last executing test programs: 11.144274979s ago: executing program 3 (id=3060): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x4}}}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x9, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x6, "a874e400"}, @generic={0x1, 0x2}]}}}}}}}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r5, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000040900010073797a300000000034000000030a01010000000000000000050000000900010073797a300000000009000300730900000000000000000a40000000042c0079a7050a05000000000000000000050000060c00024000000000000000010900010073797a300000000014000000110001"], 0xa8}}, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)={0x1130, r9, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_APDU={0xc4, 0x19, "2fc2ca67292148e2c7748ad09a91050f1dff9c391db3919315554e70085efc7bddf20aff620cebea9fb10caddc7ac19a7ddda101e0e5ee2fdd2d0827efb6aa853d97864de3917bce3367a5517de2b91926a9a4a33ba644665c1aed5cdfb64fe80203bf3a8e23c3e321cc030d914c26133d6d993d996483ab6a25d97017ab9f83e71f7ba3b7aea225f310c82d485df6cd342e6d095ccbbb86854fd7b2a1ac7210d219c4020b6e3d77641c8a80de2de151d18b4b601df38d105f29df3c32558c50"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_SE_APDU={0x29, 0x19, "b0f873962d98caba4249e981bba0437a8b92e52721b5179ef420d296db395b9208b12dce94"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x1130}, 0x1, 0x0, 0x0, 0x90}, 0x40804) 7.968783921s ago: executing program 3 (id=3073): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = socket(0x11, 0x1, 0x2ff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0xfffffffc, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast2}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3509}]}, 0x78}, 0x1, 0x7}, 0x0) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x8, 0x8, 0x0, 0x5, 0x3, 0x4, 0x8, [0x8001, 0x4]}}) 7.769891874s ago: executing program 3 (id=3077): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}]}, {0x0, [0x30]}}, &(0x7f0000000180)=""/2, 0x2b, 0x2, 0x0, 0x1, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000100006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 3.829662752s ago: executing program 0 (id=3118): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000ddf7ffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000d96c09a96397ad8e86c5b7020000140000000005000000bca900000000000035090100fff900009500000000000000b70200000026104e709af8ff04000000b509000001000000dbaaf8fff1000000bf860000000000000708ffe2fffdffffbfa4000000000000070400a24330fa9ec46cfbb5d65f00f0ffffffc702000008000000182200"/153, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) write(r0, &(0x7f00000004c0)="a72bd43cea5f2a5bf92aecf75b0875cb9d9f6b83f0efc7572ddc1c33c533fd6b1a17a2169bfbc682f3da8c14e948111ebd1cf57ce3ef495aaa6348dc6935e3a6a54e1c7c9cb8cbcc8ef2ec553c714f94ca7c23a84de8be6132500b2bc6d1fc8e338805282ab094684c79dc1b607660d203cf", 0x72) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r2, 0xffffffffffffffff, 0x9, 0x0, @void}, 0x10) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000200)={0x0, @can={0x1d, r5}, @l2tp={0x2, 0x0, @loopback, 0x1}, @tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x41, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000000)='ip6_vti0\x00', 0x100000000, 0xc9d5, 0x2}) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast1, 0x700, 0x8000, 0xfffffffc}}) sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r9 = socket$kcm(0x23, 0x5, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r9, 0x800) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0001000000000000803afffe"], 0x0) accept4(r9, 0x0, 0x0, 0x80000) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 3.80761451s ago: executing program 4 (id=3119): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22040803) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x80000000, 0x4) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000080)="ca91802d070e3f3204b86cee3ca3d7b2c38b389f1f16503d826d62cf0b6eaf5ca76b1f80cbc270bd97b8e6b2bba0ae7a0d0d792e03fab46693ddc3af151a83646b7fa0fa3ffef8f2f2c61bc028a10aaf0eaf1633d1ca48797d6ebacc95a6c41c867c6a80843db173d4200c7ce163013cdf27395f9ad462c065c57e8bdf441d41ecabaf83df73c7bd28abb6829ca0210eb71179c8e34179ce42e3e877cacf350ffe3954d459dd190f3b8ee3cbd0c69e7aeccab03c332d3333bf09f3f1682beaa502d93ec9ec382d017772126dec668fa5337d7afedd96afec48bb096f4a82", 0xde}, {&(0x7f0000000180)="aa59e70b36058084906d7f1274d98f73916dd0e072caf4a082f5094b3dae4e318a19133e4d1cb65b806a4fbec9251cb2413c58c9b4e2dcb583ae26ad30795596b89d5825c8696242800aff397ee2f60d891d14e161d0652cab674c14a6fb062ee53e98ad1f1a989208", 0x69}, {&(0x7f0000000200)="4e6261ad8406fa1c30c852de8ed477f07f6ef8206017421d103f4735a5a8ffb8256712e79a8eb0fcef66b76bd63bf83682808b7f381a08df0d141438d8fc4da2c3abe0795ec15948e436174f8ab70d97ff71e40ecad4f328e84288714e25eb44a46f8ee47068c7a36e38c35fe7528d7c25ef", 0x72}, {&(0x7f0000000280)="d9dae7004c412d625faccf4e57c3a4758a177a0619b13142193849b7e8014dbaef876586b75e1ea279d8d2e20105fa379c17e9bed381c96e19ecc265632c24c2d775df378e2d98f136a6157c977300f7041a10ff22ae28948c02cd968a44f3d5e360ef71511f87b34c4c942e6151921667bc9e066552618f02a581413e312dfc2dc4c6877930920e134f98b2637d7c20a0320b838196bc627fb2e22e2c2cf22db10e095c62cc0a4b7d111ac8323284580036586e4dc1b49874b36d68", 0xbc}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000340)="1463fa4ce8719373b17812c0922781ecd4e0cffe8a075cae3f7a0d7cf931cc364825e00e9db3e392023c34f8b790cb25b61e297854f619c03f9e2c66e597fb51f6873810dfd59e959a80f13508ad2e44", 0x50}, {&(0x7f00000003c0)="1455b6b77af5ae23fd", 0x9}], 0x7, 0xffff, 0x1) 3.64790766s ago: executing program 4 (id=3120): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x1e4c}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x30, 0x4008000}, 0x28008841) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd300800100000008000100ac14"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe19, 0x4e, 0x2}, {0x802, 0x40}}}, @TCA_EM_META_RVALUE={0x66, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010024bd70e1f4dbdf25030000000c00018008001c00", @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000880) r13 = socket(0x10, 0x803, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r15}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r15}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20012}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0xc4, r12, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0xb1d5847a900ed4d) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000140)={r8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r8, @in6={{0xa, 0x4e24, 0xffffff80, @local, 0x162c}}}, &(0x7f0000000000)=0x84) 3.04998819s ago: executing program 2 (id=3127): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket(0x2, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffff1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x48f0}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0x1, 0x800, 0x3, 0xce7, 0x153]}, &(0x7f0000000200)=0x54) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "59eb3d5eda137042", "d1bb85c612e63bc25ae06b76d3429813bdc17c1a85d40c5c79a0d9a7b833c9e8", "cc244ce9", "128e6ba394e31568"}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r5, 0x8, 0x12, 0x2}, [@NDA_LLADDR={0xa, 0x2, @random="dca8d947b6fd"}]}, 0x28}}, 0x10) 2.745765413s ago: executing program 0 (id=3129): socket$tipc(0x1e, 0x5, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000400000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a30"], 0x122}}, 0x0) 2.744022531s ago: executing program 2 (id=3130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ac1e0101000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c000000000000000000000000000000000000000000000002000000000000000000000007000000000000100000000000000000000000003000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000002abd7000000000000a0001066465666c61746500"/240], 0x138}}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r5, 0x4, 0x4, &(0x7f0000000840), 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r4) r7 = socket$l2tp(0x2, 0x2, 0x73) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r10, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5795d70977fd7982736d553ebc3c953014e1e0f27af5c29edacc63c17c", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.625439134s ago: executing program 1 (id=3131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.51769208s ago: executing program 1 (id=3132): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x780f, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x780f, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000e00)=[{{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000b00)=""/148, 0x94}], 0xc}}, {{&(0x7f0000000bc0), 0x0, &(0x7f0000000440)=[{&(0x7f0000000c40)=""/164}], 0x0, &(0x7f0000000d00)=[@cred, @rights, @cred, @cred, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xc6}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000740)={0x8, 0x8011, 0x8, 0x81, 0x0}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e24, 0x9, @private0, 0x1}}}, &(0x7f00000007c0)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e24, 0x9, @private0, 0x1}}}, &(0x7f00000007c0)=0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000009c0)={r7, 0xb45, 0x81, 0x2, 0x7fff, 0x0, 0x9, 0x3, {r8, @in={{0x2, 0x4e20, @loopback}}, 0x0, 0xa, 0xd45, 0x2, 0x7}}, &(0x7f0000000800)=0xb0) (async) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000009c0)={r7, 0xb45, 0x81, 0x2, 0x7fff, 0x0, 0x9, 0x3, {r8, @in={{0x2, 0x4e20, @loopback}}, 0x0, 0xa, 0xd45, 0x2, 0x7}}, &(0x7f0000000800)=0xb0) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x5, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 2.436969073s ago: executing program 4 (id=3133): close(0xffffffffffffffff) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bind(r2, &(0x7f0000000400)=@phonet={0x23, 0x0, 0x1, 0x1}, 0x80) (async) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r4, 0x0, 0x80, 0x8) (async, rerun: 32) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1) (async, rerun: 32) write(r4, 0x0, 0x37) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xcc, 0x8, 0x2d, @local, @local, 0x8, 0x8, 0xfffff1e5, 0x231b}}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000004000000000010000000022ffff0000", @ANYRES32=r5, @ANYRES8=r4, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff25000600ffffffff7a0a18001000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000c68327490de73591e8573fed7a555b640f16ed7f8562bd96be1dcca38894882eecbc50f79ed16dd89835583baeb5f13071d02892548292c4bf4b634b92db48e4fbd0c19a5447603d51b9eee7a2ddc4ab8c9476a0348cf3284c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES64=r7, @ANYRESDEC=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) (async) close(r8) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0x24000004) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES8=r0, @ANYRES64=r7], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async, rerun: 32) r9 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0xfffffffffffffddd, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x854}, 0x20004000) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @multicast1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) (async) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x0, {0x2, 0x0, @empty}, 'lo\x00'}) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) (rerun: 64) 2.181890603s ago: executing program 1 (id=3134): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000140)="cc83fefa") connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @empty, 0xffff}, 0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x40000000, 0x20006911}, 0x0) 2.18078093s ago: executing program 4 (id=3135): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r4, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x16, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x28) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.09384259s ago: executing program 1 (id=3136): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="00000100"/14], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x124, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40d4}, 0x20004000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="ff", 0x1}], 0x1}, 0x815) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x1ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x78}}}, 0x84) 1.957325384s ago: executing program 4 (id=3137): sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)={0x20, 0x0, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe4}, 0x1, 0x0, 0x0, 0x48811}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.838082386s ago: executing program 0 (id=3138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="27886a7926b36be0dc0284ab2d7007506bf75a9d184d076334f36c53e46ad94ea45ba5d9d7d497f2712f86810d768f6e765f5f3a6410bc"], 0x48) unshare(0x22020400) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000480)={0xa, 0x0, 0x200, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7ff, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000280), &(0x7f0000000000)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f0000000080)="ea1999067afc779b16f95e37e04f045d8a215cc4f1a862f9efff21b8e395d2e0c0c3c30f6a9a42beb8c6ac3d4542a02d945dc95e4bae160616e2701c7ea908911d31d4670e07697d1883de275c4129a3c5235a2fd334299903e0021261705ab4e39b518a007bf4d438b7614009ebe4f6d293a8131023b9c4d2c70cab67eb5364e13026197269d6403f34daf7342a313db2dd58604a4a1bf7368dd5a0f53cc0652b45052517b8edf4fb54ead6a475a545d8bd00a3b741e765af8d8efdb0d917ed71aa"}, 0x20) 1.837909093s ago: executing program 4 (id=3139): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0xffffffffffffffdd, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000050500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.790739993s ago: executing program 2 (id=3140): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002300)={0x2, &(0x7f0000000140)=[{0x28, 0x80, 0xff, 0xfffff004}, {0x6, 0x34, 0x4, 0x775a}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sendmmsg(r2, &(0x7f0000001340), 0x4b, 0x4000) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000540)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000580)="703056f6cfeca86905c6ba93e9a3d5b240afc18215b507372678594a853fa28e4b0b8f9434f7e933cf7ced20e74700569f93eff92c96dbe0ffeddf939cd1672ae8904c3152d9c4a459ffab2657b6a91b753c1a6696bb21ed64246d380a266f87e31cd59f9024", 0x66}], 0x1}}], 0x2, 0x48010) connect$inet6(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000740)}, 0xd) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x29, 0x4008090}], 0x1, 0xc840) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r9, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040010) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1.711895722s ago: executing program 3 (id=3079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6e17fd477051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190d93b5301b4abe27c9242396d40a5c2b7789629214281c8e09a6c1f1e0db5d1e74e1f27a89b2c25c2316fcddc9ff2a71eceb3094ba465389e", 0x7a}, {&(0x7f0000000700)="ce2ede98d4bde4b9a7931c4e260090a647151bacb721146be7ff4494578b050dc8c56c1571aa57d0f79d3ce5cc42977a719f4a8c88be34", 0x37}, {&(0x7f0000000600)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da24c3341e27416f38e3251fe082c8f8602308cd2f7dc846c93e62a8d53d22fcabce47b5531463290c970dccfaa7da3e4ee56136f44b991100e3db7c750c3ccb3e01d6598d53d05ca7503d7430f3ff2b79ab629faa1dfb2d0899dd807d28174305bd600e50112aa4d0ec230a89b3078bb60a198e5a7169d91005cda3fc9870956d72773bd700", 0xc8}, {&(0x7f0000002dc0)="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", 0x27b}, {&(0x7f0000000cc0)="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", 0xe2c}], 0x5, 0x0, 0x0, 0x4001}], 0x1, 0x48800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x4, &(0x7f0000000a80)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xdc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f926154d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda080097fdd844d790003196f1cbe3700c151cde5f37a9ccdf4624cb", 0x5d}], 0x1, 0x0, 0xfffffffffffffec9}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}, @rights={{0x10}}], 0x20, 0x40}, 0x44814) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001b14010026bd7000fedb9f2508"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r9, 0x8, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x8000) 1.638114827s ago: executing program 0 (id=3141): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x4, 0x0, 0x0, {[@fastopen={0x22, 0x6, "d9deea2a"}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0xd4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa4, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8e, 0xf7fc, 0xfffffeff, 0x9}}, @TCA_NETEM_RATE={0x14, 0x6, {0x101, 0xffffffff, 0x5, 0x2}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x100, 0x9}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x1}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffff9}, @TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x0, 0x10000, 0x6}}, @TCA_NETEM_RATE={0x14, 0x6, {0xcb6, 0x4, 0x8, 0x9}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7}]}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.379014152s ago: executing program 2 (id=3143): r0 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x164c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x15ec, 0x3, 0x0, 0x1, [{0x10f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "83e33cf600b5ba37ff19c5724698a8934f7a5a69c5d9c0200eb452d51f095edab07ff4d7c6327a82d988b08097992365c3a1ce05f89eb78f77b9744c65d826010a896f47b745ecf3b6ebb84d197e488dd52d116903951ac488e052c7d2b3c68d1474c8ac9342eb38243f21ddb1df6b04bf3e9b3b0fda35c8cc323011f08f16bf96617ac7bbaa204aedf2272b35b6fc4e10677ab3439d5ef6fb734a9f64b4c9ded2006669456e10ca429ad9b4f4a198fc9a852f7ec41ad465267e6d9a7f3f0e0a6ab70f76eee4418b1343de89442a719181f68eb2933e8e80612e37d6463b123ac2c7398b4aa556304301d68f12c9ec072ba2ba57c5c0833208a2bdc4319fc8b28c005c1d564e1fdb3b7613853077eee75232e5e7ec30e123cdfb9fe40662717ed1086a3e8142db429d28f8229c86a778a0cc2fd33498220f1dea11cd930a4ce2e9d43cb10456dc94d6679ce7246488a3bae557811644219b7804e1d1241f9c302aea892b08b2d7228fb34c94cf01ac63d0688fa70bce2b42c7769c2aa75de9341be6320c91b7d65e1156765b10ccdca00a0a9907d8d386c46f5764ed7bbeced6c71e7887cc62d55e253f523f860cf78b3035fe0ec6e3da8d6843cfd85755b09afb31cedff6b21a9ff297fbdc871458b0745f9df9ef7c7328762b2eac022ff1498cebed30e41b958c804bd1f47f47f197707f07974c0ee3dc41d40921833b99238be817a2a1ba4d465c1472db4a03f6bd3730e86c5288bad0cef7b3544d0d2955326a103734a21b1856ffb34f4fc49c0d8ce3ad485316b2c9148c2b6d9153af5930ab69e8673d2b5a0d08b1e8a4d21f2f132f72ca7b376e01ea230add2df0030c86f7db5836d17b20b53d77276accb2ebab85544f05c8d2e6d7e2896b9e2edc5ce3c43f55da865105ca78f734c4cac2add5e9eb2bab49464e1786a2dc3336cde72a7a52514cc5c73caf28a47e6cc44ca303d9877c1de6265e3f780624f24c990b00f8e29251b11cfecc892081b7c35a70d9966cdeb92c7ae7d222a9eb6b9dd4ef12ef2759a40fc7611a9d566362ff7d01b0069e30cd42119000caea35a84926c397d6e94d055dd925771b88fec21b3734a8ba66dbbd751f74c4c9aef11b590d617546a6d7509413cd14ac80f77ebf9eaa4cc01ca476c3237d468dd6f98a61ff5fd4c56ef8eda947f5caeb1b3e367d5bdafcea032fa9ea6f34fdcacde2886c85ab2f704cc9189a13aa77fea83b551cd8563f6cdec78817f4481c54227d89dc4b84f415c3d591e00b700fcf0426f145a67d29129874edfc966eefdc458a3e11adab82119bef8187de1db6b36dc641bcd988cc82fb68956e603f4191f9c89d09f4768e8c05902ef409b6118b0cd5269fb069748fa0ee617cf3e47569b4c8dea1f776560ca3fe96908a8b3d487eb9b8483edefaacf6ff2c2ad336b87f8bd22231d5451f288d6b93a3a037cf52097141a0d456f896e5af31e0ea416946f3df5373b6326577995c8dd815120bc0a53606730a82c013409553c4bd8af84259832670082b963af100bf0b4fa4c8188255407bf96fdedc5cbb06d08688c9d30c9f79d0a1e6c3138da4e9f631cb486fa618e67e2abcdc17dc9f52d26be2a12a53f5487e720ac04fa4136aa42f4b48cfa3714125e9d767a15d17ec43aa1ffc3a3d9679a19fd72892faffb11956a377a0c5ea5d5e40c0dbf5db1727f089c940c0919bb744c96080a7da3139118f157db8b9649550f4a0fce3db0b5800dbe0989bf6ab0402fb942db4e47a74b281be5c6c9d7893a14fcc6041374e47dddea211e025b2f0862f69594cfd43c4f367835f5dfdf8966ed5d91fa7a4ab51b901e0afd577fcbedbacd44fdb2936614edfb6cb89c7aba2aee390c9d255538907bfe734b4ac11d3db621d71e76ce4a51a25d8274fa6bc82a471b931356abe42d09c4f6fb34e2b9f673f9046c7296218e0f6fda452d1cfbab00449a029ee4a1a096bf595f761c271f4df9f0282ee2d3466a0808f2122d1b5e729becbdcf31bd68e2176d91ec92ed34184be9dd5994bc03339740a18787314d57c9bc22bc2a4ea214d546e45834d57e20a6f3027bef4b23b9a00c7e9fce6b78f9b08cd5e6f62492e5aab6a9f364240e1d4e9b5c0b86dec6371eab09dc1e8f0aa7f25a6c528d2760a21719ba1f7dc8a404dd1ddfb31b9d626fa94567ea7666ec90efbeb54b593b12533a81459269b018be563652538d3a05b6f136cbcab9d9b6e442163efc98ab35432541f8052a64c9a24399c6cd0ebe41392fd30b26e645912ba5cc968e6990e7951de57b321c8ed58ea91e1bfa0fd62e3086ba2782490cb73be38272c775a4302215f449732254371e36ac03a867c222f1b76b63b2d68357c76a0b3431841f1f1f099c2e8a54841bd13bff8bdddb3272532ea8f5b740aa9ccb1639afa91a01c47bc024817b7f243b5bb3faf50cfab9b1bed96c3155d6acc819ee6870dc711c61d1d3c2b1adf4465299a5b587172da067979a27b0e10786829b93c8a13d7a5b096836d25ed333b899082a7b8a1c5daeccdae9812608c543aca0128c7b91258a95fef3b55e8195eab382a8fa3c586eea5403bb061cdbdbbebf62be146413090d37b3c08ae6367afa0970272d5486a3d3d35138fc0bcf8e5479b66857bd4bb18c8c3b6a4de55655eea897b13a9c6acab8d75fcb03c55acb836c2310938866af2b763c3b7411975e26b78480d135062d8a922b9ede90c43d5d42601ac3c168e0f83e216502b624c01439899e8871f27bd5c17c918e869a528edb37644f5637b1f84c375a19dde861371e95df72bc45ca980124560551ae672a348ff5c689d9be9b50611838e25d7cf5eac21a169753afb77679dac5e4dec942c8ee866374b8c486928f052c0443ce4b9ede85611245e98d9e90b8d869e614710052b44d37a45b0fc39211ddd95aee336453a325086adc4944360b72451cfd1ee4640f7ed1327cf1dffeca54f9810fd9cc0dfe1a1ffae1cf44565eda5704b585a20bda938fe1be0485ea6ae31b8998325946d4480ac8d913ec3570c2285bbd428f98566675e5a5ed1c11e110962f0ad441b26972e71590a4d27763073edb71151b099acfddcdb162ddb76d86d3bb28f6ff9609e190c02722316e0470399c6a613fdf562516eb93637adf621cb0a319380d74458049561dd038c2f181ac26e52872f218423a31f9faba27289f8874029e386b2c096ef1abe19d07dc8bebb8d0d4bd54cd4e481b72cec6700609503962e513f4ee12315ffb36e9b127fae344ee6b06a518250a3c57adf95ec54a43e90a4fdcb44da94a226e0cce9d0e5323bff7a64d52bc13f179774e2b1808bd2039634fb88a1986960ed2e4996a168b36010792755fc6af479a55eb377b28adad8abd5e8ddc8754bfed907adf7f7b80ebd0cd34d26bd34fd930537f12effadf43ce3660c5288282ced4dff9f0c7180dfc61ddba370fd6dd85f012d868a2f2593db9d58a854236ff5671a184b406b37956620fa2bd57edc72d425cb35d9babe9c68f7b1308e119e29fd1a47ab335d327677c26855b2e17dde6f871941c744713290a5dacacf3d34d5867bc8c265905c963b5d1550e532eed624ff9ea02f21a82a0bbcd1a5e4bed3f40c3f1343b57fe9ca3a2b83e1c88443449f348377e43db05e3447c0cf0e627c47ac4c468d24f6416f8bb033edfc27ad782f8cdbe7de6c5e0a0a0a5e26867694377a120edb805eded8be97c3c3e3efd9e4f6a9565639e962adf044ca670fab0e8e52117e48be0539283b20bbdb13219bf091afd541cf14d54ebda0431888580dbaab58997b51e524ffc30ed1ad4d4a763c53bd6afe8cb2c118efc3ba9b83519f6d867bf672eb77d595de33f77965fe5c6d10486377f1ef9cef2fea468e991aff880066638f8de6dd43583c1faab5f578fd835ceb08ca456794662506847c490fee3879d540b7f7b85ee9a1f78b647b3b11b09da8a4383dfe9748cbcc0eb1834cfbd99723b480772442f0b1d0cf9b460f41ae4276c139d74bf3fbcdac5b252088d9a67d370fa6fc5873cc87ceeff1938620664cf8e900aeefc9afb594ba9fbcbe9d93eda5ac64a62b1998175634725a5a16eea6ff76dce1f4e16fece90312c513eee3a917f269b99796fbd7f535b892fbb154cdf1143513aa77b9e01d8720eeb63e16727cbf11b446114e37051844499824521f3b4bfbdcb72896f8095a4ee5b3d629820600a0f466212969ea0f98ed451812e52f6e257652ae40b41bd441db495b4718f65a6faafe59fc02376d4bce18938e3757918e3bdb1a26bf487233de21664a82fcf7794a242db242c87681ea226ff065ff5f70dd8a93fb424a4bafd371a22cc8e8e90f70d365b842f7a28d8df52020a5cdfd6f3f138d3aa2e15fe03a700d5bf5eeaa1f6b4dc3b663235f3ca3fff760bfbeff53172ee918a7529e2d26680d9b2f0f5d795c442b27c50579ed8e93e39c318ed5cd0dd036d66abd3af2464f665602eab5f5c5ab2f0df2ceb187560ab2236620fc301a17ccdebba7039735d9a8fd9a5a160b77823528edcd1aafce67e6caf1595a2c70bf501cac5e8b8fd980123761fbbca9d9b576bf59bbed4927caaa8080d940ea03a15666f3d0fabba67c982a902eee735e9f8ecefc8f2ff6ddcbdb0a1c5ac56e45f8bbfa401bc0c65989c3ec27b2a977b23a9f28f86c95bdaa1a7523b48188a93b6314f16cde4cc82057a8ebe6d8ebd7457269c6f3bbaf490b4182eb8f40dad8ab60024fffd190bd8c16f58684345ae34c826cc9594d97545937f36a47fdb8ef8600b3e8bde7a0a94c91377135ff76f60b76188a1033b61a683718aa44d4489b78f48df6f3d3b7fc39896d7ac0e50f4cf24fc1e8a73958810187fda9cdc3238c41b9a7fdb94ef4d2102fb0305b76c7f8898de454adab98971e5540f5f5845ac4fa4132eabca76dd76d6bfad4709ebd01578a576872e0d0e6e9f06fb936d7d79d9eba2463a95dceb25d16ae53977342f9829a9d2d5c28888cb757d0661ba563011dd5596fec83b01dac1be24d86dc6c7ab55646f2ff595f095e7ddbe32772ad862edad1973252ba7b708144f72ab5227c105d8c7ddc7c76390e396a8e1a55fd6229f3b21de2c8fc8b9367889ae1e9b084d7055d05876c1d5fd51fa42dde16c395bf66a92b12cc807576bf8176663e770314b4b2f6b134698acbbb829d71957053809f725ad45be28a8b0a64e1932ee3b86fddacd0ee966045f259aa1247bd554e607f8a63c9061a92f10fe3f39778e28fd904700b20198a97d1088f70ef5acadf2772a68ba64cd8beff2cf1700553fdb7092568f7f03694fb6a50082b62456bcbd28e60c125acd31735504771a3ebcd9d49cdc717315be424bd0f39157494a35c104e7859d460c0be6660546bc131b0da8353fe463c07327e8493e6d4a7e108dc390672f3518be8398a71b53cdee31c863ca59a2b531f9ce2461b01c5d06a9f251e66c3804ed6381cb5a764fbbc08c85c02b7c2afad11beda576f71a5f5a658f57d92009d21473376e8980bccdf888d76d05e8fa197a8892a90ebe336f8eee8b26728a61fd4fdfc8ae274a669755d6cb5c6e965651584a5eecb0df5f3226e078f18722caca27f53ed5ce8e02e46a2a0a1d1cc49e4b0615a73c9e5792af15067688f8ded2df3c0c2d629097ac5706650d55540fdb6bf5d6640f618d735444dee76ab971c5ccaa833cd84d7cbc81172925e1b937608fb7d2dd59f33f91435c7770e57f0ca8165252df5536d40948b3c8d2de9f5a326056df7de13a6564aef1bf6aa1bb53dbbedaadea0ea7f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xf0, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}, {0x400, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xe2}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xfffd}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '@&\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_DATA={0xf4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xad, 0x1, "8c637e97ece077d6254f2a20bdbbbb3d2e3d4b4864cf4e11bf7cd8db1c85a0964ff0aabc528bdd60cd629afd49c69420ba09596a135e1ad67848a96fa713e1eaa8fb174377eb900d9406c632663280c8bdeba4eb81a48bf8fdb1e4d52e95150f991756ac6a30556cb38b2e5e8446d2c7dcad0046f3f41dcbbcc3db73c0a7e8dfd26d011e741a5a118757e1a065bf7cfe9e421434f6940a1a4cdd2a8b3d4c0d83578dd1abb55910e229"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x24c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfb, 0x1, "d2a3c44c76580ad04122fe211bf140a4dd6321de615b02ad12b8eda00472b83e26cd1dcd5f7edc79b5ea3b6fa9e9eb5dd1f8026f53ae8603b1cfbda8cb9bf0a5dd12b3ddf7b9dd31ce5ff972da6b3e14353331a4d45441fe6cf663649f5f24a5d0c2b2439560686873ae37511e385b5d7587618514a4658e5939da60a731c0d8d0c0ed3b56bdaec89a073cf856d3ebcc20ead527e1d48d97636998a2efbd79ff3aa218934ab5d6549cf8afc3aaff253f9fd10bc11dd3c2c3c1595eccabaa21747b47afcd99ac02459660b63cb9e1a8e02e69ff2f313e191a0f72bbf746a92848897435dff6d2a7b40c699df115618bbb3cb73325ec8fa7"}, @NFTA_DATA_VALUE={0xcd, 0x1, "7a6740c5107241caaccb2526093aceb837da088119bc0e5b7eb53c86692a90e1437ae84546ecfbe2bf081a8f0638d37f0567a7ea839304d6d7272a0ff315ad6446302b03aa16257e35e9e1ac3d333b3fb87b687c0361ddfeb475996efd9c45bb3f3a8c26f5af0980f1dae194bbe70e21f2eb02059e254d41df26fd882db891bc32977533edcf0af5bbb847780134f1a31e1d50e665c6b46ebdef2f9157f3e0e4d77777c51d9bb9fd1069a2a7fd80ee4f5aeecf6bee2e46f2cefba91b79a6af099ef3420b5c95e734dd"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x42, 0x1, "1c95f7142345b4c8a260a7895f1022dea0f0877a5bb62803c9899cc2032b01574872c5f613f2528663006af7d1ea89e1597f45577775f03b9c99c7b5c2be"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x5c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0x1d, 0x8, "743ef64e1cc70787802ef99d5c7c969dd0a228fe4805ed8f35"}]}, @NFT_MSG_NEWSETELEM={0x960, 0xc, 0xa, 0x103, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x934, 0x3, 0x0, 0x1, [{0x1ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb5}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x58}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_SOCKET_DREG={0x8}]}}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x98, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xca, 0x6, 0x1, 0x0, "12fdbb0aaba3f052061d2b0e56dc9b186ef57167851aa943669971cafc92f9949fbcdebfdb13a7f9d529aa9938bbcac01031e7ff0c03d236ba0c72dd1a4f3d0259eddf11fcf29904a74b02b8ae9f1f20f956cd1037a59bd71bb2f364c19ae2258ee08ce2171bf1a9a82a9b43bc8010209a99c366a6e7df8564f9ce8d39f36aa952bd95a874fd034fbec9981da1c6d2b358f55d34e1248806fe63d92ac3c7cd348329685607814e9cac4af79aa0cbdae30681f09f9e5a766b66c500d4b924ee6c995c444a4627"}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @objref={{0xb}, @void}}]}, {0x2e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xad, 0x1, "1aee06a3f9599f92826078517dc0f232fb39755dabb5cff81e2e97296dc4ba0b2d2c24db5049c529aef606eaed589cca208d266c67c4d9b50aff4a8c6722f3cde454e51be99e36dc666a50bb8bc9ee8d9ac02443e735abc81bc5f00cf0ed4705607a14909e8555002df0d81572abf7e1db5b771f9b045ecafb1c8113bef69fe3a629d8ce61f7c8346d1082bb62f1ad556e6f99becfd0f8f3989003ba86c9dadeb8651afe7a9d2d3cd3"}, @NFTA_DATA_VALUE={0xce, 0x1, "5d82dd5fdfaa4f0c9929d963793cf43a1a0a0319fbcec18f13d3b29054438c6bd1042892a624ef7e3378de00b805b4af5535e3d064d83ab80a80fdead005d0cf44ac424d5635efd270feebb7f9053d606feb52287a6d8f5c0022836ed60b4368965716cd00a6210653d1ceb9d7ccded3c347cf7b28963554085f09da823a921d0345199250e5d98287184bfc149d6f6a9a862a39c95db9cbf6e1185526278090e83f4bda00c42d04cf4d3167e2b42068aa6b5a9c38eae10bd472b5fdabd7b0fe78ec5f871762d4406173"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfbc65997afba37e7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x304, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x2e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2a, 0x1, "acd34a95d24a1ca01679e6788c5de58d151a4e06946fea5a4194e87fe83d7212acc4eeb6afaa"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xef, 0x1, "516d26ef564a4e303a6f94629fb0b02c9a94cc0681230802386f47934e85c634bc256ce1aaf9baf0eeb8166c60c881c1a54694f45fb79154e99d4ec3766a9a335f094e7d42c23933de8d18fd8d950244376220b1e4b0163b538e9267eb8ac64fabb0b678f98837cffe3d67b2d40feb1e24969777206f63ab4d5b417d4e388175ea3e7f51f52fb449e52bbfed708b992375ce127ec8947439230cca84d20dd7943ad4038d0dea90bdbdd38e170fe184aab9cd788149c832ffd58c5760c95dafd08b88c7785c11430fa6b399acf8e06991a362b1fcca2f8cd47c5c4f795512c1175a44ba2ed2033d97b8f96d"}, @NFTA_DATA_VALUE={0x7d, 0x1, "4d533d11b02b93d90d473726572e9ded8d9b5bd285c4435bc11a980ce1b0966d7c486a8fd455a3e8492e06ccca38a7b510b43e2de58fb02d73a2bf30de7a9acf4a5496a25b1f8a6d77103babf5b08138ec84fbab5ead5ffd879f634f7feba38113a88e4a7412d8c2705d840277e240dc4d11d3bcfb308c7ca9"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_KEY={0x120, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x81, 0x1, "150ffd856891300165d4b3e68399b3c4800a293ab01aaf286f41cc6a7a3e8a28a5121f74b476e78a7e66cd99531686a6aa0c4f68c9101c731a660f7f77d730eb10a627cb97d02e653917a8e48715db573fee20ac5cc1ecd7be76acc2ffcb98e2f665b52b5f8da0b7c22ef5c6591f96650145e5317ea7d8ba5a1192d32e"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2064}, 0x1, 0x0, 0x0, 0x80c0}, 0x20004000) 1.115805023s ago: executing program 1 (id=3144): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYRES16=r1], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', r1, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r2, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0x218, 0x229, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'pim6reg1\x00', 'vlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r10 = socket$inet(0xa, 0x801, 0x1) connect$inet(r10, &(0x7f0000000340)={0x2, 0x4e21, @multicast2}, 0x10) listen(r10, 0x8) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmmsg$unix(r11, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r11, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet(r11, &(0x7f0000000300)="e7", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x9}, 0x8) bind$alg(r8, &(0x7f0000000780)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r12 = accept4(r8, 0x0, 0x0, 0x800) splice(r12, 0x0, r7, 0x0, 0x9, 0x1200000000000000) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYRES8=r1, @ANYRESOCT=r6, @ANYBLOB="0c00050008000000000000000c000200ff7f0038894cd400400007800c00010608000100", @ANYRES8=r14, @ANYRESOCT=r1, @ANYRESDEC=r3, @ANYBLOB="0c3a2e7d0d00f4007579b76d8241bfb890e392bd9171908dcc13d39ab5dfdac8f89a0ddfd3d97a2a7d84208d067d0580b70482de014de70cce1bffff83c48f9aa7191ed44fa844c9cbd8d803e3cb0d4dd2ab1451c33efa623e165807d75269f5dacafb128e30c3a316a51970b21a1b53a1939393b7cf10fbe3fb24a56dbe7a3d684a66bb2d9cfb1c95451307d40da269180afe1d45ce912b1a49624d4fd888ea9dc31de513342e18fc0bd8fa6f7d823bf96d302eed92dd19d29900fedc96a171e4aea76614b92a4358e6384d757096ee6d4abf7304988a4d3c411bd39de89b04ade1f19f96591b0973fa5ec9f128519c6a6ebcc275f5348f2f04eb1683138e701233c4203836e0dcb218e787e5dd5fb96a438e545e517da30e960de9121886e750d31d4a", @ANYRES64=r2, @ANYRESOCT=r5, @ANYRES32=r13, @ANYRESDEC=r5, @ANYRESOCT=0x0, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f0000000100)={0x0, 0xfffffffffffffe05, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[], 0xa8}}, 0x0) socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'none\x00', 0x4, 0x8, 0x77}, {@empty, 0x4e1f, 0x1, 0xcd, 0x12d5f, 0x3}}, 0x44) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x181000, 0x0) 1.067300484s ago: executing program 0 (id=3145): pipe(&(0x7f0000000000)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmmsg$alg(r1, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e", 0x2}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x1, 0x4) 872.447731ms ago: executing program 0 (id=3146): r0 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x136c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1324, 0x3, 0x0, 0x1, [{0x10f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xf0, 0xb, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xe2}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xfffd}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '@&\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_ELEM_DATA={0xe8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xad, 0x1, "8c637e97ece077d6254f2a20bdbbbb3d2e3d4b4864cf4e11bf7cd8db1c85a0964ff0aabc528bdd60cd629afd49c69420ba09596a135e1ad67848a96fa713e1eaa8fb174377eb900d9406c632663280c8bdeba4eb81a48bf8fdb1e4d52e95150f991756ac6a30556cb38b2e5e8446d2c7dcad0046f3f41dcbbcc3db73c0a7e8dfd26d011e741a5a118757e1a065bf7cfe9e421434f6940a1a4cdd2a8b3d4c0d83578dd1abb55910e229"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x13dc}, 0x1, 0x0, 0x0, 0x80c0}, 0x20004000) 642.569476ms ago: executing program 1 (id=3147): socket$tipc(0x1e, 0x5, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000002000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a30"], 0x122}}, 0x0) 607.385054ms ago: executing program 3 (id=3148): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4050) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@polexpire={0xf8, 0x1b, 0x400, 0x70bd2a, 0x25dfdbff, {{{@in=@multicast2, @in=@empty, 0x4e20, 0x9, 0x4e20, 0xc1, 0x2, 0xa0, 0xa0, 0x11, r2, r3}, {0x1, 0x1800, 0x5, 0x3, 0x4, 0x800, 0xd48, 0x5}, {0xfffffffffffffffe, 0x40000000, 0x6, 0xfc9}, 0x6, 0x6e6bbf, 0x2, 0x2, 0x3, 0x1}, 0xd}, [@tfcpad={0x8, 0x16, 0xb}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd2d, 0x70bd2d, 0x70bd25, 0x70bd28, 0x9, [0xa, 0x1, 0xe14, 0x2, 0x80]}}]}, 0xf8}}, 0x20000000) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 515.777115ms ago: executing program 3 (id=3149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000000000000000000ac1e0101000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c000000000000000000000000000000000000000000000002000000000000000000000007000000000000100000000000000000000000003000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000002abd7000000000000a0001066465666c61746500"/240], 0x138}}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r5, 0x4, 0x4, &(0x7f0000000840), 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r4) r7 = socket$l2tp(0x2, 0x2, 0x73) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r10, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5795d70977fd7982736d553ebc3c953014e1e0f27af5c29edacc63c17c", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 231.206288ms ago: executing program 2 (id=3150): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x100, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000180)={r1, 0x0, 0x73, 0x8000, 0xa, 0x4, [0xb1ca, 0xfffffffffffffffd, 0x5, 0xfffffffffffffffc, 0x5, 0x844]}) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000200)) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000240)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x9d1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}}, 0x24) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x3, 0x1, 0x0, 0x0, 0x0, {0xf, 0x0, 0x3}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x80) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000600)={r1, &(0x7f0000000500)='\x00', 0x800, &(0x7f0000000540)={@align=0xfffffffffffffffb, {0x400, 0x6, 0x8}}, 0x69, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x10001}) bind$bt_hci(r6, &(0x7f0000000640)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000680)={'veth1_to_hsr\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000006c0)={0x0, 0x5, [0x8f32, 0x7fffffff, 0x2, 0x9, 0x40, 0x9]}) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000700)={'ipvs\x00'}, &(0x7f0000000740)=0x1e) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x5a, &(0x7f0000000780)={@multicast, @broadcast, @val={@void, {0x8100, 0x1, 0x1}}, {@canfd={0xd, {{0x4, 0x0, 0x1}, 0x1a, 0x2, 0x0, 0x0, "a4c92e7dcad0153ded24aae5d4d39c5de4a963e7500f1c8b04c44932f18d6ab69453be0ecdc17a2ea977928d437126c4033495c9dd1637fc1f9925e9928404b4"}}}}, &(0x7f0000000800)={0x1, 0x4, [0xe66, 0x8e8, 0xf9d, 0xcc9]}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x74, 0xa, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) socket$netlink(0x10, 0x3, 0x12) ioctl$PPPIOCSMRRU(r6, 0x4004743b, &(0x7f0000000980)=0x1) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000001f00)={0x0, 0x1ff, 0x5, 0x6, 0x8, 0x4, 0x4, 0x1, {0x0, @in6={{0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0xab, 0x8, 0x10, 0x2, 0xffff}}, &(0x7f0000001fc0)=0xb0) sendmsg$inet_sctp(r7, &(0x7f0000002040)={&(0x7f0000000a40)=@in6={0xa, 0x4e21, 0x1, @empty, 0x80000000}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000000a80)="b8c17be14c96522b985e93e5801deafcebcb646995c697f739a7663074e9245ef8d15edf84", 0x25}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="a7c7a9445d233bb2b9af55f824f6875130265c4919715bed4c8063c2732023f96c3571a4cd39397e13e259457a9e4c80a38a383264920faa832e339e50e7e5b7653c2be7ae3089a258800aa9e0ebf07832895856bb83b53c9c78649aefeed3c6190fa8f6c22a147e18ebf6ff6902a93967c742f57d7ed5d50e46b2", 0x7b}, {&(0x7f0000001b40)="2875afa89d4a8db78dedeab06c67cb26c8bb9e40bff07437c7b4285b95616a8b12fa08b22781802a135f318048673cf4b5e9f60d339a9567ce221d87d7090cba37c1ff2304cbaed2651ae3808f45e28e5d09844bc48517e13beabb69fa083ecb7cc13cfdb14be7a3502337bc1a1f527223", 0x71}, {&(0x7f0000001bc0)="cccb8ef8f36d3f244a2e2b9ac4dd5537e331ef5ca00f09bed9439f45363cf63405df27fa91220d73d893bdb21919fac93d320090289208e65278a01ee152683e6a61", 0x42}, {&(0x7f0000001c40)="ca8570408cbb72bc12fb7ef63c04b02a4c30e572b0933f5084d6822bca833703a1a7e864213aacaeb0e70ac79cb1e6275e3b24", 0x33}, {&(0x7f0000001c80)="1cb31b63ebaeeef549c1c73b32df0aabec229e9157a59b16e78b827555", 0x1d}, {&(0x7f0000001cc0)="858e37dc00c4aebdb003385d1f7d4d6378a7efa341e05f97ca266e574e78f500ed50d5183d9a184309dd6a46dce70d80a5ca661c01aee317767dd5e1cc37a2f96f53c5d5d6c015f6714418158e6b932cf968f2eb6e2a8dd3da462a0acfaf06daeaf175c707f001ab38af7c1c5b688cec0c25ab3728b73bbb40bbbf8d604b49164be1b233a28f53b7f61723fb65ea90c68cdf7b43da1d959d12b3a9e308553afb97a5888c8ed830c9316e2496ac84a4c08094ed9a27132babf3e684f292bf9cf05e4fda4df3846841f47c2f695d4c283f4ebaf74c80c689edbfe9bc50fce18917c1fdded64454e10e", 0xe8}, {&(0x7f0000001dc0)="de9fe6d0f841162051d48f7b272fc8d4a995785aa8f86dc628ca89092e26920fb0a9f4f666ce3df47408e872de46525bb868c95d3954f0d978fc979be34c07c3e6bbe967e4d4b369e4c1335d425888f5553cdb50102ade322e5ff62c61ed4c8c1c941d171421e5036e72204dcc845f2fc881f536", 0x74}], 0x9, &(0x7f0000002000)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x200, 0x2, 0x0, r8}}], 0x20, 0x40010}, 0x8010) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:mount_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x440c0) 0s ago: executing program 2 (id=3151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000ef3fffffef9000000000000ffffe9dc4693468870bb381c96972fe77e0d4c14734364b334d5473748be2cabab5da2c805cc498c816d059b2318a14c2417c68e4d6cf0a45cebd2aeb589b86a6f4a97dca0ae4c9d82009c06d843e1ffb55cd9d25b7cedc260d910de3540c2e911a1509318181512168d902ad36983a5ebc48ad72c5866f9c7873667736a841324dca58a875fa80f07fc0f1f", @ANYRES32=r4, @ANYRES32=r3], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd700003dcdf250100000008000100", @ANYRES64=r1, @ANYBLOB="400002803c00010024000100757365725f6c696e6b7570000000000000000000000000000000000000000000050003"], 0x5c}, 0x1, 0x400000000000000}, 0x48090) kernel console output (not intermixed with test programs): ] ? __asan_memset+0x22/0x50 [ 383.417484][T14071] af_alg_get_rsgl+0x436/0x810 [ 383.417518][T14071] skcipher_recvmsg+0x3a3/0x1140 [ 383.417543][T14071] ? get_pid_task+0x20/0x1f0 [ 383.417576][T14071] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 383.417598][T14071] ? aa_sock_msg_perm+0xf1/0x1b0 [ 383.417620][T14071] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 383.417636][T14071] ? security_socket_recvmsg+0x7e/0x2c0 [ 383.417660][T14071] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 383.417683][T14071] sock_recvmsg+0x172/0x1b0 [ 383.417705][T14071] __sys_recvfrom+0x240/0x3c0 [ 383.417727][T14071] ? ksys_write+0x1e6/0x270 [ 383.417745][T14071] ? __pfx___sys_recvfrom+0x10/0x10 [ 383.417765][T14071] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 383.417798][T14071] ? __fget_files+0x3a0/0x420 [ 383.417830][T14071] ? ksys_write+0x242/0x270 [ 383.417848][T14071] ? __pfx_ksys_write+0x10/0x10 [ 383.417868][T14071] __x64_sys_recvfrom+0xde/0x100 [ 383.417893][T14071] do_syscall_64+0x14d/0xf80 [ 383.417942][T14071] ? trace_irq_disable+0x3b/0x150 [ 383.417973][T14071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.417996][T14071] ? clear_bhb_loop+0x40/0x90 [ 383.418027][T14071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.418042][T14071] RIP: 0033:0x7f901c59c799 [ 383.418057][T14071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.418069][T14071] RSP: 002b:00007f901d50f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 383.418086][T14071] RAX: ffffffffffffffda RBX: 00007f901c816090 RCX: 00007f901c59c799 [ 383.418097][T14071] RDX: fffffffffffffd0b RSI: 0000200000000000 RDI: 0000000000000003 [ 383.418107][T14071] RBP: 00007f901d50f090 R08: 0000000000000000 R09: 1154103478d401ea [ 383.418117][T14071] R10: 00000000400123eb R11: 0000000000000246 R12: 0000000000000002 [ 383.418126][T14071] R13: 00007f901c816128 R14: 00007f901c816090 R15: 00007ffd12b58a78 [ 383.418150][T14071] [ 384.228428][T14090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2078'. [ 384.300813][T14096] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2079'. [ 384.441632][T14107] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2083'. [ 384.481884][T14108] bridge15: entered promiscuous mode [ 384.823944][T14130] atomic_op ffff888029a87198 conn xmit_atomic 0000000000000000 [ 384.935186][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 384.943310][ C0] lec:lec_tx_timeout: lec0 [ 384.954710][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 385.215754][T14152] tunl0: Caught tx_queue_len zero misconfig [ 385.281634][T14155] vlan0: entered promiscuous mode [ 385.406963][T14165] validate_nla: 4 callbacks suppressed [ 385.406984][T14165] netlink: 'syz.1.2099': attribute type 1 has an invalid length. [ 385.470901][T14169] team0: Port device macvlan1 removed [ 385.495898][T14173] netlink: 'syz.2.2103': attribute type 1 has an invalid length. [ 385.775882][ T5143] Bluetooth: hci4: link tx timeout [ 385.793740][ T5143] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 385.932777][T14183] bond17: option arp_interval: invalid value (18446744073709551615) [ 385.953663][T14183] bond17: option arp_interval: allowed values 0 - 2147483647 [ 385.972007][T14183] bond17 (unregistering): Released all slaves [ 386.606728][T14232] __nla_validate_parse: 5 callbacks suppressed [ 386.606752][T14232] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2111'. [ 387.059373][T14256] tun0: tun_chr_ioctl cmd 1074025677 [ 387.065301][T14256] tun0: linktype set to 804 [ 387.282658][T14267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2119'. [ 387.456796][T14275] geneve2: entered promiscuous mode [ 387.518293][ T6721] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.554542][ T6721] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.571964][ T6721] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.596993][ T6721] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.616336][T14283] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 387.815042][ T5143] Bluetooth: hci4: command 0x0405 tx timeout [ 388.117535][T14322] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2130'. [ 388.219168][T14333] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2130'. [ 388.228410][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2130'. [ 388.238205][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2130'. [ 388.264780][T14333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2130'. [ 388.286990][T14334] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2133'. [ 388.388716][T14343] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2135'. [ 388.554993][T14352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2137'. [ 388.616913][T14352] 8021q: adding VLAN 0 to HW filter on device bond17 [ 388.654569][T14352] macsec0: entered promiscuous mode [ 388.742915][T14352] bond17: entered promiscuous mode [ 388.767788][T14352] macsec0: entered allmulticast mode [ 388.796237][T14352] bond17: entered allmulticast mode [ 388.819997][T14352] bond17: left allmulticast mode [ 388.831276][T14352] bond17: left promiscuous mode [ 389.368073][T14397] netlink: 'syz.3.2150': attribute type 21 has an invalid length. [ 389.407988][T14397] netlink: 'syz.3.2150': attribute type 4 has an invalid length. [ 389.434926][T14397] netlink: 'syz.3.2150': attribute type 5 has an invalid length. [ 389.661525][T14418] netlink: 'syz.3.2156': attribute type 2 has an invalid length. [ 389.693589][T14418] !: entered promiscuous mode [ 389.964632][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 389.972698][ C0] lec:lec_tx_timeout: lec0 [ 389.977875][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 390.384809][T14442] netlink: 'syz.2.2162': attribute type 4 has an invalid length. [ 391.256796][T14490] netlink: 'syz.3.2174': attribute type 2 has an invalid length. [ 391.349122][T14490] lo speed is unknown, defaulting to 1000 [ 391.672822][ T6722] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.684615][ T6722] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.693029][ T6722] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.732371][ T6722] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.782562][T14529] __nla_validate_parse: 15 callbacks suppressed [ 391.782583][T14529] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2182'. [ 391.874370][T14533] veth0_to_team: Caught tx_queue_len zero misconfig [ 391.881587][T14533] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 392.608917][T14568] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2191'. [ 392.631473][T14568] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2191'. [ 392.967375][T14575] veth1: left promiscuous mode [ 392.972227][T14575] veth1: left allmulticast mode [ 392.988106][T14575] .70·: left allmulticast mode [ 392.993396][T14575] hsr_slave_0: left allmulticast mode [ 393.000203][T14575] hsr_slave_1: left allmulticast mode [ 393.012624][T14575] vlan0: left promiscuous mode [ 393.044446][T14575] veth5: left promiscuous mode [ 393.063507][T14575] batadv1: left promiscuous mode [ 393.079851][T14575] batadv1: left allmulticast mode [ 393.108419][T14575] ip6tnl2: left allmulticast mode [ 393.120841][T14575] bond16: left promiscuous mode [ 393.134678][T14575] bridge11: left promiscuous mode [ 393.140161][T14575] bond16: left allmulticast mode [ 393.156624][T14575] bridge11: left allmulticast mode [ 393.291530][T14571] lo speed is unknown, defaulting to 1000 [ 393.828271][T14621] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2200'. [ 394.024196][T14629] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2201'. [ 394.202107][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2202'. [ 394.230458][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2203'. [ 394.859024][T14660] netlink: 'syz.1.2208': attribute type 1 has an invalid length. [ 394.984613][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 394.992707][ C0] lec:lec_tx_timeout: lec0 [ 394.997813][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 395.175578][ T5161] block nbd0: Possible stuck request ffff888026888000: control (read@0,1024B). Runtime 180 seconds [ 395.186498][ T5161] block nbd0: Possible stuck request ffff888026888200: control (read@1024,1024B). Runtime 180 seconds [ 395.199488][ T5161] block nbd0: Possible stuck request ffff888026888400: control (read@2048,1024B). Runtime 180 seconds [ 395.210672][ T5161] block nbd0: Possible stuck request ffff888026888600: control (read@3072,1024B). Runtime 180 seconds [ 395.259894][T14680] gretap0: entered promiscuous mode [ 395.273357][T14680] gretap0: left promiscuous mode [ 395.356873][T14679] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2216'. [ 395.409238][T14691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2216'. [ 395.658758][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2219'. [ 396.499762][T14726] "syz.1.2223" (14726) uses obsolete ecb(arc4) skcipher [ 396.677594][T14739] lo speed is unknown, defaulting to 1000 [ 396.987633][T14750] xt_hashlimit: max too large, truncated to 1048576 [ 397.077522][T14748] rdma_rxe: rxe_newlink: failed to add caif0 [ 397.394619][T14787] netlink: 'syz.0.2242': attribute type 10 has an invalid length. [ 397.402768][T14787] __nla_validate_parse: 2 callbacks suppressed [ 397.402786][T14787] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2242'. [ 397.432383][T14787] bond0: entered promiscuous mode [ 397.437865][T14787] bond_slave_0: entered promiscuous mode [ 397.443944][T14787] bond_slave_1: entered promiscuous mode [ 397.454708][T14787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.474770][T14787] bridge0: port 3(bond0) entered blocking state [ 397.492445][T14787] bridge0: port 3(bond0) entered disabled state [ 397.513931][T14787] bond0: entered allmulticast mode [ 397.524885][T14787] bond_slave_0: entered allmulticast mode [ 397.530733][T14787] bond_slave_1: entered allmulticast mode [ 397.577752][T14796] netlink: 'syz.3.2244': attribute type 1 has an invalid length. [ 397.689648][T14808] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2245'. [ 397.698933][T14808] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2245'. [ 397.708066][T14808] netlink: 'syz.4.2245': attribute type 6 has an invalid length. [ 397.895597][T14820] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2251'. [ 397.914274][T14823] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2252'. [ 398.045823][T14822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2252'. [ 398.057453][T14833] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2255'. [ 398.316482][T14844] syzkaller0: entered allmulticast mode [ 398.333612][T14844] syzkaller0 (unregistering): left allmulticast mode [ 398.357683][T14848] netlink: 'syz.0.2260': attribute type 1 has an invalid length. [ 398.384362][T14850] FAULT_INJECTION: forcing a failure. [ 398.384362][T14850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 398.400177][T14850] CPU: 1 UID: 0 PID: 14850 Comm: syz.4.2259 Not tainted syzkaller #0 PREEMPT(full) [ 398.400206][T14850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.400219][T14850] Call Trace: [ 398.400228][T14850] [ 398.400238][T14850] dump_stack_lvl+0xe8/0x150 [ 398.400274][T14850] should_fail_ex+0x412/0x560 [ 398.400309][T14850] prepare_alloc_pages+0x22a/0x650 [ 398.400344][T14850] __alloc_frozen_pages_noprof+0x12f/0x380 [ 398.400376][T14850] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 398.400408][T14850] ? __pfx_policy_nodemask+0x10/0x10 [ 398.400449][T14850] alloc_pages_mpol+0x232/0x4a0 [ 398.400482][T14850] vma_alloc_folio_noprof+0xea/0x210 [ 398.400514][T14850] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 398.400565][T14850] do_wp_page+0x1204/0x5a00 [ 398.400621][T14850] ? __pfx_do_wp_page+0x10/0x10 [ 398.400650][T14850] ? do_raw_spin_lock+0x12b/0x2f0 [ 398.400676][T14850] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 398.400709][T14850] handle_mm_fault+0x1520/0x3310 [ 398.400769][T14850] ? handle_mm_fault+0xee/0x3310 [ 398.400811][T14850] ? __pfx_handle_mm_fault+0x10/0x10 [ 398.400843][T14850] ? follow_page_pte+0xd7f/0x1450 [ 398.400885][T14850] ? __pfx_follow_page_pte+0x10/0x10 [ 398.400931][T14850] __get_user_pages+0x165b/0x29d0 [ 398.400995][T14850] __gup_longterm_locked+0xdcf/0x1630 [ 398.401041][T14850] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 398.401080][T14850] gup_fast_fallback+0x1d82/0x22e0 [ 398.401146][T14850] ? __pfx_gup_fast_fallback+0x10/0x10 [ 398.401177][T14850] ? __sys_recvfrom+0x240/0x3c0 [ 398.401208][T14850] ? do_syscall_64+0x14d/0xf80 [ 398.401237][T14850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.401265][T14850] ? pin_user_pages_fast+0x4d/0xb0 [ 398.401299][T14850] iov_iter_extract_pages+0x37b/0x5f0 [ 398.401341][T14850] extract_iter_to_sg+0xe62/0x2520 [ 398.401386][T14850] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 398.401410][T14850] ? rcu_is_watching+0x15/0xb0 [ 398.401440][T14850] ? trace_kmalloc+0x2a/0x110 [ 398.401465][T14850] ? __kmalloc_noprof+0x37d/0x760 [ 398.401486][T14850] ? sock_kmalloc+0xd6/0x160 [ 398.401582][T14850] ? __asan_memset+0x22/0x50 [ 398.401605][T14850] af_alg_get_rsgl+0x436/0x810 [ 398.401655][T14850] skcipher_recvmsg+0x3a3/0x1140 [ 398.401689][T14850] ? get_pid_task+0x20/0x1f0 [ 398.401736][T14850] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 398.401767][T14850] ? aa_sock_msg_perm+0xf1/0x1b0 [ 398.401796][T14850] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 398.401818][T14850] ? security_socket_recvmsg+0x7e/0x2c0 [ 398.401850][T14850] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 398.401882][T14850] sock_recvmsg+0x172/0x1b0 [ 398.401913][T14850] __sys_recvfrom+0x240/0x3c0 [ 398.401943][T14850] ? ksys_write+0x1e6/0x270 [ 398.401970][T14850] ? __pfx___sys_recvfrom+0x10/0x10 [ 398.401999][T14850] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 398.402045][T14850] ? __fget_files+0x3a0/0x420 [ 398.402088][T14850] ? ksys_write+0x242/0x270 [ 398.402113][T14850] ? __pfx_ksys_write+0x10/0x10 [ 398.402142][T14850] __x64_sys_recvfrom+0xde/0x100 [ 398.402178][T14850] do_syscall_64+0x14d/0xf80 [ 398.402207][T14850] ? trace_irq_disable+0x3b/0x150 [ 398.402236][T14850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.402258][T14850] ? clear_bhb_loop+0x40/0x90 [ 398.402283][T14850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.402304][T14850] RIP: 0033:0x7f3843f9c799 [ 398.402324][T14850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.402342][T14850] RSP: 002b:00007f38421f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 398.402365][T14850] RAX: ffffffffffffffda RBX: 00007f3844216090 RCX: 00007f3843f9c799 [ 398.402380][T14850] RDX: fffffffffffffd0b RSI: 0000200000000000 RDI: 0000000000000003 [ 398.402394][T14850] RBP: 00007f38421f6090 R08: 0000000000000000 R09: 1154103478d401ea [ 398.402408][T14850] R10: 00000000400123eb R11: 0000000000000246 R12: 0000000000000002 [ 398.402421][T14850] R13: 00007f3844216128 R14: 00007f3844216090 R15: 00007ffc78e54308 [ 398.402455][T14850] [ 398.826915][T14848] bond18: entered promiscuous mode [ 398.832508][T14848] 8021q: adding VLAN 0 to HW filter on device bond18 [ 398.884127][T14854] bond18: (slave bridge14): making interface the new active one [ 398.909824][T14854] bridge14: entered promiscuous mode [ 398.916999][T14854] bond18: (slave bridge14): Enslaving as an active interface with an up link [ 399.040104][T14859] xfrm1: entered allmulticast mode [ 399.185854][T14868] netlink: 'syz.3.2269': attribute type 15 has an invalid length. [ 399.193734][T14868] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2269'. [ 399.269665][T14875] syzkaller0: entered promiscuous mode [ 399.275462][T14875] syzkaller0: entered allmulticast mode [ 399.514140][T14893] xt_hashlimit: size too large, truncated to 1048576 [ 400.007145][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 400.015264][ C0] lec:lec_tx_timeout: lec0 [ 400.020046][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 401.098839][ T5193] udevd[5193]: worker [6685] /devices/virtual/block/nbd0 timeout; kill it [ 401.126046][ T5193] udevd[5193]: seq 25232 '/devices/virtual/block/nbd0' killed [ 401.219013][T14925] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 401.255880][T14925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2284'. [ 401.432813][T14938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2288'. [ 401.643280][T14942] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 401.654421][T14948] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 401.785694][T14945] lo speed is unknown, defaulting to 1000 [ 402.384040][T14952] netlink: 'syz.3.2294': attribute type 6 has an invalid length. [ 402.405689][T14973] __nla_validate_parse: 3 callbacks suppressed [ 402.405713][T14973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2299'. [ 402.631321][T14981] tipc: Enabled bearer , priority 14 [ 402.638891][T14981] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2302'. [ 402.648132][T14981] 0ªX¹¦À: renamed from caif0 [ 402.716467][T14981] tipc: Disabling bearer [ 402.823078][T14981] 0ªX¹¦À: entered allmulticast mode [ 402.867221][T14981] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 402.915863][T15001] netlink: 'syz.3.2306': attribute type 3 has an invalid length. [ 402.947575][T15003] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.033044][T15006] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2305'. [ 403.203679][T14999] syzkaller0: entered promiscuous mode [ 403.217727][T14999] syzkaller0: entered allmulticast mode [ 403.283298][T15011] netlink: 'syz.0.2308': attribute type 5 has an invalid length. [ 403.484154][T15022] SET target dimension over the limit! [ 403.604854][T15025] netlink: 'syz.1.2310': attribute type 2 has an invalid length. [ 403.755982][T15037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2314'. [ 404.918387][T15068] netlink: 'syz.1.2325': attribute type 1 has an invalid length. [ 405.026380][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'. [ 405.326369][T15079] netlink: 'syz.2.2327': attribute type 8 has an invalid length. [ 405.326372][T15080] netlink: 'syz.2.2327': attribute type 8 has an invalid length. [ 405.418010][ T5161] block nbd3: Possible stuck request ffff888026988000: control (read@0,4096B). Runtime 60 seconds [ 405.471309][T15084] xt_CT: No such helper "netbios-ns" [ 405.480662][T15069] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 405.491865][T15069] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 405.583969][T15090] netlink: 'syz.3.2329': attribute type 10 has an invalid length. [ 405.619372][T15071] bond8: (slave gretap1): making interface the new active one [ 405.631471][T15094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2331'. [ 405.644885][T15071] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 405.676832][T15073] macvlan3: entered promiscuous mode [ 405.682208][T15073] macvlan3: entered allmulticast mode [ 405.694080][T15073] bond8: entered promiscuous mode [ 405.699910][T15073] gretap1: entered promiscuous mode [ 405.707128][T15073] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 405.719110][T15073] bond8: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 405.731592][T15073] bond8: left promiscuous mode [ 405.737853][T15073] gretap1: left promiscuous mode [ 405.757886][T15076] bridge_slave_1: left allmulticast mode [ 405.763718][T15076] bridge_slave_1: left promiscuous mode [ 405.770377][T15076] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.780937][T15076] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 405.801100][T15090] syz_tun: entered promiscuous mode [ 405.814618][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 405.822723][ C0] lec:lec_tx_timeout: lec0 [ 405.828091][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 405.851323][T15090] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 405.893400][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2332'. [ 405.904928][T15098] tipc: Enabling of bearer rejected, failed to enable media [ 405.916602][T15096] netlink: 'syz.2.2330': attribute type 1 has an invalid length. [ 406.280603][ T5193] udevd[5193]: worker [5888] /devices/virtual/block/nbd3 is taking a long time [ 406.466269][T15145] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 406.675716][T15156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'. [ 406.718842][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2347'. [ 407.253706][T15192] lo speed is unknown, defaulting to 1000 [ 407.339759][T15199] openvswitch: netlink: Duplicate or invalid key (type 0). [ 407.374173][T15199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.524361][T15199] netlink: 'syz.4.2356': attribute type 29 has an invalid length. [ 407.532684][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'. [ 407.618785][T15203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'. [ 407.695506][T15205] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2358'. [ 407.717139][T15205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2358'. [ 408.025795][T15215] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2361'. [ 408.221708][T15216] lo speed is unknown, defaulting to 1000 [ 408.254394][T15222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2363'. [ 408.314123][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'. [ 408.344717][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2364'. [ 410.854717][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 410.862799][ C0] lec:lec_tx_timeout: lec0 [ 410.868075][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 415.874659][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 415.882698][ C0] lec:lec_tx_timeout: lec0 [ 415.887453][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 420.894680][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 420.902723][ C0] lec:lec_tx_timeout: lec0 [ 420.907385][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 425.256351][ T5161] block nbd0: Possible stuck request ffff888026888000: control (read@0,1024B). Runtime 210 seconds [ 425.267388][ T5161] block nbd0: Possible stuck request ffff888026888200: control (read@1024,1024B). Runtime 210 seconds [ 425.279037][ T5161] block nbd0: Possible stuck request ffff888026888400: control (read@2048,1024B). Runtime 210 seconds [ 425.290113][ T5161] block nbd0: Possible stuck request ffff888026888600: control (read@3072,1024B). Runtime 210 seconds [ 425.914770][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 425.922883][ C0] lec:lec_tx_timeout: lec0 [ 425.927703][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 430.934664][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 430.942723][ C0] lec:lec_tx_timeout: lec0 [ 430.947579][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 435.494967][ T5161] block nbd3: Possible stuck request ffff888026988000: control (read@0,4096B). Runtime 90 seconds [ 435.954686][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 435.962740][ C0] lec:lec_tx_timeout: lec0 [ 435.967581][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 440.974717][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 440.982787][ C0] lec:lec_tx_timeout: lec0 [ 440.987485][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 445.994672][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 446.002744][ C0] lec:lec_tx_timeout: lec0 [ 446.007396][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 450.191074][T15234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.260717][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2367'. [ 450.312365][T15242] bond9: entered promiscuous mode [ 450.318353][T15242] 8021q: adding VLAN 0 to HW filter on device bond9 [ 450.380219][T15253] 8021q: adding VLAN 0 to HW filter on device bond9 [ 450.408931][T15253] bond9: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 450.423116][T15253] bond9: (slave ip6tnl3): Error -95 calling set_mac_address [ 450.442563][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2372'. [ 450.849155][T15282] netlink: 'syz.1.2379': attribute type 1 has an invalid length. [ 451.014640][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 451.022737][ C0] lec:lec_tx_timeout: lec0 [ 451.027748][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 451.037052][T15296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'. [ 451.095953][T15298] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2383'. [ 451.232120][T15309] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2384'. [ 451.246259][T15308] netlink: 'syz.1.2386': attribute type 1 has an invalid length. [ 451.255184][T15308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.293904][T15313] netlink: 'syz.0.2385': attribute type 32 has an invalid length. [ 451.311520][T15244] syzkaller0: entered promiscuous mode [ 451.317216][T15244] syzkaller0: entered allmulticast mode [ 451.329433][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 451.393900][T15313] bond19: Setting coupled_control to off (0) [ 451.802825][T15337] FAULT_INJECTION: forcing a failure. [ 451.802825][T15337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.817026][T15337] CPU: 1 UID: 0 PID: 15337 Comm: syz.0.2392 Not tainted syzkaller #0 PREEMPT(full) [ 451.817051][T15337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.817063][T15337] Call Trace: [ 451.817071][T15337] [ 451.817078][T15337] dump_stack_lvl+0xe8/0x150 [ 451.817110][T15337] should_fail_ex+0x412/0x560 [ 451.817140][T15337] prepare_alloc_pages+0x22a/0x650 [ 451.817178][T15337] __alloc_frozen_pages_noprof+0x12f/0x380 [ 451.817203][T15337] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 451.817229][T15337] ? __pfx_policy_nodemask+0x10/0x10 [ 451.817260][T15337] alloc_pages_mpol+0x232/0x4a0 [ 451.817287][T15337] vma_alloc_folio_noprof+0xea/0x210 [ 451.817312][T15337] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 451.817343][T15337] do_wp_page+0x1204/0x5a00 [ 451.817387][T15337] ? __pfx_do_wp_page+0x10/0x10 [ 451.817409][T15337] ? do_raw_spin_lock+0x12b/0x2f0 [ 451.817430][T15337] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 451.817456][T15337] handle_mm_fault+0x1520/0x3310 [ 451.817495][T15337] ? handle_mm_fault+0xee/0x3310 [ 451.817545][T15337] ? __pfx_handle_mm_fault+0x10/0x10 [ 451.817573][T15337] ? follow_page_pte+0xd7f/0x1450 [ 451.817609][T15337] ? __pfx_follow_page_pte+0x10/0x10 [ 451.817647][T15337] __get_user_pages+0x165b/0x29d0 [ 451.817701][T15337] __gup_longterm_locked+0xdcf/0x1630 [ 451.817739][T15337] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 451.817772][T15337] gup_fast_fallback+0x1d82/0x22e0 [ 451.817825][T15337] ? __pfx_gup_fast_fallback+0x10/0x10 [ 451.817849][T15337] ? __sys_recvfrom+0x240/0x3c0 [ 451.817876][T15337] ? do_syscall_64+0x14d/0xf80 [ 451.817901][T15337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.817928][T15337] ? pin_user_pages_fast+0x4d/0xb0 [ 451.817956][T15337] iov_iter_extract_pages+0x37b/0x5f0 [ 451.817993][T15337] extract_iter_to_sg+0xe62/0x2520 [ 451.818030][T15337] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 451.818052][T15337] ? rcu_is_watching+0x15/0xb0 [ 451.818077][T15337] ? trace_kmalloc+0x2a/0x110 [ 451.818098][T15337] ? __kmalloc_noprof+0x37d/0x760 [ 451.818118][T15337] ? sock_kmalloc+0xd6/0x160 [ 451.818140][T15337] ? __asan_memset+0x22/0x50 [ 451.818165][T15337] af_alg_get_rsgl+0x436/0x810 [ 451.818206][T15337] skcipher_recvmsg+0x3a3/0x1140 [ 451.818236][T15337] ? get_pid_task+0x20/0x1f0 [ 451.818277][T15337] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 451.818304][T15337] ? aa_sock_msg_perm+0xf1/0x1b0 [ 451.818331][T15337] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 451.818352][T15337] ? security_socket_recvmsg+0x7e/0x2c0 [ 451.818381][T15337] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 451.818408][T15337] sock_recvmsg+0x172/0x1b0 [ 451.818434][T15337] __sys_recvfrom+0x240/0x3c0 [ 451.818460][T15337] ? ksys_write+0x1e6/0x270 [ 451.818484][T15337] ? __pfx___sys_recvfrom+0x10/0x10 [ 451.818508][T15337] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 451.818549][T15337] ? __fget_files+0x3a0/0x420 [ 451.818585][T15337] ? ksys_write+0x242/0x270 [ 451.818606][T15337] ? __pfx_ksys_write+0x10/0x10 [ 451.818630][T15337] __x64_sys_recvfrom+0xde/0x100 [ 451.818662][T15337] do_syscall_64+0x14d/0xf80 [ 451.818687][T15337] ? trace_irq_disable+0x3b/0x150 [ 451.818714][T15337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.818732][T15337] ? clear_bhb_loop+0x40/0x90 [ 451.818759][T15337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.818777][T15337] RIP: 0033:0x7fc75a19c799 [ 451.818794][T15337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.818810][T15337] RSP: 002b:00007fc75af8d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 451.818829][T15337] RAX: ffffffffffffffda RBX: 00007fc75a416090 RCX: 00007fc75a19c799 [ 451.818842][T15337] RDX: fffffffffffffd0b RSI: 0000200000000000 RDI: 0000000000000003 [ 451.818854][T15337] RBP: 00007fc75af8d090 R08: 0000000000000000 R09: 1154103478d401ea [ 451.818866][T15337] R10: 00000000400123eb R11: 0000000000000246 R12: 0000000000000002 [ 451.818877][T15337] R13: 00007fc75a416128 R14: 00007fc75a416090 R15: 00007ffeca0b7dd8 [ 451.818905][T15337] [ 453.319450][T15341] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2391'. [ 453.577942][T15351] netlink: 'syz.2.2394': attribute type 3 has an invalid length. [ 454.546250][T15406] netlink: 'syz.0.2403': attribute type 1 has an invalid length. [ 454.644204][T15411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2403'. [ 454.715863][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2406'. [ 454.722197][T15411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2403'. [ 454.734679][T15416] netlink: 'syz.4.2406': attribute type 19 has an invalid length. [ 454.750970][T15416] netlink: 'syz.4.2406': attribute type 20 has an invalid length. [ 455.239485][T15425] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 455.261040][T15430] IPVS: length: 225 != 24 [ 455.296320][T15445] __nla_validate_parse: 2 callbacks suppressed [ 455.296339][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2410'. [ 455.393721][ T5161] block nbd0: Possible stuck request ffff888026888000: control (read@0,1024B). Runtime 240 seconds [ 455.405780][ T5161] block nbd0: Possible stuck request ffff888026888200: control (read@1024,1024B). Runtime 240 seconds [ 455.418051][ T5161] block nbd0: Possible stuck request ffff888026888400: control (read@2048,1024B). Runtime 240 seconds [ 455.429611][ T5161] block nbd0: Possible stuck request ffff888026888600: control (read@3072,1024B). Runtime 240 seconds [ 456.139861][T15473] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2418'. [ 456.272114][T15479] netlink: 'syz.3.2420': attribute type 7 has an invalid length. [ 456.406745][T15479] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.2420'. [ 456.854833][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 456.862949][ C0] lec:lec_tx_timeout: lec0 [ 456.892983][T15496] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 456.996464][T15499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2424'. [ 457.262209][T15517] FAULT_INJECTION: forcing a failure. [ 457.262209][T15517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 457.297010][T15517] CPU: 1 UID: 0 PID: 15517 Comm: syz.2.2427 Not tainted syzkaller #0 PREEMPT(full) [ 457.297039][T15517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 457.297051][T15517] Call Trace: [ 457.297059][T15517] [ 457.297068][T15517] dump_stack_lvl+0xe8/0x150 [ 457.297102][T15517] should_fail_ex+0x412/0x560 [ 457.297133][T15517] prepare_alloc_pages+0x22a/0x650 [ 457.297166][T15517] __alloc_frozen_pages_noprof+0x12f/0x380 [ 457.297215][T15517] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 457.297246][T15517] ? __pfx_policy_nodemask+0x10/0x10 [ 457.297285][T15517] alloc_pages_mpol+0x232/0x4a0 [ 457.297319][T15517] vma_alloc_folio_noprof+0xea/0x210 [ 457.297355][T15517] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 457.297395][T15517] do_wp_page+0x1204/0x5a00 [ 457.297450][T15517] ? __pfx_do_wp_page+0x10/0x10 [ 457.297478][T15517] ? do_raw_spin_lock+0x12b/0x2f0 [ 457.297504][T15517] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 457.297537][T15517] handle_mm_fault+0x1520/0x3310 [ 457.297584][T15517] ? handle_mm_fault+0xee/0x3310 [ 457.297624][T15517] ? __pfx_handle_mm_fault+0x10/0x10 [ 457.297657][T15517] ? follow_page_pte+0xd7f/0x1450 [ 457.297700][T15517] ? __pfx_follow_page_pte+0x10/0x10 [ 457.297744][T15517] __get_user_pages+0x165b/0x29d0 [ 457.297808][T15517] __gup_longterm_locked+0xdcf/0x1630 [ 457.297854][T15517] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 457.297893][T15517] gup_fast_fallback+0x1d82/0x22e0 [ 457.297959][T15517] ? __pfx_gup_fast_fallback+0x10/0x10 [ 457.297988][T15517] ? __sys_recvfrom+0x240/0x3c0 [ 457.298018][T15517] ? do_syscall_64+0x14d/0xf80 [ 457.298047][T15517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.298075][T15517] ? pin_user_pages_fast+0x4d/0xb0 [ 457.298108][T15517] iov_iter_extract_pages+0x37b/0x5f0 [ 457.298151][T15517] extract_iter_to_sg+0xe62/0x2520 [ 457.298196][T15517] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 457.298221][T15517] ? rcu_is_watching+0x15/0xb0 [ 457.298250][T15517] ? trace_kmalloc+0x2a/0x110 [ 457.298276][T15517] ? __kmalloc_noprof+0x37d/0x760 [ 457.298299][T15517] ? sock_kmalloc+0xd6/0x160 [ 457.298326][T15517] ? __asan_memset+0x22/0x50 [ 457.298355][T15517] af_alg_get_rsgl+0x436/0x810 [ 457.298405][T15517] skcipher_recvmsg+0x3a3/0x1140 [ 457.298440][T15517] ? get_pid_task+0x20/0x1f0 [ 457.298487][T15517] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 457.298517][T15517] ? aa_sock_msg_perm+0xf1/0x1b0 [ 457.298547][T15517] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 457.298569][T15517] ? security_socket_recvmsg+0x7e/0x2c0 [ 457.298601][T15517] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 457.298632][T15517] sock_recvmsg+0x172/0x1b0 [ 457.298662][T15517] __sys_recvfrom+0x240/0x3c0 [ 457.298693][T15517] ? ksys_write+0x1e6/0x270 [ 457.298718][T15517] ? __pfx___sys_recvfrom+0x10/0x10 [ 457.298747][T15517] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 457.298793][T15517] ? __fget_files+0x3a0/0x420 [ 457.298835][T15517] ? ksys_write+0x242/0x270 [ 457.298860][T15517] ? __pfx_ksys_write+0x10/0x10 [ 457.298888][T15517] __x64_sys_recvfrom+0xde/0x100 [ 457.298924][T15517] do_syscall_64+0x14d/0xf80 [ 457.298952][T15517] ? trace_irq_disable+0x3b/0x150 [ 457.298982][T15517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.299003][T15517] ? clear_bhb_loop+0x40/0x90 [ 457.299030][T15517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.299051][T15517] RIP: 0033:0x7f901c59c799 [ 457.299071][T15517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.299089][T15517] RSP: 002b:00007f901d50f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 457.299112][T15517] RAX: ffffffffffffffda RBX: 00007f901c816090 RCX: 00007f901c59c799 [ 457.299128][T15517] RDX: fffffffffffffd0b RSI: 0000200000000000 RDI: 0000000000000003 [ 457.299142][T15517] RBP: 00007f901d50f090 R08: 0000000000000000 R09: 1154103478d401ea [ 457.299156][T15517] R10: 00000000400123eb R11: 0000000000000246 R12: 0000000000000002 [ 457.299168][T15517] R13: 00007f901c816128 R14: 00007f901c816090 R15: 00007ffd12b58a78 [ 457.299203][T15517] [ 457.956184][T15539] macsec1: entered allmulticast mode [ 457.979533][T15539] dummy0: entered allmulticast mode [ 458.011489][T15539] dummy0: left allmulticast mode [ 458.369152][T15548] syzkaller0: entered promiscuous mode [ 458.405551][T15548] syzkaller0: entered allmulticast mode [ 458.447765][T15556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2441'. [ 458.465538][T15556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2441'. [ 458.847968][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2446'. [ 458.955191][T15576] netlink: 'syz.4.2445': attribute type 1 has an invalid length. [ 459.065616][T15579] netlink: 'syz.2.2447': attribute type 1 has an invalid length. [ 459.457546][T15589] netlink: 'syz.1.2450': attribute type 1 has an invalid length. [ 460.182029][T15589] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 460.309152][T15603] netlink: 'syz.2.2453': attribute type 10 has an invalid length. [ 460.569273][T15618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2457'. [ 460.656935][T15622] netlink: 'syz.1.2459': attribute type 1 has an invalid length. [ 460.926224][T15637] lo speed is unknown, defaulting to 1000 [ 461.058081][T15645] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2466'. [ 461.339350][T15654] FAULT_INJECTION: forcing a failure. [ 461.339350][T15654] name failslab, interval 1, probability 0, space 0, times 0 [ 461.374445][T15654] CPU: 1 UID: 0 PID: 15654 Comm: syz.4.2469 Not tainted syzkaller #0 PREEMPT(full) [ 461.374476][T15654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.374490][T15654] Call Trace: [ 461.374498][T15654] [ 461.374508][T15654] dump_stack_lvl+0xe8/0x150 [ 461.374548][T15654] should_fail_ex+0x412/0x560 [ 461.374581][T15654] should_failslab+0xa8/0x100 [ 461.374609][T15654] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 461.374632][T15654] ? __alloc_skb+0x186/0x7d0 [ 461.374662][T15654] ? __alloc_skb+0x1d0/0x7d0 [ 461.374688][T15654] ? __local_bh_enable_ip+0xd0/0x130 [ 461.374722][T15654] __alloc_skb+0x1d0/0x7d0 [ 461.374751][T15654] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 461.374780][T15654] netlink_sendmsg+0x5d4/0xb40 [ 461.374948][T15654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.374983][T15654] ? aa_sock_msg_perm+0xf1/0x1b0 [ 461.375012][T15654] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.375038][T15654] ____sys_sendmsg+0x972/0x9f0 [ 461.375069][T15654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.375100][T15654] ? import_iovec+0x73/0xa0 [ 461.375136][T15654] ___sys_sendmsg+0x2a5/0x360 [ 461.375163][T15654] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.375222][T15654] ? __fget_files+0x2a/0x420 [ 461.375251][T15654] ? __fget_files+0x3a0/0x420 [ 461.375293][T15654] __x64_sys_sendmsg+0x1bd/0x2a0 [ 461.375317][T15654] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.375349][T15654] ? __pfx_ksys_write+0x10/0x10 [ 461.375385][T15654] do_syscall_64+0x14d/0xf80 [ 461.375414][T15654] ? trace_irq_disable+0x3b/0x150 [ 461.375450][T15654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.375472][T15654] ? clear_bhb_loop+0x40/0x90 [ 461.375497][T15654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.375517][T15654] RIP: 0033:0x7f3843f9c799 [ 461.375537][T15654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.375555][T15654] RSP: 002b:00007f3844d7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.375577][T15654] RAX: ffffffffffffffda RBX: 00007f3844215fa0 RCX: 00007f3843f9c799 [ 461.375593][T15654] RDX: 0000000020040040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 461.375606][T15654] RBP: 00007f3844d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 461.375619][T15654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.375631][T15654] R13: 00007f3844216038 R14: 00007f3844215fa0 R15: 00007ffc78e54308 [ 461.375665][T15654] [ 461.669262][T15658] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2471'. [ 461.699119][T15658] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 462.275925][T15680] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 462.600475][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.612386][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.653177][T15691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2479'. [ 462.676803][T15690] lo speed is unknown, defaulting to 1000 [ 462.702982][T15688] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2480'. [ 462.808203][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2482'. [ 462.820575][T15695] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2484'. [ 462.830891][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2482'. [ 463.026406][T15700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2485'. [ 463.245062][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2485'. [ 463.797367][T15737] netlink: 'syz.1.2497': attribute type 1 has an invalid length. [ 463.825319][T15737] netlink: 'syz.1.2497': attribute type 1 has an invalid length. [ 464.068852][T15748] bond19: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 464.089012][T15748] bond19 (unregistering): Released all slaves [ 464.467916][T15770] lo speed is unknown, defaulting to 1000 [ 464.488467][T15770] lo speed is unknown, defaulting to 1000 [ 464.511426][T15770] lo speed is unknown, defaulting to 1000 [ 464.552086][T15770] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 464.738339][T15793] netlink: 'syz.1.2511': attribute type 1 has an invalid length. [ 465.011717][ T8039] lo speed is unknown, defaulting to 1000 [ 465.011742][T15770] lo speed is unknown, defaulting to 1000 [ 465.017754][ T8039] sqz0: Port: 1 Link DOWN [ 465.017854][ T8039] lo speed is unknown, defaulting to 1000 [ 465.080544][T15795] bond18: left promiscuous mode [ 465.087881][T15795] bridge14: left promiscuous mode [ 465.106686][T15793] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 465.107150][T15770] lo speed is unknown, defaulting to 1000 [ 465.144429][T15770] lo speed is unknown, defaulting to 1000 [ 465.165920][T15770] lo speed is unknown, defaulting to 1000 [ 465.208733][T15770] lo speed is unknown, defaulting to 1000 [ 465.309332][T15809] vlan0: entered allmulticast mode [ 465.379315][T15823] netlink: 'syz.1.2519': attribute type 21 has an invalid length. [ 465.392027][T15809] bond0 (unregistering): left promiscuous mode [ 465.420062][T15809] bond_slave_0: left promiscuous mode [ 465.445246][T15809] bond_slave_1: left promiscuous mode [ 465.450962][T15809] bridge0: port 3(bond0) entered disabled state [ 465.480778][T15829] xt_bpf: check failed: parse error [ 465.502899][T15809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.525212][T15809] bond_slave_0: left allmulticast mode [ 465.532919][T15809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.545949][T15809] bond_slave_1: left allmulticast mode [ 465.552073][T15809] bond0 (unregistering): Released all slaves [ 465.574970][ T5161] block nbd3: Possible stuck request ffff888026988000: control (read@0,4096B). Runtime 120 seconds [ 465.586915][T15823] __nla_validate_parse: 4 callbacks suppressed [ 465.586939][T15823] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2519'. [ 465.622771][T15823] netlink: 'syz.1.2519': attribute type 1 has an invalid length. [ 465.641825][T15817] netdevsim0: renamed from batadv0 [ 465.666645][T15817] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 465.951883][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2523'. [ 466.014298][T15847] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2523'. [ 466.060306][T15847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2523'. [ 466.287321][T15857] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2529'. [ 466.426196][T15863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'. [ 466.502079][T15866] syzkaller0: entered promiscuous mode [ 466.508433][T15866] syzkaller0: entered allmulticast mode [ 466.923187][T15884] netlink: 592 bytes leftover after parsing attributes in process `syz.1.2537'. [ 467.087080][T15891] netlink: 'syz.1.2539': attribute type 2 has an invalid length. [ 467.101377][T15892] syzkaller0: entered promiscuous mode [ 467.119030][T15892] syzkaller0: entered allmulticast mode [ 467.150757][T15895] netlink: 'syz.1.2539': attribute type 2 has an invalid length. [ 467.164267][T15891] !: entered promiscuous mode [ 467.722427][T15922] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2549'. [ 468.020421][T15927] syzkaller0: entered promiscuous mode [ 468.034807][T15927] syzkaller0: entered allmulticast mode [ 468.318356][T15954] FAULT_INJECTION: forcing a failure. [ 468.318356][T15954] name failslab, interval 1, probability 0, space 0, times 0 [ 468.331471][T15954] CPU: 1 UID: 0 PID: 15954 Comm: syz.2.2558 Not tainted syzkaller #0 PREEMPT(full) [ 468.331501][T15954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.331515][T15954] Call Trace: [ 468.331524][T15954] [ 468.331533][T15954] dump_stack_lvl+0xe8/0x150 [ 468.331569][T15954] should_fail_ex+0x412/0x560 [ 468.331605][T15954] should_failslab+0xa8/0x100 [ 468.331634][T15954] __kmalloc_noprof+0xe8/0x760 [ 468.331668][T15954] ? nf_tables_newrule+0x152c/0x28b0 [ 468.331779][T15954] ? nla_strcmp+0x106/0x140 [ 468.331860][T15954] nf_tables_newrule+0x152c/0x28b0 [ 468.331907][T15954] ? __pfx_nf_tables_newrule+0x10/0x10 [ 468.331932][T15954] ? nfnl_pernet+0x23/0x240 [ 468.331994][T15954] ? __nla_parse+0x40/0x60 [ 468.332031][T15954] nfnetlink_rcv+0x1240/0x27b0 [ 468.332056][T15954] ? is_bpf_text_address+0x26/0x2b0 [ 468.332118][T15954] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 468.332156][T15954] ? __lock_acquire+0x6b5/0x2cf0 [ 468.332225][T15954] ? netlink_deliver_tap+0x2e/0x1b0 [ 468.332276][T15954] netlink_unicast+0x80f/0x9b0 [ 468.332313][T15954] ? __pfx_netlink_unicast+0x10/0x10 [ 468.332342][T15954] ? netlink_sendmsg+0x650/0xb40 [ 468.332373][T15954] ? skb_put+0x11b/0x210 [ 468.332410][T15954] netlink_sendmsg+0x813/0xb40 [ 468.332451][T15954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.332485][T15954] ? aa_sock_msg_perm+0xf1/0x1b0 [ 468.332516][T15954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 468.332544][T15954] ____sys_sendmsg+0x972/0x9f0 [ 468.332576][T15954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.332608][T15954] ? import_iovec+0x73/0xa0 [ 468.332645][T15954] ___sys_sendmsg+0x2a5/0x360 [ 468.332681][T15954] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.332744][T15954] ? __fget_files+0x2a/0x420 [ 468.332776][T15954] ? __fget_files+0x3a0/0x420 [ 468.332819][T15954] __x64_sys_sendmsg+0x1bd/0x2a0 [ 468.332845][T15954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.332879][T15954] ? __pfx_ksys_write+0x10/0x10 [ 468.332916][T15954] do_syscall_64+0x14d/0xf80 [ 468.332947][T15954] ? trace_irq_disable+0x3b/0x150 [ 468.332977][T15954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.332999][T15954] ? clear_bhb_loop+0x40/0x90 [ 468.333026][T15954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.333047][T15954] RIP: 0033:0x7f901c59c799 [ 468.333069][T15954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.333088][T15954] RSP: 002b:00007f901d530028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.333112][T15954] RAX: ffffffffffffffda RBX: 00007f901c815fa0 RCX: 00007f901c59c799 [ 468.333127][T15954] RDX: 0000000020040040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 468.333141][T15954] RBP: 00007f901d530090 R08: 0000000000000000 R09: 0000000000000000 [ 468.333155][T15954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.333168][T15954] R13: 00007f901c816038 R14: 00007f901c815fa0 R15: 00007ffd12b58a78 [ 468.333204][T15954] [ 468.942845][T15961] tipc: Failed to remove unknown binding: 66,0,0/2886997007:683760900/683760902 [ 468.957943][T15961] tipc: Failed to remove unknown binding: 66,0,0/2886997007:683760900/683760901 [ 468.970167][T15961] tipc: Failed to remove unknown binding: 66,0,0/2886997007:683760900/683760902 [ 468.979947][T15961] tipc: Failed to remove unknown binding: 66,0,0/2886997007:683760900/683760901 [ 471.138517][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2570'. [ 471.160134][T16005] netlink: 'syz.2.2570': attribute type 30 has an invalid length. [ 471.188747][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2570'. [ 471.197078][T16009] FAULT_INJECTION: forcing a failure. [ 471.197078][T16009] name failslab, interval 1, probability 0, space 0, times 0 [ 471.212465][T16005] netlink: 'syz.2.2570': attribute type 30 has an invalid length. [ 471.280409][T16009] CPU: 1 UID: 0 PID: 16009 Comm: syz.3.2571 Not tainted syzkaller #0 PREEMPT(full) [ 471.280441][T16009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.280454][T16009] Call Trace: [ 471.280464][T16009] [ 471.280472][T16009] dump_stack_lvl+0xe8/0x150 [ 471.280509][T16009] should_fail_ex+0x412/0x560 [ 471.280544][T16009] should_failslab+0xa8/0x100 [ 471.280574][T16009] __kmalloc_noprof+0xe8/0x760 [ 471.280599][T16009] ? nf_tables_newrule+0x152c/0x28b0 [ 471.280621][T16009] ? nla_strcmp+0x106/0x140 [ 471.280657][T16009] nf_tables_newrule+0x152c/0x28b0 [ 471.280697][T16009] ? __pfx_nf_tables_newrule+0x10/0x10 [ 471.280721][T16009] ? nfnl_pernet+0x23/0x240 [ 471.280769][T16009] ? __nla_parse+0x40/0x60 [ 471.280803][T16009] nfnetlink_rcv+0x1240/0x27b0 [ 471.280876][T16009] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 471.280920][T16009] ? ref_tracker_free+0x693/0x840 [ 471.280980][T16009] ? __netlink_deliver_tap+0x807/0x850 [ 471.281010][T16009] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.281058][T16009] netlink_unicast+0x80f/0x9b0 [ 471.281094][T16009] ? __pfx_netlink_unicast+0x10/0x10 [ 471.281122][T16009] ? netlink_sendmsg+0x650/0xb40 [ 471.281149][T16009] ? skb_put+0x11b/0x210 [ 471.281185][T16009] netlink_sendmsg+0x813/0xb40 [ 471.281224][T16009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.281258][T16009] ? aa_sock_msg_perm+0xf1/0x1b0 [ 471.281288][T16009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 471.281316][T16009] ____sys_sendmsg+0x972/0x9f0 [ 471.281348][T16009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.281380][T16009] ? import_iovec+0x73/0xa0 [ 471.281417][T16009] ___sys_sendmsg+0x2a5/0x360 [ 471.281445][T16009] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.281510][T16009] ? __fget_files+0x2a/0x420 [ 471.281562][T16009] ? __fget_files+0x3a0/0x420 [ 471.281603][T16009] __x64_sys_sendmsg+0x1bd/0x2a0 [ 471.281625][T16009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.281655][T16009] ? __pfx_ksys_write+0x10/0x10 [ 471.281689][T16009] do_syscall_64+0x14d/0xf80 [ 471.281718][T16009] ? trace_irq_disable+0x3b/0x150 [ 471.281747][T16009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.281767][T16009] ? clear_bhb_loop+0x40/0x90 [ 471.281800][T16009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.281835][T16009] RIP: 0033:0x7f835979c799 [ 471.281855][T16009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.281873][T16009] RSP: 002b:00007f835a6aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.281903][T16009] RAX: ffffffffffffffda RBX: 00007f8359a15fa0 RCX: 00007f835979c799 [ 471.281919][T16009] RDX: 0000000020040040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 471.281933][T16009] RBP: 00007f835a6aa090 R08: 0000000000000000 R09: 0000000000000000 [ 471.281947][T16009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.281964][T16009] R13: 00007f8359a16038 R14: 00007f8359a15fa0 R15: 00007ffc86aadac8 [ 471.282000][T16009] [ 471.583332][T16019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'. [ 471.843672][T16023] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2575'. [ 471.907539][T16025] syzkaller1: entered promiscuous mode [ 471.913065][T16025] syzkaller1: entered allmulticast mode [ 471.948400][T16023] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2575'. [ 472.243728][T16043] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2583'. [ 472.292428][T16038] syzkaller0: entered promiscuous mode [ 472.298399][T16038] syzkaller0: entered allmulticast mode [ 472.315088][T16044] tun0: tun_chr_ioctl cmd 2147767507 [ 472.348379][T16043] netlink: 1084 bytes leftover after parsing attributes in process `syz.1.2583'. [ 472.479570][T16051] netlink: 'syz.3.2585': attribute type 4 has an invalid length. [ 472.508228][T16054] netlink: 'syz.1.2586': attribute type 2 has an invalid length. [ 472.518873][T16051] netlink: 'syz.3.2585': attribute type 4 has an invalid length. [ 472.544741][T16054] netlink: 'syz.1.2586': attribute type 1 has an invalid length. [ 472.553462][T16054] netlink: 'syz.1.2586': attribute type 1 has an invalid length. [ 472.831871][T16065] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2590'. [ 473.089078][T16079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2593'. [ 473.100549][T16079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2593'. [ 474.387311][T16093] vlan2: entered allmulticast mode [ 474.392859][T16093] bond0: entered allmulticast mode [ 474.409235][T16093] bond_slave_0: entered allmulticast mode [ 474.427439][T16093] bond_slave_1: entered allmulticast mode [ 474.443050][T16093] syz_tun: entered allmulticast mode [ 475.175073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.444732][T16142] syzkaller0: entered promiscuous mode [ 475.450424][T16142] syzkaller0: entered allmulticast mode [ 475.901568][T16152] lo speed is unknown, defaulting to 1000 [ 477.699365][T16152] lo speed is unknown, defaulting to 1000 [ 477.718630][T10492] lec:lec_start_xmit: lec0:No lecd attached [ 478.155159][T16192] __nla_validate_parse: 4 callbacks suppressed [ 478.155184][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2622'. [ 478.482063][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2629'. [ 478.628870][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2630'. [ 478.780051][T16232] FAULT_INJECTION: forcing a failure. [ 478.780051][T16232] name failslab, interval 1, probability 0, space 0, times 0 [ 478.794434][T16232] CPU: 1 UID: 0 PID: 16232 Comm: syz.3.2632 Not tainted syzkaller #0 PREEMPT(full) [ 478.794464][T16232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.794477][T16232] Call Trace: [ 478.794485][T16232] [ 478.794495][T16232] dump_stack_lvl+0xe8/0x150 [ 478.794535][T16232] should_fail_ex+0x412/0x560 [ 478.794568][T16232] should_failslab+0xa8/0x100 [ 478.794598][T16232] __kvmalloc_node_noprof+0x178/0x8a0 [ 478.794625][T16232] ? page_pool_create_percpu+0x2dd/0xb80 [ 478.794736][T16232] ? page_pool_create_percpu+0xaf/0xb80 [ 478.794765][T16232] page_pool_create_percpu+0x2dd/0xb80 [ 478.794791][T16232] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 478.794822][T16232] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 478.794894][T16232] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 478.794948][T16232] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 478.794982][T16232] ? __pfx_autoremove_wake_function+0x10/0x10 [ 478.795019][T16232] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 478.795073][T16232] ? 0xffffffffa02016c8 [ 478.795092][T16232] ? 0xffffffffa02019f8 [ 478.795145][T16232] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 478.795190][T16232] ? _copy_from_user+0x94/0xb0 [ 478.795225][T16232] ? bpf_test_init+0x113/0x150 [ 478.795251][T16232] ? xdp_convert_md_to_buff+0x5b/0x330 [ 478.795285][T16232] bpf_prog_test_run_xdp+0x81c/0x1160 [ 478.795332][T16232] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 478.795368][T16232] ? __fget_files+0x2a/0x420 [ 478.795406][T16232] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 478.795438][T16232] bpf_prog_test_run+0x2c7/0x340 [ 478.795475][T16232] __sys_bpf+0x643/0x950 [ 478.795510][T16232] ? __pfx___sys_bpf+0x10/0x10 [ 478.795561][T16232] ? ksys_write+0x242/0x270 [ 478.795588][T16232] ? __pfx_ksys_write+0x10/0x10 [ 478.795620][T16232] __x64_sys_bpf+0x7c/0x90 [ 478.795652][T16232] do_syscall_64+0x14d/0xf80 [ 478.795683][T16232] ? trace_irq_disable+0x3b/0x150 [ 478.795713][T16232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.795736][T16232] ? clear_bhb_loop+0x40/0x90 [ 478.795763][T16232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.795785][T16232] RIP: 0033:0x7f835979c799 [ 478.795805][T16232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.795824][T16232] RSP: 002b:00007f835a6aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 478.795848][T16232] RAX: ffffffffffffffda RBX: 00007f8359a15fa0 RCX: 00007f835979c799 [ 478.795864][T16232] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 478.795879][T16232] RBP: 00007f835a6aa090 R08: 0000000000000000 R09: 0000000000000000 [ 478.795892][T16232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.795904][T16232] R13: 00007f8359a16038 R14: 00007f8359a15fa0 R15: 00007ffc86aadac8 [ 478.795940][T16232] [ 479.075817][T16232] page_pool_create_percpu() gave up with errno -12 [ 479.366590][T16237] syzkaller0: entered promiscuous mode [ 479.372146][T16237] syzkaller0: entered allmulticast mode [ 479.500980][T16246] netlink: 'syz.3.2636': attribute type 1 has an invalid length. [ 479.848481][T16263] sctp: [Deprecated]: syz.3.2640 (pid 16263) Use of int in max_burst socket option deprecated. [ 479.848481][T16263] Use struct sctp_assoc_value instead [ 481.393433][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2645'. [ 481.415316][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2645'. [ 481.612104][T16291] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2646'. [ 482.022728][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 482.161924][T16321] lo speed is unknown, defaulting to 1000 [ 482.292926][T16335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2657'. [ 482.332823][T16330] tunl0: Caught tx_queue_len zero misconfig [ 482.358641][T16312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2652'. [ 482.448695][T16326] sctp: [Deprecated]: syz.4.2656 (pid 16326) Use of int in max_burst socket option. [ 482.448695][T16326] Use struct sctp_assoc_value instead [ 482.673456][T16351] netlink: 'syz.0.2660': attribute type 11 has an invalid length. [ 482.750324][T16350] syzkaller0: entered promiscuous mode [ 482.755994][T16350] syzkaller0: entered allmulticast mode [ 482.854570][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5130 ms [ 482.862691][ C0] lec:lec_tx_timeout: lec0 [ 483.193625][T16367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.235450][T16321] lo speed is unknown, defaulting to 1000 [ 483.269346][T16367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.305198][T16367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.390066][T16365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.408919][T16365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.425311][T16365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.436393][T16365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.495147][T16367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.530398][T16367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.547211][T16367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.267155][T16374] lo: Caught tx_queue_len zero misconfig [ 485.350940][T16381] lo speed is unknown, defaulting to 1000 [ 485.414910][ T5161] block nbd0: Possible stuck request ffff888026888000: control (read@0,1024B). Runtime 270 seconds [ 485.427104][ T5161] block nbd0: Possible stuck request ffff888026888200: control (read@1024,1024B). Runtime 270 seconds [ 485.444812][ T5161] block nbd0: Possible stuck request ffff888026888400: control (read@2048,1024B). Runtime 270 seconds [ 485.457003][ T5161] block nbd0: Possible stuck request ffff888026888600: control (read@3072,1024B). Runtime 270 seconds [ 485.516952][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'. [ 485.611562][T16386] syzkaller0: entered promiscuous mode [ 485.624498][T16392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2669'. [ 485.624705][T16386] syzkaller0: entered allmulticast mode [ 485.808039][T16396] geneve2: entered promiscuous mode [ 485.813435][T16396] geneve2: entered allmulticast mode [ 485.838609][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 485.849909][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 485.895608][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 485.925161][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 485.966222][T16399] netlink: 'syz.4.2671': attribute type 10 has an invalid length. [ 485.985261][T16399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.992211][T16399] team0: Device bond0 failed to register rx_handler [ 486.013289][T16405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2672'. [ 486.060057][T16381] lo speed is unknown, defaulting to 1000 [ 486.235825][T16411] netlink: 'syz.4.2674': attribute type 10 has an invalid length. [ 486.292388][T16416] netlink: 'syz.4.2674': attribute type 10 has an invalid length. [ 486.307408][T16411] team0: Port device dummy0 added [ 486.318476][T16417] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2677'. [ 486.410709][T16413] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 486.457059][T16413] bond10 (unregistering): Released all slaves [ 486.545181][T16416] team0: Port device dummy0 removed [ 486.553574][T16416] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 487.150468][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2685'. [ 487.165775][T16454] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 487.200074][T16454] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 487.448575][T16460] team0 (unregistering): Failed to send options change via netlink (err -105) [ 487.461331][T16460] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 487.484202][T16460] team0 (unregistering): Port device team_slave_0 removed [ 487.577202][T16460] team0 (unregistering): Failed to send options change via netlink (err -105) [ 487.626369][T16460] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 487.673279][T16460] team0 (unregistering): Port device team_slave_1 removed [ 487.746783][T16473] netlink: 'syz.0.2690': attribute type 5 has an invalid length. [ 488.137245][T16497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2698'. [ 488.148652][T16495] lo speed is unknown, defaulting to 1000 [ 488.243491][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2699'. [ 488.295664][T16500] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2699'. [ 488.324325][T16500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2699'. [ 488.454505][T16515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2703'. [ 489.101691][T16495] lo speed is unknown, defaulting to 1000 [ 489.175792][ T6722] net_ratelimit: 230 callbacks suppressed [ 489.175812][ T6722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.190957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.360018][T16546] tipc: Started in network mode [ 489.377449][T16546] tipc: Node identity ee8e894631fb, cluster identity 4711 [ 489.391113][T16546] tipc: Enabled bearer , priority 0 [ 489.447480][T16546] syzkaller0: entered promiscuous mode [ 489.473096][T16546] syzkaller0: entered allmulticast mode [ 489.548750][T16545] tipc: Resetting bearer [ 489.744081][T16545] tipc: Disabling bearer [ 490.032309][T16564] lo speed is unknown, defaulting to 1000 [ 490.371701][T16588] netlink: 'syz.3.2721': attribute type 1 has an invalid length. [ 490.445174][T16566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.479938][T16566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.504913][ T8042] lo speed is unknown, defaulting to 1000 [ 490.510913][ T8042] sqz0: Port: 1 Link ACTIVE [ 490.516516][ T8038] lo speed is unknown, defaulting to 1000 [ 490.530311][T16564] lo speed is unknown, defaulting to 1000 [ 490.578340][T16595] tipc: Enabled bearer , priority 0 [ 490.803839][T16606] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 490.848474][T16608] __nla_validate_parse: 2 callbacks suppressed [ 490.848497][T16608] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2724'. [ 490.903433][T16586] tipc: Resetting bearer [ 490.939244][T16608] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 490.985062][T16598] syzkaller0: entered promiscuous mode [ 491.004107][T16598] syzkaller0: entered allmulticast mode [ 491.104398][T16581] tipc: Resetting bearer [ 491.186488][T16581] tipc: Disabling bearer [ 491.265076][T16623] team_slave_1: Caught tx_queue_len zero misconfig [ 492.016515][T16640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2729'. [ 492.455095][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.427057][T16686] tipc: Enabled bearer , priority 0 [ 493.447036][T16686] syzkaller0: entered promiscuous mode [ 493.452701][T16686] syzkaller0: entered allmulticast mode [ 493.469430][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2739'. [ 493.569741][T16686] tipc: Resetting bearer [ 493.589332][T16685] tipc: Resetting bearer [ 493.627555][T16685] tipc: Disabling bearer [ 493.672054][T16695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2741'. [ 493.794906][T16695] nbd4: detected capacity change from 0 to 63 [ 493.803154][T16699] block nbd3: NBD_DISCONNECT [ 493.807746][T14216] block nbd4: Send control failed (result -32) [ 493.819016][T16699] block nbd3: Send disconnect failed -32 [ 493.824812][T14216] block nbd4: Request send failed, requeueing [ 493.831973][ T51] block nbd4: Receive control failed (result -32) [ 493.843288][ T25] block nbd4: Dead connection, failed to find a fallback [ 493.850828][ T25] block nbd4: shutting down sockets [ 493.856390][ T25] blk_print_req_error: 286 callbacks suppressed [ 493.856412][ T25] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.873566][ T25] buffer_io_error: 286 callbacks suppressed [ 493.873585][ T25] Buffer I/O error on dev nbd4, logical block 0, async page read [ 493.891999][T14216] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.901696][T16699] block nbd3: shutting down sockets [ 493.902774][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.916550][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 493.925473][ T5888] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.940114][T14216] Buffer I/O error on dev nbd4, logical block 1, async page read [ 493.947979][ T5888] Buffer I/O error on dev nbd3, logical block 0, async page read [ 493.968146][T14216] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.980022][T14216] Buffer I/O error on dev nbd4, logical block 2, async page read [ 493.988836][T14216] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.998584][T14216] Buffer I/O error on dev nbd4, logical block 3, async page read [ 494.006629][T14216] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.015340][ T5888] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.026906][T14216] Buffer I/O error on dev nbd4, logical block 0, async page read [ 494.047453][T14216] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.057121][T14216] Buffer I/O error on dev nbd4, logical block 1, async page read [ 494.065039][ T5888] Buffer I/O error on dev nbd3, logical block 0, async page read [ 494.065284][ T5888] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.082866][T14216] Buffer I/O error on dev nbd4, logical block 2, async page read [ 494.112311][T14216] ldm_validate_partition_table(): Disk read failed. [ 494.145176][T14216] Dev nbd4: unable to read RDB block 0 [ 494.151388][T14216] nbd4: unable to read partition table [ 494.155709][ T5888] ldm_validate_partition_table(): Disk read failed. [ 494.165502][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2743'. [ 494.181833][ T5888] Dev nbd3: unable to read RDB block 0 [ 494.204142][ T5888] nbd3: unable to read partition table [ 494.221417][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2743'. [ 494.240207][T14216] ldm_validate_partition_table(): Disk read failed. [ 494.259327][T14216] Dev nbd4: unable to read RDB block 0 [ 494.282025][T14216] nbd4: unable to read partition table [ 494.295626][ T6722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.304430][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.661571][T16723] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 494.931267][T16739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2750'. [ 497.041919][T16822] netlink: 198220 bytes leftover after parsing attributes in process `syz.2.2771'. [ 497.095794][T16822] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2771'. [ 497.133897][T16822] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2771'. [ 497.580596][T16847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2776'. [ 497.605624][T16851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2777'. [ 497.615832][T16849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2777'. [ 497.666487][T16847] 8021q: adding VLAN 0 to HW filter on device bond19 [ 498.422539][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2786'. [ 498.474069][T16884] syzkaller0: entered promiscuous mode [ 498.501316][T16884] syzkaller0: entered allmulticast mode [ 498.556490][T16884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2787'. [ 498.573614][T16884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2787'. [ 499.342584][T16910] syzkaller0: entered promiscuous mode [ 499.351491][T16910] syzkaller0: entered allmulticast mode [ 499.716044][T16924] netlink: 'syz.4.2796': attribute type 1 has an invalid length. [ 499.870081][T16929] IPVS: set_ctl: invalid protocol: 16 172.20.20.58:20002 [ 499.889207][T16927] bond13: (slave bridge11): making interface the new active one [ 499.898726][T16927] bond13: (slave bridge11): Enslaving as an active interface with an up link [ 499.901571][T16932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.915671][T16930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.002348][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 501.178504][T17006] tipc: Enabled bearer , priority 0 [ 501.188382][T17006] syzkaller0: entered promiscuous mode [ 501.193917][T17006] syzkaller0: entered allmulticast mode [ 501.423672][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 501.565694][T17026] bridge_slave_1: left allmulticast mode [ 501.574381][T17026] bridge_slave_1: left promiscuous mode [ 501.603968][T17026] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.621763][T17026] ¾x9ÿ: left allmulticast mode [ 501.626904][T17026] ¾x9ÿ: left promiscuous mode [ 501.632111][T17026] bridge0: port 1(1¾x9ÿ) entered disabled state [ 501.670916][T17031] netlink: 'syz.2.2824': attribute type 1 has an invalid length. [ 501.699832][T17005] tipc: Resetting bearer [ 501.719516][T17005] tipc: Disabling bearer [ 501.735957][T17032] netlink: 'syz.2.2824': attribute type 1 has an invalid length. [ 501.798612][T17036] FAULT_INJECTION: forcing a failure. [ 501.798612][T17036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.811927][T17036] CPU: 1 UID: 0 PID: 17036 Comm: syz.1.2825 Not tainted syzkaller #0 PREEMPT(full) [ 501.811958][T17036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 501.811970][T17036] Call Trace: [ 501.811978][T17036] [ 501.811987][T17036] dump_stack_lvl+0xe8/0x150 [ 501.812023][T17036] should_fail_ex+0x412/0x560 [ 501.812064][T17036] _copy_from_iter+0x1d3/0x1670 [ 501.812097][T17036] ? rcu_is_watching+0x15/0xb0 [ 501.812132][T17036] ? __pfx__copy_from_iter+0x10/0x10 [ 501.812171][T17036] ? netlink_sendmsg+0x650/0xb40 [ 501.812203][T17036] ? skb_put+0x11b/0x210 [ 501.812241][T17036] netlink_sendmsg+0x6c0/0xb40 [ 501.812283][T17036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.812317][T17036] ? aa_sock_msg_perm+0xf1/0x1b0 [ 501.812348][T17036] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.812376][T17036] ____sys_sendmsg+0x972/0x9f0 [ 501.812415][T17036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.812447][T17036] ? import_iovec+0x73/0xa0 [ 501.812483][T17036] ___sys_sendmsg+0x2a5/0x360 [ 501.812511][T17036] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.812573][T17036] ? __fget_files+0x2a/0x420 [ 501.812604][T17036] ? __fget_files+0x3a0/0x420 [ 501.812648][T17036] __x64_sys_sendmsg+0x1bd/0x2a0 [ 501.812673][T17036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.812706][T17036] ? __pfx_ksys_write+0x10/0x10 [ 501.812743][T17036] do_syscall_64+0x14d/0xf80 [ 501.812775][T17036] ? trace_irq_disable+0x3b/0x150 [ 501.812806][T17036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.812828][T17036] ? clear_bhb_loop+0x40/0x90 [ 501.812855][T17036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.812876][T17036] RIP: 0033:0x7f821959c799 [ 501.812899][T17036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.812918][T17036] RSP: 002b:00007f821a4af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.812942][T17036] RAX: ffffffffffffffda RBX: 00007f8219815fa0 RCX: 00007f821959c799 [ 501.812958][T17036] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 501.812972][T17036] RBP: 00007f821a4af090 R08: 0000000000000000 R09: 0000000000000000 [ 501.812985][T17036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.812998][T17036] R13: 00007f8219816038 R14: 00007f8219815fa0 R15: 00007ffe30285348 [ 501.813033][T17036] [ 502.230518][T17042] veth1: entered promiscuous mode [ 502.236413][T17042] veth1: entered allmulticast mode [ 502.623581][T17068] __nla_validate_parse: 4 callbacks suppressed [ 502.623605][T17068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2835'. [ 502.639348][T17068] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2835'. [ 502.706872][T17077] netlink: 'syz.0.2837': attribute type 6 has an invalid length. [ 502.918406][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 502.949692][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2839'. [ 502.982531][T17086] netlink: 'syz.0.2839': attribute type 15 has an invalid length. [ 503.068440][T17093] veth0_to_team: Caught tx_queue_len zero misconfig [ 503.154282][T17093] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 503.191515][T17088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2840'. [ 503.562488][T17119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2846'. [ 503.574433][T17119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2846'. [ 503.749902][T17123] netlink: 776 bytes leftover after parsing attributes in process `syz.1.2848'. [ 503.934237][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2853'. [ 504.226644][T17163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2856'. [ 504.378861][T17174] netlink: 'syz.2.2860': attribute type 1 has an invalid length. [ 504.426620][T17174] bond20: entered promiscuous mode [ 504.431895][T17174] bond20: entered allmulticast mode [ 504.438266][T17174] 8021q: adding VLAN 0 to HW filter on device bond20 [ 504.489252][T17174] netlink: zone id is out of range [ 504.497912][T17174] netlink: zone id is out of range [ 504.512955][T17174] netlink: zone id is out of range [ 504.560385][T17174] netlink: zone id is out of range [ 504.804703][T17193] syzkaller0: entered promiscuous mode [ 504.817604][T17193] syzkaller0: entered allmulticast mode [ 504.920327][T17201] FAULT_INJECTION: forcing a failure. [ 504.920327][T17201] name failslab, interval 1, probability 0, space 0, times 0 [ 504.976076][T17201] CPU: 0 UID: 0 PID: 17201 Comm: syz.3.2867 Not tainted syzkaller #0 PREEMPT(full) [ 504.976107][T17201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.976120][T17201] Call Trace: [ 504.976128][T17201] [ 504.976137][T17201] dump_stack_lvl+0xe8/0x150 [ 504.976172][T17201] should_fail_ex+0x412/0x560 [ 504.976204][T17201] should_failslab+0xa8/0x100 [ 504.976234][T17201] __kmalloc_cache_noprof+0x88/0x660 [ 504.976259][T17201] ? nfnetlink_rcv+0xfe1/0x27b0 [ 504.976294][T17201] nfnetlink_rcv+0xfe1/0x27b0 [ 504.976354][T17201] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 504.976397][T17201] ? ref_tracker_free+0x693/0x840 [ 504.976458][T17201] ? __netlink_deliver_tap+0x807/0x850 [ 504.976488][T17201] ? netlink_deliver_tap+0x2e/0x1b0 [ 504.976577][T17201] netlink_unicast+0x80f/0x9b0 [ 504.976615][T17201] ? __pfx_netlink_unicast+0x10/0x10 [ 504.976644][T17201] ? netlink_sendmsg+0x650/0xb40 [ 504.976672][T17201] ? skb_put+0x11b/0x210 [ 504.976709][T17201] netlink_sendmsg+0x813/0xb40 [ 504.976751][T17201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.976785][T17201] ? aa_sock_msg_perm+0xf1/0x1b0 [ 504.976816][T17201] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.976844][T17201] ____sys_sendmsg+0x972/0x9f0 [ 504.976877][T17201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.976909][T17201] ? import_iovec+0x73/0xa0 [ 504.976947][T17201] ___sys_sendmsg+0x2a5/0x360 [ 504.976975][T17201] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.977039][T17201] ? __fget_files+0x2a/0x420 [ 504.977071][T17201] ? __fget_files+0x3a0/0x420 [ 504.977114][T17201] __x64_sys_sendmsg+0x1bd/0x2a0 [ 504.977140][T17201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.977173][T17201] ? __pfx_ksys_write+0x10/0x10 [ 504.977210][T17201] do_syscall_64+0x14d/0xf80 [ 504.977241][T17201] ? trace_irq_disable+0x3b/0x150 [ 504.977273][T17201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.977296][T17201] ? clear_bhb_loop+0x40/0x90 [ 504.977322][T17201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.977343][T17201] RIP: 0033:0x7f835979c799 [ 504.977365][T17201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.977384][T17201] RSP: 002b:00007f835a6aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.977408][T17201] RAX: ffffffffffffffda RBX: 00007f8359a15fa0 RCX: 00007f835979c799 [ 504.977424][T17201] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 504.977437][T17201] RBP: 00007f835a6aa090 R08: 0000000000000000 R09: 0000000000000000 [ 504.977451][T17201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.977463][T17201] R13: 00007f8359a16038 R14: 00007f8359a15fa0 R15: 00007ffc86aadac8 [ 504.977500][T17201] [ 505.344083][T17207] netlink: 'syz.2.2868': attribute type 16 has an invalid length. [ 506.854724][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 506.862981][ C0] lec:lec_tx_timeout: lec0 [ 507.083848][T17229] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 507.492614][T17254] siw: device registration error -23 [ 507.629672][T17254] lo speed is unknown, defaulting to 1000 [ 507.806028][T17266] netlink: 'syz.0.2885': attribute type 1 has an invalid length. [ 507.974975][T17280] __nla_validate_parse: 5 callbacks suppressed [ 507.974999][T17280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2888'. [ 508.062209][T17280] ip6gre1: entered promiscuous mode [ 508.087921][T17280] ip6gre1: entered allmulticast mode [ 508.437849][T17254] lo speed is unknown, defaulting to 1000 [ 508.551108][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2893'. [ 508.679485][T17315] syzkaller0: entered promiscuous mode [ 508.713631][T17315] syzkaller0: entered allmulticast mode [ 508.789512][T17318] netlink: 'syz.2.2894': attribute type 16 has an invalid length. [ 508.894891][T17318] netlink: 'syz.2.2894': attribute type 17 has an invalid length. [ 509.115054][T17318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.044985][T17360] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2902'. [ 511.206528][T17364] xt_NFQUEUE: number of total queues is 0 [ 511.247697][T17367] netlink: 'syz.4.2905': attribute type 1 has an invalid length. [ 511.452132][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2905'. [ 511.475771][T17379] netlink: 'syz.0.2907': attribute type 1 has an invalid length. [ 511.493823][T17379] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2907'. [ 511.520999][T17367] bond14: (slave geneve3): making interface the new active one [ 511.525789][T17379] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2907'. [ 511.552545][T17367] bond14: (slave geneve3): Enslaving as an active interface with an up link [ 511.588772][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 511.609481][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 511.634937][T17379] netlink: 658 bytes leftover after parsing attributes in process `syz.0.2907'. [ 511.658047][T17371] bond14 (unregistering): (slave geneve3): Releasing active interface [ 511.674924][T17390] delete_channel: no stack [ 511.697855][T17371] bond14 (unregistering): Released all slaves [ 511.829219][ T49] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 511.845512][ T49] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 511.993608][T17400] tipc: Enabled bearer , priority 4 [ 512.186486][T17411] xt_hashlimit: max too large, truncated to 1048576 [ 512.216511][T17411] xt_hashlimit: overflow, try lower: 18446744073709551608/8 [ 512.938155][T17453] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2921'. [ 513.200409][T17465] netlink: 'syz.0.2922': attribute type 1 has an invalid length. [ 513.370573][T17465] bond0: entered promiscuous mode [ 513.400378][T17465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.052839][T17503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2928'. [ 514.092283][T17503] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2928'. [ 514.145554][T17503] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2928'. [ 514.214711][T17503] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2928'. [ 514.343983][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 514.363357][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 514.374314][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 514.392307][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 514.402915][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 514.556160][T17514] lo speed is unknown, defaulting to 1000 [ 514.805022][T17533] netlink: 'syz.2.2932': attribute type 10 has an invalid length. [ 514.871178][T17536] netlink: 'syz.2.2932': attribute type 10 has an invalid length. [ 514.969995][T17536] dummy0: entered promiscuous mode [ 515.005460][T17536] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 515.231298][T17514] lo speed is unknown, defaulting to 1000 [ 515.498239][ T5161] block nbd0: Possible stuck request ffff888026888000: control (read@0,1024B). Runtime 300 seconds [ 515.511151][ T5161] block nbd0: Possible stuck request ffff888026888200: control (read@1024,1024B). Runtime 300 seconds [ 515.522743][ T5161] block nbd0: Possible stuck request ffff888026888400: control (read@2048,1024B). Runtime 300 seconds [ 515.534205][ T5161] block nbd0: Possible stuck request ffff888026888600: control (read@3072,1024B). Runtime 300 seconds [ 515.977796][T17559] rdma_rxe: rxe_newlink: failed to add lo [ 515.996311][T17514] chnl_net:caif_netlink_parms(): no params data found [ 516.238198][ T58] pimreg: left allmulticast mode [ 516.377804][T17577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2937'. [ 516.390995][T17577] xt_bpf: check failed: parse error [ 516.419721][T17577] siw: device registration error -23 [ 516.459309][ T5143] Bluetooth: hci5: command tx timeout [ 516.558309][T17584] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2938'. [ 516.969257][ T58] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 517.041400][ T58] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 517.099463][ T58] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 517.158980][ T58] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 517.208749][ T58] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 517.383482][ T58] bond10 (unregistering): (slave bridge9): Releasing backup interface [ 517.490174][ T58] bond16 (unregistering): (slave bridge11): Releasing backup interface [ 517.540260][ T58] bond17 (unregistering): (slave bridge12): Releasing backup interface [ 517.639909][ T58] bond18 (unregistering): (slave bridge14): Releasing backup interface [ 517.779547][ T58] bond1 (unregistering): Released all slaves [ 517.794202][ T58] bond2 (unregistering): Released all slaves [ 517.810956][ T58] bond3 (unregistering): (slave veth3): Releasing active interface [ 517.820391][ T58] bond3 (unregistering): Released all slaves [ 517.838291][ T58] bond4 (unregistering): Released all slaves [ 517.853245][ T58] bond5 (unregistering): Released all slaves [ 517.869592][ T58] bond6 (unregistering): Released all slaves [ 517.886725][ T58] bond7 (unregistering): Released all slaves [ 517.908262][ T58] bond8 (unregistering): Released all slaves [ 517.924414][ T58] bond9 (unregistering): (slave veth7): Releasing active interface [ 517.935768][ T58] bond9 (unregistering): Released all slaves [ 517.951549][ T58] bond10 (unregistering): Released all slaves [ 517.968827][ T58] bond11 (unregistering): (slave bond12): Releasing backup interface [ 517.983516][ T58] bond11 (unregistering): Released all slaves [ 517.999952][ T58] bond12 (unregistering): Released all slaves [ 518.015168][ T58] bond13 (unregistering): Released all slaves [ 518.030332][ T58] bond14 (unregistering): Released all slaves [ 518.052270][ T58] bond15 (unregistering): Released all slaves [ 518.068496][ T58] bond16 (unregistering): Released all slaves [ 518.083889][ T58] bond17 (unregistering): Released all slaves [ 518.101785][ T58] bond18 (unregistering): Released all slaves [ 518.127385][ T58] bond19 (unregistering): Released all slaves [ 518.142714][ T58] bond0 (unregistering): Released all slaves [ 518.273616][T17581] syzkaller0: entered promiscuous mode [ 518.289431][T17581] syzkaller0: entered allmulticast mode [ 518.468532][T17601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2941'. [ 518.479524][T17601] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2941'. [ 518.537942][ T5143] Bluetooth: hci5: command tx timeout [ 520.558874][T17593] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2939'. [ 520.568299][T17593] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2939'. [ 520.586337][ T58] hmac(sha224): left promiscuous mode [ 520.614745][ T5143] Bluetooth: hci5: command tx timeout [ 520.727218][T17620] netlink: 'syz.4.2943': attribute type 58 has an invalid length. [ 520.768111][T17620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2943'. [ 520.797465][ T58] tipc: Left network mode [ 520.800679][T17514] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.810549][T17622] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2943'. [ 520.824888][T17514] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.851086][T17514] bridge_slave_0: entered allmulticast mode [ 520.877542][T17626] xt_hashlimit: overflow, try lower: 18446744073709551607/511 [ 520.885739][T17514] bridge_slave_0: entered promiscuous mode [ 520.895187][T17514] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.912072][T17514] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.943486][T17514] bridge_slave_1: entered allmulticast mode [ 520.969013][T17514] bridge_slave_1: entered promiscuous mode [ 521.037852][T17604] lo speed is unknown, defaulting to 1000 [ 521.067519][T17622] netlink: 'syz.4.2943': attribute type 11 has an invalid length. [ 521.092049][T17622] netlink: 'syz.4.2943': attribute type 23 has an invalid length. [ 521.126727][T17622] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2943'. [ 521.298497][T17514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.332540][T17514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.368261][T17640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.410082][T17640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2947'. [ 521.574094][T17514] team0: Port device team_slave_0 added [ 521.601416][T17514] team0: Port device team_slave_1 added [ 521.609237][T17644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2948'. [ 521.634355][T17644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2948'. [ 521.755544][T17629] lo speed is unknown, defaulting to 1000 [ 521.755559][T17604] lo speed is unknown, defaulting to 1000 [ 521.771417][T17514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.778828][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.834686][T17514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.879235][T17514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.894998][T17514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.924431][T17514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.098450][T17514] hsr_slave_0: entered promiscuous mode [ 522.118844][T17514] hsr_slave_1: entered promiscuous mode [ 522.126753][T17656] netem: change failed [ 522.460918][T17629] lo speed is unknown, defaulting to 1000 [ 522.695288][ T5143] Bluetooth: hci5: command tx timeout [ 522.837409][T17676] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 522.863626][T17673] syzkaller0: entered promiscuous mode [ 522.887070][T17673] syzkaller0: entered allmulticast mode [ 522.930253][ T58] veth0: left promiscuous mode [ 522.944162][ T58] batadv0: left promiscuous mode [ 522.953435][ T58] hsr_slave_0: left promiscuous mode [ 522.953563][T17673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2953'. [ 522.968788][ T58] hsr_slave_1: left promiscuous mode [ 522.975638][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.983811][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.262844][ T58] team0 (unregistering): Port device team_slave_1 removed [ 523.290946][ T58] team0 (unregistering): Port device team_slave_0 removed [ 523.516595][T17673] vlan0: entered promiscuous mode [ 523.521831][T17673] gretap0: entered promiscuous mode [ 524.141001][T17704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.176896][T17707] 5nè‹Ò: entered promiscuous mode [ 524.763036][T17725] lo speed is unknown, defaulting to 1000 [ 524.818735][T17730] netlink: 'syz.3.2964': attribute type 1 has an invalid length. [ 524.911874][T17514] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 524.978459][T17514] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 525.023577][T17514] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 525.051950][T17514] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 525.248450][T17754] syzkaller0: entered promiscuous mode [ 525.258902][T17754] syzkaller0: entered allmulticast mode [ 525.302380][T17725] lo speed is unknown, defaulting to 1000 [ 525.439193][T17514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.604993][T17514] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.627771][T17764] 8021q: VLANs not supported on ip6_vti0 [ 525.649191][ T6724] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.656428][ T6724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.694457][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.701743][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.123456][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2971'. [ 526.267840][T17793] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 526.491070][T17803] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2973'. [ 526.501460][T17803] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2973'. [ 526.610082][T17514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.842483][T17514] veth0_vlan: entered promiscuous mode [ 526.940302][T17514] veth1_vlan: entered promiscuous mode [ 527.081564][T17514] veth0_macvtap: entered promiscuous mode [ 527.139898][T17514] veth1_macvtap: entered promiscuous mode [ 527.159823][T17824] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 527.185631][T17829] syzkaller0: entered promiscuous mode [ 527.191175][T17829] syzkaller0: entered allmulticast mode [ 527.414225][T17514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.453720][T17514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.536141][ T6720] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.586658][ T6720] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.657724][ T6720] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.679290][ T6720] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.761388][T17850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2983'. [ 527.796968][T17850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2983'. [ 527.958009][ T6731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.969693][ T6731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.083847][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.104173][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.157026][T17871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2989'. [ 528.181903][T17871] netlink: 'syz.3.2989': attribute type 1 has an invalid length. [ 528.542543][T17875] 8021q: adding VLAN 0 to HW filter on device bond19 [ 528.555652][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 528.567936][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 528.578327][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 528.586803][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 528.593870][T17875] bond18: (slave bond19): making interface the new active one [ 528.596359][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 528.612150][T17893] x_tables: ip_tables: ah match: only valid for protocol 51 [ 528.622641][T17893] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2989'. [ 528.650222][T17875] bond18: (slave bond19): Enslaving as an active interface with an up link [ 528.669086][T17893] 8021q: adding VLAN 0 to HW filter on device bond18 [ 528.876417][T17890] lo speed is unknown, defaulting to 1000 [ 529.844388][ T5840] syz_tun (unregistering): left allmulticast mode [ 529.863512][ T5840] bond0: (slave syz_tun): Releasing backup interface [ 529.894373][ T5840] syz_tun (unregistering): left promiscuous mode [ 529.946278][T17890] lo speed is unknown, defaulting to 1000 [ 530.085248][T17933] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 530.118887][T17933] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3002'. [ 530.440419][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3004'. [ 530.544943][T17951] netlink: 'syz.1.3005': attribute type 10 has an invalid length. [ 530.695100][ T5143] Bluetooth: hci3: command tx timeout [ 531.415688][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'. [ 531.434786][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'. [ 531.474890][T17890] chnl_net:caif_netlink_parms(): no params data found [ 531.775255][T17988] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3011'. [ 531.815035][T17988] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3011'. [ 531.996491][T17975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 532.220615][T18001] netlink: 'syz.1.3013': attribute type 29 has an invalid length. [ 532.278146][T18001] netlink: 'syz.1.3013': attribute type 29 has an invalid length. [ 532.305849][T17978] lo speed is unknown, defaulting to 1000 [ 532.439118][T18014] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3013'. [ 532.491879][T17890] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.510550][T17890] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.524814][T17890] bridge_slave_0: entered allmulticast mode [ 532.558253][T17890] bridge_slave_0: entered promiscuous mode [ 532.611429][T17890] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.634984][T17890] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.667059][T17890] bridge_slave_1: entered allmulticast mode [ 532.690610][T17890] bridge_slave_1: entered promiscuous mode [ 532.778925][ T5143] Bluetooth: hci3: command tx timeout [ 532.792499][ T6722] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.834490][ T6722] bridge_slave_0: left allmulticast mode [ 532.860759][ T6722] bridge_slave_0: left promiscuous mode [ 532.897123][ T6722] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.937660][T18038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.310639][ T6722] gretap0 (unregistering): left promiscuous mode [ 533.374753][ T6722] bond7 (unregistering): (slave geneve2): Releasing active interface [ 533.499726][ T6722] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 533.610378][ T6722] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 533.660978][ T6722] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 533.709619][ T6722] bond12 (unregistering): (slave bridge6): Releasing backup interface [ 533.809422][ T6722] bond14 (unregistering): (slave bridge8): Releasing backup interface [ 533.850431][ T6722] bond15 (unregistering): (slave bridge9): Releasing backup interface [ 533.889988][ T6722] bond16 (unregistering): (slave bridge10): Releasing backup interface [ 533.939536][ T6722] bond17 (unregistering): (slave bridge11): Releasing backup interface [ 534.157163][ T6722] bond0 (unregistering): left promiscuous mode [ 534.163396][ T6722] bond_slave_0: left promiscuous mode [ 534.169341][ T6722] bond_slave_1: left promiscuous mode [ 534.175578][ T6722] dummy0: left promiscuous mode [ 534.187753][ T6722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.201813][ T6722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.213237][ T6722] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 534.226755][ T6722] bond0 (unregistering): Released all slaves [ 534.238612][ T6722] bond1 (unregistering): Released all slaves [ 534.259589][ T6722] bond2 (unregistering): (slave veth3): Releasing active interface [ 534.268968][ T6722] bond2 (unregistering): Released all slaves [ 534.284967][ T6722] bond3 (unregistering): Released all slaves [ 534.300708][ T6722] bond4 (unregistering): Released all slaves [ 534.319293][ T6722] bond5 (unregistering): Released all slaves [ 534.338456][ T6722] bond6 (unregistering): (slave veth5): Releasing active interface [ 534.347762][ T6722] bond6 (unregistering): Released all slaves [ 534.362651][ T6722] bond7 (unregistering): Released all slaves [ 534.383282][ T6722] bond8 (unregistering): (slave veth7): Releasing active interface [ 534.392441][ T6722] bond8 (unregistering): Released all slaves [ 534.411618][ T6722] bond9 (unregistering): Released all slaves [ 534.428317][ T6722] bond10 (unregistering): (slave veth9): Releasing active interface [ 534.439766][ T6722] bond10 (unregistering): Released all slaves [ 534.460267][ T6722] bond11 (unregistering): (slave veth11): Releasing active interface [ 534.470074][ T6722] bond11 (unregistering): Released all slaves [ 534.487174][ T6722] bond12 (unregistering): Released all slaves [ 534.501971][ T6722] bond13 (unregistering): Released all slaves [ 534.523695][ T6722] bond14 (unregistering): Released all slaves [ 534.540799][ T6722] bond15 (unregistering): Released all slaves [ 534.557594][ T6722] bond16 (unregistering): Released all slaves [ 534.572941][ T6722] bond17 (unregistering): Released all slaves [ 534.592287][ T6722] bond18 (unregistering): Released all slaves [ 534.607747][ T6722] bond19 (unregistering): Released all slaves [ 534.624260][ T6722] bond20 (unregistering): Released all slaves [ 534.659212][T17978] lo speed is unknown, defaulting to 1000 [ 534.681168][T17890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.698529][T17890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.860626][ T5143] Bluetooth: hci3: command tx timeout [ 534.877421][T17890] team0: Port device team_slave_0 added [ 534.937922][T17890] team0: Port device team_slave_1 added [ 534.977365][ T6722] tipc: Disabling bearer [ 534.995473][ T6722] tipc: Left network mode [ 535.036829][T17890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.064630][T17890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.133764][T17890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.201918][T17890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.219444][T17890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.294700][T17890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.308337][T18008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.603535][T18073] netlink: 'syz.3.3023': attribute type 1 has an invalid length. [ 535.625744][T18073] netlink: 'syz.3.3023': attribute type 2 has an invalid length. [ 535.806606][T17890] hsr_slave_0: entered promiscuous mode [ 535.846545][T17890] hsr_slave_1: entered promiscuous mode [ 535.868894][T17890] debugfs: 'hsr0' already exists in 'hsr' [ 535.882379][T17890] Cannot create hsr debugfs directory [ 536.227322][T18097] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3028'. [ 536.244738][T18099] veth0_to_team: entered promiscuous mode [ 536.258850][T18099] veth0_to_team: entered allmulticast mode [ 536.321654][T18103] netlink: 'syz.4.3030': attribute type 5 has an invalid length. [ 536.344690][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3030'. [ 536.935496][ T5143] Bluetooth: hci3: command tx timeout [ 536.953451][T18134] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.3034'. [ 536.964349][T18134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3034'. [ 537.491695][T18160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3041'. [ 537.573635][T18163] netlink: 'syz.4.3042': attribute type 10 has an invalid length. [ 537.586628][T18160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3041'. [ 537.937594][ T6722] batman_adv: netdevsim0: Removing interface: batadv_slave_0 [ 537.976518][ T6722] batman_adv: netdevsim0: Removing interface: batadv_slave_1 [ 538.080628][T18186] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3046'. [ 538.550209][ T49] smc: removing ib device sqz0 [ 538.582975][T18182] 8021q: VLANs not supported on wg1 [ 538.602498][ T5851] lo speed is unknown, defaulting to 1000 [ 538.608831][ T5851] sqz0: Port: 1 Link DOWN [ 539.098461][T18201] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 539.242259][T17890] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 539.342067][T17890] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 539.387765][T17890] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 539.498561][T17890] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 540.051421][T17890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.067308][T18234] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3058'. [ 540.088105][T18231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3056'. [ 540.110453][T18231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3056'. [ 540.202832][T17890] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.256533][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.263780][ T6720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.281917][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3060'. [ 540.369521][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.376806][ T6720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.419276][T18253] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.3062'. [ 540.834959][T17890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.909871][T17890] veth0_vlan: entered promiscuous mode [ 540.948613][ T6722] IPVS: stop unused estimator thread 0... [ 540.957988][T17890] veth1_vlan: entered promiscuous mode [ 541.027787][T17890] veth0_macvtap: entered promiscuous mode [ 541.049559][T17890] veth1_macvtap: entered promiscuous mode [ 541.087983][T17890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.112342][T17890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.128611][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.141040][ T6731] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.166720][ T6731] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.186238][ T6731] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.390679][T18278] netlink: 'syz.1.3067': attribute type 21 has an invalid length. [ 541.399289][T18278] netlink: 'syz.1.3067': attribute type 4 has an invalid length. [ 541.408449][T18278] netlink: 'syz.1.3067': attribute type 5 has an invalid length. [ 541.467841][T10492] lec:lec_start_xmit: lec0:No lecd attached [ 543.230020][T18246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.347931][ T6731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.367761][ T6731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.456941][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.481841][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.595498][T18324] __nla_validate_parse: 7 callbacks suppressed [ 543.595521][T18324] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3076'. [ 543.632197][T18325] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3075'. [ 543.691315][T18329] tipc: Started in network mode [ 543.696655][T18329] tipc: Node identity 0e5809d07949, cluster identity 4711 [ 543.704477][T18329] tipc: Enabled bearer , priority 0 [ 543.772873][T18329] syzkaller0: entered promiscuous mode [ 543.789248][T18329] syzkaller0: entered allmulticast mode [ 543.884093][T18329] tipc: Resetting bearer [ 543.908790][T18328] tipc: Resetting bearer [ 543.980282][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.992211][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.993104][T18340] netlink: 'syz.1.3082': attribute type 1 has an invalid length. [ 544.008621][T18328] tipc: Disabling bearer [ 544.015898][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 544.035817][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 544.043566][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 544.157771][T18345] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3082'. [ 544.201524][T18345] ip6gretap0: entered promiscuous mode [ 544.244372][T18345] ip6gretap0: entered allmulticast mode [ 544.252987][T18345] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 544.297406][T18343] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 544.310406][T18343] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 544.372405][T18340] bond10: (slave bridge10): Enslaving as an active interface with a down link [ 544.413894][ T5830] bond0: (slave syz_tun): Releasing backup interface [ 544.422904][ T5830] syz_tun (unregistering): left allmulticast mode [ 544.549523][T18350] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.651819][T18336] lo speed is unknown, defaulting to 1000 [ 544.785167][T18350] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.951925][T18350] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.987055][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3088'. [ 545.021812][T18371] ip6gre2: entered promiscuous mode [ 545.079049][T18350] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.335110][T18393] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3093'. [ 545.344239][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.366254][T18385] tipc: Enabled bearer , priority 0 [ 545.373792][T18385] syzkaller0: entered promiscuous mode [ 545.380830][T18385] syzkaller0: entered allmulticast mode [ 545.403616][ T6724] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.413412][T18395] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3095'. [ 545.443139][ T6724] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.462447][T18336] chnl_net:caif_netlink_parms(): no params data found [ 545.518555][T18385] tipc: Resetting bearer [ 545.525113][ T6724] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.546272][T18383] tipc: Resetting bearer [ 545.569281][T18383] tipc: Disabling bearer [ 545.576482][ T5161] block nbd0: Possible stuck request ffff888026888000: control (read@0,1024B). Runtime 330 seconds [ 545.587405][ T5161] block nbd0: Possible stuck request ffff888026888200: control (read@1024,1024B). Runtime 330 seconds [ 545.599184][ T5161] block nbd0: Possible stuck request ffff888026888400: control (read@2048,1024B). Runtime 330 seconds [ 545.611959][ T5161] block nbd0: Possible stuck request ffff888026888600: control (read@3072,1024B). Runtime 330 seconds [ 545.695990][T18336] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.704382][T18336] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.712428][T18336] bridge_slave_0: entered allmulticast mode [ 545.720987][T18336] bridge_slave_0: entered promiscuous mode [ 545.733769][T18336] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.742336][T18336] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.750703][T18336] bridge_slave_1: entered allmulticast mode [ 545.760144][T18336] bridge_slave_1: entered promiscuous mode [ 545.826273][T18405] team_slave_0: entered promiscuous mode [ 545.832294][T18405] team_slave_0: entered allmulticast mode [ 545.845795][T18336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.863054][T18336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.909422][T18336] team0: Port device team_slave_0 added [ 545.920028][T18336] team0: Port device team_slave_1 added [ 545.991229][T18336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.999318][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.025941][T18336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.040445][T18336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.048546][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.100584][T18336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.135562][ T5143] Bluetooth: hci4: command tx timeout [ 546.286196][T18336] hsr_slave_0: entered promiscuous mode [ 546.305207][T18336] hsr_slave_1: entered promiscuous mode [ 546.315371][T18336] debugfs: 'hsr0' already exists in 'hsr' [ 546.321316][T18336] Cannot create hsr debugfs directory [ 546.380057][T18424] netlink: 'syz.4.3101': attribute type 5 has an invalid length. [ 546.773468][T18336] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.791252][T18445] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3110'. [ 546.818658][T18447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3111'. [ 546.834142][T18447] bond0: entered promiscuous mode [ 546.839569][T18447] bond_slave_0: entered promiscuous mode [ 546.845982][T18447] bond_slave_1: entered promiscuous mode [ 546.854401][T18447] bond0: left promiscuous mode [ 546.855333][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5390 ms [ 546.860487][T18447] bond_slave_0: left promiscuous mode [ 546.867713][ C0] lec:lec_tx_timeout: lec0 [ 546.881282][T18447] bond_slave_1: left promiscuous mode [ 546.903082][T18336] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.006690][T18336] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.089963][T18336] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.435015][T18471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3117'. [ 547.490061][T18336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 547.511264][T18336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 547.529978][T18336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 547.552702][T18336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 547.582620][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3113'. [ 547.869057][T18336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.907412][T18336] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.929110][ T6731] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.936411][ T6731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.966214][ T6731] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.973786][ T6731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.215969][T18504] gre0: left promiscuous mode [ 548.225129][ T5143] Bluetooth: hci4: command tx timeout [ 548.274059][T18504] ip6gretap0: left promiscuous mode [ 548.295360][T18504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.304076][T18504] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.317626][T18504] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 548.441505][T18513] netlink: 'syz.1.3128': attribute type 3 has an invalid length. [ 548.558627][T18336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.633189][T18521] __nla_validate_parse: 4 callbacks suppressed [ 548.633211][T18521] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3130'. [ 548.743798][T18336] veth0_vlan: entered promiscuous mode [ 548.791797][T18336] veth1_vlan: entered promiscuous mode [ 548.883046][T18336] veth0_macvtap: entered promiscuous mode [ 548.906007][T18336] veth1_macvtap: entered promiscuous mode [ 548.922050][T18527] netlink: 'syz.1.3132': attribute type 13 has an invalid length. [ 548.922331][T18529] netlink: 'syz.1.3132': attribute type 13 has an invalid length. [ 548.952346][T18527] netlink: 'syz.1.3132': attribute type 13 has an invalid length. [ 548.954167][T18529] netlink: 'syz.1.3132': attribute type 13 has an invalid length. [ 548.973181][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.983101][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.997015][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.009387][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.045780][T18336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.079560][T18336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.120535][ T6722] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.140225][ T6722] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.205503][ T6722] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.217824][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 549.226981][ T6722] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.371648][ T6731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.394178][ T6731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.474329][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.502181][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.647943][T18560] tipc: Cannot configure node identity twice [ 549.698260][T18561] tipc: Started in network mode [ 549.708987][T18561] tipc: Node identity ee61d6acfed4, cluster identity 4711 [ 549.740766][T18561] tipc: Enabled bearer , priority 0 [ 549.797140][T18561] syzkaller0: entered promiscuous mode [ 549.804183][T18561] syzkaller0: entered allmulticast mode [ 549.889946][T18566] tipc: Resetting bearer [ 549.935889][T18559] tipc: Resetting bearer [ 550.057206][T18559] tipc: Disabling bearer [ 550.244074][T18572] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 550.313041][T18572] Bluetooth: hci4: command tx timeout [ 550.318932][T18572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 550.339399][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 550.347675][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 550.356205][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 550.502594][T18570] lo speed is unknown, defaulting to 1000 [ 550.802972][T18593] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3149'. [ 550.850430][T18570] chnl_net:caif_netlink_parms(): no params data found [ 550.962257][T18570] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.971206][T18570] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.979036][T18570] bridge_slave_0: entered allmulticast mode [ 550.987554][T18570] bridge_slave_0: entered promiscuous mode [ 550.997349][T18570] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.005064][T18570] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.012732][T18570] bridge_slave_1: entered allmulticast mode [ 551.021320][T18570] bridge_slave_1: entered promiscuous mode [ 551.068299][T18570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.083252][T18570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.128106][T18570] team0: Port device team_slave_0 added [ 551.143278][T18570] team0: Port device team_slave_1 added [ 551.181866][T18570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.189061][T18570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.228411][T18570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.252667][T18570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.275047][T18570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.308973][T18602] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3151'. [ 551.318491][T18570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.337653][ T30] INFO: task udevd:6685 blocked for more than 143 seconds. [ 551.345249][ T30] Not tainted syzkaller #0 [ 551.350239][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 551.374555][ T30] task:udevd state:D stack:22200 pid:6685 tgid:6685 ppid:5193 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 551.387064][ T30] Call Trace: [ 551.390394][ T30] [ 551.393369][ T30] __schedule+0x15dd/0x52d0 [ 551.398625][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 551.403673][ T30] ? __pfx___schedule+0x10/0x10 [ 551.409180][ T30] ? schedule+0x90/0x360 [ 551.414358][ T30] schedule+0x164/0x360 [ 551.425127][ T30] io_schedule+0x7f/0xd0 [ 551.429604][ T30] folio_wait_bit_common+0x6d8/0xbc0 [ 551.436078][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 551.442190][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 551.448425][ T30] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 551.454435][ T30] do_read_cache_folio+0x1ad/0x590 [ 551.465026][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 551.470689][ T30] read_part_sector+0xb6/0x2b0 [ 551.484913][ T30] adfspart_check_POWERTEC+0x92/0xef0 [ 551.495331][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 551.511492][ T30] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 551.526408][ T30] bdev_disk_changed+0x7ba/0x1550 [ 551.549012][T18570] hsr_slave_0: entered promiscuous mode [ 551.564968][ T30] ? bdev_open+0xe0/0xd30 [ 551.580220][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 551.605988][T18570] hsr_slave_1: entered promiscuous mode [ 551.611801][ T30] blkdev_get_whole+0x380/0x510 [ 551.644676][ T30] bdev_open+0x31e/0xd30 [ 551.649047][ T30] blkdev_open+0x470/0x610 [ 551.666268][T18570] debugfs: 'hsr0' already exists in 'hsr' [ 551.672084][T18570] Cannot create hsr debugfs directory [ 551.685180][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 551.690223][ T30] do_dentry_open+0x785/0x14e0 [ 551.714660][ T30] vfs_open+0x3b/0x340 [ 551.718835][ T30] ? path_openat+0x2df0/0x3860 [ 551.723648][ T30] path_openat+0x2e08/0x3860 [ 551.774693][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 551.780171][ T30] ? stack_depot_save_flags+0x33/0x810 [ 551.793745][ T30] ? __pfx_path_openat+0x10/0x10 [ 551.799081][ T30] ? __x64_sys_openat+0x138/0x170 [ 551.804162][ T30] ? do_syscall_64+0x14d/0xf80 [ 551.809506][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.816279][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 551.821286][ T30] do_file_open+0x23e/0x4a0 [ 551.825910][ T30] ? __pfx_do_file_open+0x10/0x10 [ 551.831120][ T30] ? _raw_spin_unlock+0x28/0x50 [ 551.836141][ T30] ? alloc_fd+0x64b/0x6c0 [ 551.840624][ T30] do_sys_openat2+0x113/0x200 [ 551.846199][ T30] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 551.851725][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 551.857140][ T30] ? rcu_is_watching+0x15/0xb0 [ 551.861966][ T30] __x64_sys_openat+0x138/0x170 [ 551.867058][ T30] do_syscall_64+0x14d/0xf80 [ 551.871857][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.878088][ T30] ? clear_bhb_loop+0x40/0x90 [ 551.882903][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.889197][ T30] RIP: 0033:0x7f4c0e4a7407 [ 551.893661][ T30] RSP: 002b:00007ffc9d9a3c90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 551.902593][ T30] RAX: ffffffffffffffda RBX: 00007f4c0ec9e880 RCX: 00007f4c0e4a7407 [ 551.910783][ T30] RDX: 00000000000a0800 RSI: 00005609ccb1c5c0 RDI: ffffffffffffff9c [ 551.918901][ T30] RBP: 00005609ccb1b910 R08: 0000000000000000 R09: 0000000000000000 [ 551.927069][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 00005609ccb2e1a0 [ 551.935154][ T30] R13: 00005609ccb29190 R14: 0000000000000000 R15: 00005609ccb2e1a0 [ 551.943192][ T30] [ 551.955600][ T30] [ 551.955600][ T30] Showing all locks held in the system: [ 551.963491][ T30] 1 lock held by khungtaskd/30: [ 551.983743][ T30] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 551.994086][ T30] 1 lock held by syslogd/5175: [ 551.999104][ T30] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 552.009394][ T30] 1 lock held by klogd/5182: [ 552.014021][ T30] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 552.024100][ T30] 2 locks held by getty/5578: [ 552.029035][ T30] #0: ffff888036dd00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 552.039003][ T30] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 552.049603][ T30] 1 lock held by udevd/6685: [ 552.054249][ T30] #0: ffff8880263bc358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 552.063810][ T30] 1 lock held by syz-executor/17890: [ 552.069357][ T30] #0: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 552.080519][ T30] 1 lock held by syz.0.3146/18580: [ 552.085786][ T30] #0: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 552.147814][ T30] [ 552.150226][ T30] ============================================= [ 552.150226][ T30] [ 552.204683][ T30] NMI backtrace for cpu 0 [ 552.204706][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 552.204729][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.204742][ T30] Call Trace: [ 552.204750][ T30] [ 552.204760][ T30] dump_stack_lvl+0xe8/0x150 [ 552.204797][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 552.204904][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 552.204944][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 552.204974][ T30] sys_info+0x135/0x170 [ 552.205031][ T30] watchdog+0xfd9/0x1030 [ 552.205077][ T30] ? watchdog+0x21a/0x1030 [ 552.205117][ T30] kthread+0x388/0x470 [ 552.205139][ T30] ? __pfx_watchdog+0x10/0x10 [ 552.205168][ T30] ? __pfx_kthread+0x10/0x10 [ 552.205190][ T30] ret_from_fork+0x51e/0xb90 [ 552.205228][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 552.205253][ T30] ? __switch_to+0xc7d/0x1450 [ 552.205293][ T30] ? __pfx_kthread+0x10/0x10 [ 552.205315][ T30] ret_from_fork_asm+0x1a/0x30 [ 552.205363][ T30] [ 552.205371][ T30] Sending NMI from CPU 0 to CPUs 1: [ 552.326615][ C1] NMI backtrace for cpu 1 [ 552.326635][ C1] CPU: 1 UID: 0 PID: 6720 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 552.326655][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.326667][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 552.326818][ C1] RIP: 0010:__lock_acquire+0x517/0x2cf0 [ 552.326850][ C1] Code: 1d 44 89 e0 49 ff c7 49 63 8e 50 0b 00 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c7 00 00 00 49 83 ff 31 0f 83 83 00 00 00 8b 03 <25> ff 1f 00 00 48 0f a3 05 9c d4 81 12 73 10 48 69 c0 c8 00 00 00 [ 552.326867][ C1] RSP: 0018:ffffc90007587378 EFLAGS: 00000087 [ 552.326882][ C1] RAX: 00000000000407ea RBX: ffff888028a92a70 RCX: 0000000000000004 [ 552.326894][ C1] RDX: 0000000000000004 RSI: 0000000000000005 RDI: 0000000000000000 [ 552.326905][ C1] RBP: ffff888028a92a78 R08: ffffffff81767de5 R09: ffffffff8e75e420 [ 552.326918][ C1] R10: ffffc90007587658 R11: ffffffff81b0bfa0 R12: 0000000000000004 [ 552.326931][ C1] R13: ffff888028a92a78 R14: ffff888028a91e80 R15: 0000000000000003 [ 552.326943][ C1] FS: 0000000000000000(0000) GS:ffff888125567000(0000) knlGS:0000000000000000 [ 552.326957][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.326970][ C1] CR2: 000000110c323ec4 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 552.326986][ C1] Call Trace: [ 552.326992][ C1] [ 552.327005][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 552.327037][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 552.327066][ C1] lock_acquire+0xf0/0x2e0 [ 552.327088][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 552.327116][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 552.327141][ C1] ? kmem_cache_free+0x187/0x630 [ 552.327162][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 552.327186][ C1] unwind_next_frame+0xc2/0x23c0 [ 552.327210][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 552.327239][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 552.327266][ C1] ? __kasan_slab_free+0x5c/0x80 [ 552.327285][ C1] ? kmem_cache_free+0x187/0x630 [ 552.327312][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 552.327331][ C1] arch_stack_walk+0x11b/0x150 [ 552.327359][ C1] ? kmem_cache_free+0x187/0x630 [ 552.327381][ C1] stack_trace_save+0xa9/0x100 [ 552.327398][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 552.327414][ C1] ? __kfree_skb+0x5d/0x210 [ 552.327441][ C1] ? kthread+0x388/0x470 [ 552.327456][ C1] ? ret_from_fork+0x51e/0xb90 [ 552.327476][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 552.327511][ C1] kasan_save_track+0x3e/0x80 [ 552.327529][ C1] ? kasan_save_track+0x3e/0x80 [ 552.327545][ C1] ? kasan_save_free_info+0x46/0x50 [ 552.327570][ C1] ? __kasan_slab_free+0x5c/0x80 [ 552.327588][ C1] ? kmem_cache_free+0x187/0x630 [ 552.327629][ C1] ? skb_release_data+0x6f0/0x940 [ 552.327645][ C1] kasan_save_free_info+0x46/0x50 [ 552.327671][ C1] __kasan_slab_free+0x5c/0x80 [ 552.327690][ C1] kmem_cache_free+0x187/0x630 [ 552.327708][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 552.327733][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 552.327763][ C1] ? process_scheduled_works+0xa25/0x1830 [ 552.327787][ C1] process_scheduled_works+0xb02/0x1830 [ 552.327823][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 552.327848][ C1] ? assign_work+0x3d5/0x5e0 [ 552.327872][ C1] worker_thread+0xa50/0xfc0 [ 552.327908][ C1] kthread+0x388/0x470 [ 552.327923][ C1] ? __pfx_worker_thread+0x10/0x10 [ 552.327945][ C1] ? __pfx_kthread+0x10/0x10 [ 552.327961][ C1] ret_from_fork+0x51e/0xb90 [ 552.327984][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 552.328007][ C1] ? __switch_to+0xc7d/0x1450 [ 552.328028][ C1] ? __pfx_kthread+0x10/0x10 [ 552.328044][ C1] ret_from_fork_asm+0x1a/0x30 [ 552.328078][ C1] [ 552.458128][ T51] Bluetooth: hci1: command tx timeout [ 552.574940][ T5143] Bluetooth: hci4: command tx timeout [ 552.720449][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 552.727382][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 552.736539][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.746810][ T30] Call Trace: [ 552.750129][ T30] [ 552.753095][ T30] vpanic+0x56c/0xa60 [ 552.757125][ T30] ? __pfx___schedule+0x10/0x10 [ 552.762049][ T30] ? __pfx_vpanic+0x10/0x10 [ 552.766595][ T30] ? __pfx_console_unlock+0x10/0x10 [ 552.771859][ T30] panic+0xc5/0xd0 [ 552.775695][ T30] ? __pfx_panic+0x10/0x10 [ 552.780195][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 552.785699][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 552.791901][ T30] watchdog+0x1023/0x1030 [ 552.796332][ T30] ? watchdog+0x21a/0x1030 [ 552.800831][ T30] kthread+0x388/0x470 [ 552.804950][ T30] ? __pfx_watchdog+0x10/0x10 [ 552.810416][ T30] ? __pfx_kthread+0x10/0x10 [ 552.815053][ T30] ret_from_fork+0x51e/0xb90 [ 552.819690][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 552.824833][ T30] ? __switch_to+0xc7d/0x1450 [ 552.829547][ T30] ? __pfx_kthread+0x10/0x10 [ 552.834359][ T30] ret_from_fork_asm+0x1a/0x30 [ 552.839189][ T30] [ 552.842843][ T30] Kernel Offset: disabled [ 552.847175][ T30] Rebooting in 86400 seconds..