/0x210 [ 347.479871][T15713] netlink_sendmsg+0x813/0xb40 [ 347.479907][T15713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.479934][T15713] ? aa_sock_msg_perm+0xf1/0x1b0 [ 347.479967][T15713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.479994][T15713] ____sys_sendmsg+0x972/0x9f0 [ 347.480031][T15713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.480068][T15713] ? import_iovec+0x73/0xa0 [ 347.480096][T15713] ___sys_sendmsg+0x2a5/0x360 [ 347.480136][T15713] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.480205][T15713] ? __fget_files+0x2a/0x420 [ 347.480223][T15713] ? __fget_files+0x3a0/0x420 [ 347.480253][T15713] __x64_sys_sendmsg+0x1bd/0x2a0 [ 347.480284][T15713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.480322][T15713] ? __pfx_ksys_write+0x10/0x10 [ 347.480357][T15713] do_syscall_64+0x14d/0xf80 [ 347.480382][T15713] ? trace_irq_disable+0x3b/0x150 [ 347.480399][T15713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.480418][T15713] ? clear_bhb_loop+0x40/0x90 [ 347.480443][T15713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.480464][T15713] RIP: 0033:0x7fa8c659c819 [ 347.480483][T15713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.480501][T15713] RSP: 002b:00007fa8c73ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.480523][T15713] RAX: ffffffffffffffda RBX: 00007fa8c6815fa0 RCX: 00007fa8c659c819 [ 347.480537][T15713] RDX: 0000000024000884 RSI: 0000200000000d00 RDI: 0000000000000003 [ 347.480550][T15713] RBP: 00007fa8c73ae090 R08: 0000000000000000 R09: 0000000000000000 [ 347.480571][T15713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.480582][T15713] R13: 00007fa8c6816038 R14: 00007fa8c6815fa0 R15: 00007fff9c6ed468 [ 347.480614][T15713] [ 347.930117][T15722] netlink: 'syz.2.2881': attribute type 21 has an invalid length. [ 347.941057][T15693] xt_hashlimit: size too large, truncated to 1048576 [ 348.029484][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 348.307769][T15734] x_tables: duplicate underflow at hook 2 [ 348.538930][T15722] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 348.702392][T15745] syzkaller0: entered promiscuous mode [ 348.729365][T15751] netlink: 'syz.4.2890': attribute type 7 has an invalid length. [ 348.738388][T15745] syzkaller0: entered allmulticast mode [ 348.748660][T15751] netlink: 'syz.4.2890': attribute type 7 has an invalid length. [ 348.872192][T15758] FAULT_INJECTION: forcing a failure. [ 348.872192][T15758] name failslab, interval 1, probability 0, space 0, times 0 [ 348.911393][T15758] CPU: 1 UID: 0 PID: 15758 Comm: syz.1.2894 Not tainted syzkaller #0 PREEMPT(full) [ 348.911424][T15758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 348.911436][T15758] Call Trace: [ 348.911444][T15758] [ 348.911452][T15758] dump_stack_lvl+0xe8/0x150 [ 348.911486][T15758] should_fail_ex+0x412/0x560 [ 348.911524][T15758] should_failslab+0xa8/0x100 [ 348.911553][T15758] __kmalloc_noprof+0xe8/0x760 [ 348.911578][T15758] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 348.911616][T15758] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 348.911653][T15758] genl_family_rcv_msg_doit+0xd9/0x330 [ 348.911690][T15758] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 348.911726][T15758] ? apparmor_capable+0x126/0x170 [ 348.911753][T15758] ? bpf_lsm_capable+0x9/0x20 [ 348.911781][T15758] ? security_capable+0x7e/0x2c0 [ 348.911818][T15758] genl_rcv_msg+0x61c/0x7a0 [ 348.911854][T15758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.911880][T15758] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 348.911909][T15758] ? __pfx_nl80211_set_station+0x10/0x10 [ 348.911929][T15758] ? __pfx_nl80211_post_doit+0x10/0x10 [ 348.911958][T15758] ? __lock_acquire+0x6b5/0x2cf0 [ 348.911997][T15758] netlink_rcv_skb+0x232/0x4b0 [ 348.912021][T15758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.912050][T15758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.912088][T15758] ? down_read+0x272/0x2e0 [ 348.912106][T15758] ? genl_rcv+0xd/0x40 [ 348.912134][T15758] genl_rcv+0x28/0x40 [ 348.912158][T15758] netlink_unicast+0x80f/0x9b0 [ 348.912186][T15758] ? __pfx_netlink_unicast+0x10/0x10 [ 348.912209][T15758] ? netlink_sendmsg+0x650/0xb40 [ 348.912243][T15758] ? skb_put+0x11b/0x210 [ 348.912279][T15758] netlink_sendmsg+0x813/0xb40 [ 348.912313][T15758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.912339][T15758] ? aa_sock_msg_perm+0xf1/0x1b0 [ 348.912372][T15758] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.912399][T15758] ____sys_sendmsg+0x972/0x9f0 [ 348.912437][T15758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.912472][T15758] ? import_iovec+0x73/0xa0 [ 348.912500][T15758] ___sys_sendmsg+0x2a5/0x360 [ 348.912536][T15758] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.912605][T15758] ? __fget_files+0x2a/0x420 [ 348.912625][T15758] ? __fget_files+0x3a0/0x420 [ 348.912657][T15758] __x64_sys_sendmsg+0x1bd/0x2a0 [ 348.912688][T15758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.912727][T15758] ? __pfx_ksys_write+0x10/0x10 [ 348.912764][T15758] do_syscall_64+0x14d/0xf80 [ 348.912791][T15758] ? trace_irq_disable+0x3b/0x150 [ 348.912810][T15758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.912831][T15758] ? clear_bhb_loop+0x40/0x90 [ 348.912857][T15758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.912879][T15758] RIP: 0033:0x7fa8c659c819 [ 348.912899][T15758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.912917][T15758] RSP: 002b:00007fa8c73ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.912940][T15758] RAX: ffffffffffffffda RBX: 00007fa8c6815fa0 RCX: 00007fa8c659c819 [ 348.912954][T15758] RDX: 0000000024000884 RSI: 0000200000000d00 RDI: 0000000000000003 [ 348.912967][T15758] RBP: 00007fa8c73ae090 R08: 0000000000000000 R09: 0000000000000000 [ 348.912980][T15758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.912993][T15758] R13: 00007fa8c6816038 R14: 00007fa8c6815fa0 R15: 00007fff9c6ed468 [ 348.913028][T15758] [ 349.439820][T15773] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2898'. [ 349.625538][T15782] netlink: 'syz.0.2902': attribute type 2 has an invalid length. [ 349.665687][T15789] IPVS: sync thread started: state = MASTER, mcast_ifn = team0, syncid = 1, id = 0 [ 349.816866][T15799] FAULT_INJECTION: forcing a failure. [ 349.816866][T15799] name failslab, interval 1, probability 0, space 0, times 0 [ 349.857421][T15799] CPU: 1 UID: 0 PID: 15799 Comm: syz.4.2908 Not tainted syzkaller #0 PREEMPT(full) [ 349.857452][T15799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 349.857464][T15799] Call Trace: [ 349.857472][T15799] [ 349.857481][T15799] dump_stack_lvl+0xe8/0x150 [ 349.857515][T15799] should_fail_ex+0x412/0x560 [ 349.857554][T15799] should_failslab+0xa8/0x100 [ 349.857581][T15799] ? skb_clone+0x212/0x3a0 [ 349.857608][T15799] kmem_cache_alloc_noprof+0x87/0x650 [ 349.857641][T15799] skb_clone+0x212/0x3a0 [ 349.857672][T15799] __netlink_deliver_tap+0x404/0x850 [ 349.857711][T15799] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.857734][T15799] netlink_deliver_tap+0x19c/0x1b0 [ 349.857759][T15799] netlink_sendskb+0x68/0x140 [ 349.857781][T15799] netlink_unicast+0x3a3/0x9b0 [ 349.857812][T15799] ? __pfx_netlink_unicast+0x10/0x10 [ 349.857844][T15799] netlink_rcv_skb+0x2b6/0x4b0 [ 349.857868][T15799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.857899][T15799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.857942][T15799] ? down_read+0x272/0x2e0 [ 349.857961][T15799] ? genl_rcv+0xd/0x40 [ 349.857990][T15799] genl_rcv+0x28/0x40 [ 349.858015][T15799] netlink_unicast+0x80f/0x9b0 [ 349.858044][T15799] ? __pfx_netlink_unicast+0x10/0x10 [ 349.858067][T15799] ? netlink_sendmsg+0x650/0xb40 [ 349.858087][T15799] ? skb_put+0x11b/0x210 [ 349.858116][T15799] netlink_sendmsg+0x813/0xb40 [ 349.858149][T15799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.858177][T15799] ? aa_sock_msg_perm+0xf1/0x1b0 [ 349.858257][T15799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.858287][T15799] ____sys_sendmsg+0x972/0x9f0 [ 349.858325][T15799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.858363][T15799] ? import_iovec+0x73/0xa0 [ 349.858391][T15799] ___sys_sendmsg+0x2a5/0x360 [ 349.858424][T15799] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.858491][T15799] ? __fget_files+0x2a/0x420 [ 349.858510][T15799] ? __fget_files+0x3a0/0x420 [ 349.858540][T15799] __x64_sys_sendmsg+0x1bd/0x2a0 [ 349.858569][T15799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.858607][T15799] ? __pfx_ksys_write+0x10/0x10 [ 349.858645][T15799] do_syscall_64+0x14d/0xf80 [ 349.858673][T15799] ? trace_irq_disable+0x3b/0x150 [ 349.858690][T15799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.858711][T15799] ? clear_bhb_loop+0x40/0x90 [ 349.858735][T15799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.858756][T15799] RIP: 0033:0x7f0c1f79c819 [ 349.858776][T15799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.858795][T15799] RSP: 002b:00007f0c2073b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.858817][T15799] RAX: ffffffffffffffda RBX: 00007f0c1fa15fa0 RCX: 00007f0c1f79c819 [ 349.858832][T15799] RDX: 0000000024000884 RSI: 0000200000000d00 RDI: 0000000000000003 [ 349.858845][T15799] RBP: 00007f0c2073b090 R08: 0000000000000000 R09: 0000000000000000 [ 349.858858][T15799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.858869][T15799] R13: 00007f0c1fa16038 R14: 00007f0c1fa15fa0 R15: 00007ffea8605878 [ 349.858905][T15799] [ 350.289847][T15810] netlink: 'syz.4.2912': attribute type 1 has an invalid length. [ 350.318182][T15810] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2912'. [ 350.357173][T15818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.442141][T15811] tipc: Enabling not permitted [ 350.461070][T15811] tipc: Enabling of bearer rejected, failed to enable media [ 350.482528][T15819] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2915'. [ 350.711138][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'. [ 351.056398][T15854] Unsupported ieee802154 address type: 0 [ 351.091505][T15854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2926'. [ 351.227780][T15860] xt_l2tp: missing protocol rule (udp|l2tpip) [ 351.337262][T15869] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2929'. [ 351.390631][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2931'. [ 351.426958][T15874] xt_hashlimit: size too large, truncated to 1048576 [ 351.776649][T15885] tipc: Enabling of bearer rejected, failed to enable media [ 351.855256][T15885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2936'. [ 352.123014][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 352.134128][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 352.143067][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.151988][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.163630][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.551782][T15907] bond0: entered promiscuous mode [ 352.558628][T15907] batadv0: entered promiscuous mode [ 352.580001][T15909] netlink: 'syz.3.2944': attribute type 39 has an invalid length. [ 352.608367][T15907] debugfs: 'hsr1' already exists in 'hsr' [ 352.652482][T15907] Cannot create hsr debugfs directory [ 352.673012][T15907] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 352.698982][T15907] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 352.720078][T15907] bond0: left promiscuous mode [ 352.733983][T15907] batadv0: left promiscuous mode [ 352.954846][T15899] wg1 speed is unknown, defaulting to 1000 [ 352.970684][T15922] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 352.978784][T15905] rdma_rxe: rxe_newlink: failed to add bond0 [ 353.091193][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.106762][T15928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2951'. [ 353.116770][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 35788 - 0 [ 353.160649][T15931] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2951'. [ 353.187204][T15931] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 353.300448][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.322182][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 35788 - 0 [ 353.481910][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.537427][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 35788 - 0 [ 353.553979][T15948] netlink: 211344 bytes leftover after parsing attributes in process `syz.0.2958'. [ 353.557570][T15951] netlink: 'syz.2.2960': attribute type 6 has an invalid length. [ 353.591308][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2960'. [ 353.661785][T15951] bond1: Invalid ad_actor_system MAC address. [ 353.668113][T15951] bond1: option ad_actor_system: invalid value (1) [ 353.680208][T15951] bond1 (unregistering): Released all slaves [ 353.793287][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2962'. [ 353.810636][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.841053][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 35788 - 0 [ 354.086022][T15899] chnl_net:caif_netlink_parms(): no params data found [ 354.111068][T15977] netlink: 'syz.3.2967': attribute type 1 has an invalid length. [ 354.131798][T15976] netlink: 'syz.3.2967': attribute type 6 has an invalid length. [ 354.269974][ T5143] Bluetooth: hci1: command tx timeout [ 354.341079][ T13] bridge0: port 3(batadv0) entered disabled state [ 354.393904][ T13] bridge_slave_1: left allmulticast mode [ 354.420376][ T13] bridge_slave_1: left promiscuous mode [ 354.449814][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.459934][ T13] bridge_slave_0: left promiscuous mode [ 354.465812][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.686998][ T13] gretap0 (unregistering): left promiscuous mode [ 354.714612][T16005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2975'. [ 354.795321][ T13] bond6 (unregistering): (slave bridge1): Releasing backup interface [ 354.804072][ T13] bridge1 (unregistering): left promiscuous mode [ 354.852781][ T13] bond9 (unregistering): (slave bridge2): Releasing backup interface [ 354.913204][ T13] bond1 (unregistering): Released all slaves [ 354.928095][ T13] bond2 (unregistering): Released all slaves [ 354.941897][ T13] bond3 (unregistering): Released all slaves [ 354.969040][ T13] bond4 (unregistering): Released all slaves [ 354.982710][ T13] bond0 (unregistering): left promiscuous mode [ 354.996258][ T13] bond0 (unregistering): Released all slaves [ 355.015495][ T13] bond5 (unregistering): Released all slaves [ 355.029142][ T13] bond6 (unregistering): Released all slaves [ 355.045687][ T13] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 355.056370][ T13] bond7 (unregistering): Released all slaves [ 355.079662][ T13] bond8 (unregistering): Released all slaves [ 355.093300][ T13] bond9 (unregistering): Released all slaves [ 355.108506][ T13] bond10 (unregistering): Released all slaves [ 355.122172][ T13] bond11 (unregistering): Released all slaves [ 355.136559][ T13] bond12 (unregistering): Released all slaves [ 355.165502][T15990] ip6gre0: Master is either lo or non-ether device [ 355.470300][ T13] 9: left promiscuous mode [ 355.511345][T16020] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 355.514446][T16019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2978'. [ 355.573801][T15899] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.598931][T16020] xt_hashlimit: size too large, truncated to 1048576 [ 355.606208][T15899] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.640251][T15899] bridge_slave_0: entered allmulticast mode [ 355.640763][T16025] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2977'. [ 355.648101][T15899] bridge_slave_0: entered promiscuous mode [ 355.673775][T16025] openvswitch: netlink: Flow key attr not present in new flow. [ 355.717780][T15899] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.758529][T15899] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.786979][T15899] bridge_slave_1: entered allmulticast mode [ 355.823755][T15899] bridge_slave_1: entered promiscuous mode [ 355.853823][ T13] tipc: Disabling bearer [ 355.899817][ T13] tipc: Left network mode [ 356.078886][T15899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.121385][T15899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.155893][T16044] xt_TCPMSS: Only works on TCP SYN packets [ 356.274116][T16044] xt_addrtype: ipv6 does not support BROADCAST matching [ 356.275694][T15899] team0: Port device team_slave_0 added [ 356.353008][ T5143] Bluetooth: hci1: command tx timeout [ 356.443283][T15899] team0: Port device team_slave_1 added [ 356.527603][T16057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2987'. [ 356.590246][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 356.636819][T16063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'. [ 356.693192][T16068] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 356.790978][T15899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.800763][T15899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.860351][T15899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.904781][T15899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.922448][T15899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.952699][T15899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.007977][T16049] wg1 speed is unknown, defaulting to 1000 [ 357.175408][T15899] hsr_slave_0: entered promiscuous mode [ 357.190617][T15899] hsr_slave_1: entered promiscuous mode [ 357.197140][T15899] debugfs: 'hsr0' already exists in 'hsr' [ 357.208676][T15899] Cannot create hsr debugfs directory [ 357.452831][T16096] tipc: Enabling of bearer rejected, media not registered [ 357.667869][T16106] FAULT_INJECTION: forcing a failure. [ 357.667869][T16106] name failslab, interval 1, probability 0, space 0, times 0 [ 357.698635][T16106] CPU: 1 UID: 0 PID: 16106 Comm: syz.3.2999 Not tainted syzkaller #0 PREEMPT(full) [ 357.698664][T16106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.698677][T16106] Call Trace: [ 357.698684][T16106] [ 357.698693][T16106] dump_stack_lvl+0xe8/0x150 [ 357.698729][T16106] should_fail_ex+0x412/0x560 [ 357.698767][T16106] should_failslab+0xa8/0x100 [ 357.698796][T16106] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 357.698820][T16106] ? __alloc_skb+0x186/0x7d0 [ 357.698844][T16106] ? __alloc_skb+0x1d0/0x7d0 [ 357.698865][T16106] ? __local_bh_enable_ip+0xd0/0x130 [ 357.698897][T16106] __alloc_skb+0x1d0/0x7d0 [ 357.698927][T16106] netlink_sendmsg+0x5d4/0xb40 [ 357.698963][T16106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.698990][T16106] ? aa_sock_msg_perm+0xf1/0x1b0 [ 357.699029][T16106] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.699057][T16106] ____sys_sendmsg+0x972/0x9f0 [ 357.699095][T16106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.699142][T16106] ? import_iovec+0x73/0xa0 [ 357.699169][T16106] ___sys_sendmsg+0x2a5/0x360 [ 357.699202][T16106] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.699267][T16106] ? __fget_files+0x2a/0x420 [ 357.699286][T16106] ? __fget_files+0x3a0/0x420 [ 357.699315][T16106] __x64_sys_sendmsg+0x1bd/0x2a0 [ 357.699346][T16106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.699384][T16106] ? __pfx_ksys_write+0x10/0x10 [ 357.699421][T16106] do_syscall_64+0x14d/0xf80 [ 357.699448][T16106] ? trace_irq_disable+0x3b/0x150 [ 357.699466][T16106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.699487][T16106] ? clear_bhb_loop+0x40/0x90 [ 357.699513][T16106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.699533][T16106] RIP: 0033:0x7f6ca1d9c819 [ 357.699553][T16106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.699571][T16106] RSP: 002b:00007f6ca2cea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.699595][T16106] RAX: ffffffffffffffda RBX: 00007f6ca2015fa0 RCX: 00007f6ca1d9c819 [ 357.699610][T16106] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 357.699623][T16106] RBP: 00007f6ca2cea090 R08: 0000000000000000 R09: 0000000000000000 [ 357.699635][T16106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.699647][T16106] R13: 00007f6ca2016038 R14: 00007f6ca2015fa0 R15: 00007ffdfa036ce8 [ 357.699681][T16106] [ 358.123847][T16116] __nla_validate_parse: 5 callbacks suppressed [ 358.123863][T16116] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3001'. [ 358.146572][T16116] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 358.219418][ T13] hsr_slave_0: left promiscuous mode [ 358.264233][ T13] hsr_slave_1: left promiscuous mode [ 358.305903][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.366937][ T13] hsr0: left allmulticast mode [ 358.388007][T16122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3003'. [ 358.429627][ T5143] Bluetooth: hci1: command tx timeout [ 358.525572][ T13] pim6reg527 (unregistering): left allmulticast mode [ 358.543077][ T13] pim6reg (unregistering): left allmulticast mode [ 358.706976][ T13] team0 (unregistering): Port device team_slave_1 removed [ 358.816966][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 358.973104][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 359.010526][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3008'. [ 359.019860][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 359.060660][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 359.100988][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 359.201930][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 359.244556][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 359.335996][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 359.508127][ T13] IPVS: stop unused estimator thread 0... [ 360.169881][T15899] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.187002][T15899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.205877][T15899] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.238298][T15899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.265736][T15899] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.312097][T15899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.337186][T15899] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.362496][T15899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.412421][T16206] netlink: 'syz.3.3023': attribute type 2 has an invalid length. [ 360.509656][ T5143] Bluetooth: hci1: command tx timeout [ 360.582074][T15899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.624236][T15899] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.661660][T10160] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.668948][T10160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.708856][T10156] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.716182][T10156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.829963][T16220] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 360.956962][T16220] bond19: Unable to set peer notification delay as MII monitoring is disabled [ 360.998134][T16220] bond19 (unregistering): Released all slaves [ 361.371459][T16240] syzkaller0: entered promiscuous mode [ 361.377003][T16240] syzkaller0: entered allmulticast mode [ 361.465959][T16249] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 361.775800][T15899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.887752][T16277] netlink: 'syz.0.3039': attribute type 2 has an invalid length. [ 361.948145][T16272] xt_CT: No such helper "snmp_trap" [ 361.973513][T16277] v: entered promiscuous mode [ 362.055743][T15899] veth0_vlan: entered promiscuous mode [ 362.200449][T15899] veth1_vlan: entered promiscuous mode [ 362.258864][T15899] veth0_macvtap: entered promiscuous mode [ 362.283739][T15899] veth1_macvtap: entered promiscuous mode [ 362.336609][T15899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.394277][T15899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.418317][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.432027][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.464508][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.494303][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.523629][T16296] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 362.823089][T10152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.848001][T10152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.955278][T10152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.965762][T10152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.445826][T16357] netlink: 'syz.4.3060': attribute type 21 has an invalid length. [ 363.692469][T10160] nci: nci_rsp_packet: unknown rsp opcode 0x405 [ 364.092670][T16382] __nla_validate_parse: 66 callbacks suppressed [ 364.092691][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3061'. [ 366.191766][T16339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.381743][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3064'. [ 366.784703][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.797261][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.817187][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.827083][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.838366][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 367.029483][T16472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3071'. [ 367.060105][T16472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3071'. [ 367.160282][T16475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3072'. [ 367.618226][T16496] netlink: 'syz.2.3078': attribute type 8 has an invalid length. [ 367.626634][T16496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3078'. [ 367.663179][T16461] wg1 speed is unknown, defaulting to 1000 [ 367.684349][T16500] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3078'. [ 367.711768][T16496] bond0: entered promiscuous mode [ 367.723850][T16496] bond_slave_0: entered promiscuous mode [ 367.739945][T16496] bond_slave_1: entered promiscuous mode [ 367.764944][T16496] gretap0: entered promiscuous mode [ 367.782348][T16496] ip6gretap0: entered promiscuous mode [ 367.806169][T16496] hsr1: entered promiscuous mode [ 367.975028][T16500] bond1 (unregistering): Released all slaves [ 368.158366][T16526] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3085'. [ 368.191719][T16532] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3085'. [ 368.206126][T16508] xt_hashlimit: invalid rate [ 368.231540][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'. [ 368.910000][ T5143] Bluetooth: hci3: command tx timeout [ 368.980734][T16461] chnl_net:caif_netlink_parms(): no params data found [ 369.023912][T16567] netlink: 'syz.2.3093': attribute type 32 has an invalid length. [ 369.148733][T16578] __nla_validate_parse: 1 callbacks suppressed [ 369.148754][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 369.175664][T16567] bond1: option coupled_control: invalid value (6) [ 369.184676][T16567] bond1 (unregistering): Released all slaves [ 369.222288][T16583] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3096'. [ 369.249853][T16583] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 369.359947][T16461] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.367494][T16461] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.382636][T16461] bridge_slave_0: entered allmulticast mode [ 369.409062][T16461] bridge_slave_0: entered promiscuous mode [ 369.432953][T16461] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.448265][T16461] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.480491][T16461] bridge_slave_1: entered allmulticast mode [ 369.498615][T16461] bridge_slave_1: entered promiscuous mode [ 369.635704][T16461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.697177][T16461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.731063][T16603] syzkaller1: entered promiscuous mode [ 369.739376][T16603] syzkaller1: entered allmulticast mode [ 369.886305][T16613] netlink: 'syz.2.3106': attribute type 7 has an invalid length. [ 369.927797][T16461] team0: Port device team_slave_0 added [ 369.968626][T16461] team0: Port device team_slave_1 added [ 369.994240][T10160] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.008931][T10160] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.021545][T16623] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 370.034525][T16620] tipc: Started in network mode [ 370.040648][T16620] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 370.054597][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3108'. [ 370.066095][T16620] tipc: Enabled bearer , priority 10 [ 370.116702][T16622] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3108'. [ 370.126872][T16622] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 370.176765][T10160] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.196087][T10160] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.227459][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 370.241542][T16461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.258854][T16461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.292934][T16461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.376440][T16461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.392208][T16461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.420185][T16461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.453541][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3113'. [ 370.506738][T16461] hsr_slave_0: entered promiscuous mode [ 370.513970][T16461] hsr_slave_1: entered promiscuous mode [ 370.520605][T16461] debugfs: 'hsr0' already exists in 'hsr' [ 370.526498][T16461] Cannot create hsr debugfs directory [ 370.541695][T16638] netlink: 'syz.2.3114': attribute type 10 has an invalid length. [ 370.723518][T16644] netlink: 372 bytes leftover after parsing attributes in process `syz.3.3113'. [ 370.927728][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3120'. [ 370.982027][T16670] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3120'. [ 370.992046][T16670] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 371.003186][ T5143] Bluetooth: hci3: command tx timeout [ 371.008414][T16461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.021765][T16461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.169833][T16461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.184565][T16461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.214660][ T5881] tipc: Node number set to 1 [ 371.358841][T16461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.379884][T16461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.423087][T16692] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 371.546848][T16461] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.572240][T16461] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.637372][T16703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3135'. [ 371.671341][T16703] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 371.918456][T16461] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 371.959982][T16461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.977857][T16461] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 372.004982][T16461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.023020][T16461] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 372.057845][T16461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.072008][T16714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.111198][T16461] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 372.122522][T16461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.508287][T16461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.570507][T16461] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.622424][T10160] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.629651][T10160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.731873][T10160] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.739124][T10160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.073049][ T5143] Bluetooth: hci3: command tx timeout [ 373.154198][T16784] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 373.352684][T16461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.360963][T16794] bridge: RTM_NEWNEIGH with invalid ether address [ 373.380920][T16794] bridge: RTM_NEWNEIGH with invalid ether address [ 373.396985][T16797] netlink: 'syz.1.3161': attribute type 1 has an invalid length. [ 373.501342][T16461] veth0_vlan: entered promiscuous mode [ 373.513394][T16797] netlink: 'syz.1.3161': attribute type 1 has an invalid length. [ 373.536504][T16461] veth1_vlan: entered promiscuous mode [ 373.647828][T16461] veth0_macvtap: entered promiscuous mode [ 373.682954][T16461] veth1_macvtap: entered promiscuous mode [ 373.729646][T16813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.771429][T16816] tipc: MTU too low for tipc bearer [ 373.791798][T16461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.835801][T16461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.902618][T10159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.928187][T10159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.963436][T10159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.980280][T10159] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.219477][T10159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.242876][T10159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.373491][T16842] IPv6: sit1: Disabled Multicast RS [ 374.385803][T16842] sit1: entered allmulticast mode [ 374.395173][T16846] FAULT_INJECTION: forcing a failure. [ 374.395173][T16846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.409777][T16846] CPU: 0 UID: 0 PID: 16846 Comm: syz.1.3178 Not tainted syzkaller #0 PREEMPT(full) [ 374.409804][T16846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 374.409816][T16846] Call Trace: [ 374.409824][T16846] [ 374.409832][T16846] dump_stack_lvl+0xe8/0x150 [ 374.409867][T16846] should_fail_ex+0x412/0x560 [ 374.409900][T16846] _copy_from_user+0x2d/0xb0 [ 374.409923][T16846] __sys_bpf+0x229/0x950 [ 374.409944][T16846] ? __pfx___sys_bpf+0x10/0x10 [ 374.409978][T16846] ? ksys_write+0x242/0x270 [ 374.410002][T16846] ? __pfx_ksys_write+0x10/0x10 [ 374.410029][T16846] __x64_sys_bpf+0x7c/0x90 [ 374.410056][T16846] do_syscall_64+0x14d/0xf80 [ 374.410083][T16846] ? trace_irq_disable+0x3b/0x150 [ 374.410100][T16846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.410120][T16846] ? clear_bhb_loop+0x40/0x90 [ 374.410144][T16846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.410164][T16846] RIP: 0033:0x7f9f6d39c819 [ 374.410193][T16846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.410210][T16846] RSP: 002b:00007f9f6e1f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.410233][T16846] RAX: ffffffffffffffda RBX: 00007f9f6d615fa0 RCX: 00007f9f6d39c819 [ 374.410248][T16846] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 374.410261][T16846] RBP: 00007f9f6e1f0090 R08: 0000000000000000 R09: 0000000000000000 [ 374.410274][T16846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.410286][T16846] R13: 00007f9f6d616038 R14: 00007f9f6d615fa0 R15: 00007ffe0e15f5d8 [ 374.410321][T16846] [ 374.422033][T16847] tipc: Started in network mode [ 374.598476][T16847] tipc: Node identity c699031409e3, cluster identity 4711 [ 374.606062][T16847] tipc: Enabled bearer , priority 0 [ 374.614142][T10159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.634058][T10159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.715409][T16853] __nla_validate_parse: 12 callbacks suppressed [ 374.715434][T16853] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3180'. [ 374.728524][T16848] syzkaller0: entered promiscuous mode [ 374.744261][T16848] syzkaller0: entered allmulticast mode [ 374.752726][T16848] tipc: Resetting bearer [ 374.806078][T16841] tipc: Resetting bearer [ 374.851501][T16857] netlink: 'syz.3.3182': attribute type 1 has an invalid length. [ 374.892955][T16859] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3183'. [ 375.151518][ T5143] Bluetooth: hci3: command tx timeout [ 375.156730][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.168472][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.184907][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.193352][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.202172][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 376.753177][T16841] tipc: Disabling bearer [ 376.770374][T16857] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 376.771023][T16862] netlink: 'syz.0.3066': attribute type 4 has an invalid length. [ 376.796332][T16859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.817804][T16859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.834581][T16859] bond0 (unregistering): Released all slaves [ 376.876957][T16874] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3185'. [ 376.932453][T16870] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3066'. [ 376.997782][ T5905] tipc: Node number set to 3480879892 [ 377.028985][T16876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3186'. [ 377.081400][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3186'. [ 377.193595][T16877] bond0: Unable to set up delay as MII monitoring is disabled [ 377.315035][ T5842] Bluetooth: hci2: command tx timeout [ 377.541860][T16877] bond0 (unregistering): Released all slaves [ 377.759080][T16895] bond_slave_1: Device is already in use. [ 377.992695][T10160] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.212962][T10160] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.252185][T16868] wg1 speed is unknown, defaulting to 1000 [ 378.348551][T16915] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 378.413332][T10160] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.451160][T16925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3203'. [ 378.508796][T16925] netlink: 'syz.0.3203': attribute type 1 has an invalid length. [ 378.538268][T10160] .`: (slave netdevsim0): Releasing backup interface [ 378.554105][T10160] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.596506][T16932] ip6tnl1: entered allmulticast mode [ 378.675248][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3206'. [ 378.697661][T16935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3206'. [ 378.760660][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.767020][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.075994][T16949] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3210'. [ 379.154147][T16868] chnl_net:caif_netlink_parms(): no params data found [ 379.268292][T10160] batadv1: left allmulticast mode [ 379.283069][T10160] batadv1: left promiscuous mode [ 379.294737][T10160] bridge0: port 1(batadv1) entered disabled state [ 379.391234][ T5842] Bluetooth: hci2: command tx timeout [ 379.557470][T16978] x_tables: duplicate underflow at hook 2 [ 379.688226][T10160] batman_adv: batadv0: Removing interface: gretap2 [ 379.719890][T10160] dvmrp0 (unregistering): left allmulticast mode [ 379.748724][T10160] bond4 (unregistering): (slave geneve2): Releasing active interface [ 379.829324][T10160] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 379.964999][T10160] .` (unregistering): Released all slaves [ 379.974897][T10160] bond1 (unregistering): Released all slaves [ 379.990886][T10160] bond0 (unregistering): Released all slaves [ 380.005530][T10160] bond2 (unregistering): Released all slaves [ 380.023374][T10160] bond3 (unregistering): Released all slaves [ 380.038207][T10160] bond4 (unregistering): Released all slaves [ 380.054982][T10160] bond5 (unregistering): Released all slaves [ 380.075615][T10160] bond6 (unregistering): Released all slaves [ 380.093770][T10160] bond7 (unregistering): Released all slaves [ 380.107232][T10160] bond8 (unregistering): Released all slaves [ 380.129312][T10160] bond9 (unregistering): Released all slaves [ 380.142793][T10160] bond10 (unregistering): Released all slaves [ 380.156970][T10160] bond11 (unregistering): (slave lo): Releasing backup interface [ 380.172485][T10160] bond11 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 380.185301][T10160] bond11 (unregistering): Released all slaves [ 380.201653][T10160] bond12 (unregistering): Released all slaves [ 380.215671][T10160] bond13 (unregistering): Released all slaves [ 380.228880][T10160] bond14 (unregistering): Released all slaves [ 380.264034][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1 [ 380.407257][T16868] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.429568][T16868] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.436881][T16868] bridge_slave_0: entered allmulticast mode [ 380.497764][T16868] bridge_slave_0: entered promiscuous mode [ 380.552640][T16868] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.564711][T16868] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.587819][T16996] netlink: 'syz.0.3218': attribute type 13 has an invalid length. [ 380.597627][T16868] bridge_slave_1: entered allmulticast mode [ 380.628375][T16868] bridge_slave_1: entered promiscuous mode [ 380.646886][T10160] tipc: Left network mode [ 380.678646][T16996] veth0_macvtap: left promiscuous mode [ 380.709520][T16996] macvtap0: entered allmulticast mode [ 380.751052][T16996] macvtap0: refused to change device tx_queue_len [ 380.806697][T16999] ipt_REJECT: ECHOREPLY no longer supported. [ 380.817668][T10160] IPVS: stopping master sync thread 15789 ... [ 380.952909][T16868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.983746][T16868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.240656][T17033] FAULT_INJECTION: forcing a failure. [ 381.240656][T17033] name failslab, interval 1, probability 0, space 0, times 0 [ 381.277136][T17033] CPU: 0 UID: 0 PID: 17033 Comm: syz.0.3225 Not tainted syzkaller #0 PREEMPT(full) [ 381.277167][T17033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 381.277179][T17033] Call Trace: [ 381.277186][T17033] [ 381.277195][T17033] dump_stack_lvl+0xe8/0x150 [ 381.277229][T17033] should_fail_ex+0x412/0x560 [ 381.277267][T17033] should_failslab+0xa8/0x100 [ 381.277296][T17033] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 381.277321][T17033] ? trace_kmalloc+0x2a/0x110 [ 381.277341][T17033] ? page_pool_create_percpu+0x76/0xb80 [ 381.277377][T17033] page_pool_create_percpu+0x76/0xb80 [ 381.277406][T17033] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 381.277437][T17033] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 381.277466][T17033] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 381.277509][T17033] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 381.277543][T17033] ? __pfx_autoremove_wake_function+0x10/0x10 [ 381.277569][T17033] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 381.277616][T17033] ? 0xffffffffa02016d4 [ 381.277635][T17033] ? 0xffffffffa0203cd8 [ 381.277681][T17033] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 381.277717][T17033] ? _copy_from_user+0x94/0xb0 [ 381.277742][T17033] ? bpf_test_init+0x113/0x150 [ 381.277762][T17033] ? xdp_convert_md_to_buff+0x5b/0x330 [ 381.277788][T17033] bpf_prog_test_run_xdp+0x81c/0x1160 [ 381.277829][T17033] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 381.277857][T17033] ? __fget_files+0x2a/0x420 [ 381.277882][T17033] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 381.277907][T17033] bpf_prog_test_run+0x2c7/0x340 [ 381.277933][T17033] __sys_bpf+0x643/0x950 [ 381.277956][T17033] ? __pfx___sys_bpf+0x10/0x10 [ 381.277991][T17033] ? ksys_write+0x242/0x270 [ 381.278016][T17033] ? __pfx_ksys_write+0x10/0x10 [ 381.278047][T17033] __x64_sys_bpf+0x7c/0x90 [ 381.278076][T17033] do_syscall_64+0x14d/0xf80 [ 381.278111][T17033] ? trace_irq_disable+0x3b/0x150 [ 381.278128][T17033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.278147][T17033] ? clear_bhb_loop+0x40/0x90 [ 381.278171][T17033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.278189][T17033] RIP: 0033:0x7f494979c819 [ 381.278205][T17033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.278222][T17033] RSP: 002b:00007f494a5bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.278243][T17033] RAX: ffffffffffffffda RBX: 00007f4949a15fa0 RCX: 00007f494979c819 [ 381.278260][T17033] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 381.278274][T17033] RBP: 00007f494a5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 381.278286][T17033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.278296][T17033] R13: 00007f4949a16038 R14: 00007f4949a15fa0 R15: 00007ffc8e830ac8 [ 381.278328][T17033] [ 381.558785][ T5842] Bluetooth: hci2: command tx timeout [ 381.634228][T17038] __nla_validate_parse: 2 callbacks suppressed [ 381.634250][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3228'. [ 381.650982][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3228'. [ 381.706374][T16868] team0: Port device team_slave_0 added [ 381.882508][T16868] team0: Port device team_slave_1 added [ 381.972880][T17055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3231'. [ 382.065813][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2 [ 382.157624][T16868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.192424][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.249250][T16868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.297659][T17064] FAULT_INJECTION: forcing a failure. [ 382.297659][T17064] name failslab, interval 1, probability 0, space 0, times 0 [ 382.318380][T17064] CPU: 1 UID: 0 PID: 17064 Comm: syz.0.3237 Not tainted syzkaller #0 PREEMPT(full) [ 382.318410][T17064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 382.318422][T17064] Call Trace: [ 382.318429][T17064] [ 382.318437][T17064] dump_stack_lvl+0xe8/0x150 [ 382.318470][T17064] should_fail_ex+0x412/0x560 [ 382.318505][T17064] should_failslab+0xa8/0x100 [ 382.318532][T17064] __kvmalloc_node_noprof+0x178/0x8a0 [ 382.318556][T17064] ? page_pool_create_percpu+0x2dd/0xb80 [ 382.318583][T17064] ? page_pool_create_percpu+0xaf/0xb80 [ 382.318615][T17064] page_pool_create_percpu+0x2dd/0xb80 [ 382.318644][T17064] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 382.318673][T17064] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 382.318704][T17064] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 382.318747][T17064] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 382.318779][T17064] ? __pfx_autoremove_wake_function+0x10/0x10 [ 382.318806][T17064] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 382.318852][T17064] ? 0xffffffffa02016d4 [ 382.318869][T17064] ? 0xffffffffa02017d8 [ 382.318914][T17064] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 382.318950][T17064] ? _copy_from_user+0x94/0xb0 [ 382.318975][T17064] ? bpf_test_init+0x113/0x150 [ 382.318996][T17064] ? xdp_convert_md_to_buff+0x5b/0x330 [ 382.319022][T17064] bpf_prog_test_run_xdp+0x81c/0x1160 [ 382.319064][T17064] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 382.319093][T17064] ? __fget_files+0x2a/0x420 [ 382.319127][T17064] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 382.319156][T17064] bpf_prog_test_run+0x2c7/0x340 [ 382.319181][T17064] __sys_bpf+0x643/0x950 [ 382.319202][T17064] ? __pfx___sys_bpf+0x10/0x10 [ 382.319237][T17064] ? ksys_write+0x242/0x270 [ 382.319262][T17064] ? __pfx_ksys_write+0x10/0x10 [ 382.319290][T17064] __x64_sys_bpf+0x7c/0x90 [ 382.319319][T17064] do_syscall_64+0x14d/0xf80 [ 382.319345][T17064] ? trace_irq_disable+0x3b/0x150 [ 382.319362][T17064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.319382][T17064] ? clear_bhb_loop+0x40/0x90 [ 382.319406][T17064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.319424][T17064] RIP: 0033:0x7f494979c819 [ 382.319443][T17064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.319461][T17064] RSP: 002b:00007f494a5bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.319483][T17064] RAX: ffffffffffffffda RBX: 00007f4949a15fa0 RCX: 00007f494979c819 [ 382.319497][T17064] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 382.319510][T17064] RBP: 00007f494a5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 382.319521][T17064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.319533][T17064] R13: 00007f4949a16038 R14: 00007f4949a15fa0 R15: 00007ffc8e830ac8 [ 382.319562][T17064] [ 382.323106][T16868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.405230][T17072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3235'. [ 382.406146][T17064] page_pool_create_percpu() gave up with errno -12 [ 382.423393][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.656325][T16868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.663065][T17080] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 382.898115][T17084] syzkaller1: entered promiscuous mode [ 382.916074][T17084] syzkaller1: entered allmulticast mode [ 382.997901][T16868] hsr_slave_0: entered promiscuous mode [ 383.006517][T16868] hsr_slave_1: entered promiscuous mode [ 383.034329][T16868] debugfs: 'hsr0' already exists in 'hsr' [ 383.046907][T16868] Cannot create hsr debugfs directory [ 383.338361][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3243'. [ 383.400610][T17105] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3243'. [ 383.419567][T17105] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 383.629902][ T5837] Bluetooth: hci2: command tx timeout [ 383.805891][T17116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'. [ 383.879548][T17124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.920496][T10160] hsr_slave_0: left promiscuous mode [ 383.928503][T10160] hsr_slave_1: left promiscuous mode [ 383.947706][T17129] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3251'. [ 383.982745][T10160] vlan0: left allmulticast mode [ 383.998024][T10160] veth0_vlan: left allmulticast mode [ 384.011350][T10160] vlan0: left promiscuous mode [ 384.017085][T10160] veth1_macvtap: left promiscuous mode [ 384.028399][T10160] veth0_macvtap: left promiscuous mode [ 384.037948][T10160] veth1_vlan: left promiscuous mode [ 384.043471][T10160] veth0_vlan: left promiscuous mode [ 384.781501][T17117] bridge0: port 1(bridge_slave_0) entered learning state [ 384.805506][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3 [ 384.878771][T17134] xt_NFQUEUE: number of total queues is 0 [ 385.108044][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3256'. [ 385.183470][T17150] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3256'. [ 385.217763][T17150] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 385.880567][T17166] netlink: 'syz.0.3261': attribute type 1 has an invalid length. [ 386.002861][T17172] batadv0: mtu greater than device maximum [ 386.108670][T17180] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20003 [ 386.202513][T17184] tipc: Enabling of bearer rejected, failed to enable media [ 386.534277][T10160] IPVS: stop unused estimator thread 0... [ 387.185914][T17230] __nla_validate_parse: 1 callbacks suppressed [ 387.185937][T17230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3281'. [ 387.233229][T16868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 387.272579][T16868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.292504][T16868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 387.305674][T16868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.315016][T16868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 387.322428][T17236] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3284'. [ 387.353690][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3284'. [ 387.368617][T16868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 387.380715][T17236] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 387.387160][T16868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 387.404927][T17233] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.426264][T16868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.582893][T17251] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 387.776369][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3288'. [ 387.833636][T16868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.928243][T17238] wg1 speed is unknown, defaulting to 1000 [ 387.954290][T16868] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.013753][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.021025][T10149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.081286][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3290'. [ 388.099499][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3290'. [ 388.148912][T10160] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.156174][T10160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.666223][T17286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3293'. [ 388.681199][T17283] batadv2: entered allmulticast mode [ 389.032018][T17300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.185909][T16868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.268973][T17308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3301'. [ 389.335346][T17308] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3301'. [ 389.694155][T17336] GUP no longer grows the stack in syz.0.3307 (17336): 200000003000-20000000a000 (200000001000) [ 389.722258][T17336] CPU: 1 UID: 0 PID: 17336 Comm: syz.0.3307 Not tainted syzkaller #0 PREEMPT(full) [ 389.722290][T17336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 389.722301][T17336] Call Trace: [ 389.722310][T17336] [ 389.722318][T17336] dump_stack_lvl+0xe8/0x150 [ 389.722354][T17336] __get_user_pages+0x2453/0x29d0 [ 389.722385][T17336] ? __lock_acquire+0x6b5/0x2cf0 [ 389.722429][T17336] ? __gup_longterm_locked+0xc4e/0x1630 [ 389.722460][T17336] ? down_read_killable+0x1bb/0x340 [ 389.722488][T17336] __gup_longterm_locked+0xdcf/0x1630 [ 389.722545][T17336] gup_fast_fallback+0x1d82/0x22e0 [ 389.722609][T17336] ? __pfx_gup_fast_fallback+0x10/0x10 [ 389.722644][T17336] ? is_valid_gup_args+0x11f/0x200 [ 389.722676][T17336] ? get_user_pages_fast+0x4d/0xb0 [ 389.722709][T17336] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 389.722744][T17336] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 389.722771][T17336] iov_iter_get_pages2+0x5e/0xa0 [ 389.722799][T17336] __se_sys_vmsplice+0x7b3/0x1490 [ 389.722851][T17336] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 389.722875][T17336] ? __pfx_futex_wake+0x10/0x10 [ 389.722913][T17336] ? lockdep_hardirqs_on+0x7a/0x110 [ 389.723009][T17336] do_syscall_64+0x14d/0xf80 [ 389.723036][T17336] ? trace_irq_disable+0x3b/0x150 [ 389.723054][T17336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.723075][T17336] ? clear_bhb_loop+0x40/0x90 [ 389.723100][T17336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.723121][T17336] RIP: 0033:0x7f494979c819 [ 389.723141][T17336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.723158][T17336] RSP: 002b:00007f494a5bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 389.723180][T17336] RAX: ffffffffffffffda RBX: 00007f4949a15fa0 RCX: 00007f494979c819 [ 389.723195][T17336] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 389.723208][T17336] RBP: 00007f4949832c91 R08: 0000000000000000 R09: 0000000000000000 [ 389.723220][T17336] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 389.723232][T17336] R13: 00007f4949a16038 R14: 00007f4949a15fa0 R15: 00007ffc8e830ac8 [ 389.723269][T17336] [ 389.723419][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3307'. [ 390.279107][T16868] veth0_vlan: entered promiscuous mode [ 390.318865][T16868] veth1_vlan: entered promiscuous mode [ 390.395395][T16868] veth0_macvtap: entered promiscuous mode [ 390.435646][T16868] veth1_macvtap: entered promiscuous mode [ 390.538526][T17376] FAULT_INJECTION: forcing a failure. [ 390.538526][T17376] name failslab, interval 1, probability 0, space 0, times 0 [ 390.552757][T17376] CPU: 0 UID: 0 PID: 17376 Comm: syz.0.3319 Not tainted syzkaller #0 PREEMPT(full) [ 390.552787][T17376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 390.552809][T17376] Call Trace: [ 390.552818][T17376] [ 390.552826][T17376] dump_stack_lvl+0xe8/0x150 [ 390.552863][T17376] should_fail_ex+0x412/0x560 [ 390.552900][T17376] should_failslab+0xa8/0x100 [ 390.552927][T17376] ? skb_clone+0x212/0x3a0 [ 390.552956][T17376] kmem_cache_alloc_noprof+0x87/0x650 [ 390.552979][T17376] ? __netlink_lookup+0xc6/0x8b0 [ 390.553011][T17376] skb_clone+0x212/0x3a0 [ 390.553044][T17376] __netlink_deliver_tap+0x404/0x850 [ 390.553080][T17376] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.553106][T17376] netlink_deliver_tap+0x19c/0x1b0 [ 390.553130][T17376] netlink_unicast+0x7e3/0x9b0 [ 390.553161][T17376] ? __pfx_netlink_unicast+0x10/0x10 [ 390.553185][T17376] ? netlink_sendmsg+0x650/0xb40 [ 390.553205][T17376] ? skb_put+0x11b/0x210 [ 390.553233][T17376] netlink_sendmsg+0x813/0xb40 [ 390.553268][T17376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.553295][T17376] ? aa_sock_msg_perm+0xf1/0x1b0 [ 390.553330][T17376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.553358][T17376] ____sys_sendmsg+0x972/0x9f0 [ 390.553397][T17376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.553436][T17376] ? import_iovec+0x73/0xa0 [ 390.553465][T17376] ___sys_sendmsg+0x2a5/0x360 [ 390.553500][T17376] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.553570][T17376] ? __fget_files+0x2a/0x420 [ 390.553589][T17376] ? __fget_files+0x3a0/0x420 [ 390.553620][T17376] __x64_sys_sendmsg+0x1bd/0x2a0 [ 390.553651][T17376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.553691][T17376] ? __pfx_ksys_write+0x10/0x10 [ 390.553728][T17376] do_syscall_64+0x14d/0xf80 [ 390.553756][T17376] ? trace_irq_disable+0x3b/0x150 [ 390.553773][T17376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.553834][T17376] ? clear_bhb_loop+0x40/0x90 [ 390.553861][T17376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.553881][T17376] RIP: 0033:0x7f494979c819 [ 390.553901][T17376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.553919][T17376] RSP: 002b:00007f494a5bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.553943][T17376] RAX: ffffffffffffffda RBX: 00007f4949a15fa0 RCX: 00007f494979c819 [ 390.553957][T17376] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 390.553971][T17376] RBP: 00007f494a5bf090 R08: 0000000000000000 R09: 0000000000000000 [ 390.553983][T17376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.553996][T17376] R13: 00007f4949a16038 R14: 00007f4949a15fa0 R15: 00007ffc8e830ac8 [ 390.554030][T17376] [ 390.959472][T16868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.014347][T16868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.125636][T17397] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20000 [ 391.139889][T10152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.161393][T10152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.203942][T10152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.272056][T10152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.472129][T10160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.491754][T10160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.616211][T10160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.634723][T10160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.806608][T17423] syzkaller1: entered promiscuous mode [ 391.817336][T17430] netlink: 'syz.1.3333': attribute type 1 has an invalid length. [ 391.829266][T17423] syzkaller1: entered allmulticast mode [ 391.887182][T17429] team0: entered allmulticast mode [ 391.893190][T17429] team_slave_0: entered allmulticast mode [ 391.915032][T17429] team_slave_1: entered allmulticast mode [ 392.048441][T17430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.134826][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.145260][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.155453][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.164870][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.174865][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 392.499365][T17429] batadv_slave_1: entered allmulticast mode [ 393.459352][T17486] __nla_validate_parse: 2 callbacks suppressed [ 393.459373][T17486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3347'. [ 393.613398][T17444] wg1 speed is unknown, defaulting to 1000 [ 393.713537][T17502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3352'. [ 394.061030][T17522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3356'. [ 394.269620][ T5837] Bluetooth: hci0: command tx timeout [ 394.366121][T17538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3361'. [ 394.487238][T17444] chnl_net:caif_netlink_parms(): no params data found [ 394.682534][T17549] netlink: 'syz.4.3365': attribute type 6 has an invalid length. [ 394.780391][T17444] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.787685][T17444] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.800876][T17444] bridge_slave_0: entered allmulticast mode [ 394.809068][T17444] bridge_slave_0: entered promiscuous mode [ 394.818938][T17558] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.822291][T17444] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.833298][T17444] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.840710][T17444] bridge_slave_1: entered allmulticast mode [ 394.848839][T17444] bridge_slave_1: entered promiscuous mode [ 395.255676][T17560] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 395.377160][T17562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.441856][T17444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.461348][T17444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.491469][T17551] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 395.497754][T17551] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 395.545275][T17444] team0: Port device team_slave_0 added [ 395.568585][T17444] team0: Port device team_slave_1 added [ 395.577316][T17576] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3371'. [ 395.586740][T17576] netlink: 'syz.0.3371': attribute type 9 has an invalid length. [ 395.674337][T17580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3372'. [ 395.776646][T17444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.785589][T17551] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 395.794330][T17551] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 395.810704][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.843115][T17444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.903018][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3375'. [ 396.012103][T17551] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 396.012820][T17444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.018062][T17551] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 396.053958][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.117746][T17444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.210825][T17551] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 396.217902][T17551] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 396.246350][T17603] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3378'. [ 396.340655][T17551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 396.347221][T17551] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 396.359235][ C0] ------------[ cut here ]------------ [ 396.364976][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 396.371673][ C0] WARNING: kernel/workqueue.c:2271 at __queue_work+0xd53/0x1020, CPU#0: rcu_preempt/16 [ 396.381486][ C0] Modules linked in: [ 396.385621][ C0] CPU: 0 UID: 0 PID: 16 Comm: rcu_preempt Not tainted syzkaller #0 PREEMPT(full) [ 396.394830][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 396.404986][ C0] RIP: 0010:__queue_work+0xd7e/0x1020 [ 396.410386][ C0] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 b3 a5 a2 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 396.430011][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00010086 [ 396.436198][ C0] RAX: 1ffff1100f480951 RBX: 0000000000000008 RCX: ffff88801da88000 [ 396.444177][ C0] RDX: ffff888036e97978 RSI: ffffffff8aa0b370 RDI: ffffffff9014d370 [ 396.452243][ C0] RBP: 0000000000000100 R08: ffffffff9011deb7 R09: 1ffffffff2023bd6 [ 396.460229][ C0] R10: dffffc0000000000 R11: ffffffff818d7310 R12: dffffc0000000000 [ 396.468205][ C0] R13: ffff88807a404a88 R14: ffffffff9014d370 R15: ffff888036e97978 [ 396.476183][ C0] FS: 0000000000000000(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 396.485121][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.491712][ C0] CR2: 0000001b30e23ffc CR3: 0000000082320000 CR4: 00000000003526f0 [ 396.499698][ C0] Call Trace: [ 396.502984][ C0] [ 396.505841][ C0] call_timer_fn+0x192/0x640 [ 396.510449][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 396.516267][ C0] ? call_timer_fn+0xd4/0x640 [ 396.520954][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 396.526083][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 396.531225][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 396.537061][ C0] __run_timer_base+0x67e/0x8b0 [ 396.541950][ C0] ? ktime_get+0x45/0x200 [ 396.546315][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 396.551707][ C0] ? sched_clock_cpu+0x74/0x440 [ 396.556598][ C0] run_timer_softirq+0xb7/0x170 [ 396.561463][ C0] handle_softirqs+0x22a/0x870 [ 396.566250][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 396.571037][ C0] __irq_exit_rcu+0x5f/0x150 [ 396.575661][ C0] irq_exit_rcu+0x9/0x30 [ 396.580002][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 396.585659][ C0] [ 396.588595][ C0] [ 396.591840][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.597854][ C0] RIP: 0010:finish_task_switch+0x245/0x920 [ 396.603875][ C0] Code: 00 00 48 85 db 0f 85 e8 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 49 83 c4 48 4c 89 e7 e8 d5 6b 1d 0a e8 f0 94 38 00 fb 4c 8b 65 c0 <49> 8d bc 24 80 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 396.623603][ C0] RSP: 0018:ffffc90000157818 EFLAGS: 00000206 [ 396.629687][ C0] RAX: 00000000000cd2f5 RBX: 0000000000000000 RCX: 0000000080000001 [ 396.637681][ C0] RDX: 0000000000000000 RSI: ffffffff8defc649 RDI: ffffffff8c27d580 [ 396.645675][ C0] RBP: ffffc90000157870 R08: ffffffff9011deb7 R09: 1ffffffff2023bd6 [ 396.653685][ C0] R10: dffffc0000000000 R11: fffffbfff2023bd7 R12: ffff88801da88000 [ 396.661670][ C0] R13: dffffc0000000000 R14: ffff88801eb63d00 R15: ffff8880b863b998 [ 396.669765][ C0] ? finish_task_switch+0x240/0x920 [ 396.675031][ C0] __schedule+0x15e5/0x52d0 [ 396.679552][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 396.684519][ C0] ? __pfx___schedule+0x10/0x10 [ 396.689387][ C0] ? schedule+0x90/0x360 [ 396.693687][ C0] schedule+0x164/0x360 [ 396.697885][ C0] schedule_timeout+0x158/0x2c0 [ 396.702761][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 396.708145][ C0] ? __pfx_process_timeout+0x10/0x10 [ 396.713462][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 396.719279][ C0] ? prepare_to_swait_event+0x340/0x370 [ 396.724861][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 396.729902][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 396.735202][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 396.739977][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 396.745273][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 396.750487][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 396.756305][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 396.760911][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 396.766124][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 396.771957][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 396.776907][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 396.781950][ C0] kthread+0x388/0x470 [ 396.786035][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 396.791259][ C0] ? __pfx_kthread+0x10/0x10 [ 396.795858][ C0] ret_from_fork+0x51e/0xb90 [ 396.800467][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 396.805586][ C0] ? __switch_to+0xc7d/0x1450 [ 396.810295][ C0] ? __pfx_kthread+0x10/0x10 [ 396.814978][ C0] ret_from_fork_asm+0x1a/0x30 [ 396.819779][ C0] [ 396.822814][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 396.830191][ C0] CPU: 0 UID: 0 PID: 16 Comm: rcu_preempt Not tainted syzkaller #0 PREEMPT(full) [ 396.839394][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 396.849460][ C0] Call Trace: [ 396.852748][ C0] [ 396.855598][ C0] vpanic+0x56c/0xa60 [ 396.859595][ C0] ? __pfx__printk+0x10/0x10 [ 396.864210][ C0] ? __pfx_vpanic+0x10/0x10 [ 396.868726][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 396.874026][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 396.879237][ C0] panic+0xc5/0xd0 [ 396.882970][ C0] ? __pfx_panic+0x10/0x10 [ 396.887410][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 396.892389][ C0] __warn+0x315/0x4f0 [ 396.896387][ C0] ? __queue_work+0xd53/0x1020 [ 396.901171][ C0] ? __queue_work+0xd53/0x1020 [ 396.905945][ C0] __report_bug+0x29a/0x540 [ 396.910472][ C0] ? __queue_work+0xd53/0x1020 [ 396.915336][ C0] ? __pfx___report_bug+0x10/0x10 [ 396.920368][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 396.925783][ C0] ? look_up_lock_class+0x57/0x110 [ 396.930908][ C0] ? register_lock_class+0x31/0x2e0 [ 396.936210][ C0] report_bug_entry+0x19a/0x290 [ 396.941089][ C0] ? __queue_work+0xd7e/0x1020 [ 396.945865][ C0] ? __queue_work+0xd83/0x1020 [ 396.950723][ C0] handle_bug+0xce/0x200 [ 396.954972][ C0] exc_invalid_op+0x1a/0x50 [ 396.959483][ C0] asm_exc_invalid_op+0x1a/0x20 [ 396.964357][ C0] RIP: 0010:__queue_work+0xd7e/0x1020 [ 396.969768][ C0] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 b3 a5 a2 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc [ 396.989391][ C0] RSP: 0018:ffffc90000007c10 EFLAGS: 00010086 [ 396.995486][ C0] RAX: 1ffff1100f480951 RBX: 0000000000000008 RCX: ffff88801da88000 [ 397.003465][ C0] RDX: ffff888036e97978 RSI: ffffffff8aa0b370 RDI: ffffffff9014d370 [ 397.011447][ C0] RBP: 0000000000000100 R08: ffffffff9011deb7 R09: 1ffffffff2023bd6 [ 397.019453][ C0] R10: dffffc0000000000 R11: ffffffff818d7310 R12: dffffc0000000000 [ 397.027427][ C0] R13: ffff88807a404a88 R14: ffffffff9014d370 R15: ffff888036e97978 [ 397.035410][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 397.041237][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 397.046550][ C0] call_timer_fn+0x192/0x640 [ 397.051170][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 397.056988][ C0] ? call_timer_fn+0xd4/0x640 [ 397.061688][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 397.066824][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 397.072052][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 397.077875][ C0] __run_timer_base+0x67e/0x8b0 [ 397.082736][ C0] ? ktime_get+0x45/0x200 [ 397.087083][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 397.092469][ C0] ? sched_clock_cpu+0x74/0x440 [ 397.097341][ C0] run_timer_softirq+0xb7/0x170 [ 397.102200][ C0] handle_softirqs+0x22a/0x870 [ 397.106981][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 397.111772][ C0] __irq_exit_rcu+0x5f/0x150 [ 397.116392][ C0] irq_exit_rcu+0x9/0x30 [ 397.120656][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 397.126404][ C0] [ 397.129345][ C0] [ 397.132288][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 397.138272][ C0] RIP: 0010:finish_task_switch+0x245/0x920 [ 397.144088][ C0] Code: 00 00 48 85 db 0f 85 e8 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 49 83 c4 48 4c 89 e7 e8 d5 6b 1d 0a e8 f0 94 38 00 fb 4c 8b 65 c0 <49> 8d bc 24 80 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 397.163701][ C0] RSP: 0018:ffffc90000157818 EFLAGS: 00000206 [ 397.169783][ C0] RAX: 00000000000cd2f5 RBX: 0000000000000000 RCX: 0000000080000001 [ 397.177760][ C0] RDX: 0000000000000000 RSI: ffffffff8defc649 RDI: ffffffff8c27d580 [ 397.185746][ C0] RBP: ffffc90000157870 R08: ffffffff9011deb7 R09: 1ffffffff2023bd6 [ 397.193792][ C0] R10: dffffc0000000000 R11: fffffbfff2023bd7 R12: ffff88801da88000 [ 397.201815][ C0] R13: dffffc0000000000 R14: ffff88801eb63d00 R15: ffff8880b863b998 [ 397.209823][ C0] ? finish_task_switch+0x240/0x920 [ 397.215045][ C0] __schedule+0x15e5/0x52d0 [ 397.219653][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 397.224619][ C0] ? __pfx___schedule+0x10/0x10 [ 397.229490][ C0] ? schedule+0x90/0x360 [ 397.233771][ C0] schedule+0x164/0x360 [ 397.237945][ C0] schedule_timeout+0x158/0x2c0 [ 397.242807][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 397.248194][ C0] ? __pfx_process_timeout+0x10/0x10 [ 397.253517][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 397.259343][ C0] ? prepare_to_swait_event+0x340/0x370 [ 397.264986][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 397.269849][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 397.275059][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 397.279836][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 397.285131][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 397.290341][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 397.296158][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 397.300762][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 397.305983][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 397.311804][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 397.316782][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 397.321829][ C0] kthread+0x388/0x470 [ 397.325907][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 397.331121][ C0] ? __pfx_kthread+0x10/0x10 [ 397.335723][ C0] ret_from_fork+0x51e/0xb90 [ 397.340340][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 397.345461][ C0] ? __switch_to+0xc7d/0x1450 [ 397.350154][ C0] ? __pfx_kthread+0x10/0x10 [ 397.354749][ C0] ret_from_fork_asm+0x1a/0x30 [ 397.359541][ C0] [ 397.362962][ C0] Kernel Offset: disabled [ 397.367289][ C0] Rebooting in 86400 seconds..