last executing test programs: 4m54.334021098s ago: executing program 0 (id=4141): r0 = socket$tipc(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="b2010100"/17, @ANYRES32=0x0, @ANYBLOB="000000002000000008001b000000000034001a80100002800c000180080000000000000020000a8014000700ff0200000000000000000000000000010500080003000000"], 0x5c}}, 0x0) 4m54.182440701s ago: executing program 0 (id=4143): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340), &(0x7f0000004e00)=0xfffffffffffffe8d) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x19, "47ca838400190d9883bd57dfd0f63b5743702ec11434368848"}, &(0x7f0000000140)=0x21) listen(r0, 0x7fffffff) openat$cgroup_ro(r2, &(0x7f0000000480)='cpu.stat\x00', 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r5, 0x8, 0xff, 0x1}, &(0x7f0000000300)=0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="fc79ea35d065b9ab3476a577889a62263064a4f9365db73c96a2400dc5e53ae7", 0x20}], 0x1, 0x0, 0x0, 0x20008014}], 0x1, 0x4814) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x12, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000007000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000fdff8400000083000000bf0900000000000055090100000000009500000000000000185600000500000000000000000000008510000007000000bf91000000000000b7020000000000008500000084000000b700000000000000b300000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0x8, 0x16, &(0x7f0000000700)=""/22, 0x1e00, 0xc, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000880)=[{0x4, 0x1, 0x6, 0x8}, {0x0, 0x2, 0x1, 0xf}, {0x0, 0x2, 0xf, 0x3}, {0x5, 0x4, 0xd, 0x6}], 0x10, 0x1}, 0x94) close(r8) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 4m53.92194444s ago: executing program 0 (id=4148): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0xfffffff4, 0x4) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/144, 0x90}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/174, 0xae}, {&(0x7f0000000580)=""/161, 0xa1}], 0x6, &(0x7f00000006c0)=""/20, 0x14}, 0x92}], 0x1, 0x10022, &(0x7f0000000780)={r1, r2+60000000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0xd3, 0x0, &(0x7f0000000000)) 4m52.787777701s ago: executing program 0 (id=4163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c5411"], 0x50}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x14, 0x0, &(0x7f0000000400)) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0x94}}, 0x0) sendto(r5, &(0x7f00000002c0)="4244fa5ed8b5fb1eee93ac99e90d53998f2525dceb90ac81e0f0fe7fef16ca22", 0x20, 0x20000840, &(0x7f0000000380)=@hci={0x1f, 0x0, 0x7}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048010}, 0x40000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000002, 0x13, r7, 0xcf59d000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0xc0) 4m52.505198675s ago: executing program 0 (id=4165): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000e006800010000000000000000000a00000000000000"], 0x18}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYRES16=r2], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe56}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r9, 0x1, 0x0, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r11, 0x1, 0x400, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2c8e3c9c, @local, 0x3ff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r12 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x0) 4m51.363314646s ago: executing program 0 (id=4173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071104200000000009500000700000000cd1dea8f1da3b2092f99be78892cca045bfe0744ac93c06728556316"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x4, 0x6, 0x44, 0x100, 0x6, 0x180107, r1}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1, 0x0, 0x0, 0x8040000}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x3, 0x8001, 0xfffffff7}, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) 4m36.286181298s ago: executing program 32 (id=4173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071104200000000009500000700000000cd1dea8f1da3b2092f99be78892cca045bfe0744ac93c06728556316"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x4, 0x6, 0x44, 0x100, 0x6, 0x180107, r1}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1, 0x0, 0x0, 0x8040000}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x3, 0x3, 0x8001, 0xfffffff7}, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) 2m37.729787908s ago: executing program 1 (id=5065): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x2, 0x2000000, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r7}, 0x38) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x7fff, 0x19, &(0x7f0000000080)=""/25, 0x41100, 0x40, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000140)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x1, 0xa, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r3, r4, r5, r6, r7, r8, r9, 0xffffffffffffffff], 0x0, 0x10, 0x10000}, 0x94) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af92e4b39ff, 0x0) 2m36.472936823s ago: executing program 1 (id=5075): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x28}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004810) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000480)) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000002fc0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2cb8de8f82898104}, 0xc, &(0x7f0000002f80)={&(0x7f0000000500)={0x2a70, 0xd, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2a14, 0x3, 0x0, 0x1, [{0x26ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_ELEM_KEY={0x121c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x102, 0x1, "3c2c6043dcfff3f10d199f0161fa3780f78d1583ca6272e0020df1fb0e0ea4e833bb8b9501005efc6dace569395610cb40d27c9f6e17deb134f0af397f3e8ea3009953cf3eb33e56a065c819e8039644e0648b2fdfa595117b993ea1b9ae475bc48a4dad5a835aa887a5806a9e97a8ee4c657fc4e778f77c1065f8bae84b7c3323bf17efb5aa07d80015f9abe60878a711e0c3c77f7d37c9d4836d3f1f61de94e0e403eff453d13b3b0e3edcedfb82b8c8cb8a4ade2c7616eaa46e52295a55840648e6e82471d37054044736d9f1c8a4df3d756fc19ca14f09363e4070742fdcc144eec0fe10e086991f4b8985d6a5e2a807c5f513dc42b1745149d2194c"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x3a, 0x1, "2cff11a31e122b93bb2ee8ff20c30f1f0f420ab0853aeb28a01f070b60b9e21388dfdb177ea3d4f5e6d417af04ccc530fe8e665b4ca5"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x21c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf6, 0x1, "ad9a335b62647bdbdb4401fdb13c82699bba843a6cc10a3aedd38a64ecc506a7963e0c04cf89d0c8975356b56d787edabeb6951e44690d379bd739f64a0c6f3ebfaa7c860362fd9b01235b54cc9afa22e40c05942b79b30e567d8ad21e6c0dabff6f56a9051366631ac2a83c9b849691faa497616ecc3ffca3b80f1347598f35b63b44ca981acd9feff53392e840cef72f94477aba098e4ef8ea7b37687c51ccb50cf0bf19e801faa104f937b3293460ee1db86f45aab9be6906a06c10f899d6fc828a0dc14f3530eb3d181466e68894298b3381090514694af48cf2640e4aca43ccdb085f87b67e69a43d1ba94b4eb053fb"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x77, 0x1, "86a8532f4f99c1a190b1573ce53cbc98a57596e120c985f1d38e0bf1119359cfb1af48f4f258ac75d427dd59419c3efa35d71bf2698f6e3d61ce7d5a708b5f1f25e8ffeec851259aeab10e420686c134db3566ff654b7255db28dea29d56c605da2d951b26e02790006e239a073ebcef0d4a16"}]}, @NFTA_SET_ELEM_DATA={0x129c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "734fbf9130eeba107a6e828c0d0f3c1756e6d011c9992fd4ca57a7"}, @NFTA_DATA_VALUE={0xcb, 0x1, "0be45a626674441c2bf5183082e1b6fdcf27adcdb44061a195a59f2b95780df7e9e5377cd5d45867224f428c80731ef92866d5bb4d14814d9920532b7ec6b50fa4c0453758088feb913df7c08e95d7120428893a046f4afcb60a12895bade5b1c5944ea1a465dccceb458f6b9e0cf11a596ad0b5c26e0e433d27931454d7e75f18ed720f900304d68b86fe07beff6811e4a1cf1c569ff2c8021fda3b43bd5b5ee637d15cb2836333069fd09abc5614436f326d418f247f8c6a6482ccdbe1f57bf4c6c37535f695"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x96, 0x1, "54b94437de84cf4e8e510feb7cb03c54abaf0f86dfde2e21959d42f6bced0ed8385e1fa40ee8ae668dee041fe667d0a9a4fd81e90d3f5c55b8376b9813664b8115b7e2fe1dbec4f1bac72039f28976d4d334042a7ded1f7aaaf412c31004c1100761890a5af1fc792caf599f98d01549f80b02aabe89a22c3a400f5d5c7ac8da8b7e0730a5f0ff7787c918869c9028e5201c"}, @NFTA_DATA_VALUE={0xa2, 0x1, "8e206a5da596fe7c86b448db8744004a64f2f185369c3f9452c2402d7498c1d3a3798d41b2ddd9b0a4cc4ae3ba4bd758f746fcbbbe531beb517db78986e2c9015c30a461365d9e9faf3c26b754a8b48bc256819264908e5949116657efa725bd3a678501b1716a288a77f19086c23394176c573ba49c5bc100d74652461a9c26345f63d985ac8406ac53b559e25266f62c7af8a55d30312b042e774f27ef"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x2a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x98, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x93, 0x1, "2f143ea82f0d92386f4791e9d70ca07d3d18f47a7503ac7f9b8b3a5970a70562e7fa2cfab9b1a32e894bf8d2e5cb6e6597f9a24383a26def3263fa28de0be9bb5a7d0b92f7fa71d5437ddaa2e91c75d4693c5350fca52634c844ebcc95cf07a8269aba4194adfc31314edb87cadff81cdd9d305fe6d33478c679c9f5127bbb5605d5712e1ef870ec7c7c064a472313"}]}, @NFTA_SET_ELEM_KEY={0x1e0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd0, 0x1, "208d1a037135f2785d9105d85520b140abeb0dbe60b9a77ed9f1de224b2c766392e33025789f9407ce39b7078cc28ccdfa196beca4ab227b8564275e845ca38439c59b8a9350d1c3fa618924fe1f8f4c1fae9255327436481a6239448972c740959d91fcbb456f63477640f7876b64f50fcc7d05d821fa6311ee13877677b455802741a12a5608439225cee3c33637c204c587efa3e530de9f0c5721298c479b2011b87fc5c3664b6c6b222cce473f2bcc9b99fa7d0e2d72bdc8abedcd1b4e9950e6a4edaf2ea8605d196eb6"}, @NFTA_DATA_VALUE={0xda, 0x1, "7a8d078b2b7a213f16fd41f83899ffad9a8b4bbeb4864fa7641d07728c10dbb088cf21ee187af9439c677bf99d9ca0f623b328ffcbdeb512f7f25c911968b96f8160a1d9ee9ddac79c1d91ae27986a9571a20da38320ea6a418f17a8eacbff5ba8c3a78c39820b52be053beda6f95201c747fe0b78f0de6f21fef36bca73f553039684ced5ac38a8ac0b4ecaf1b3995b38da1f260fe1437a51514efdd87e52dfc6d46784ff5ff587a93a69dd3b89a99e49ef800a3da5ec23adab815e31aa00d5cc3661e9a3832d22f5e603e09dc17d99d9ee48a22571"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8774}]}, {0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x67, 0x6, 0x1, 0x0, "3e8a139888913c1f2fb2b71e2724d604354f3e8809c874a9df6f74994ec2fd021f347569beea41b380d03e7607dd22b3c012d76419ac62aab1294b2ff2b869ac439a25db39723c83e0557317d31537eb01105674cc7646333e3d81022bff0a9d9fa719"}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x2a70}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000003040), r4) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000003100)={&(0x7f0000003000), 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x40, r7, 0x100, 0x70bd29, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003140)={'vcan0\x00', 0x0}) connect$can_j1939(r4, &(0x7f0000003180)={0x1d, r8, 0x2, {0x0, 0x1, 0x1}}, 0x18) close(r6) sendmsg$nl_crypto(r4, &(0x7f0000003380)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003340)={&(0x7f0000003200)=@alg={0x130, 0x10, 0x4, 0x70bd2a, 0x25dfdbff, {{'pcbc(aes-aesni)\x00'}, '\x00', '\x00', 0x2000, 0x3000}, [{0x8, 0x1, 0x10}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x400}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x200}, {0x8, 0x1, 0x10}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x9}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x40008d1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000033c0), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440), r4) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000003500)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x14, r9, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x90) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000003540), 0x4) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000035c0), r4) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000003680)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x24, r10, 0x100, 0x70bd2d, 0x8, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xfbf2dce377ebc86}, 0x20000804) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f00000036c0)=""/132, &(0x7f0000003780)=0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2m35.770384455s ago: executing program 1 (id=5081): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000180), 0x10) (async) connect$can_bcm(r2, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100006001"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r4 = socket(0x25, 0x2400000001, 0x0) ioctl$sock_ifreq(r4, 0x8948, &(0x7f0000000100)={'vlan0\x00', @ifru_names='veth1_to_team\x00'}) (async) ioctl$sock_ifreq(r4, 0x8948, &(0x7f0000000100)={'vlan0\x00', @ifru_names='veth1_to_team\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xffffffff, 0xff, 0xff000000]}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xffffffff, 0xff, 0xff000000]}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) sendto$inet6(r4, &(0x7f0000000380)="f6a830be235e278e1b12f6abb83c1e43e09c01b789d31b17fde9c0162de9a8c42bee4efcac04880568a4ca0611823b56c3d127051930ebc24acd927bf87841aa88ea87ed1e76c2778c3ff4e1cbd5d1fb0b30ffbf79d83f86695ca3701d6c789e32adae5bb994c95622428c82cdc0e5cc0bfc2137dc8d66b140cc21f727abefca02affa291ac587876874bfcb6dd5acc9a52b1958ffd66249d88d6cf40db2c93c94915eaf0f56615250cf08737ae88dca27998eff0a02c588783d0be86094e0219d5a281aa13dd30a36e98d09e6b5b6a0b194b20dbba620ef170030c3a268d8fc13e2d98060b8e347af00", 0xea, 0x0, 0x0, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000480)={0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x54, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r7], 0x84}}, 0x20008040) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) (async) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000140)={{0x5, 0x6}, 0x100, './file0\x00'}) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 2m34.811011306s ago: executing program 1 (id=5085): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5c}, 0x48) socket$netlink(0x10, 0x3, 0x7d582b2eca07a2b0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000e1ba8cb95c91e30000008cc9c21c7e65b6f09e8b8b9748d6a820370f6f157da3730e2156d5393e6c082faae9f5468e466696d094a984e8e336fe20bcc06e19ad4b080994479234218a32fe2174a4fe68823b623bed8a0cf40ece"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000008c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x32, &(0x7f0000000a00)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4000, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x6, 0x100}}}}}}}, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) 2m34.352232554s ago: executing program 1 (id=5089): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) 2m34.019309707s ago: executing program 1 (id=5090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x12c, r2, 0x100, 0x3, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x19}}}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x1, 0x5}, {0x2, 0x3}, {0x40}, {0xf}, {0x2, 0x2}, {0x3, 0x6}, {0x4, 0x1}, {0x9, 0x3}, {0x5, 0x4}, {0x6, 0x4}, {}, {0x3, 0x7}, {0xc, 0x1}, {0x4, 0x3}], "4c47994507ad9ae3"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x10, 0x4}, {0xfd, 0x7}, {0xa, 0x1}, {0x80, 0x5}, {0x2, 0x5}, {0x7f, 0x6}, {0x4}, {0x40, 0x6}, {0x4, 0x6}, {0x7, 0x5}, {0x2, 0x5}, {0xf9, 0x4}, {0x5, 0x2}, {0x9, 0x2}, {0x7, 0x5}, {0xd9, 0x5}, {0xff}, {0x40, 0x2}, {0x8, 0x2}, {0xf8, 0x3}], "e9fda8d9c6282351"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x23, 0x2}, {0x1, 0x3}, {0x7}, {0x7}, {0x4, 0x3}, {0xc, 0x1}, {0x5, 0x3}, {0x40, 0x6}, {0x6, 0x4}, {0x5, 0x3}, {0x1, 0x3}, {0x6, 0x6}, {0xa}, {0x2, 0x4}, {0xfb}, {0x8d, 0x3}, {0x4, 0x1}, {0x8}], "9116cad6e88b9533"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x2, 0x2}, {0x4, 0x6}, {0x7f, 0x7}, {0x6, 0x3}, {0x3, 0x7}, {0x4, 0x5}, {0x21, 0x6}, {0x1, 0x5}, {0x9, 0x4}, {0x2}, {0xfa, 0x2}, {0x8, 0x2}, {0x7, 0x1}], "8134fa681bab0ca5"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x8}, {0x3, 0x3}, {0xb, 0x6}, {0x8, 0x1}, {0x7, 0x2}, {0x8a, 0x4}, {0x98, 0x4}, {0x4, 0x6}, {0x2, 0x4}, {0x3, 0x3}, {0x1, 0x4}, {0x8c, 0x6}], "5ca698a57da7f9f5"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x1b, 0x3}, {0x79, 0x6}, {0x6, 0x7}, {0xb, 0x2}, {0x0, 0x7}, {0x4, 0x6}, {0x95, 0x5}, {0xd, 0x2}, {0x80, 0x3}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x1}, {0x40}, {0x9, 0x6}], "1707e56407ebc483"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "bc3a191f017f7391"}}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc837ac4e1e95fa4b}, 0x44811) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) 2m18.92480926s ago: executing program 33 (id=5090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x12c, r2, 0x100, 0x3, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x19}}}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x1, 0x5}, {0x2, 0x3}, {0x40}, {0xf}, {0x2, 0x2}, {0x3, 0x6}, {0x4, 0x1}, {0x9, 0x3}, {0x5, 0x4}, {0x6, 0x4}, {}, {0x3, 0x7}, {0xc, 0x1}, {0x4, 0x3}], "4c47994507ad9ae3"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x10, 0x4}, {0xfd, 0x7}, {0xa, 0x1}, {0x80, 0x5}, {0x2, 0x5}, {0x7f, 0x6}, {0x4}, {0x40, 0x6}, {0x4, 0x6}, {0x7, 0x5}, {0x2, 0x5}, {0xf9, 0x4}, {0x5, 0x2}, {0x9, 0x2}, {0x7, 0x5}, {0xd9, 0x5}, {0xff}, {0x40, 0x2}, {0x8, 0x2}, {0xf8, 0x3}], "e9fda8d9c6282351"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x23, 0x2}, {0x1, 0x3}, {0x7}, {0x7}, {0x4, 0x3}, {0xc, 0x1}, {0x5, 0x3}, {0x40, 0x6}, {0x6, 0x4}, {0x5, 0x3}, {0x1, 0x3}, {0x6, 0x6}, {0xa}, {0x2, 0x4}, {0xfb}, {0x8d, 0x3}, {0x4, 0x1}, {0x8}], "9116cad6e88b9533"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x2, 0x2}, {0x4, 0x6}, {0x7f, 0x7}, {0x6, 0x3}, {0x3, 0x7}, {0x4, 0x5}, {0x21, 0x6}, {0x1, 0x5}, {0x9, 0x4}, {0x2}, {0xfa, 0x2}, {0x8, 0x2}, {0x7, 0x1}], "8134fa681bab0ca5"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x8}, {0x3, 0x3}, {0xb, 0x6}, {0x8, 0x1}, {0x7, 0x2}, {0x8a, 0x4}, {0x98, 0x4}, {0x4, 0x6}, {0x2, 0x4}, {0x3, 0x3}, {0x1, 0x4}, {0x8c, 0x6}], "5ca698a57da7f9f5"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x1b, 0x3}, {0x79, 0x6}, {0x6, 0x7}, {0xb, 0x2}, {0x0, 0x7}, {0x4, 0x6}, {0x95, 0x5}, {0xd, 0x2}, {0x80, 0x3}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0x1}, {0x40}, {0x9, 0x6}], "1707e56407ebc483"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "bc3a191f017f7391"}}]}, 0x12c}, 0x1, 0x0, 0x0, 0xc837ac4e1e95fa4b}, 0x44811) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x26, 0x301, 0x70bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) 7.552120636s ago: executing program 2 (id=6169): ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000080)={{0x80000000, 0x7}, 0x100, './file0\x00'}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x8901, &(0x7f0000000080)) 7.404346772s ago: executing program 2 (id=6173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611970000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 7.229056053s ago: executing program 2 (id=6175): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) sendmmsg$unix(r0, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38}}], 0x2, 0x801) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/ipc\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ee, &(0x7f0000000300)) 6.678940511s ago: executing program 2 (id=6180): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@deltaction={0x194, 0x31, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfb}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0xb0, 0x1, [{0x10, 0x3ffe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbd}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000ad000000799000000000000063008000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@deltaction={0x194, 0x31, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfb}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0xb0, 0x1, [{0x10, 0x3ffe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbd}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) (async) socket(0x10, 0x803, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) listen(r0, 0x0) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000ad000000799000000000000063008000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async) 3.565619657s ago: executing program 2 (id=6187): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xa, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xa, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) 3.38547751s ago: executing program 2 (id=6190): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000019080)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r3, r2, 0x4, r2}, 0x10) (async) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271c, &(0x7f0000000080)=""/102377, &(0x7f0000000040)=0x18fe9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 3.375857679s ago: executing program 3 (id=6191): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000140)='syzkaller\x00', 0x8, 0xbc, &(0x7f0000000180)=""/188, 0x41100, 0x11, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x2, 0x8, 0xe6}, 0x10, 0x221e9, r0, 0x0, &(0x7f00000002c0), 0x0, 0x10, 0x6}, 0x94) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="d2e6725d5a"]) ioctl$SIOCPNDELRESOURCE(r4, 0x89ee, &(0x7f0000000300)) 2.419601801s ago: executing program 4 (id=6202): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x80000000) recvfrom$inet6(r2, &(0x7f0000000000)=""/102, 0x66, 0x1, &(0x7f0000000080)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f0000000200)={&(0x7f0000000100)=""/196, 0xc4, 0x8, 0xdfa}) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x5, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_FAMILY={0x5, 0xd, 0x18}]}, 0x58}}, 0x40) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000004c0)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffffffffffff, "964105bd1b80b2b8c55092642b637b4e5b211e35fe0fb060df44a06bd053448f", 0x10000, 0x4, 0x1, 0x7fff}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000500)=0xf, 0x4) r6 = socket$netlink(0x10, 0x3, 0x5) bind$inet(r1, &(0x7f0000000540)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000580)) r7 = socket$inet(0x2, 0xa, 0x5) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, &(0x7f00000005c0)={'macsec0\x00', {0x2, 0x0, @private}}) r8 = accept4$vsock_stream(r3, &(0x7f0000000600), 0x10, 0x80000) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000000640), &(0x7f0000000680)=0x8) r9 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)={[{0x2b, 'blkio'}, {0x2b, 'pids'}, {0x2d, 'devices'}]}, 0x16) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000880)={'syztnl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x8, 0x7, 0x7fffffff, 0x2, {{0x45, 0x4, 0x1, 0x8, 0x114, 0x65, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x2b, 0xee, [@broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2, @local, @remote, @local, @remote, @broadcast, @rand_addr=0x64010101]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xa8, 0x3, 0x9, [{@loopback, 0x3ff}, {@multicast2, 0x7}, {@loopback, 0x101}, {@multicast2, 0x3}, {@broadcast, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x60, 0x3, 0x3, [{@multicast1, 0x1}, {@remote, 0x8}, {@remote, 0x9}, {@remote, 0x8}, {@multicast1, 0x6}]}, @cipso={0x86, 0x4f, 0x0, [{0x5, 0xc, "923b0fc26fad73426887"}, {0x0, 0xa, "5540f14457b6f173"}, {0x1, 0x5, "02dc87"}, {0x1, 0x3, '<'}, {0x3, 0x4, "73d2"}, {0x6, 0xb, "bd94b00215bd830a8c"}, {0x6, 0x5, "5264d2"}, {0x7, 0xd, "d5a3e719760d883aca49c0"}, {0x0, 0x3, "97"}, {0x7, 0x7, "f4ab1ee0cf"}]}, @timestamp_prespec={0x44, 0x24, 0x42, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0xffff2305}, {@empty, 0xe5}, {@remote, 0x800}]}, @timestamp={0x44, 0x4, 0xda, 0x0, 0x1}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002b80)={'gretap0\x00', &(0x7f0000002a80)={'syztnl1\x00', r10, 0x7800, 0x1, 0x5, 0x6, {{0x32, 0x4, 0x0, 0x3a, 0xc8, 0x67, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x6, [{@local, 0x9d2}]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x31, 0x0, [{0x1, 0xf, "38a5d3b09e713d90535adde981"}, {0x5, 0xe, "0b6c76e70b48420949c63278"}, {0x7, 0x6, "88f9424c"}, {0x4, 0x8, "ef4e557f535b"}]}, @cipso={0x86, 0x50, 0x3, [{0x3, 0x9, "4b63fedf4c9a44"}, {0x2, 0x7, "8a5161a78c"}, {0x2, 0x6, "d64bf085"}, {0x5, 0x9, "5f897bdc5c5d58"}, {0x5, 0xd, "7ee90e441d88ded6811037"}, {0x6, 0xb, "0aac0653210db837a8"}, {0x2, 0x10, "1f28c06c63ade47a96c0796a91d4"}, {0x6, 0x3, "c8"}]}, @lsrr={0x83, 0x1f, 0x1e, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x42}, @local, @broadcast, @multicast2, @multicast2]}]}}}}}) sendmmsg$inet6(r2, &(0x7f0000004340)=[{{&(0x7f00000008c0)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}, 0x2}, 0x1c, &(0x7f0000002a40)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="e5c158e6793879190ee1cac83850ec7b87092baf8304ae9683a8d6f2a143dab5f6a0", 0x22}, {&(0x7f0000001940)="9375b7f606e73ccb85ebe3dd9cf6585e9d14116984d172810d33ef41d0ebb65bbb9be19b4b4268838a76f47e644f66c6ffe7678977e37d4c744b3d3f83270a9204674639deebc966617e8f62a3697bda8d371d8b8deb6223853e73b59612b5bfd131b828d681d3b19b936dc8cfca947ff5517f9c99295cac641ee0af2479292b629fadb3f3b6b5f240cb0daeb51e678712414b254a3f32bbb6ba1652ebbe7ca50c4e0af675ae22f7a851aee52a1519450d23448c8c628e89f7dd930e4359411de42f063d31f855b5b63d8b512309ef8164cb2c354ccdcd913940409b7b48424d606795e0206a93e3a7428ce4a8ff2adb3c95", 0xf2}, {&(0x7f0000001a40)="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", 0x1000}], 0x4, &(0x7f0000002bc0)=[@hopopts_2292={{0x58, 0x29, 0x36, {0x3b, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @calipso={0x7, 0x30, {0x2, 0xa, 0x1, 0x1ff, [0x7, 0x7, 0x8, 0x8000000000000001, 0x2]}}, @ra={0x5, 0x2, 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00', r11}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0xb0}}, {{&(0x7f0000002c80)={0xa, 0x4e24, 0x444f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x9}, 0x1c, &(0x7f0000004140)=[{&(0x7f0000002cc0)="52d78511c2c10d0f263c3453a6ad1cbba2b2e7371ab137f85d2a0cdf8819d70395008ba4b9ff58dd8c41aef1d0aefa9e17ea5527843161c7e9791f73d2d6ee32a549c24ace2eff760a55dd562311841a9643c3f97ba08353b96f1058e5c9a20cf343ec8cc89acc2459764d580f38bff99275", 0x72}, {&(0x7f0000002d40)="207941c82c0a3afe299f00f562d61bb146ff370f2cf75fce1c3de8ba1f4b468840b175e6ecf6352c2c4709cbc9", 0x2d}, {&(0x7f0000002d80)="513a71a3ef2cca73deac2b88c0abc46b275b89df52c431347fb78157187795494caa92a455aca65af08800d3450813275265012ee86ef15ff88fda91378ae51bbb7efedcf74c73fd1527de7ef0a4a818dfbccfc94a9d3b481a95472c63cbec0c81d01e", 0x63}, {&(0x7f0000002e00)="360690a170d61583c766c58d9e6dded48ea53d520d856f400be077c640e163f11bda2a8b573b3ad43b432b3ce831e61f9873fa56bddd55654832f0a748d231bb28bc990966a58d", 0x47}, {&(0x7f0000002e80)="8a95886f4da103ae2ba6d9ffe2062d389380056eb972f8f3ac897602e292410b1bf5c119026e763b6b13a577e2f5c142bab896216236b24739cfadca8c6b4ed83acb0517ef775a5dae69d72d5a812e11523b2eff384d9ec18d642f31d90d6c8eae41c0057ab35c997cfe0cb5049d0722c3edd3fdde639905b269c5c675a1566bca5ce17e342724e49cc7cc67c44a284b420b8f74050802b02322d3c89be490393cc837358451a882e902a04e9e1964147c8ca1495f0b16a5daefd77df6005f58b14a3912d8", 0xc5}, {&(0x7f0000002f80)="2dd8540bbb787c5707b7dbb86304bd45408fb1ce368ef97f1546436226811b0f761d03a1eec0e21b94f6327645fab9955c7f42a22dc5a6d02e0e988481cd6f04d50b5b3e2a9e9329d299bcc5a4a148b1cae7498be71a20df6f8bde2f7a98fb11caaf1e778d874b4163f88203c8f33f2435092a90cd0979f2a381a20f40d60889356c74f68dd63a7cd8b0d65bf4469a6be2c8ff1bf053fdce94a5f49e10903268649a58721e65d5065bd39b3752d3c394587591829e1fcb289b04b600071962c2a4b25e289c90539c6a026c0e7593f541218581ecb30ad368fcb8f17b6a3a342ff72dee9c19", 0xe5}, {&(0x7f0000003080)="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", 0x1000}, {&(0x7f0000004080)="b763cf3702b67dd8f564497b9072a4c32e92db8639f6f84ab1a1e55081e42146ac0833a96d395ec9c688fcf94e585ee388173e04aa1eabdb4935ae1622027e46ceda551262ab77eaeb20e53e5e2be28c74f70b3a8e47549d4fd1b6c6686e8e463d2cb2004ed5f8716eb081f25d704b48b6b3913d6feb60be62955102e471a3b49e3db379ac25042f8e85a0a04c589385b6bf365a6e501d97388082a1cd3f9b1eefc98088acb2dad9b7ee35a5edb9c818cc", 0xb1}], 0x8, &(0x7f00000041c0)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @flowinfo={{0x14}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x16, 0x12, 0x1, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3a}, @remote, @mcast2, @loopback, @dev={0xfe, 0x80, '\x00', 0xe}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x40}]}}}, @hopopts={{0x40, 0x29, 0x36, {0x24, 0x5, '\x00', [@generic={0x6, 0x10, "5fa1668ab770350fdc5fa2f5f80b2982"}, @hao={0xc9, 0x10, @empty}, @ra]}}}], 0x150}}], 0x2, 0x4000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000045c0)={{r6, &(0x7f0000004400)='syztnl1\x00', 0x0, &(0x7f0000004440)={@_ha_fsid={[0x401, 0x2]}, {0x8, 0x80, 0x7f, 0x800}}, 0x4, &(0x7f0000004480), &(0x7f00000044c0)=0x1}, {[0x7, 0x6, 0x40, 0x6e6]}, 0xf, 0xa1, &(0x7f0000004500)=""/161}) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000004640)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000043c0)={@cgroup=r12, 0xffffffffffffffff, 0x34, 0x2004, 0x0, @value=r13}, 0x20) ioctl$sock_inet_tcp_SIOCATMARK(r12, 0x8905, &(0x7f0000004680)) socket$vsock_stream(0x28, 0x1, 0x0) 2.29971242s ago: executing program 5 (id=6204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a0000000000000600"], 0x30}}, 0x4090) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) (fail_nth: 19) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a07fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a06fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da"], 0x0}, 0x94) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_newroute={0x40, 0x18, 0x400, 0x70bd29, 0x25dfdbff, {0x1c, 0x10, 0x20, 0x1, 0xfd, 0x4, 0xfd, 0x15, 0x400}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}, @RTA_DST={0x8, 0x1, {0x6}}, @RTA_VIA={0x14, 0x12, {0x15, "53c694d5e73daf7af4d0a80cd20e"}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2050}, 0x8095) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept(r6, 0x0, 0x0) recvmmsg(r7, &(0x7f0000009940)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/18, 0x12}, {&(0x7f00000003c0)=""/245, 0xf5}], 0x2}, 0x7}], 0x1, 0x100, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003140)={0x18, 0x23, 0x200, 0x70bd27, 0x25dfdbfe, {0x8}, [@nested={0x4, 0x31}]}, 0x18}}, 0x40086) 1.976220539s ago: executing program 3 (id=6205): socket$alg(0x26, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000020000003f00000040"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001340)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000001300)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f00000004c0), &(0x7f00000001c0)=""/13}, 0x20) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001d00010000000000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="800007000a0002000180c200000300f505000500"], 0x30}}, 0x48080) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r8, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r9, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3, 0xffffffff, r2}, 0x10) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000c, 0x11, r2, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x3}, 0x50) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x40, 0x6, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x80000004, 0x4, 0x1, 0x8, r10, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) 1.906234255s ago: executing program 5 (id=6206): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000a2000e0002"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008810}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e80)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0xe0dc}, {0x4ae, 0xf7, 0x4, 0xa}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 1.629007828s ago: executing program 4 (id=6208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x810}, 0x400d4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000000206050000001cbb4a47bb9699d6511600000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a31000000002c0007801800018014000240fe8000000000000000000000000000aa08000640000000000800084000000000050005000200"], 0x78}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x200000}}) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd605f106000442f00fc02000000000000000000000000000100000000000000000000000000000000242081000000000000000800000086dd080100be86ddffef100000000100000000000000080022eb000000012000e0000200000000000000000000000800655800000000"], 0x0) r4 = socket$inet(0x2, 0x4, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd88}}, 0x8001, 0x5, 0x2, 0x96, 0x65, 0xd88, 0xc}, &(0x7f0000000b80)=0x9c) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) bind$alg(r5, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r7 = socket(0x6, 0x3, 0x100) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000500)={0x8, 'geneve0\x00', {'xfrm0\x00'}, 0xe}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r8) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r9, 0xbc914b49a8246e7, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000001c0000000c00070000"], 0x20}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x7a, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b70000000000000061111c0000000000c60000000000000095000000000000001eefadd6132b2142b7929349cc6f836b8cba9cc7d517ab051ae031806f86b1cb2abe8a9eb510f32d6ef48ac947e8b6896e7fdcce25c7be8ce0f3c170040f7133c787dae2805f7058c681d1d743460810169e1378acf56d92b8fe58da7b9aba4b306edfce0e66519ba3c034842244173b18f1156075de92c77cbf5a6eb7914ed0027f4909580679e7f344dcea34de837fd2cf89fa57eeb28ab43a80f7801b6f3fa4dc304306e4c949e55df08e5401001fc120583a6cf8c979f916c6cc89e115ce2ae54e00daceac3d5199af3ba48061c21742b4a2d837fa7db400d337"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r11) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000070", @ANYRES16=r12, @ANYBLOB="0b0325bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_emit_ethernet(0xbe, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000b00000000000019078acf8f501ac1414aa030490780000000045f00000000004de00040000ac141400e000000294040000440c0003e000000200003dc38d0000890f0000000200ffffffffffffffff444cda01ac1e00010000000000000000000000000000000000000000ac1414aa000000007f000001000000000000000000000000e000000200000000ffffffff00000003ffffffff00000000441400000000000700000020ffffffff0000000000"], 0x0) 1.513663785s ago: executing program 5 (id=6209): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000048c0), r0) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000048c0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000005a80)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f00000059c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x810) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f0000005a80)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f00000059c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x810) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)="04", 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000280)) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xe1}, 0xa) 1.407476645s ago: executing program 3 (id=6210): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002380)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000007600)={0x0, 0x0, &(0x7f00000075c0)={&(0x7f0000000080)={0x1040, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1024, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1010, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x1004, 0x6, "b6e199abf946d0afb7b97ac95c2297e5422706074857f9df2dc12ef3228a8868a995e676a66d9f0acee449114682a4ed4cff489556f5158901d0c018fa85b385b67c7062df3dd12660482211d7a123efb810676a65125ce6e21fc7dd919dd1106f4b4842624d6881915afb553e9611c29940f1983d51865522d78002935657c806d56072079eda76b50ee0194980e30d21101090fc486216c750f997eb013459bd16199b4c41fa63f0ddee38d708deb162504cbb90ade4e8b3628669be6020dcfdb2cacc45c3e21cff15db54fe238e681b4183c73d696fe21b55731409fcc0d44bbb4090143b0039faa4cb97f0021086cf9967e0465c8a4f379c0f7599786865e70e76126ecb9d4f1e2a131c6b1425bc0ce7898dc35a66d8cefa8d2a5f8a319bd9f98d3deeef2bbe56c9b52c0cc6d9ab28f12744690056bb99a1171a004e0dc9d83ad53cfab0eb24a4ee5e3a87b7ecba7e3b4a3451ade113a47745e8cd8b0d979874d0d73907ffc75ccf5c205c87c3edff0f0743f67f78d93ebc9085bc1cea56093c21776443819296c38cb4331db40de79ccee7a0f0401b1f134cec668a51a9fa569738d67e66a3bff7e3aac6985bf8498e0b9465408715bc7788dfdb84aba95474181cf78f8c75ae59e83f65a4cdc95fc95447ec16e566fe500078eca158cc981d303c4446b68556a34ea3f8b490854bde2881c29a521e50909d8798da92ebc587e132034ad87ff9bda0812b2a36ed55e0990230fd75112df14f3bd8b5f66810eda374dd6a17e289b31aa71477296161005546ba8895cbbf5230750ee805300598eb7427af5701df61cabce7af6eccacae904c44ab33282693e89db61363a39b17e7447b215c98cc1f40a10a647150bf9e7b182f32e62d888bc37faae4f06c82e685adb1968947bd87cdd608600a375551d1776c79cc836257db8739e7a26b8a57ffae247217a0644124248e8a7a0ab961c0fc4a326549c386d4754797a8cb4491d16ee2cec21870b7cdc675ec4744e9460c556e7de4af4d2e5b7b96bc6cd39ebf3c5be5c68c9a74de6949f8cfae7adda9ae2c84a75d7dd54f3b3aa52c0d4d9b647974c2bcfd42fc3fc97590778cf53c114272dfe7338be17f275ee14c0633a020addec6131a752709454d5e661d12a994b5e1dd4c4d3237fcc823a4d44c741da2916a81bac2906f8bea20771e6fd4ca6d7832d0b2fe8e9eeed66435501555da22c0ff18e2fb515239b054b1dbd06f8b25a4aa9fe1fa2b925a49a02c3cff4a494ddb69085af13df73db8d045848f185eaa2aefad075223e9d4a2cd241529e2722a8ecc28589e7172c191623e26a121a7d48c505b0585bc18a929f1af9b21127e8939fa044afac21820a730fd0b85a8da4bd5c8ed5aa700d5003d89e3604350810abd7199f00f7b72dae28f994bc953706da6dd4c26e2abadc1cbd0d34a79a9d075e184abea4b1c75b9fa01d2012556dca7f9deb449d1bab9841ea4f93c20e169542e39016b5de1e5cabf8c02af1666fcf4679af4ab7918c5278131efb633b62fdad0f92793d2a3d686a0c0d83559975345245304d3d912210d1282fb0a0a345cab9f7b7ca831f84b3e6f028e6b3e6a367325f1fd8ef32942a1748809a844e05c2f998114b7c484dfad025e18559d614a9f9396f29e25b18f27b3c6b84bb495b1491e529e04093184b4918a7d93e2d5900277d3785b80c4055a5e4776a1ca3d398e190771b89e52db594a345521ece1b1faa2682deb77824edb9f5215ed77088f60f8865e77a16587a3d745eaed9798a252822aea667372d24e611c763cb653ab6f1ccb4f63c746edd2e5595a4e54330b91712cb710330fa3492e42997bcc6ae8ae15dbac76624171874b93914080092776aa9db7e61baa10404656496f83b42539504c618146eef62f717a019e30115fde0655a18510a8f311c046ede582f5fbccb9e60f0216d651ea82a3fa870047459f1d7e63b0341378739d514f959ede8ae451ec0417031a3287efd2ef27baee75111077ce62e9fc80a7d0a73364caba04dc091551b52e953c79472ae527207e02297bef049d93a81f5b18c7da92e9bcf851028fb573acd3feb5af0f2346105562de38b9e96be330ac25fa7770556b362e8d64aac31e286ec006ace5d6a405d6b3ba4fa68db09a8a3a2a71fc5b14d00ac3311fab8289d7e63363b19f43175d5d2838c078d1d41fdfef16c395f57b61d3bd448b7676b1d24c2f4b7a2c4d1e23a6b6bd76033654763842af112ff4d4910214e5e7438ec6618d84f3cfdfa112c3f422cc169c73432cf4afc2ff45c47a4701864063b240eda28561ee139347133c5f9df5ab6e30e0bccf5b708f7cdf1a68699b74d81feac09219de37ffa00165fb9bd2f17e46987e30c942b4b9df8923ddeac8450b370aa106c0832168a8dc8dfb1d00282f0ee82bc84fa24ffc4335f05b7c2aa1a5f8973696dfe68f5ea63218fd20301e42001da99def75723eb8b867276c84fc604d70adefc3deae8312cd0eb6b6d5c1245748e9d0b89573cc64318b3ab620d10ceeab97e11f3eccb4ee8f3dea610d3a059706034edc4191ab27400d5597ec423f31306f26fb383a4b19b6e25c12cd5fadb861ee342028cf9e9019c527b207ae43d47ad7b9fedb19f4fb1d8c6d3355970fd2a9023933dce610461b58666e633e9866ff3a8a19c6951b599319ad5292f86c1bc274fc46cf9030ad0e137d250db2d057e593222e57a70320bd602490df46129005056ba359248e480f841a21d4233edfc7de6d27f9b42eba7dba353dc8cf9bacbd1b49fad24368568e5e82f7e9ba0f3e11fe021a3a25f2f6ca3537a11b472009a9cc4a0e5284e1ad3cd0f78704820a471821c4cf7765452edf72569c7d95732eaf5aa9706bae55b67797c9ba92dfd6760c777f0c31dd9eb28c510a3ce09cc0118c3e3f017a56938f8179f9e2b20fc9bb0bb3d64c92f0a1cf6e5163b87524fb289d14a0d22032b2bc6e21188ba0310a71d7895cf426d4b575341f9bda6d5755d1851562f3294c154f10ed9630657442925b81e86c978d85535d79b68fa623b6693a1f1a7a30892a11d5f4ec6a971e6ee3cd95c02c914abc7dcc32ba33e383b606ac5bcb64dd68d6f8f54e623975c789a0566793f09629032f5bd2783ceeebbfb222f4d21ce9f8f9f335c4bbbb7e2c81db995fa1aae8e6d7b069cbbe20ed95283f1fcece5d8ac9a2d111339fd316f4670ac93be528465224e212386cca7982c8a2c548ea06843044ce52bd5d1ee288cc7ed0b61a2c92d357314372b4c9e2c1eebfa2d5c7225b2e20d4a2e8cd34de86955847221d2690d9fdc5a87e992a01f410e664a8a34bbed1a85a3795bde8b4d5726cd68dd77e81a3457fca24d8ee4cc488535ba741f268f339e6006fd5bcac794500696635a1bfde3ba58cfa4fa36a6a0c4995aa5e29fe43b5c661b310a2d2e655e7d9611a52b47ca2e0f33207baca45d6cfd101b6e8fc2fdad642f3e5c1e2275831de655aa67dd264f4846282b7d0859a33a2909a6fd6a66f1f87c241dc7b8751bfecad0e98b105518d0ce2174eb3ea47434f96a5703b1893e5c4e6f0cbd2beed0dd242fc25058eea5f3235c37f1928846d0f34de3f4cd49b34662c5941edb8619081326fe3bab2ebc28887fa26ed7d35899919b0ed70fb2ae690c66a9e84f10000bea4ef01474e25eb09da89e87cfe8f3e24913170ab728639969f069dac0b3b280728781ab003ff88cc8d323b7d280421c67ffe432dd759bc1694df6bce233b95cadab473d006a6c5370babb6586c8ad23fa868b0f8526dbc1f86dd01b3332518fd6cf6f119a0122317c46b86c7ce0ff2fc79343a85663810020cbda7ebd4b6ae592ef6dcbdb2a50ff5decd521838f8dd46415983f2932174e21a92e72c1317f6b58bfc32fc5bfacd993d52e80032f08cdf06273f22db172681f94dae6d21ce14d910c336bbf8955f177e1ad44f88c499699ea6da8ddb86dfad946e3846a3c9dbd4a22475685003f607df69482cad6a8484534f59dcb4a62086444278526f58cfe93ac498d347ab93b24ee65833ac3120ce8c027acbe920361ea9ada0dde408597a09ba77c2cf549972026a802074ae0170f22ffc4af5d252452aab14c44aa6d4d8e1ac911685089c2fcb5ec12dbce2dd6a91fc10a1f1db49ad05408a3dedc5d2f55dcff989f618163bb8b0dff6c31a8ac0a0b8b5c2c2fa49b9d4ad1f5c393ae580d4f8b5decae60335dafa096c742712569b215ed0f699a67eca9a79cb5e3961447ce219612d39ae6f31befd52385dada014b4fb75b1225b80a9df24cf5519caedf959dbbbc4bc0a5989b317f343f19f158ff8bf6696ced852fd40fcfba7baa3fec44424adf1cf0b41304c3fbde0d76b6b6f12fb1cd86f8ab949bbe4cf7e6c573193ec015e2d41b3029e93f66399b3a8668eabffb1662d6f7aa31ab81620ba0462cbb20708b549526ce228c6c96151188e5849064b5d04bbc5cb44573881052f34e0d6eaaf35b75bd940509992fad43fee88ce1d8c406b99629a6ae2b32ebda0825a93445ec7dce52337eebd88cc2ce96426ce7a6b0f2fafb641565cea32eb22b339ba68b9c24ac7d6eb102a47605b00657e17258c3786fc971446c92da70af2ec0a0ef16576bbd1b12a81f3e65631780aac2cdb6ccfea58344d32713178505a199605ce9c87d53920eb30a7f2de4816442134df42f3d5be1716319fecaaf24bce0b6cb6710ba6c3b6204f5934f38500e5584837b8ce66b126d4187852d5d68cf668a10e5716a608c80c31bb17c00a4b5e58d20edd7554c3ac4f4c001832ad8cb829c566f747c645ee94776a41dbb924a209a640e38f94f7e6da1b6f6a923d25bab2cdb2564f540b9a2f147004a3068a828439b39e55553e9f1bb9a208eac9bd7ab221a16437d41ee849f29d8fe44e8b2d85d45e2e7efdfb8ed0d7cba19126a6f31e9e904ac0a9a1b220c177d198335b15e236055d8b1490f18200d475ed3533e1110f2eab95d4b6c8f5d673850f857584e91ab0e240c069d6f2b4bee0ab2926d6d9a5b5d184e52511e52c29344b0211fbd14bc89096d18e0ecd0b8ce02cc3c9ea3cd712a928f60a9911209d1314bd48e6ef6a3cac0bb2248e519a1bb86d55c97dc771a965f17dd6e3e4d16ab0b08277a1ab6417c0797226b2a8300010318af745b7348dd39980ae4c5f67404409d2c21bb1e82cfdc51f19422f917211fb7eb8e9e62d5332b39ad627321ad94f41fea895cdaeea8ac6da0e555514e3ef71fb371d6f8598e1df0858dc32111d3bbb932f4b25b2d20892a74ec1030108be49e8b156e08ddd1477d069ddb697a02df3a9b4fe3c25e9ee4e7b6f6df677faf8d6c8683ceccce53b15e6edd1411c92ce492d23bbaf2e9c6f172e375032d789a142b008cf182e7877bf25e3a0c4af3d8b0d958e4da45411c501339c676841175b1f6eb54ab53a048bda5ea8791ef852ed3b2d29470162634a30258e1fdfda4d451e06a952f5e1d0b368dc634f0f448072e9e66076a9a2dd794f4ab223155502e2010a9c0da679009f96b29212e34f23df5947ce197a977681a85897c47dff53eb3655a0ce88675a38a389d63a9289c66697fc6310311de5229965c0ab40aa6dae26cef51137dc050030cfa21a86102ba3f9bd598ff07d620e35a3b5a828322a4fe8474b58118ca919cfd796e3386d43e3786e8abafc20716ca86eb744f82501336b196467ccee7b39425a159e81677c9dff614bec759f6a3b915386098ae4247d9807a7d6dc5193d34335178042d0666ef0cede8da3775cf775bab3b4789051"}, @NL80211_WOWLAN_TCP_SRC_IPV4={0x8, 0x1, @broadcast}]}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}]}, 0x1040}, 0x1, 0x0, 0x0, 0x50}, 0x4040080) 1.357781983s ago: executing program 6 (id=6211): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0xac}, {0x6}]}, 0x10) 1.269052643s ago: executing program 5 (id=6212): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="369985190afd43185198ffbb965303a82c4d824c5fb5af1fc6ab9ef866f743b50c852efe95a7e185720fa2565589d333145aef8d1c39df439102c94c13ef71b7dde179b7f91b3d8d9968ace2abdeaf52ed9c19a347e0b64fc99e399740ced4f83b9a14fb3b9341c6fa8ab6c786b98c600a2a0a49ca030caacb07dc2f18ea76d1144af3ee79e88bad89c13a4c8f9130d17f2f927849c6dc382cbc434b8777063842b3915a5bbb29b9321003c718750616373df51d4d188eedf4ecf51db2d4d9ecc8bb811959a97b7755e337261ccff6f83d76644e57d295", 0xd7}, {&(0x7f0000000240)="654c06824eba704525991c5e6ca3269193c266f4152b41826f53c741bf392cba406f5a92e50833979ee58571f3a43b3589453d1487bbbbabdcb4e00dfe950382f3687f3fb55d9a9adf2fea4fe14add7dc78e5ce58d9d77b6f28667023df88e1d597d8c9bc7a954491daa8332d299c6a50cb46c9719849b6b734548ecd950ccb72f465c010b521f965cbb36200d0eaed9e363602fe2d4b5b862571ed0e0d08dd13085eb3bab97e06961904b97ce4513e8cd9388151977f05cba238c2b827ebe8f0b5473e277bf35361a2afcabff5900ae431757eb8c62edee43240d4c8d381d5391a2b69bf2", 0xe5}, {&(0x7f0000000180)="6631b5929a2f6e0f329541d2e1f604c3462b26005e3eae24b863fda04f91a0335054c142e1f3e73ff5b080bf60ac55c0f4b47eb641517e0d9113f1c7095d6773ec94ef0ea3213ec4679319a8149901bc7ce868f7e1ea72d27bff7401dfa52f7622bb36f364878007", 0x68}], 0x3) 1.187472761s ago: executing program 6 (id=6213): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) close(r3) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000140)={0x101, {{0x2, 0x4, @broadcast}}}, 0x88) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200000000310000000008000a40fffffffc08000340000000140c0009800800014000000081140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) accept4$bt_l2cap(r6, 0x0, &(0x7f0000000040), 0x80800) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4048010}, 0x44080) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) 1.187065075s ago: executing program 3 (id=6214): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, &(0x7f0000000300)) 1.124186375s ago: executing program 5 (id=6215): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) listen(r0, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r2, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x8}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x24004040) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x80) write(r0, &(0x7f00000000c0)="db985202c8b0262e47352c89dc57f26e0bd82c2d4bf9b263039f2633dfeb7d51906047ef3255b3e23178124288dfccb42a4ee1fe9f8025367c9750fcb223ca9889e069b90376505463568e35e6c2ff9e58699809d6eafa60875b17968743013beeda51878493070f787fc094e0cc0c1a8fbb83ff9f40814d9e87c3edb3245d849364b7ebfe0f8d7acab76d7be6ed1db474aa92c043fb5fb04837aadd8f722e2d9e244692614406545ec7b116af6505f730d4eef7a1b730f837046b5816abaa", 0xbf) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x48}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.067695472s ago: executing program 4 (id=6216): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000640)={0x5}, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r0, &(0x7f0000009e00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000040)={0x5}, 0xfffffffffffffff5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) close(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x400c4c5}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000003800), 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)) r6 = socket(0x2, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x0, 0x800000}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}}, 0x0) 964.249512ms ago: executing program 6 (id=6217): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @multicast}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0xb44, 0x6, 0x88a8}}, {0x14, 0x1, {0x101, 0x766, 0xb1a, 0x88a8}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 891.790669ms ago: executing program 5 (id=6218): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000002640)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a0000000000000600"], 0x30}}, 0x4090) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000006c0)={{r3, &(0x7f0000000240)=' \x01\x00', 0x208000, &(0x7f0000000280)={@align=0x6, {0x0, 0x6, 0x9, 0x1}}, 0xf07, &(0x7f00000002c0), &(0x7f0000000300)=0x7fff}, 0x2, &(0x7f0000000680)=[{0x2, 0x0, &(0x7f0000000340)='\x00', &(0x7f00000003c0)="678bde953e10badc9747270ac0cf38286039a3718154c69b67d24a9d7c97e4dd013147b1a29f5f0b13953d6acbb67f2a53d194e0cd380573931620292f27c7514984353f9235363cd5b8225a696100f33eb3d04217666f386a7d53cc77fa04213249a14b69523ccbab0240c6d6be54c0011e12cccbf2c9e6223878fe144e460595f18e983c2ba92b56046063dcd0e5b6ca897cf7dab3f66a7d34cbfb492286f2692cea96b2001c77a580232c878db12966e30d6ef385abe2db7305f90e2ed43f05147046d0fe58674e53a3697a1f9cb04c82ff3b3e4d6abab5c8445ec20d5b9d67b288f5c2992a502979910a3574294c456897c0d5fe", 0xf6, 0x22}, {0x3, 0x8017, &(0x7f00000004c0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f00000005c0)="5e678b2793e94a1fdc67960f54ee5a0414f1d97e7fcead6132d68be4d49a56e410b7017aaacf8c9d1acf1e1eedaac8fa4ab9c321e0988fb74db232550b18f1c339576f1970dd8c7300522aba8db2bd446354cdb3912e94e82917b066c59c0697cf03a040207389cf70c6eacfcfdbbe5692050fc0084d440ebfa95c544cd47d59aac3511c94bba73e234cb2c3c8bf957aebc660564d96572405ee040ef3cea514a27ce40dfa9294a81882dfffa3232a014482617315032e", 0xb7, 0x8}]}) ioctl$SIOCGSKNS(r5, 0x894c, &(0x7f0000000740)) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x7c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x7c}}, 0x20004084) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000007c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140000003600270000000000ffdbdf2504000080d698894b87e31d85d7b5bd5635573597dec60456055fc9893574fb0f7b0b8ed92c55d305c7c940e89c338c57f0df41273e14fb733cb573049453ea46a864388c3586b8021170e899f13fcb01ed2e6733f200557365d7acac30ff7abef62974a8ae7468e113e82bc43605578098690a487a347a5deae6a59cf83f35e6f5304ffc614de25d"], 0x14}], 0x1}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r11, 0x0, 0xe, 0x0, &(0x7f000000eb40)) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) 789.760151ms ago: executing program 6 (id=6219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}]}}}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x64, r2, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0x68}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x2}, 0x40091) 519.504483ms ago: executing program 4 (id=6220): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018100000000000000c0000000c00001402000000000000000000000d000000000000c67bb3c897a615a35f41d5840f2c34d5c5daa9fd2c5908960521ce5796146eee2f8fd50a08145491e054a8890c9f2790bb3978441ddf98091732d53cdb032145d5e4cd3a0db3e595ac5497da4876b3ce3d9d559b0fec72c0ef24fcf4b4ce777de059bd51a2819f80cad99c560d814a64d9013346209c2ca5a3bc3c3ff66fca959a0a5c916fa2cfeaf988e77e72f6bdc998bde52d2df5cb626a086e7fde45d56121cbe1c61645fc2e2a5ef2d535347591c6f10000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r2, 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000600)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x81}, 0xc000) (rerun: 32) poll(&(0x7f0000000740)=[{r2, 0xa403}], 0x1, 0x1) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3}, 0xe) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) 468.072778ms ago: executing program 3 (id=6221): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x779, 0xa}, {0x2000000000, 0x20000000000, 0x0, 0x186, 0x10000000000000, 0x0, 0x0, 0x911}, {0x3, 0x7fffffffffd, 0x0, 0xfff}, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x1001}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000885203004c0012800b000100697036746e6c498e3cbfa20b9b000300fc01000000000000000000000000000108000100", @ANYRES32=0x0, @ANYBLOB="14000200fe8000000000000000000000000000bb0800080008000000"], 0x6c}}, 0x4000080) ioctl$XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000100)={r1, 0x0, 0x2, 0xe15, 0x200, 0x4, [0x200, 0x9, 0x7, 0x31b80000000, 0x5, 0xffffffffffffffff]}) 450.250136ms ago: executing program 6 (id=6222): r0 = socket$inet(0x2, 0x806, 0x200) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x3, 0x2, 0x301}, 0x14}}, 0x0) readv(r2, &(0x7f0000001740)=[{&(0x7f00000011c0)=""/253, 0xfd}], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 219.5623ms ago: executing program 6 (id=6223): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0xff1a) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x2}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044895}, 0x40) (async) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 196.514444ms ago: executing program 3 (id=6224): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000045) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000940)=0x8, 0x4) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000980)={r3, "065dedb47ace98d56b0a19da4e58d079"}) poll(&(0x7f0000001980)=[{r0, 0x4100}, {r0, 0x9208}], 0x2, 0x53f76911) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xf32) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001bc0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001a40)={0x140, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}]}, 0x140}, 0x1, 0x0, 0x0, 0x58040}, 0x40800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r7, &(0x7f0000001c40)={0x67446698, 0x0, 0x4, 0x3, 0x1, "b0e6cfbe79b8e7966a2fac57076c84c177e7753b676c812ad53ff4e57e39e99e272467639fe133f3d7c6e5975bb0400f2fa5c70707e56ff5651f507396d06ff634cfed09b67d059166c3909bf1aa525f316c47d33fca08578f6968c53386360ddfe28623c7a82d551c9ddbb82fd5ce4790171c5c4ce57be7258f16d3913b6cca5773fbd6e7b623b3a095c003d40576ee44752511791b41735acb34e53a02b6aa858109339c47a723680cd4888d"}, 0xbd) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r8, 0x5411, &(0x7f0000001d00)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f0000001d40)=0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000001f00)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x75b4dd49d3095a7d}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0xcc, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x46}, {0x6, 0x16, 0x7fff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffff0}, {0x6, 0x16, 0x6}, {0x5}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000001f40)) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000001f80), &(0x7f0000001fc0)=0x8) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000002000), &(0x7f0000002040)=0x4) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000002100)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a0, 0x158, 0x218, 0x98, 0x98, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, &(0x7f0000002080), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xa}, @loopback, 0xff, 0xff, 'dvmrp1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x84, 0x1, 0x1e}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x4}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x27}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x38}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xffffffff, 'veth1_macvtap\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x62, 0x0, 0x1b}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x6}}}, {{@ip={@loopback, @remote, 0xffffffff, 0xff, 'veth0_to_hsr\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x11, 0x2, 0x2a}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'pptp\x00'}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002600)={r1, "9241c30657bcdfc585855f4d70209028"}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000003640)={0x8, 0x10, [0xa, 0x4, 0x6], &(0x7f0000003600)=[0x0, 0x0]}) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000036c0)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000003700)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000037c0)={&(0x7f0000003680), 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d4}, 0x40000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000003a40)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003a00)={&(0x7f0000003840)={0x198, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80000001}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xc}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffa}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd35a}, {0x6}}]}, 0x198}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) 138.301254ms ago: executing program 4 (id=6225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001900000000000000db000000000000"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x4e}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="db012400ce680c0002000000000000b0e7e14a5d55b687debda45b79904202f1975d4a8b5f0da7f413dcf0adefd8038cb6b4e43147d05133250ce3862ae951c2b3d015cf1558b01f37f834043f19b8c56581d73d4342f5eace897f9f7ed860d8cb6a9df9fbc110cdc4e51bbc0f45d66b29dde90f2c78afcaeb751f1f30d492c7b68fbb0cea56506d9ba09d5c19ee43a69535f17b76", @ANYRES16=r4, @ANYBLOB="0100000000000000000000000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_VLANID={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x1) r6 = socket(0x2a, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e63, 0xe7, @mcast2, 0x4007daa}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000100)=@framed={{}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRESDEC, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000004d080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 0s ago: executing program 4 (id=6226): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) kernel console output (not intermixed with test programs): openvswitch: netlink: Message has 8 unknown bytes. [ 619.878426][T22999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.340486][T23029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4447'. [ 622.684335][T22994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 622.694940][T23010] netlink: 'syz.3.4444': attribute type 1 has an invalid length. [ 623.109225][T23049] netlink: 'syz.4.4452': attribute type 1 has an invalid length. [ 623.135156][T23054] netlink: 'syz.2.4453': attribute type 1 has an invalid length. [ 623.149287][T23048] veth1_macvtap: left promiscuous mode [ 623.210852][T23056] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4454'. [ 623.381931][T23049] 8021q: adding VLAN 0 to HW filter on device bond4 [ 623.473909][T23059] bond4: (slave geneve3): making interface the new active one [ 623.496096][T23066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4455'. [ 623.530601][T23059] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 623.677997][ T35] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 6081 - 0 [ 623.722741][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.804797][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.850059][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.914665][T23082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4461'. [ 624.080639][T23085] netlink: 'syz.3.4464': attribute type 1 has an invalid length. [ 624.221494][T23085] 8021q: adding VLAN 0 to HW filter on device bond5 [ 624.344390][T23093] vlan2: entered allmulticast mode [ 624.357871][T23102] netlink: 'syz.2.4467': attribute type 1 has an invalid length. [ 624.371509][T23093] bond5: entered allmulticast mode [ 624.482600][T23094] bond5: (slave geneve0): making interface the new active one [ 624.520417][T23094] geneve0: entered allmulticast mode [ 624.571798][T23094] bond5: (slave geneve0): Enslaving as an active interface with an up link [ 624.921191][T23095] net_ratelimit: 12 callbacks suppressed [ 624.921212][T23095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 625.080211][T23130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4471'. [ 625.148674][T23110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 625.517205][T23145] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 625.610330][T23153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4475'. [ 625.794131][T23164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.423536][T23169] netlink: 'syz.3.4478': attribute type 1 has an invalid length. [ 629.734599][T23174] xt_bpf: check failed: parse error [ 629.774316][T23179] netlink: 'syz.2.4481': attribute type 9 has an invalid length. [ 629.795599][T23174] xt_bpf: check failed: parse error [ 629.863934][T23184] syzkaller0: entered promiscuous mode [ 629.864081][T23174] xt_bpf: check failed: parse error [ 629.879502][T23184] syzkaller0: entered allmulticast mode [ 629.967779][T23174] xt_bpf: check failed: parse error [ 629.990042][T23174] xt_bpf: check failed: parse error [ 630.010836][T23174] xt_bpf: check failed: parse error [ 630.051344][T23174] xt_bpf: check failed: parse error [ 630.098358][T23174] xt_bpf: check failed: parse error [ 630.129108][T23174] xt_bpf: check failed: parse error [ 630.147650][T23174] xt_bpf: check failed: parse error [ 630.416560][T23202] netlink: 'syz.4.4487': attribute type 2 has an invalid length. [ 630.802737][T23214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.934693][T23220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4492'. [ 630.983832][T23223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4493'. [ 631.050014][T23226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4493'. [ 631.080550][T23226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4493'. [ 631.329982][T23231] ip6t_srh: unknown srh invflags 4000 [ 631.813305][T23253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4500'. [ 632.442834][T23281] rdma_op ffff88806a08d1f0 conn xmit_rdma 0000000000000000 [ 632.503218][T23287] netlink: 'syz.1.4511': attribute type 10 has an invalid length. [ 632.594848][T23293] netlink: 'syz.1.4511': attribute type 10 has an invalid length. [ 632.596091][T23287] team0: Port device dummy0 added [ 632.649596][T23296] netlink: 'syz.1.4511': attribute type 10 has an invalid length. [ 632.695536][T23293] team0: Port device dummy0 removed [ 632.794640][T23293] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 632.879543][T23296] bond0: (slave dummy0): Releasing backup interface [ 632.950518][T23296] team0: Port device dummy0 added [ 632.958729][T23308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4515'. [ 633.429893][T23330] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 633.473253][T23337] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 633.561558][T23334] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 633.627662][T23340] syzkaller1: entered promiscuous mode [ 633.641625][T23340] syzkaller1: entered allmulticast mode [ 634.355793][T23379] netlink: 'syz.5.4537': attribute type 30 has an invalid length. [ 634.505266][T23387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.093665][T23409] gretap0: entered promiscuous mode [ 635.130257][T23409] vlan2: entered promiscuous mode [ 635.718724][T23435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4551'. [ 635.750449][T23435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4551'. [ 635.771696][T23435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4551'. [ 635.816710][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 635.854025][T23443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4553'. [ 636.014463][T23445] __nla_validate_parse: 1 callbacks suppressed [ 636.014481][T23445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4553'. [ 636.332581][T23456] netlink: 'syz.1.4555': attribute type 15 has an invalid length. [ 636.367761][T23456] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 636.415296][T23458] syzkaller0: entered promiscuous mode [ 636.425544][T23458] syzkaller0: entered allmulticast mode [ 636.580550][T23462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4560'. [ 636.705930][T23467] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4561'. [ 636.828631][T23472] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4563'. [ 636.963302][T23476] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 637.032609][T23478] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 637.064135][T23478] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 637.374659][T23490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.101369][T23510] x_tables: duplicate underflow at hook 2 [ 638.178406][T23513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4579'. [ 638.471222][T23526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4581'. [ 638.529018][T23532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4581'. [ 638.936162][T23546] syz_tun: left promiscuous mode [ 639.189094][T23546] bridge1: port 1(veth0_to_bond) entered disabled state [ 639.242120][T23546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.293322][T23546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.314582][T23569] netlink: 576 bytes leftover after parsing attributes in process `syz.4.4588'. [ 639.382069][T23546] veth1_vlan: left allmulticast mode [ 639.390387][T23546] macvlan1: left promiscuous mode [ 639.455328][T23546] gretap1: left promiscuous mode [ 639.465970][T23546] bond1: left promiscuous mode [ 639.483855][T23546] bond2: left promiscuous mode [ 639.632640][T23551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4590'. [ 639.647874][T23551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4590'. [ 639.754996][T12378] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.824176][T12378] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.867398][T12378] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.913796][T12378] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.972123][T12378] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.022164][T12378] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.767870][T23613] xt_socket: unknown flags 0xe4 [ 640.830846][T23613] x_tables: duplicate underflow at hook 3 [ 641.053518][T23626] syzkaller0: entered promiscuous mode [ 641.070570][T23626] syzkaller0: entered allmulticast mode [ 641.881736][T23654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.908993][T23659] __nla_validate_parse: 4 callbacks suppressed [ 641.909014][T23659] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4617'. [ 641.960059][T23663] netlink: 'syz.3.4619': attribute type 25 has an invalid length. [ 642.159049][T23674] netlink: 'syz.4.4621': attribute type 1 has an invalid length. [ 642.191318][T23674] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4621'. [ 642.239649][T23674] netlink: 'syz.4.4621': attribute type 1 has an invalid length. [ 642.257224][T23674] netlink: 'syz.4.4621': attribute type 8 has an invalid length. [ 642.265118][T23674] netlink: 582 bytes leftover after parsing attributes in process `syz.4.4621'. [ 642.277393][T23674] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4621'. [ 642.793322][T23702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4627'. [ 642.808312][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4627'. [ 642.909299][T23709] netlink: 'syz.4.4631': attribute type 1 has an invalid length. [ 642.978638][T23704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4631'. [ 643.020083][T23704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4631'. [ 643.112672][T23709] bond5: entered promiscuous mode [ 643.119345][T23709] 8021q: adding VLAN 0 to HW filter on device bond5 [ 643.229017][T23719] team0: Port device dummy0 removed [ 643.235622][T23719] batman_adv: batadv0: Adding interface: dummy0 [ 643.246082][T23719] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.291356][T23719] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 643.334302][T23706] bond5: (slave bridge4): making interface the new active one [ 643.352659][T23706] bridge4: entered promiscuous mode [ 643.363614][T23706] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 643.661055][T23732] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 645.112533][T23791] netlink: 'syz.2.4658': attribute type 29 has an invalid length. [ 645.153696][T23791] netlink: 'syz.2.4658': attribute type 29 has an invalid length. [ 645.234725][T23789] netlink: 'syz.5.4656': attribute type 4 has an invalid length. [ 645.285512][T23789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4656'. [ 645.347552][T23802] tipc: Can't bind to reserved service type 1 [ 645.362945][T23804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.410788][T23804] sctp: [Deprecated]: syz.3.4660 (pid 23804) Use of int in max_burst socket option deprecated. [ 645.410788][T23804] Use struct sctp_assoc_value instead [ 645.669050][T23819] netlink: 'syz.4.4664': attribute type 1 has an invalid length. [ 645.694829][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4664'. [ 646.689365][T23843] tipc: Enabling of bearer rejected, failed to enable media [ 646.722703][T23845] tipc: Enabling of bearer rejected, failed to enable media [ 646.961025][T23853] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4673'. [ 647.072808][T23861] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4677'. [ 647.547374][T23871] macvtap1: entered promiscuous mode [ 647.566710][T23871] macvtap1: entered allmulticast mode [ 647.587450][T23871] veth1_vlan: entered allmulticast mode [ 647.999153][T23884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4683'. [ 648.005283][T23886] x_tables: duplicate underflow at hook 1 [ 648.044925][T23884] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4683'. [ 648.263397][T23892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.458106][T23902] Cannot find map_set index 135 as target [ 648.551717][ T35] bond0: (slave bond_slave_0): interface is now down [ 648.590016][ T35] bond0: (slave bond_slave_1): interface is now down [ 648.610514][T23896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.178757][T12351] bond0: (slave bond_slave_0): interface is now down [ 651.217420][T12351] bond0: (slave bond_slave_1): interface is now down [ 651.272738][T12351] bond0: now running without any active interface! [ 651.755658][T23982] netlink: 'syz.5.4714': attribute type 2 has an invalid length. [ 651.809005][T23985] netlink: 'syz.5.4714': attribute type 2 has an invalid length. [ 652.175609][T24001] netlink: 'syz.5.4719': attribute type 1 has an invalid length. [ 652.233267][T24004] netlink: 'syz.3.4720': attribute type 1 has an invalid length. [ 652.400437][T24001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 652.522447][T24007] ipvlan2: entered allmulticast mode [ 652.544969][T24007] bond2: entered allmulticast mode [ 652.633964][T24004] bond6: entered promiscuous mode [ 652.640782][T24004] bond6: entered allmulticast mode [ 652.648504][T24004] 8021q: adding VLAN 0 to HW filter on device bond6 [ 652.710492][T24010] bond2: (slave bridge1): making interface the new active one [ 652.751762][T24010] bridge1: entered allmulticast mode [ 652.760251][T24010] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 653.034555][T24034] netlink: 'syz.4.4726': attribute type 2 has an invalid length. [ 653.354614][T24043] IPVS: length: 24 != 14328 [ 653.590348][T24053] sch_fq: defrate 0 ignored. [ 653.637748][T24054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4734'. [ 653.693405][T24060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4734'. [ 653.828889][T24054] 8021q: adding VLAN 0 to HW filter on device bond7 [ 653.842942][T24067] xt_hashlimit: invalid interval [ 653.843644][T24066] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4734'. [ 654.009775][T24072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4738'. [ 654.339850][T24087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4742'. [ 654.363962][T24087] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4742'. [ 654.398044][T24085] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 654.443099][T24085] bond3 (unregistering): Released all slaves [ 654.470731][T24098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 654.501460][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4743'. [ 654.522404][T24096] kthread_run failed with err -4 [ 654.568282][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4743'. [ 654.627069][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4743'. [ 654.657588][T24104] netlink: 'syz.1.4747': attribute type 4 has an invalid length. [ 654.825373][T24108] 8021q: adding VLAN 0 to HW filter on device bond8 [ 654.839155][T24108] bridge0: port 3(bond8) entered blocking state [ 654.846121][T24108] bridge0: port 3(bond8) entered disabled state [ 654.853880][T24108] bond8: entered allmulticast mode [ 654.861926][T24108] bond8: entered promiscuous mode [ 654.870223][T24105] syzkaller1: entered promiscuous mode [ 654.896103][T24105] syzkaller1: entered allmulticast mode [ 656.193592][T24173] bond3: entered allmulticast mode [ 656.224839][T24179] veth5: entered allmulticast mode [ 656.242941][T24179] bond3: (slave veth5): Enslaving as an active interface with an up link [ 656.293243][T24173] bond3 (unregistering): (slave veth5): Releasing backup interface [ 656.379067][T24173] bond3 (unregistering): Released all slaves [ 656.583735][T24190] netlink: 'syz.1.4770': attribute type 1 has an invalid length. [ 656.755879][T24190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 657.762771][T24221] netlink: 'syz.5.4775': attribute type 1 has an invalid length. [ 657.900100][T24221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 657.987694][T24231] bond3: (slave geneve2): making interface the new active one [ 658.019894][T24231] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 658.156381][T24221] syz_tun: entered allmulticast mode [ 658.206926][T24218] syz_tun: left allmulticast mode [ 658.305663][T24245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.339788][T24246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.853431][T24260] __nla_validate_parse: 9 callbacks suppressed [ 658.853452][T24260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4785'. [ 659.071340][T24267] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 659.278636][T24274] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4790'. [ 659.539433][T24283] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4793'. [ 659.587313][T24283] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4793'. [ 660.495686][T24314] netlink: zone id is out of range [ 660.508897][T24314] netlink: zone id is out of range [ 660.514395][T24314] netlink: zone id is out of range [ 660.523952][T24314] netlink: zone id is out of range [ 660.551760][T24314] netlink: zone id is out of range [ 660.591356][T24314] netlink: zone id is out of range [ 660.614853][T24314] netlink: zone id is out of range [ 660.735171][T24317] ip6erspan0: entered allmulticast mode [ 661.468070][T24348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4811'. [ 661.484115][T24347] netlink: 'syz.4.4810': attribute type 1 has an invalid length. [ 661.746626][T24347] netlink: 'syz.4.4810': attribute type 4 has an invalid length. [ 661.755970][T24357] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:1 [ 661.779230][T24352] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 661.799840][T24347] netlink: 'syz.4.4810': attribute type 1 has an invalid length. [ 661.843963][T24347] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4810'. [ 661.860949][T24352] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 661.994849][T24353] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 662.035579][T24361] macvlan2: entered promiscuous mode [ 662.044529][T24361] macvlan2: entered allmulticast mode [ 662.068502][T24361] bond6: entered promiscuous mode [ 662.089023][T24361] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 662.122620][T24361] bond6: left promiscuous mode [ 662.375122][T24371] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4817'. [ 662.655312][T24377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4819'. [ 663.503238][T24397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4826'. [ 663.562564][T24393] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4826'. [ 663.750670][T24409] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 664.405205][T24421] syzkaller0: entered promiscuous mode [ 664.437735][T24421] syzkaller0: entered allmulticast mode [ 664.723058][T24427] syzkaller0: entered promiscuous mode [ 664.733256][T24427] syzkaller0: entered allmulticast mode [ 673.052194][T24502] __nla_validate_parse: 2 callbacks suppressed [ 673.052212][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'. [ 673.103588][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'. [ 673.429712][T24521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4852'. [ 673.492839][T24524] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4853'. [ 674.154027][T24551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4859'. [ 674.210722][T24554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4859'. [ 674.344438][T24559] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4861'. [ 674.435142][T24567] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4864'. [ 674.964089][T24590] netlink: 'syz.1.4870': attribute type 2 has an invalid length. [ 675.034676][T24590] netlink: 'syz.1.4870': attribute type 2 has an invalid length. [ 675.172483][T24596] syzkaller1: entered promiscuous mode [ 675.215242][T24596] syzkaller1: entered allmulticast mode [ 675.288491][T24599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4872'. [ 675.382008][T24607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4875'. [ 675.432461][ T29] audit: type=1804 audit(1777897498.114:9): pid=24607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4875" name="/newroot/320/cgroup.controllers" dev="tmpfs" ino=1650 res=1 errno=0 [ 675.521696][ T29] audit: type=1800 audit(1777897498.144:10): pid=24607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4875" name="cgroup.controllers" dev="tmpfs" ino=1650 res=0 errno=0 [ 676.627123][T24654] syzkaller0: entered promiscuous mode [ 676.655303][T24654] syzkaller0: entered allmulticast mode [ 677.159888][T24678] net_ratelimit: 138 callbacks suppressed [ 677.159935][T24678] netlink: zone id is out of range [ 677.215988][T24684] netem: incorrect ge model size [ 677.244951][T24678] netlink: zone id is out of range [ 677.264800][T24684] netem: change failed [ 677.301018][T24678] netlink: zone id is out of range [ 677.342279][T24686] netlink: 'syz.3.4894': attribute type 16 has an invalid length. [ 677.385006][T24678] netlink: zone id is out of range [ 677.413114][T24678] netlink: zone id is out of range [ 677.438097][T24678] netlink: zone id is out of range [ 677.454377][T24678] netlink: zone id is out of range [ 677.463540][T24678] netlink: zone id is out of range [ 677.487495][T24678] netlink: zone id is out of range [ 677.490190][T24692] netlink: 'syz.2.4898': attribute type 10 has an invalid length. [ 677.529086][T24678] netlink: zone id is out of range [ 678.326563][T24720] __nla_validate_parse: 8 callbacks suppressed [ 678.326582][T24720] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4905'. [ 678.384741][T24726] netlink: 81 bytes leftover after parsing attributes in process `syz.2.4906'. [ 678.573822][T24731] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4909'. [ 678.725255][T24732] x_tables: duplicate underflow at hook 3 [ 678.921270][T24748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4914'. [ 679.080364][T24754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4915'. [ 679.125575][T24754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4915'. [ 679.424278][T24765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4918'. [ 679.467372][T24765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4918'. [ 681.189895][T24822] nbd: must specify a size in bytes for the device [ 681.469907][T24826] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4936'. [ 681.613968][ T5762] hid-generic 0005:9C3F:0006.0001: item fetching failed at offset 0/2 [ 681.626084][ T5762] hid-generic 0005:9C3F:0006.0001: probe with driver hid-generic failed with error -22 [ 682.175724][T24849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4944'. [ 682.788844][T24879] netlink: 'syz.3.4953': attribute type 2 has an invalid length. [ 682.831735][T24879] netlink: 'syz.3.4953': attribute type 11 has an invalid length. [ 683.071296][T24891] netlink: 'syz.3.4956': attribute type 10 has an invalid length. [ 683.158856][T24891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 683.284371][T24891] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 683.338927][T24901] netlink: 'syz.5.4959': attribute type 21 has an invalid length. [ 683.441158][T24906] block nbd3: Unsupported socket: should be TCP or UNIX. [ 683.565560][T24906] vlan2: entered allmulticast mode [ 683.589803][T24909] __nla_validate_parse: 3 callbacks suppressed [ 683.589820][T24909] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4960'. [ 683.611475][T24906] bond0: entered allmulticast mode [ 683.680512][T24909] bond0 (unregistering): Released all slaves [ 684.091043][T24943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4967'. [ 684.126149][T24942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4969'. [ 684.251597][T24948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4971'. [ 684.866815][T24978] netlink: 'syz.4.4978': attribute type 10 has an invalid length. [ 684.914788][T24981] tipc: Started in network mode [ 684.968332][T24981] tipc: Node identity e66450aa3036, cluster identity 4711 [ 685.004218][T24981] tipc: Enabled bearer , priority 11 [ 685.060289][T24991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4980'. [ 685.340269][T25001] xt_cgroup: xt_cgroup: no path or classid specified [ 685.642492][T25011] bond0: (slave bond_slave_0): Releasing backup interface [ 685.694987][T25011] bond_slave_0: left allmulticast mode [ 685.783115][T25011] bond0: (slave bond_slave_1): Releasing backup interface [ 685.794429][T25015] netlink: 'syz.3.4991': attribute type 8 has an invalid length. [ 685.802487][T25016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4989'. [ 685.843357][T25011] bond_slave_1: left allmulticast mode [ 685.860328][T25017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4989'. [ 685.884485][T25011] team0: Port device team_slave_0 removed [ 685.939907][T25011] team0: Port device team_slave_1 removed [ 685.960350][T25011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.985659][T25011] net_ratelimit: 51 callbacks suppressed [ 685.985679][T25011] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 686.086048][T14788] tipc: Node number set to 3595718826 [ 686.313377][T25032] openvswitch: netlink: IP tunnel dst address not specified [ 686.354610][T25032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4994'. [ 686.360723][T25033] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4995'. [ 686.693132][T25046] netlink: 'syz.3.4997': attribute type 1 has an invalid length. [ 686.751511][T25053] xt_TPROXY: Can be used only with -p tcp or -p udp [ 686.808534][T25058] netlink: 'syz.2.4999': attribute type 1 has an invalid length. [ 686.875687][T25058] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4999'. [ 686.937688][T25046] 8021q: adding VLAN 0 to HW filter on device bond9 [ 687.167164][T25052] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 687.193864][T25052] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 687.291471][T25071] netlink: 'syz.1.5002': attribute type 1 has an invalid length. [ 687.302777][T25071] netlink: 'syz.1.5002': attribute type 1 has an invalid length. [ 687.438096][T12351] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 708.648753][T25095] __nla_validate_parse: 2 callbacks suppressed [ 708.648771][T25095] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5008'. [ 709.004309][T25112] netlink: 788 bytes leftover after parsing attributes in process `syz.3.5013'. [ 709.569712][T25127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5016'. [ 709.710400][T25130] x_tables: ip_tables: REJECT target: only valid in filter table, not nl80211 [ 709.810373][T25104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5007'. [ 710.098340][T25135] pim6reg527: entered allmulticast mode [ 710.148633][T25144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 710.836526][T25166] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5028'. [ 710.861278][T25169] netlink: 'syz.1.5029': attribute type 1 has an invalid length. [ 710.951017][T25178] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 710.995763][T25179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5029'. [ 711.135093][T25169] bond3: entered promiscuous mode [ 711.174224][T25185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5034'. [ 711.199906][T25179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5029'. [ 711.229773][T25169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 711.249642][T25190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5033'. [ 711.305012][T25188] bond3: (slave bridge1): making interface the new active one [ 711.322672][T25188] bridge1: entered promiscuous mode [ 711.354948][T25188] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 711.378338][T25186] mac80211_hwsim hwsim70 syzkaller0: left allmulticast mode [ 711.470767][T25198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5036'. [ 713.063694][T25265] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 713.085951][T25265] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 713.231649][T25267] macvlan2: entered promiscuous mode [ 713.238925][T25267] macvlan2: entered allmulticast mode [ 713.251316][T25267] bond7: (slave macvlan2): Error -98 calling set_mac_address [ 713.348894][T25266] macvlan2: entered promiscuous mode [ 713.390461][T25266] macvlan2: entered allmulticast mode [ 713.433045][T25266] bond7: (slave macvlan2): Error -98 calling set_mac_address [ 713.525884][T25291] ip6erspan0: entered allmulticast mode [ 713.728625][T25297] netlink: 'syz.3.5064': attribute type 1 has an invalid length. [ 713.731897][T25299] __nla_validate_parse: 5 callbacks suppressed [ 713.731928][T25299] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5063'. [ 713.758797][T25297] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5064'. [ 713.814133][T25297] netlink: 'syz.3.5064': attribute type 1 has an invalid length. [ 713.895264][T25297] netlink: 'syz.3.5064': attribute type 8 has an invalid length. [ 713.939978][T25297] netlink: 606 bytes leftover after parsing attributes in process `syz.3.5064'. [ 714.722093][T25323] syzkaller0: entered promiscuous mode [ 714.731983][T25332] netlink: 'syz.3.5072': attribute type 10 has an invalid length. [ 714.743709][T25323] syzkaller0: entered allmulticast mode [ 714.764049][T25323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5071'. [ 717.130165][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5088'. [ 718.329790][T25436] tc_dump_action: action bad kind [ 718.652866][T25451] Unsupported ieee802154 address type: 0 [ 718.861253][T25454] netlink: 788 bytes leftover after parsing attributes in process `syz.3.5105'. [ 718.965941][T25457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5107'. [ 719.012871][T25457] xt_TCPMSS: Only works on TCP SYN packets [ 719.389505][T25468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5111'. [ 719.407526][T25470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5110'. [ 719.452670][T25469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5112'. [ 719.779055][T25489] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5113'. [ 719.823889][T25489] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5113'. [ 719.839256][T25489] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5113'. [ 720.287247][T25501] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 720.365449][T25504] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5118'. [ 720.394731][T25504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5118'. [ 720.658346][T25513] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 720.658346][T25513] Please contact the netfilter-devel mailing list or update your nftables rules. [ 720.698998][T25511] xt_hashlimit: size too large, truncated to 1048576 [ 721.509940][T25548] netlink: 'syz.4.5132': attribute type 3 has an invalid length. [ 721.833518][T25561] bridge0: port 1(syz_tun) entered blocking state [ 721.850077][T25561] bridge0: port 1(syz_tun) entered disabled state [ 721.863282][T25561] syz_tun: entered allmulticast mode [ 721.888921][T25561] syz_tun: entered promiscuous mode [ 721.970928][T25565] syzkaller1: entered promiscuous mode [ 721.990883][T25565] syzkaller1: entered allmulticast mode [ 722.032183][T25567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 722.040416][T25567] IPv6: NLM_F_CREATE should be set when creating new route [ 722.476023][T25591] netlink: 'syz.3.5144': attribute type 1 has an invalid length. [ 722.972134][T25600] __bpf_mt_check_bytecode: 23 callbacks suppressed [ 722.972151][T25600] xt_bpf: check failed: parse error [ 723.387912][T25612] netlink: 'syz.3.5150': attribute type 1 has an invalid length. [ 724.373890][T25636] __nla_validate_parse: 74 callbacks suppressed [ 724.373924][T25636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5153'. [ 724.642045][T25650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5155'. [ 727.388147][T25638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 727.785791][T25674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.811329][T25675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.974472][T25683] IPVS: set_ctl: invalid protocol: 92 172.30.1.4:20004 [ 728.019914][T25683] x_tables: duplicate underflow at hook 3 [ 728.225764][T25693] xt_hashlimit: size too large, truncated to 1048576 [ 729.099562][T25723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5177'. [ 729.120917][T12364] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 729.231669][T25723] bond0: invalid ARP target 0.0.0.0 specified for addition [ 729.242864][T25723] bond0: option arp_ip_target: invalid value (0) [ 729.252396][T25723] bond0 (unregistering): Released all slaves [ 731.933790][T25715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.350879][T25752] ipt_rpfilter: unknown options [ 732.519108][ T50] block nbd3: Receive control failed (result -32) [ 732.918277][ T5637] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 732.943826][ T5637] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 732.971549][ T5637] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 732.976482][T25772] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5191'. [ 732.985152][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 733.004032][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 733.108008][T25768] netlink: set zone limit has 4 unknown bytes [ 733.840182][T25804] netlink: 'syz.3.5199': attribute type 12 has an invalid length. [ 733.941153][T25806] netem: change failed [ 734.063712][T25808] syzkaller1: entered promiscuous mode [ 734.084560][T25808] syzkaller1: entered allmulticast mode [ 734.105756][T25808] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 734.197512][T25775] syzkaller0 speed is unknown, defaulting to 1000 [ 734.284813][T25817] xt_hashlimit: size too large, truncated to 1048576 [ 734.541257][T25826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5205'. [ 734.601946][T25826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5205'. [ 735.099021][T25839] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 735.102093][ T5637] Bluetooth: hci6: command tx timeout [ 735.431825][T25846] vlan3: entered allmulticast mode [ 735.452794][T25846] bond0: entered allmulticast mode [ 735.483640][T25846] bond_slave_0: entered allmulticast mode [ 735.535317][T25846] bond_slave_1: entered allmulticast mode [ 735.557826][T25846] syz_tun: entered allmulticast mode [ 735.571567][T25846] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 735.609842][T25859] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5212'. [ 735.672992][T25861] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5214'. [ 735.684744][T25861] netlink: 'syz.4.5214': attribute type 4 has an invalid length. [ 735.697444][T25861] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5214'. [ 735.714223][T25859] bond4 (unregistering): Released all slaves [ 735.744629][T25851] syzkaller1: entered promiscuous mode [ 735.754651][T25851] syzkaller1: entered allmulticast mode [ 736.239352][T25873] netlink: 'syz.5.5216': attribute type 2 has an invalid length. [ 736.755357][T25775] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.775459][T25775] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.783005][T25775] bridge_slave_0: entered allmulticast mode [ 736.804679][T25775] bridge_slave_0: entered promiscuous mode [ 736.827663][T25775] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.838443][T25775] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.846122][T25775] bridge_slave_1: entered allmulticast mode [ 736.895670][T25775] bridge_slave_1: entered promiscuous mode [ 737.003422][T12364] batadv1: left allmulticast mode [ 737.021360][T12364] batadv1: left promiscuous mode [ 737.032524][T12364] bridge0: port 3(batadv1) entered disabled state [ 737.034511][T25907] xt_bpf: check failed: parse error [ 737.075852][T12364] bridge_slave_1: left allmulticast mode [ 737.095377][T12364] bridge_slave_1: left promiscuous mode [ 737.113214][T12364] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.137899][T12364] bond8: left allmulticast mode [ 737.142935][T12364] bond8: left promiscuous mode [ 737.148271][T12364] bridge5: port 1(bond8) entered disabled state [ 737.172483][T12364] pimreg: left allmulticast mode [ 737.189047][ T5637] Bluetooth: hci6: command tx timeout [ 737.320309][T12364] bond9 (unregistering): (slave ip6gretap1): Releasing active interface [ 737.512797][T12364] bond10 (unregistering): (slave gretap1): Releasing active interface [ 737.630077][T12364] bond6 (unregistering): (slave geneve0): Releasing active interface [ 738.046091][T12364] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.060017][T12364] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.069630][T12364] .` (unregistering): Released all slaves [ 738.085077][T12364] bond1 (unregistering): Released all slaves [ 738.107771][T12364] bond2 (unregistering): Released all slaves [ 738.133107][T12364] bond3 (unregistering): Released all slaves [ 738.158936][T12364] bond4 (unregistering): Released all slaves [ 738.185467][T12364] bond5 (unregistering): Released all slaves [ 738.207654][T12364] bond6 (unregistering): Released all slaves [ 738.235989][T12364] bond7 (unregistering): Released all slaves [ 738.255731][T12364] bond8 (unregistering): Released all slaves [ 738.275475][T12364] bond9 (unregistering): Released all slaves [ 738.308134][T12364] bond10 (unregistering): Released all slaves [ 738.330359][T12364] bond11 (unregistering): Released all slaves [ 738.375533][T25775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.413082][T25775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.451741][T25924] netem: change failed [ 738.585690][T12364] tipc: Disabling bearer [ 738.617664][T12364] tipc: Left network mode [ 738.695483][T25775] team0: Port device team_slave_0 added [ 738.769998][T25935] ip6tnl2: entered allmulticast mode [ 738.803297][T25942] netlink: 'syz.4.5233': attribute type 1 has an invalid length. [ 738.847236][T25775] team0: Port device team_slave_1 added [ 739.018510][T25950] xt_hashlimit: size too large, truncated to 1048576 [ 739.129224][T12364] IPVS: stopping backup sync thread 16967 ... [ 739.163467][T25940] bond8: (slave geneve4): making interface the new active one [ 739.174415][T25940] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 739.270611][ T5637] Bluetooth: hci6: command tx timeout [ 739.302598][T25775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.312549][T25775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.343942][T25775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.360825][T25775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.369416][T25775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.421465][T25775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.501880][ T6152] netdevsim netdevsim4 : set [1, 1] type 2 family 0 port 20004 - 0 [ 739.527370][T12366] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 739.539168][T12366] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 739.760647][T25971] netlink: 'syz.3.5241': attribute type 1 has an invalid length. [ 739.805330][T12366] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 739.832370][T25975] netlink: 'syz.2.5239': attribute type 1 has an invalid length. [ 739.877488][T25979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5242'. [ 739.925288][T25971] 8021q: adding VLAN 0 to HW filter on device bond10 [ 739.953871][T25981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5239'. [ 739.985565][T25981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5239'. [ 740.105216][T25977] bond10: (slave geneve3): making interface the new active one [ 740.152740][T25977] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 740.227532][T25986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5243'. [ 740.366130][ T6152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 740.388039][ T6152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 740.423664][T25775] hsr_slave_0: entered promiscuous mode [ 740.430777][T25775] hsr_slave_1: entered promiscuous mode [ 740.439691][T25775] debugfs: 'hsr0' already exists in 'hsr' [ 740.445588][T25775] Cannot create hsr debugfs directory [ 740.491834][ T6152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 740.586698][T25999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5246'. [ 740.939631][T26014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5250'. [ 741.086114][T26018] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5250'. [ 741.095700][T26018] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5250'. [ 741.114341][T26014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5250'. [ 741.208683][T26029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5252'. [ 741.344456][ T5637] Bluetooth: hci6: command tx timeout [ 741.529330][T26029] team0 (unregistering): Port device team_slave_0 removed [ 741.538462][T26029] team0 (unregistering): Port device team_slave_1 removed [ 741.549164][T26029] team0 (unregistering): Port device macvlan1 removed [ 741.620625][T26016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.415767][T26058] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 742.709095][T26074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.764957][T12364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.783839][T12364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.224070][T12364] team0 (unregistering): Port device team_slave_1 removed [ 743.588416][T26091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.667448][T25775] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 743.727783][T25775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 743.808717][T25775] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 743.822352][T26098] block nbd4: not configured, cannot reconfigure [ 743.909391][T25775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.941366][T25775] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 743.971283][T25775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.005336][T25775] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 744.071135][T25775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.213733][T12364] IPVS: stop unused estimator thread 0... [ 744.653985][T26128] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 744.677266][T26128] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 744.702688][T26120] syzkaller0 speed is unknown, defaulting to 1000 [ 744.927903][T25775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.988902][T26139] netlink: 'syz.2.5281': attribute type 2 has an invalid length. [ 745.039974][T25775] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.103901][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.111145][ T6148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.182806][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.190066][ T6148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.220124][T26147] __nla_validate_parse: 4 callbacks suppressed [ 745.220170][T26147] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.5282'. [ 745.283329][T26144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5282'. [ 745.315538][T26144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5282'. [ 745.860215][T26164] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 747.413353][T26214] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5297'. [ 747.606015][T25775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.680488][T26217] IPv6: NLM_F_CREATE should be specified when creating new route [ 748.145654][T26241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5302'. [ 748.309070][T26246] Only authenc() type AEADs are supported by ESSIV [ 748.488805][T26250] siw: device registration error -23 [ 748.662630][T26256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5308'. [ 748.675535][T26256] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5308'. [ 748.751416][T25775] veth0_vlan: entered promiscuous mode [ 748.854977][T25775] veth1_vlan: entered promiscuous mode [ 748.890199][T26260] xt_policy: output policy not valid in PREROUTING and INPUT [ 748.922085][T26263] bond4: option resend_igmp: invalid value (32767) [ 748.939548][T26263] bond4: option resend_igmp: allowed values 0 - 255 [ 748.970914][T26263] bond4 (unregistering): Released all slaves [ 749.138922][T26268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5312'. [ 749.294406][T25775] veth0_macvtap: entered promiscuous mode [ 749.333790][T25775] veth1_macvtap: entered promiscuous mode [ 749.403803][T26289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5315'. [ 749.433612][T25775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.474280][T26289] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 749.485331][T25775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.485388][T26289] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 749.519723][T26289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.542185][T12350] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.582881][T12350] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.613645][T12350] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.647328][T12350] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.805153][T26302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5320'. [ 749.960010][T12350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.990067][T12350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.115900][T12364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.165571][T12364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.298914][T26318] s5ÿÿø: renamed from vlan1 [ 750.326013][T26318] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 750.453579][T26323] __nla_validate_parse: 1 callbacks suppressed [ 750.453599][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5188'. [ 750.608870][T26328] nbd: must specify an index to disconnect [ 751.239954][T26343] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5328'. [ 751.507720][T26349] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 751.526607][T26351] netlink: 'syz.5.5331': attribute type 142 has an invalid length. [ 751.527814][T26348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5329'. [ 751.796712][ T6148] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.820423][ T6148] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 751.884692][T26366] netlink: 'syz.6.5333': attribute type 4 has an invalid length. [ 752.003685][T26366] nftables ruleset with unbound chain [ 752.021268][T26375] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5335'. [ 752.523054][T26398] netlink: 'syz.4.5344': attribute type 12 has an invalid length. [ 752.569047][T26398] netlink: 'syz.4.5344': attribute type 12 has an invalid length. [ 752.597814][T26398] netlink: 'syz.4.5344': attribute type 12 has an invalid length. [ 752.619326][T26398] netlink: 'syz.4.5344': attribute type 12 has an invalid length. [ 752.632553][T26398] netlink: 'syz.4.5344': attribute type 12 has an invalid length. [ 752.663633][T26398] netlink: 'syz.4.5344': attribute type 12 has an invalid length. [ 752.685056][T26398] netlink: 'syz.4.5344': attribute type 12 has an invalid length. [ 752.734619][T26398] netlink: 'syz.4.5344': attribute type 12 has an invalid length. [ 752.752133][T26402] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5346'. [ 752.950525][T26406] syzkaller1: entered promiscuous mode [ 752.969431][T26406] syzkaller1: entered allmulticast mode [ 753.000216][T26409] xt_hashlimit: invalid interval [ 753.115587][T26417] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5352'. [ 753.377442][T26425] syzkaller0 speed is unknown, defaulting to 1000 [ 753.785125][T26450] openvswitch: netlink: Message has 4 unknown bytes. [ 754.123077][T26464] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 754.153322][T26464] bond4: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 754.200514][T26464] bond4: (slave vxcan1): making interface the new active one [ 754.229647][T26464] bond4: (slave vxcan1): Enslaving as an active interface with an up link [ 754.283963][T26465] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 754.318197][T26465] bond4: (slave vxcan3): Enslaving as a backup interface with an up link [ 756.615955][T26446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 757.078709][T26501] netlink: 92 bytes leftover after parsing attributes in process `syz.6.5369'. [ 757.488981][T26513] validate_nla: 27 callbacks suppressed [ 757.488999][T26513] netlink: 'syz.3.5377': attribute type 1 has an invalid length. [ 757.662269][T26516] openvswitch: netlink: IP tunnel dst address not specified [ 757.700665][T26518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5379'. [ 757.954056][T26521] bond5: option miimon: invalid value (18446744073709551585) [ 757.972372][T26521] bond5: option miimon: allowed values 0 - 2147483647 [ 757.985187][T26531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 757.992522][T26531] IPv6: NLM_F_CREATE should be set when creating new route [ 758.013282][T26521] bond5 (unregistering): Released all slaves [ 758.041737][T26531] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5383'. [ 758.361510][T26541] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 758.368854][T26541] IPv6: NLM_F_CREATE should be set when creating new route [ 758.423750][T26541] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5386'. [ 758.487023][T12351] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.511954][T12351] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 758.555027][T12351] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.061207][T26569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5396'. [ 759.135744][T26575] syzkaller1: entered promiscuous mode [ 759.155597][T26575] syzkaller1: entered allmulticast mode [ 759.339991][ T5637] Bluetooth: hci2: command 0x0401 tx timeout [ 759.354960][T26581] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5400'. [ 759.469705][T26588] netlink: 'syz.3.5402': attribute type 11 has an invalid length. [ 759.537076][T26588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5402'. [ 759.590572][T26588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5402'. [ 759.761588][T26604] netlink: 'syz.6.5406': attribute type 10 has an invalid length. [ 759.837904][T26604] team0: Port device dummy0 added [ 759.857826][T26609] netlink: 'syz.6.5406': attribute type 10 has an invalid length. [ 759.914538][T26609] team0: Port device dummy0 removed [ 759.944077][T26609] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 760.032975][T26612] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5409'. [ 760.070455][T26615] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5410'. [ 760.160673][T26621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 760.283098][T26624] syzkaller1: entered promiscuous mode [ 760.291579][T26624] syzkaller1: entered allmulticast mode [ 760.375529][T26630] netlink: 'syz.6.5415': attribute type 3 has an invalid length. [ 761.187516][T12364] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 761.201827][T12364] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 761.209913][ T5762] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 761.305165][T26669] syzkaller1: entered promiscuous mode [ 761.322978][T26669] syzkaller1: entered allmulticast mode [ 761.394325][ T5762] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 761.568655][ T5762] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 761.982033][T26696] tipc: Enabled bearer , priority 0 [ 761.982513][T26704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 762.431939][T26723] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 762.999095][T26752] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 763.117284][T26761] netlink: 'syz.5.5452': attribute type 1 has an invalid length. [ 763.401121][T26761] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 763.421099][T26771] __nla_validate_parse: 24 callbacks suppressed [ 763.421146][T26771] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5454'. [ 763.529754][T26771] h: entered promiscuous mode [ 765.336484][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 773.416356][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 788.776409][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 789.798449][T26796] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5456'. [ 789.848836][T26795] netlink: 'syz.6.5457': attribute type 1 has an invalid length. [ 789.875920][T26795] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5457'. [ 789.900208][T26795] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5457'. [ 789.919220][T26802] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5457'. [ 789.952166][T26795] netlink: 'syz.6.5457': attribute type 1 has an invalid length. [ 790.013317][T26804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5462'. [ 790.164869][T26812] openvswitch: netlink: Duplicate or invalid key (type 0). [ 790.228847][T26812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.254438][T26812] openvswitch: netlink: Duplicate or invalid key (type 0). [ 790.311063][T26822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5467'. [ 790.328007][T26812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.344425][T26821] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5464'. [ 790.487501][T26830] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 790.594943][T26837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.631630][T26838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5470'. [ 790.654883][T26838] netlink: 'syz.4.5470': attribute type 7 has an invalid length. [ 790.675144][T26838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5470'. [ 791.083954][T26853] 8021q: adding VLAN 0 to HW filter on device bond2 [ 791.115970][T26848] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 791.265013][T26870] x_tables: duplicate underflow at hook 3 [ 791.324493][T26858] 8021q: adding VLAN 0 to HW filter on device bond3 [ 791.411168][T26879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5481'. [ 791.429650][T26858] 8021q: adding VLAN 0 to HW filter on device bond4 [ 791.460873][T26873] pim6reg: entered allmulticast mode [ 791.897625][T26902] netlink: 'syz.6.5488': attribute type 4 has an invalid length. [ 791.983217][T26903] syz_tun: refused to change device tx_queue_len [ 792.565073][T26930] netlink: 'syz.3.5498': attribute type 10 has an invalid length. [ 792.639322][T26936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.661995][T26935] tipc: Started in network mode [ 792.681918][T26935] tipc: Node identity 121bffed978f, cluster identity 4711 [ 792.708071][T26935] tipc: Enabled bearer , priority 0 [ 792.736655][T26937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.040842][T26935] syzkaller0: entered promiscuous mode [ 793.046939][T26935] syzkaller0: entered allmulticast mode [ 793.058541][T26935] tipc: Resetting bearer [ 793.098910][T26934] tipc: Resetting bearer [ 796.853448][T26934] tipc: Disabling bearer [ 796.872722][T26642] tipc: Node number set to 2241134573 [ 796.897654][T26998] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 797.149823][T27002] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 797.211441][T27002] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 797.237006][T27002] gretap1: entered promiscuous mode [ 797.258410][T27002] gretap1: entered allmulticast mode [ 797.300471][T27011] netlink: 'syz.6.5523': attribute type 4 has an invalid length. [ 797.312416][T27015] netlink: 'syz.4.5524': attribute type 24 has an invalid length. [ 797.330685][T27011] __nla_validate_parse: 2 callbacks suppressed [ 797.330704][T27011] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5523'. [ 797.349173][T27016] tipc: Invalid UDP bearer configuration [ 797.349220][T27016] tipc: Enabling of bearer rejected, failed to enable media [ 797.438847][T27011] .`: renamed from bond0 (while UP) [ 797.487655][T27014] tipc: Invalid UDP bearer configuration [ 797.487705][T27014] tipc: Enabling of bearer rejected, failed to enable media [ 797.510272][T27021] x_tables: duplicate underflow at hook 1 [ 797.724736][ T6152] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 798.081140][T27047] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5532'. [ 798.429370][T27059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5536'. [ 798.448385][T27059] netlink: 'syz.3.5536': attribute type 28 has an invalid length. [ 798.462894][T27059] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5536'. [ 798.476726][T27059] netlink: 'syz.3.5536': attribute type 28 has an invalid length. [ 798.487506][T27063] netlink: 'syz.4.5539': attribute type 1 has an invalid length. [ 798.555639][T27065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5539'. [ 798.602501][T27065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5539'. [ 798.624694][T27063] bond10: entered promiscuous mode [ 798.633140][T27063] 8021q: adding VLAN 0 to HW filter on device bond10 [ 798.666750][T27067] bond10: (slave bridge7): making interface the new active one [ 798.680953][T27067] bridge7: entered promiscuous mode [ 798.689239][T27067] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 798.859899][T27069] tipc: Resetting bearer [ 798.945001][T12350] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 798.971086][T12350] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 798.991210][T12350] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 799.052413][T27087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5545'. [ 799.339445][T27097] xt_connbytes: Forcing CT accounting to be enabled [ 799.684299][T27110] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 799.702976][T27110] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5553'. [ 799.767472][T27110] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5553'. [ 800.036007][T27119] netlink: 'syz.6.5555': attribute type 4 has an invalid length. [ 800.425640][T27146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5561'. [ 800.903138][T27162] netlink: 'syz.4.5563': attribute type 13 has an invalid length. [ 800.929824][T27162] gretap0: refused to change device tx_queue_len [ 800.950163][T27162] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 801.005190][T27165] syzkaller1: entered promiscuous mode [ 801.018107][T27165] syzkaller1: entered allmulticast mode [ 802.113349][T27217] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 802.904350][T27119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 803.230756][T27231] lo: entered promiscuous mode [ 803.262913][T27231] netlink: 'syz.4.5577': attribute type 2 has an invalid length. [ 803.298840][T27231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 803.304712][T27234] __nla_validate_parse: 5 callbacks suppressed [ 803.304745][T27234] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5578'. [ 803.722186][T27257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5586'. [ 804.052754][T27272] syzkaller0: entered promiscuous mode [ 804.079991][T27272] syzkaller0: entered allmulticast mode [ 804.120986][T27277] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 804.723253][T27308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5601'. [ 804.815748][T27311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5602'. [ 805.023558][T27322] sctp: [Deprecated]: syz.5.5606 (pid 27322) Use of int in max_burst socket option. [ 805.023558][T27322] Use struct sctp_assoc_value instead [ 805.285138][T27339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5610'. [ 805.349587][T27346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5612'. [ 805.587398][T27249] Bluetooth: hci4: command 0x0405 tx timeout [ 805.731772][T27363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5618'. [ 806.009785][T27375] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5621'. [ 806.081638][T27372] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5620'. [ 806.142653][T12351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.164703][T12351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.340618][T27392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5628'. [ 806.474134][T27396] netlink: 'syz.4.5628': attribute type 23 has an invalid length. [ 806.849851][T27414] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 806.965278][T27420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 807.653191][T27452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.722633][T27455] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 807.727556][T27452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.810276][T27458] xt_CT: No such helper "pptp" [ 807.870280][T27457] ip6_vti0: entered promiscuous mode [ 807.879461][T27457] ip6_vti0: entered allmulticast mode [ 808.163374][T27476] nbd: must specify at least one socket [ 808.333297][T27476] syzkaller0 speed is unknown, defaulting to 1000 [ 808.432918][T27484] __nla_validate_parse: 9 callbacks suppressed [ 808.432936][T27484] netlink: 51 bytes leftover after parsing attributes in process `syz.3.5654'. [ 808.780210][T27501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5660'. [ 808.971584][T27505] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5661'. [ 809.331291][T27512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5664'. [ 809.563290][T27521] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5666'. [ 809.714540][T27530] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5668'. [ 809.911224][T27500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5659'. [ 809.925341][T27533] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5669'. [ 809.968233][T27533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5669'. [ 809.988251][T27500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5659'. [ 810.918453][T27560] tipc: Resetting bearer [ 810.960658][T27560] netlink: 'syz.3.5677': attribute type 1 has an invalid length. [ 811.109812][T27569] netlink: 'syz.2.5680': attribute type 1 has an invalid length. [ 811.360307][T27574] netlink: 'syz.2.5680': attribute type 1 has an invalid length. [ 811.814553][T27582] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 811.935579][T27604] block nbd4: not configured, cannot reconfigure [ 812.084884][T27607] netlink: 'syz.5.5689': attribute type 5 has an invalid length. [ 812.504672][T27639] netlink: 'syz.5.5698': attribute type 1 has an invalid length. [ 812.740294][T27652] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 812.830089][T12350] nci: nci_rsp_packet: unknown rsp opcode 0xb05 [ 813.534239][T27687] netem: change failed [ 813.664784][T27693] netlink: 'syz.3.5710': attribute type 3 has an invalid length. [ 814.743408][T27705] __nla_validate_parse: 17 callbacks suppressed [ 814.743421][T27705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5713'. [ 814.798588][T27705] syzkaller0 speed is unknown, defaulting to 1000 [ 814.812988][T27706] syzkaller0 speed is unknown, defaulting to 1000 [ 815.681366][T27646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 815.909453][T27716] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5715'. [ 816.071636][T27722] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5717'. [ 816.429223][T27742] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 816.590044][T27750] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5723'. [ 816.794917][T27755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5723'. [ 819.112288][T27729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 819.607142][T27797] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 819.967806][T27807] netlink: 'syz.2.5734': attribute type 24 has an invalid length. [ 820.776362][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 820.852916][T27834] bond5: (slave syz_tun): Device is not bonding slave [ 820.885142][T27834] bond5: option active_slave: invalid value (syz_tun) [ 820.929946][T27834] bond5 (unregistering): Released all slaves [ 820.998275][T27849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5746'. [ 821.042935][T27852] syzkaller0: entered promiscuous mode [ 821.050412][T27852] syzkaller0: entered allmulticast mode [ 821.312906][T27860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5750'. [ 821.511515][T27862] netlink: 'syz.2.5751': attribute type 1 has an invalid length. [ 821.544339][T27862] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5751'. [ 821.582300][T27862] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5751'. [ 821.606997][T27869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5753'. [ 821.636530][T27862] netlink: 'syz.2.5751': attribute type 1 has an invalid length. [ 821.645489][T27869] netlink: 'syz.3.5753': attribute type 5 has an invalid length. [ 821.666362][T27862] netlink: 'syz.2.5751': attribute type 8 has an invalid length. [ 821.687297][T27869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5753'. [ 821.707584][T27862] netlink: 582 bytes leftover after parsing attributes in process `syz.2.5751'. [ 821.733051][T27869] geneve4: entered promiscuous mode [ 821.754203][T27869] geneve4: entered allmulticast mode [ 821.774848][T12378] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 821.814493][T12378] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 821.850329][T12378] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 822.064978][T27894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5761'. [ 822.220617][T27898] netlink: 'syz.6.5763': attribute type 1 has an invalid length. [ 822.257147][T27902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5764'. [ 822.322319][T27898] 8021q: adding VLAN 0 to HW filter on device bond5 [ 822.340480][T27902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5764'. [ 822.442493][T27904] bond5: (slave geneve2): making interface the new active one [ 822.468483][T27904] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 822.694114][T27919] IPVS: length: 24 != 12312 [ 822.715130][T27920] netlink: 'syz.4.5767': attribute type 9 has an invalid length. [ 822.749657][T27920] netlink: 'syz.4.5767': attribute type 6 has an invalid length. [ 823.719094][T27922] bridge1: entered promiscuous mode [ 823.724668][T27922] bridge1: entered allmulticast mode [ 823.799773][T27958] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 824.203976][T27970] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 824.671384][T27980] bond6: entered allmulticast mode [ 824.820788][T27985] veth3: entered allmulticast mode [ 824.868042][T27985] bond6: (slave veth3): Enslaving as an active interface with an up link [ 824.938510][T27980] bond6 (unregistering): (slave veth3): Releasing backup interface [ 824.968051][T27980] bond6 (unregistering): Released all slaves [ 825.066881][T27990] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.332783][T27967] lo: Caught tx_queue_len zero misconfig [ 825.504663][T28009] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 826.564924][T28045] syzkaller1: entered promiscuous mode [ 826.580474][T28045] syzkaller1: entered allmulticast mode [ 826.679113][T28047] __nla_validate_parse: 69 callbacks suppressed [ 826.679132][T28047] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5795'. [ 827.181314][T28076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5800'. [ 827.231248][T28083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5802'. [ 827.290835][T28088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.393030][T28088] : entered promiscuous mode [ 827.762533][T28109] syzkaller1: entered promiscuous mode [ 827.769714][T28109] syzkaller1: entered allmulticast mode [ 827.918930][T28114] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5812'. [ 827.953121][T28114] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5812'. [ 828.071773][T28119] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5813'. [ 828.418965][T28137] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5819'. [ 828.807421][T28157] syzkaller1: entered promiscuous mode [ 828.836500][T28159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 828.843809][T28159] IPv6: NLM_F_CREATE should be set when creating new route [ 828.852288][T28157] syzkaller1: entered allmulticast mode [ 828.865781][T28159] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5825'. [ 829.339139][T28181] openvswitch: netlink: IP tunnel dst address not specified [ 829.457882][T28186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 829.549530][T28196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5835'. [ 829.565835][T28196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5835'. [ 829.639382][T28199] netlink: 'syz.3.5835': attribute type 13 has an invalid length. [ 829.648782][T28199] netlink: 'syz.3.5835': attribute type 13 has an invalid length. [ 829.820276][T28207] syzkaller1: entered promiscuous mode [ 829.829082][T28207] syzkaller1: entered allmulticast mode [ 830.544130][T28234] netlink: 'syz.3.5847': attribute type 2 has an invalid length. [ 830.577464][T28234] netlink: 'syz.3.5847': attribute type 11 has an invalid length. [ 830.670375][T28240] tipc: Enabling of bearer rejected, media not registered [ 830.833646][T28245] syzkaller1: entered promiscuous mode [ 830.865107][T28245] syzkaller1: entered allmulticast mode [ 831.056051][T28256] netlink: 'syz.3.5853': attribute type 1 has an invalid length. [ 831.469365][T27249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 831.483581][T27249] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 831.501111][T27249] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 831.511163][T27249] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 831.521921][T27249] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 831.634819][T28277] netlink: zone id is out of range [ 831.662721][T28277] netlink: zone id is out of range [ 831.700210][T28277] netlink: zone id is out of range [ 831.724143][T28277] netlink: zone id is out of range [ 831.768869][T28277] netlink: zone id is out of range [ 831.787795][T28277] netlink: zone id is out of range [ 831.854238][T28277] netlink: zone id is out of range [ 831.872220][T28277] netlink: zone id is out of range [ 831.891362][T28277] netlink: zone id is out of range [ 831.911075][T28277] netlink: zone id is out of range [ 831.998399][T16583] syz_tun (unregistering): left allmulticast mode [ 832.005166][T16583] syz_tun (unregistering): left promiscuous mode [ 832.014968][T16583] bridge0: port 1(syz_tun) entered disabled state [ 832.244941][T28271] syzkaller0 speed is unknown, defaulting to 1000 [ 832.758644][T28271] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.765893][T28271] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.774318][T28271] bridge_slave_0: entered allmulticast mode [ 832.782553][T28271] bridge_slave_0: entered promiscuous mode [ 832.792144][T28271] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.800886][T28271] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.809273][T28271] bridge_slave_1: entered allmulticast mode [ 832.819419][T28271] bridge_slave_1: entered promiscuous mode [ 832.863643][T28271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.879509][T28271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.923981][T28271] team0: Port device team_slave_0 added [ 832.935141][T28271] team0: Port device team_slave_1 added [ 832.973343][T28271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.980591][T28271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.008254][T28271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.021702][T28271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.030004][T28271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.057558][T28271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.120896][T28271] hsr_slave_0: entered promiscuous mode [ 833.127733][T28271] hsr_slave_1: entered promiscuous mode [ 833.134098][T28271] debugfs: 'hsr0' already exists in 'hsr' [ 833.141289][T28271] Cannot create hsr debugfs directory [ 833.329409][T28271] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.342005][T28271] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.355087][T28271] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 833.470769][T28271] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.483905][T28271] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.495644][T28271] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 833.585720][ T5637] Bluetooth: hci7: command tx timeout [ 833.600619][T28271] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.613295][T28271] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.624172][T28271] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 833.724209][T28271] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.735797][T28271] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.749169][T28271] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 834.034583][T28256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 834.047591][T28270] netlink: 'syz.6.5857': attribute type 1 has an invalid length. [ 834.067247][T28270] __nla_validate_parse: 8 callbacks suppressed [ 834.067264][T28270] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5857'. [ 834.082869][T28270] netlink: 'syz.6.5857': attribute type 1 has an invalid length. [ 834.099568][T28270] netlink: 'syz.6.5857': attribute type 8 has an invalid length. [ 834.116660][T28270] netlink: 582 bytes leftover after parsing attributes in process `syz.6.5857'. [ 834.127581][T28270] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5857'. [ 834.174130][T28271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 834.248269][T28271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 834.281223][T28271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 834.293955][T28302] netlink: 'syz.3.5860': attribute type 1 has an invalid length. [ 834.332510][T28271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 834.351449][T28271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 834.365660][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5863'. [ 834.374162][T28271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 834.511498][T28302] 8021q: adding VLAN 0 to HW filter on device bond12 [ 834.532932][T28271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 834.614355][T28271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 834.640426][T28313] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5864'. [ 834.650742][T28313] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5864'. [ 834.794573][T28332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5867'. [ 834.954950][T28325] syzkaller1: entered promiscuous mode [ 834.978566][T28325] syzkaller1: entered allmulticast mode [ 835.414396][T28271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.525550][T28271] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.595933][T12366] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.603952][T12366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.664260][T12366] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.674217][T12366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.695713][ T5637] Bluetooth: hci7: command tx timeout [ 835.870940][T28364] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5874'. [ 836.373738][T28394] bond0: (slave syz_tun): Releasing backup interface [ 836.401365][T28394] syz_tun: left allmulticast mode [ 836.429117][T28399] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5879'. [ 836.442932][T28394] ¾x9ÿ: left allmulticast mode [ 836.457381][T28394] ¾x9ÿ: left promiscuous mode [ 836.468185][T28394] bridge0: port 1(1¾x9ÿ) entered disabled state [ 836.480301][T28394] bridge_slave_1: left allmulticast mode [ 836.487411][T28394] bridge_slave_1: left promiscuous mode [ 836.496741][T28394] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.514580][T28394] veth0_to_bond: left allmulticast mode [ 836.520364][T28394] veth0_to_bond: left promiscuous mode [ 836.526031][T28394] bridge1: port 1(veth0_to_bond) entered disabled state [ 836.541073][T28394] bond0: (slave bond_slave_0): Releasing backup interface [ 836.551145][T28394] bond_slave_0: left allmulticast mode [ 836.558652][T28394] bond0: (slave bond_slave_1): Releasing backup interface [ 836.569179][T28394] bond_slave_1: left allmulticast mode [ 836.575281][T28394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.583450][T28394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.603372][T28403] pim6reg: entered allmulticast mode [ 836.610646][T28404] syz_tun: left allmulticast mode [ 836.615819][T28404] pim6reg: left allmulticast mode [ 837.065670][T28420] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5885'. [ 837.225534][T28271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.366035][T28424] netlink: 'syz.3.5886': attribute type 1 has an invalid length. [ 837.410275][T28424] netlink: 'syz.3.5886': attribute type 2 has an invalid length. [ 837.425854][T28424] netlink: 'syz.3.5886': attribute type 1 has an invalid length. [ 837.451844][T28424] netlink: 'syz.3.5886': attribute type 3 has an invalid length. [ 837.737542][ T5637] Bluetooth: hci7: command tx timeout [ 838.460537][T28271] veth0_vlan: entered promiscuous mode [ 838.663138][T28271] veth1_vlan: entered promiscuous mode [ 838.841798][T28271] veth0_macvtap: entered promiscuous mode [ 838.895403][T28271] veth1_macvtap: entered promiscuous mode [ 839.015373][T28271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.075855][T28271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.160281][T28502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 839.167607][T28502] IPv6: NLM_F_CREATE should be set when creating new route [ 839.183284][T28502] __nla_validate_parse: 6 callbacks suppressed [ 839.183302][T28502] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5905'. [ 839.224661][ T6152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.251872][ T6152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.289566][ T6152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.289773][T28500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5903'. [ 839.315615][ T6152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.660438][T28517] netlink: 'syz.5.5908': attribute type 1 has an invalid length. [ 839.781358][T28526] netlink: 'syz.3.5909': attribute type 10 has an invalid length. [ 839.819419][T28517] 8021q: adding VLAN 0 to HW filter on device bond5 [ 839.828311][ T5637] Bluetooth: hci7: command tx timeout [ 839.876281][T28532] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 839.969035][T28525] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 840.031822][T28517] vlan2: entered promiscuous mode [ 840.053765][T28517] bond5: entered promiscuous mode [ 840.079324][T28517] vlan2: entered allmulticast mode [ 840.091926][T28517] bond5: entered allmulticast mode [ 840.110490][T12364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.158153][T12364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.474858][ T6148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.511476][T28554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5914'. [ 840.521025][ T6148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.637377][T28563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5917'. [ 840.740782][T28567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5917'. [ 840.815240][T28563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5917'. [ 840.852870][T28579] FAULT_INJECTION: forcing a failure. [ 840.852870][T28579] name failslab, interval 1, probability 0, space 0, times 1 [ 840.893025][T28579] CPU: 0 UID: 0 PID: 28579 Comm: syz.2.5918 Not tainted syzkaller #0 PREEMPT(full) [ 840.893051][T28579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 840.893069][T28579] Call Trace: [ 840.893079][T28579] [ 840.893086][T28579] dump_stack_lvl+0xe8/0x150 [ 840.893114][T28579] should_fail_ex+0x412/0x560 [ 840.893141][T28579] should_failslab+0xa8/0x100 [ 840.893168][T28579] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 840.893191][T28579] ? __alloc_skb+0x186/0x7d0 [ 840.893209][T28579] ? __alloc_skb+0x1d0/0x7d0 [ 840.893226][T28579] ? __local_bh_enable_ip+0xd0/0x130 [ 840.893249][T28579] __alloc_skb+0x1d0/0x7d0 [ 840.893275][T28579] netlink_sendmsg+0x5d4/0xb40 [ 840.893307][T28579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.893333][T28579] ? aa_sock_msg_perm+0xf1/0x1b0 [ 840.893356][T28579] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 840.893383][T28579] ____sys_sendmsg+0x972/0x9f0 [ 840.893409][T28579] ? __might_fault+0xaf/0x130 [ 840.893438][T28579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.893470][T28579] ? import_iovec+0x73/0xa0 [ 840.893498][T28579] ___sys_sendmsg+0x2a5/0x360 [ 840.893520][T28579] ? __lock_acquire+0x6b5/0x2cf0 [ 840.893543][T28579] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.893571][T28579] ? kstrtouint+0x6e/0xe0 [ 840.893614][T28579] ? __fget_files+0x2a/0x420 [ 840.893634][T28579] ? __fget_files+0x3a0/0x420 [ 840.893665][T28579] __sys_sendmmsg+0x27c/0x4e0 [ 840.893693][T28579] ? __pfx___sys_sendmmsg+0x10/0x10 [ 840.893714][T28579] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 840.893761][T28579] ? ksys_write+0x242/0x270 [ 840.893788][T28579] ? __pfx_ksys_write+0x10/0x10 [ 840.893817][T28579] __x64_sys_sendmmsg+0xa0/0xc0 [ 840.893847][T28579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.893866][T28579] do_syscall_64+0x15f/0xf80 [ 840.893888][T28579] ? trace_irq_disable+0x3b/0x140 [ 840.893913][T28579] ? clear_bhb_loop+0x40/0x90 [ 840.893934][T28579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.893952][T28579] RIP: 0033:0x7f232459cdd9 [ 840.893969][T28579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.893985][T28579] RSP: 002b:00007f23227cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 840.894012][T28579] RAX: ffffffffffffffda RBX: 00007f2324816090 RCX: 00007f232459cdd9 [ 840.894025][T28579] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000007 [ 840.894036][T28579] RBP: 00007f23227cd090 R08: 0000000000000000 R09: 0000000000000000 [ 840.894047][T28579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.894057][T28579] R13: 00007f2324816128 R14: 00007f2324816090 R15: 00007fff46c01e68 [ 840.894086][T28579] [ 841.292317][T28587] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.5921'. [ 841.470359][T28593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5922'. [ 841.624852][T28593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5922'. [ 841.962947][T28614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5930'. [ 842.215268][T28623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 842.222578][T28623] IPv6: NLM_F_CREATE should be set when creating new route [ 842.642082][T28637] bridge_slave_0: entered promiscuous mode [ 842.720451][T28639] netlink: 'syz.3.5936': attribute type 16 has an invalid length. [ 843.539616][T28691] netlink: 'syz.6.5948': attribute type 1 has an invalid length. [ 843.575505][T28693] netlink: 'syz.3.5949': attribute type 33 has an invalid length. [ 843.576312][T28679] nbd: device at index 64 is going down [ 843.830005][T28705] FAULT_INJECTION: forcing a failure. [ 843.830005][T28705] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 843.855246][T28705] CPU: 0 UID: 0 PID: 28705 Comm: syz.4.5950 Not tainted syzkaller #0 PREEMPT(full) [ 843.855268][T28705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 843.855276][T28705] Call Trace: [ 843.855283][T28705] [ 843.855289][T28705] dump_stack_lvl+0xe8/0x150 [ 843.855311][T28705] should_fail_ex+0x412/0x560 [ 843.855333][T28705] _copy_from_iter+0x1d3/0x1670 [ 843.855354][T28705] ? rcu_is_watching+0x15/0xb0 [ 843.855377][T28705] ? __pfx__copy_from_iter+0x10/0x10 [ 843.855400][T28705] ? netlink_sendmsg+0x650/0xb40 [ 843.855436][T28705] ? skb_put+0x11b/0x210 [ 843.855455][T28705] netlink_sendmsg+0x6c0/0xb40 [ 843.855485][T28705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.855506][T28705] ? aa_sock_msg_perm+0xf1/0x1b0 [ 843.855525][T28705] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 843.855550][T28705] ____sys_sendmsg+0x972/0x9f0 [ 843.855573][T28705] ? __might_fault+0xaf/0x130 [ 843.855601][T28705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.855632][T28705] ? import_iovec+0x73/0xa0 [ 843.855657][T28705] ___sys_sendmsg+0x2a5/0x360 [ 843.855679][T28705] ? __lock_acquire+0x6b5/0x2cf0 [ 843.855702][T28705] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.855728][T28705] ? kstrtouint+0x6e/0xe0 [ 843.855770][T28705] ? __fget_files+0x2a/0x420 [ 843.855788][T28705] ? __fget_files+0x3a0/0x420 [ 843.855814][T28705] __sys_sendmmsg+0x27c/0x4e0 [ 843.855839][T28705] ? __pfx___sys_sendmmsg+0x10/0x10 [ 843.855858][T28705] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 843.855900][T28705] ? ksys_write+0x242/0x270 [ 843.855924][T28705] ? __pfx_ksys_write+0x10/0x10 [ 843.855950][T28705] __x64_sys_sendmmsg+0xa0/0xc0 [ 843.855971][T28705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.855987][T28705] do_syscall_64+0x15f/0xf80 [ 843.856008][T28705] ? clear_bhb_loop+0x40/0x90 [ 843.856028][T28705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.856042][T28705] RIP: 0033:0x7f61c7b9cdd9 [ 843.856059][T28705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.856072][T28705] RSP: 002b:00007f61c8b06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 843.856091][T28705] RAX: ffffffffffffffda RBX: 00007f61c7e15fa0 RCX: 00007f61c7b9cdd9 [ 843.856106][T28705] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000007 [ 843.856116][T28705] RBP: 00007f61c8b06090 R08: 0000000000000000 R09: 0000000000000000 [ 843.856127][T28705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.856136][T28705] R13: 00007f61c7e16038 R14: 00007f61c7e15fa0 R15: 00007ffe9db23418 [ 843.856163][T28705] [ 844.224561][T28276] udevd[28276]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 844.353967][T28688] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 844.540402][T28716] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 844.694983][T28723] 8021q: VLANs not supported on ip6tnl0 [ 844.733827][T28727] netlink: 'syz.5.5957': attribute type 1 has an invalid length. [ 844.744109][T28725] tipc: Failed to obtain node identity [ 844.755438][T28725] tipc: Enabling of bearer rejected, failed to enable media [ 844.764476][T28727] __nla_validate_parse: 10 callbacks suppressed [ 844.764493][T28727] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5957'. [ 844.797982][T28728] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5958'. [ 844.809722][T28727] netlink: 'syz.5.5957': attribute type 16 has an invalid length. [ 844.834364][T28727] netlink: 'syz.5.5957': attribute type 17 has an invalid length. [ 844.940996][T27249] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 844.959886][T27249] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 844.968392][T27249] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 844.985356][T27249] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 844.993602][T27249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 845.061535][T28727] ip6_vti0: left promiscuous mode [ 845.085697][T28727] ip6_vti0: left allmulticast mode [ 845.189989][T28727] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.198124][T28727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.210699][T28727] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.229212][T28727] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.367416][T28756] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5962'. [ 845.418946][T28727] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 845.441456][T28727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.475286][T28727] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 845.505937][T28727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 845.524905][T28727] mac80211_hwsim hwsim70 syzkaller0: left promiscuous mode [ 845.534720][T28727] mac80211_hwsim hwsim70 syzkaller0: left allmulticast mode [ 845.543888][T28727] net_ratelimit: 4 callbacks suppressed [ 845.543905][T28727] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 845.674787][T28762] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5963'. [ 845.949572][T28769] mac80211_hwsim hwsim70 syzkaller0: entered promiscuous mode [ 845.974317][T28769] mac80211_hwsim hwsim70 syzkaller0: entered allmulticast mode [ 846.439104][T28790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5971'. [ 846.869907][T28729] syzkaller0 speed is unknown, defaulting to 1000 [ 847.007657][T28815] openvswitch: netlink: IP tunnel dst address not specified [ 847.052063][T28819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5982'. [ 847.085994][T28821] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5982'. [ 847.097443][T27249] Bluetooth: hci5: command tx timeout [ 847.129955][T28819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5982'. [ 847.161668][T28823] netlink: 348 bytes leftover after parsing attributes in process `syz.6.5984'. [ 847.184477][T28821] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5982'. [ 847.283742][T28827] netlink: 'syz.2.5983': attribute type 39 has an invalid length. [ 847.331828][T28827] hsr_slave_0: left promiscuous mode [ 847.349378][T28827] hsr_slave_1: left promiscuous mode [ 847.523830][T28833] syzkaller0: entered promiscuous mode [ 847.545090][T28833] syzkaller0: entered allmulticast mode [ 847.573977][T28833] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 847.640922][T28837] netlink: 'syz.5.5987': attribute type 21 has an invalid length. [ 847.669689][T28833] tipc: Started in network mode [ 847.674620][T28833] tipc: Node identity ea3f74fbe49, cluster identity 4711 [ 847.683938][T28833] tipc: Enabled bearer , priority 0 [ 847.699336][T28832] tipc: Resetting bearer [ 847.742915][T28832] tipc: Disabling bearer [ 847.940459][T28849] netlink: 'syz.4.5991': attribute type 21 has an invalid length. [ 848.009521][T28849] netlink: 'syz.4.5991': attribute type 1 has an invalid length. [ 848.788358][T28729] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.815188][T28729] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.837614][T28729] bridge_slave_0: entered allmulticast mode [ 848.860678][T28729] bridge_slave_0: entered promiscuous mode [ 848.882283][T28729] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.886650][T28891] nbd: illegal input index 2958377 [ 848.899804][T28729] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.909150][T28729] bridge_slave_1: entered allmulticast mode [ 848.917544][T28729] bridge_slave_1: entered promiscuous mode [ 849.002641][T28729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.025338][T28729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.083480][T28729] team0: Port device team_slave_0 added [ 849.103674][T28898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.112871][T28729] team0: Port device team_slave_1 added [ 849.157882][T28729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.164995][T28729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.192517][T27249] Bluetooth: hci5: command tx timeout [ 849.209160][T28729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.222396][T28729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.230681][T28729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.258857][T28729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.364698][T28729] hsr_slave_0: entered promiscuous mode [ 849.383020][T28729] hsr_slave_1: entered promiscuous mode [ 849.531326][T28901] netlink: 'syz.5.6005': attribute type 1 has an invalid length. [ 849.575885][T28907] netlink: 'syz.6.6007': attribute type 3 has an invalid length. [ 849.627604][T28901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 849.710926][T28902] bond6: (slave veth13): Enslaving as an active interface with a down link [ 850.087706][T28729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 850.318228][T28729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 850.350919][T28940] __nla_validate_parse: 70 callbacks suppressed [ 850.350952][T28940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6014'. [ 850.381587][T28940] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6014'. [ 850.414839][T28940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6014'. [ 850.477807][T28729] bond0: (slave netdevsim1): Releasing backup interface [ 850.510926][T28729] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 850.540562][T28729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 850.568352][T28951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6017'. [ 850.653991][T28953] IPv6: NLM_F_CREATE should be specified when creating new route [ 851.114437][T28961] syzkaller1: entered promiscuous mode [ 851.123269][T28961] syzkaller1: entered allmulticast mode [ 851.258891][T27249] Bluetooth: hci5: command tx timeout [ 851.314466][T28729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 851.355488][T28729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 851.389438][T28729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 851.448446][T28729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 851.482415][T28729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 851.523352][T28729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 851.691612][T28729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 851.718308][T28729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 851.748840][T28980] syzkaller0: entered promiscuous mode [ 851.777253][T28980] syzkaller0: entered allmulticast mode [ 851.815258][T29002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.889163][T28999] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6029'. [ 851.980258][T28998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6029'. [ 851.985135][T29006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 851.999650][T29006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6031'. [ 852.143424][T28729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.187628][T29015] x_tables: duplicate underflow at hook 2 [ 852.197786][T29015] x_tables: duplicate underflow at hook 2 [ 852.221822][T28729] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.289160][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.297196][ T6148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.355390][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.363577][ T6148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.512828][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6036'. [ 852.950349][T29041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6039'. [ 852.981426][T29041] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 852.999529][T29046] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.6041'. [ 853.084643][T29049] netlink: 'syz.5.6040': attribute type 1 has an invalid length. [ 853.197692][T29053] netlink: 'syz.6.6042': attribute type 11 has an invalid length. [ 853.219443][T29054] bond7: (slave geneve3): making interface the new active one [ 853.229246][T29054] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 853.245430][ T6148] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 853.301318][ T6148] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 853.337474][T27249] Bluetooth: hci5: command tx timeout [ 853.345350][ T6148] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 853.358757][ T6148] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 853.559295][T29066] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 853.580092][T29069] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 853.600476][T29072] syzkaller0: entered promiscuous mode [ 853.622442][T29072] syzkaller0: entered allmulticast mode [ 853.695537][T29075] mac80211_hwsim hwsim64 wlan0: entered promiscuous mode [ 853.790384][T29080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 854.114808][T29087] bond7: entered promiscuous mode [ 854.221593][T28729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.333884][T29093] vlan2: entered allmulticast mode [ 854.341202][T29093] hsr0: entered allmulticast mode [ 854.347979][T29093] hsr_slave_0: entered allmulticast mode [ 854.354371][T29093] hsr_slave_1: entered allmulticast mode [ 854.547254][T28729] veth0_vlan: entered promiscuous mode [ 854.610298][T28729] veth1_vlan: entered promiscuous mode [ 854.634439][T29100] netlink: 'syz.5.6055': attribute type 3 has an invalid length. [ 854.766043][T28729] veth0_macvtap: entered promiscuous mode [ 854.827750][T28729] veth1_macvtap: entered promiscuous mode [ 854.947970][T28729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.050340][T28729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.173061][ T6150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.224956][ T6150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.245853][ T6150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.285963][ T6150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.410080][T29127] __nla_validate_parse: 2 callbacks suppressed [ 855.410097][T29127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6064'. [ 855.476001][T29132] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 855.692949][T29141] netlink: 'syz.2.6068': attribute type 1 has an invalid length. [ 855.702954][T29127] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6064'. [ 855.834449][ T6150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.880497][ T6150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.012235][T29147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 856.028407][T29152] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6071'. [ 856.031689][T12377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.041381][T29154] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6071'. [ 856.071962][T29147] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6069'. [ 856.082800][T12377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.522612][T29179] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6074'. [ 857.198397][T29207] ipt_REJECT: TCP_RESET invalid for non-tcp [ 857.508822][T29223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6084'. [ 857.682308][T29223] team0: Port device team_slave_0 removed [ 858.233926][T29253] netlink: 'syz.2.6092': attribute type 12 has an invalid length. [ 858.505712][T29257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6094'. [ 858.681753][T29280] "syz.4.6097" (29280) uses obsolete ecb(arc4) skcipher [ 859.105770][T29292] "syz.2.6099" (29292) uses obsolete ecb(arc4) skcipher [ 859.252143][T29296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 859.265880][T29296] FAULT_INJECTION: forcing a failure. [ 859.265880][T29296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.284790][T29296] CPU: 1 UID: 0 PID: 29296 Comm: syz.5.6101 Not tainted syzkaller #0 PREEMPT(full) [ 859.284816][T29296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 859.284827][T29296] Call Trace: [ 859.284834][T29296] [ 859.284842][T29296] dump_stack_lvl+0xe8/0x150 [ 859.284868][T29296] should_fail_ex+0x412/0x560 [ 859.284895][T29296] _copy_from_iter+0x1d3/0x1670 [ 859.284921][T29296] ? rcu_is_watching+0x15/0xb0 [ 859.284947][T29296] ? __pfx__copy_from_iter+0x10/0x10 [ 859.284977][T29296] ? netlink_sendmsg+0x650/0xb40 [ 859.284998][T29296] ? skb_put+0x11b/0x210 [ 859.285023][T29296] netlink_sendmsg+0x6c0/0xb40 [ 859.285053][T29296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.285078][T29296] ? aa_sock_msg_perm+0xf1/0x1b0 [ 859.285102][T29296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 859.285134][T29296] ____sys_sendmsg+0x972/0x9f0 [ 859.285157][T29296] ? __might_fault+0xaf/0x130 [ 859.285185][T29296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.285216][T29296] ? import_iovec+0x73/0xa0 [ 859.285247][T29296] ___sys_sendmsg+0x2a5/0x360 [ 859.285267][T29296] ? __lock_acquire+0x6b5/0x2cf0 [ 859.285290][T29296] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.285309][T29296] ? __lock_acquire+0x6b5/0x2cf0 [ 859.285372][T29296] __sys_sendmmsg+0x27c/0x4e0 [ 859.285400][T29296] ? __pfx___sys_sendmmsg+0x10/0x10 [ 859.285419][T29296] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 859.285464][T29296] ? ksys_write+0x242/0x270 [ 859.285490][T29296] ? __pfx_ksys_write+0x10/0x10 [ 859.285519][T29296] __x64_sys_sendmmsg+0xa0/0xc0 [ 859.285542][T29296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.285566][T29296] do_syscall_64+0x15f/0xf80 [ 859.285589][T29296] ? clear_bhb_loop+0x40/0x90 [ 859.285609][T29296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.285625][T29296] RIP: 0033:0x7f49b439cdd9 [ 859.285642][T29296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.285656][T29296] RSP: 002b:00007f49b5294028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 859.285676][T29296] RAX: ffffffffffffffda RBX: 00007f49b4615fa0 RCX: 00007f49b439cdd9 [ 859.285688][T29296] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000007 [ 859.285698][T29296] RBP: 00007f49b5294090 R08: 0000000000000000 R09: 0000000000000000 [ 859.285709][T29296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 859.285718][T29296] R13: 00007f49b4616038 R14: 00007f49b4615fa0 R15: 00007ffea19d2f18 [ 859.285747][T29296] [ 859.746299][T29312] syz_tun: entered promiscuous mode [ 859.752200][T29312] macvtap1: entered promiscuous mode [ 859.757733][T29312] macvtap1: entered allmulticast mode [ 859.783533][T29312] syz_tun: entered allmulticast mode [ 859.801233][T29317] IPVS: Unknown mcast interface: vcan0 [ 859.905016][T29320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6106'. [ 859.922009][T29320] netlink: 64995 bytes leftover after parsing attributes in process `syz.3.6106'. [ 860.523416][T29346] __nla_validate_parse: 1 callbacks suppressed [ 860.523429][T29346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6118'. [ 860.750765][T29357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6123'. [ 860.762690][T29354] netlink: 'syz.5.6122': attribute type 1 has an invalid length. [ 860.786010][T29357] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6123'. [ 860.802018][T29357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6123'. [ 861.011116][T29371] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 861.038878][ T6150] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.047733][ T6150] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.056457][ T6150] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.065172][ T6150] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 861.089673][T29371] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6127'. [ 861.186884][T29380] netlink: 'syz.4.6130': attribute type 2 has an invalid length. [ 861.638251][T29397] bridge0: port 3(gretap0) entered blocking state [ 861.667739][T29397] bridge0: port 3(gretap0) entered disabled state [ 861.690777][T29397] gretap0: entered allmulticast mode [ 861.711635][T29397] gretap0: entered promiscuous mode [ 861.725140][T29397] bridge0: port 3(gretap0) entered blocking state [ 861.731745][T29397] bridge0: port 3(gretap0) entered forwarding state [ 861.784892][T29396] gre1: entered promiscuous mode [ 861.789882][T29396] gre1: entered allmulticast mode [ 862.022560][T29411] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 862.106408][T29412] : entered promiscuous mode [ 862.199536][T29422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6142'. [ 862.356289][T29429] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6144'. [ 862.369734][T29430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6143'. [ 862.490909][T29432] netlink: 'syz.4.6145': attribute type 25 has an invalid length. [ 862.548887][T29441] syzkaller1: entered promiscuous mode [ 862.554411][T29441] syzkaller1: entered allmulticast mode [ 862.929269][T29462] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.6152'. [ 862.952517][T29462] netlink: ct family unspecified [ 863.098137][T29465] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 863.109361][T29471] IPv6: NLM_F_CREATE should be specified when creating new route [ 863.225086][T29474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.227738][T29476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6158'. [ 863.256013][T29476] vlan3: entered allmulticast mode [ 863.261282][T29476] veth1_virt_wifi: entered allmulticast mode [ 863.506080][T29490] netlink: 'syz.3.6161': attribute type 1 has an invalid length. [ 863.569583][T29492] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 863.650901][T29492] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 863.715910][T29503] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 864.099698][T29515] syzkaller1: entered promiscuous mode [ 864.121625][T29515] syzkaller1: entered allmulticast mode [ 864.430277][T29532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 864.438338][T29532] IPv6: NLM_F_CREATE should be set when creating new route [ 864.464446][T29532] FAULT_INJECTION: forcing a failure. [ 864.464446][T29532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 864.500808][T29532] CPU: 1 UID: 0 PID: 29532 Comm: syz.3.6176 Not tainted syzkaller #0 PREEMPT(full) [ 864.500834][T29532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 864.500845][T29532] Call Trace: [ 864.500853][T29532] [ 864.500860][T29532] dump_stack_lvl+0xe8/0x150 [ 864.500887][T29532] should_fail_ex+0x412/0x560 [ 864.500914][T29532] _copy_from_user+0x2d/0xb0 [ 864.500940][T29532] ___sys_sendmsg+0x1c6/0x360 [ 864.500962][T29532] ? __lock_acquire+0x6b5/0x2cf0 [ 864.500993][T29532] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.501013][T29532] ? __lock_acquire+0x6b5/0x2cf0 [ 864.501036][T29532] ? irqentry_exit+0x218/0x730 [ 864.501057][T29532] ? trace_irq_disable+0x3b/0x140 [ 864.501122][T29532] __sys_sendmmsg+0x27c/0x4e0 [ 864.501150][T29532] ? __pfx___sys_sendmmsg+0x10/0x10 [ 864.501170][T29532] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 864.501217][T29532] ? ksys_write+0x242/0x270 [ 864.501239][T29532] ? __irq_exit_rcu+0xca/0x220 [ 864.501258][T29532] ? __pfx_ksys_write+0x10/0x10 [ 864.501278][T29532] ? handle_softirqs+0x715/0x840 [ 864.501301][T29532] __x64_sys_sendmmsg+0xa0/0xc0 [ 864.501323][T29532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.501341][T29532] do_syscall_64+0x15f/0xf80 [ 864.501364][T29532] ? clear_bhb_loop+0x40/0x90 [ 864.501386][T29532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.501402][T29532] RIP: 0033:0x7f953e79cdd9 [ 864.501419][T29532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.501434][T29532] RSP: 002b:00007f953f710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 864.501452][T29532] RAX: ffffffffffffffda RBX: 00007f953ea15fa0 RCX: 00007f953e79cdd9 [ 864.501464][T29532] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000007 [ 864.501476][T29532] RBP: 00007f953f710090 R08: 0000000000000000 R09: 0000000000000000 [ 864.501487][T29532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.501497][T29532] R13: 00007f953ea16038 R14: 00007f953ea15fa0 R15: 00007ffc46921908 [ 864.501526][T29532] [ 864.520296][T29522] syzkaller0: entered promiscuous mode [ 864.743634][T29522] syzkaller0: entered allmulticast mode [ 866.157503][T29574] __nla_validate_parse: 3 callbacks suppressed [ 866.157521][T29574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6186'. [ 867.788567][T29556] netem: unknown loss type 8 [ 867.793270][T29556] netem: change failed [ 867.830729][T29578] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 867.832834][T29579] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 867.855041][T12378] bond0: (slave bond_slave_0): interface is now down [ 867.901543][T12378] bond0: (slave bond_slave_1): interface is now down [ 867.907712][T29578] netlink: 'syz.2.6187': attribute type 32 has an invalid length. [ 867.918639][T12378] bond0: now running without any active interface! [ 868.065538][T29586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 868.073291][T29586] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6192'. [ 868.335898][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 868.356794][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 868.365125][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 868.379200][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 868.388319][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 868.818926][T29617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 868.826383][T29617] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6198'. [ 869.133741][T29631] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6203'. [ 869.167699][T29631] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6203'. [ 869.178903][T29635] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 869.186333][T29635] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6204'. [ 869.227556][T29635] FAULT_INJECTION: forcing a failure. [ 869.227556][T29635] name failslab, interval 1, probability 0, space 0, times 0 [ 869.242318][T29635] CPU: 0 UID: 0 PID: 29635 Comm: syz.5.6204 Not tainted syzkaller #0 PREEMPT(full) [ 869.242342][T29635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 869.242352][T29635] Call Trace: [ 869.242359][T29635] [ 869.242366][T29635] dump_stack_lvl+0xe8/0x150 [ 869.242391][T29635] should_fail_ex+0x412/0x560 [ 869.242418][T29635] should_failslab+0xa8/0x100 [ 869.242444][T29635] ? skb_clone+0x212/0x3a0 [ 869.242467][T29635] kmem_cache_alloc_noprof+0x87/0x650 [ 869.242498][T29635] skb_clone+0x212/0x3a0 [ 869.242525][T29635] __netlink_deliver_tap+0x404/0x850 [ 869.242559][T29635] ? netlink_deliver_tap+0x2e/0x1b0 [ 869.242582][T29635] netlink_deliver_tap+0x19c/0x1b0 [ 869.242605][T29635] netlink_sendskb+0x68/0x140 [ 869.242627][T29635] nlmsg_notify+0x12e/0x1a0 [ 869.242652][T29635] fib6_add_rt2node+0x1d47/0x3940 [ 869.242699][T29635] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 869.242723][T29635] ? fib6_add_1+0xe75/0x1460 [ 869.242758][T29635] fib6_add+0x8e7/0x18c0 [ 869.242786][T29635] ? do_raw_spin_lock+0x12b/0x2f0 [ 869.242809][T29635] ? __pfx_fib6_add+0x10/0x10 [ 869.242838][T29635] ? ip6_route_add+0xc9/0x1b0 [ 869.242861][T29635] ip6_route_add+0xde/0x1b0 [ 869.242884][T29635] inet6_rtm_newroute+0x268/0x19e0 [ 869.242910][T29635] ? kasan_quarantine_put+0xbb/0x1f0 [ 869.242932][T29635] ? lockdep_hardirqs_on+0x7a/0x110 [ 869.242958][T29635] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 869.242974][T29635] ? nlmon_xmit+0xb0/0x100 [ 869.242993][T29635] ? kmem_cache_free+0x182/0x650 [ 869.243028][T29635] ? __lock_acquire+0x6b5/0x2cf0 [ 869.243052][T29635] ? __dev_queue_xmit+0x2b6/0x3950 [ 869.243080][T29635] ? __local_bh_enable_ip+0xd0/0x130 [ 869.243099][T29635] ? lockdep_hardirqs_on+0x7a/0x110 [ 869.243149][T29635] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 869.243168][T29635] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 869.243192][T29635] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 869.243211][T29635] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 869.243229][T29635] ? ref_tracker_free+0x693/0x840 [ 869.243255][T29635] ? __pfx_ref_tracker_free+0x10/0x10 [ 869.243290][T29635] netlink_rcv_skb+0x232/0x4b0 [ 869.243321][T29635] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 869.243343][T29635] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 869.243377][T29635] ? netlink_deliver_tap+0x2e/0x1b0 [ 869.243398][T29635] ? netlink_deliver_tap+0x2e/0x1b0 [ 869.243425][T29635] netlink_unicast+0x75c/0x8e0 [ 869.243456][T29635] netlink_sendmsg+0x813/0xb40 [ 869.243488][T29635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 869.243513][T29635] ? aa_sock_msg_perm+0xf1/0x1b0 [ 869.243538][T29635] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 869.243564][T29635] ____sys_sendmsg+0x972/0x9f0 [ 869.243587][T29635] ? __might_fault+0xaf/0x130 [ 869.243616][T29635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 869.243649][T29635] ? import_iovec+0x73/0xa0 [ 869.243679][T29635] ___sys_sendmsg+0x2a5/0x360 [ 869.243699][T29635] ? __lock_acquire+0x6b5/0x2cf0 [ 869.243723][T29635] ? __pfx____sys_sendmsg+0x10/0x10 [ 869.243743][T29635] ? __lock_acquire+0x6b5/0x2cf0 [ 869.243768][T29635] ? kstrtouint+0x6e/0xe0 [ 869.243830][T29635] __sys_sendmmsg+0x27c/0x4e0 [ 869.243859][T29635] ? __pfx___sys_sendmmsg+0x10/0x10 [ 869.243880][T29635] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 869.243929][T29635] ? ksys_write+0x242/0x270 [ 869.243955][T29635] ? __pfx_ksys_write+0x10/0x10 [ 869.243987][T29635] __x64_sys_sendmmsg+0xa0/0xc0 [ 869.244010][T29635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.244030][T29635] do_syscall_64+0x15f/0xf80 [ 869.244050][T29635] ? trace_irq_disable+0x3b/0x140 [ 869.244075][T29635] ? clear_bhb_loop+0x40/0x90 [ 869.244096][T29635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.244112][T29635] RIP: 0033:0x7f49b439cdd9 [ 869.244130][T29635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.244145][T29635] RSP: 002b:00007f49b5294028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 869.244164][T29635] RAX: ffffffffffffffda RBX: 00007f49b4615fa0 RCX: 00007f49b439cdd9 [ 869.244177][T29635] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000007 [ 869.244188][T29635] RBP: 00007f49b5294090 R08: 0000000000000000 R09: 0000000000000000 [ 869.244199][T29635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 869.244210][T29635] R13: 00007f49b4616038 R14: 00007f49b4615fa0 R15: 00007ffea19d2f18 [ 869.244241][T29635] [ 869.333428][T29596] syzkaller0 speed is unknown, defaulting to 1000 [ 869.743051][T29648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6206'. [ 869.869974][T29651] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6208'. [ 870.063270][T29662] netlink: 'syz.4.6208': attribute type 6 has an invalid length. [ 870.456938][ T5637] Bluetooth: hci2: command tx timeout [ 870.485104][T29677] batadv_slave_1: entered promiscuous mode [ 870.559749][T29678] batadv_slave_1: left promiscuous mode [ 870.920450][T29684] tipc: Resetting bearer [ 870.958085][T29698] sctp: [Deprecated]: syz.3.6221 (pid 29698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 870.958085][T29698] Use struct sctp_sack_info instead [ 870.999851][T29698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6221'. [ 871.338197][ T30] INFO: task syz.1.5090:25401 blocked for more than 143 seconds. [ 871.347411][ T30] Not tainted syzkaller #0 [ 871.355646][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 871.365403][ T30] task:syz.1.5090 state:D stack:25696 pid:25401 tgid:25399 ppid:18772 task_flags:0x400040 flags:0x00080002 [ 871.379623][ T30] Call Trace: [ 871.380855][T29718] x_tables: duplicate underflow at hook 1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 871.389751][ T30] [ 871.406592][ T30] __schedule+0x17b4/0x5680 [ 871.422175][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 871.466478][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 871.480083][ T30] ? __pfx___schedule+0x10/0x10 [ 871.484999][ T30] ? schedule+0x90/0x360 [ 871.506282][ T30] schedule+0x164/0x360 [ 871.510500][ T30] schedule_preempt_disabled+0x13/0x30 [ 871.515974][ T30] __mutex_lock+0x7f7/0x1550 [ 871.520603][ T30] ? __mutex_lock+0x608/0x1550 [ 871.525393][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 871.573278][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 871.578376][ T30] ? stack_trace_save+0xa9/0x100 [ 871.612710][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 871.618148][ T30] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 871.624206][ T30] ? kasan_save_track+0x4f/0x80 [ 871.629077][ T30] ? kasan_save_track+0x3e/0x80 [ 871.633946][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 871.638736][ T30] ? __alloc_skb+0x2c1/0x7d0 [ 871.673871][ T30] ? netlink_dump+0x18d/0xe10 [ 871.678924][ T30] ? __netlink_dump_start+0x5cb/0x7e0 [ 871.684322][ T30] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 871.690235][ T30] ? genl_rcv_msg+0x5e8/0x7a0 [ 871.695039][ T30] ? netlink_rcv_skb+0x232/0x4b0 [ 871.699984][ T30] ? genl_rcv+0x28/0x40 [ 871.704161][ T30] ? netlink_unicast+0x75c/0x8e0 [ 871.710117][ T30] ? netlink_sendmsg+0x813/0xb40 [ 871.726048][ T30] ? ____sys_sendmsg+0x972/0x9f0 [ 871.731053][ T30] ? ___sys_sendmsg+0x2a5/0x360 [ 871.735926][ T30] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 871.741068][ T30] ? do_syscall_64+0x15f/0xf80 [ 871.745851][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 871.752039][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 871.779278][ T30] ? rcu_is_watching+0x15/0xb0 [ 871.784101][ T30] ? trace_kmalloc+0x2a/0xf0 [ 871.788718][ T30] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 871.795336][ T30] genl_dumpit+0x10b/0x1b0 [ 871.799776][ T30] netlink_dump+0x702/0xe10 [ 871.804308][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 871.809361][ T30] ? genl_start+0x499/0x6c0 [ 871.813895][ T30] __netlink_dump_start+0x5cb/0x7e0 [ 871.820431][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 871.826189][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 871.833013][ T30] ? genl_get_cmd+0x522/0x960 [ 871.837731][ T30] ? __pfx_genl_start+0x10/0x10 [ 871.842600][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 871.847558][ T30] ? __pfx_genl_done+0x10/0x10 [ 871.852349][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 871.857312][ T30] genl_rcv_msg+0x5e8/0x7a0 [ 871.861846][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.866890][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 871.889422][ T30] netlink_rcv_skb+0x232/0x4b0 [ 871.894221][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 871.899237][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 871.904515][ T30] ? down_read+0x270/0x2e0 [ 871.908916][ T30] ? genl_rcv+0xd/0x40 [ 871.912970][ T30] genl_rcv+0x28/0x40 [ 871.916948][ T30] netlink_unicast+0x75c/0x8e0 [ 871.921731][ T30] netlink_sendmsg+0x813/0xb40 [ 871.926496][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 871.931777][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 871.936713][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 871.942008][ T30] ____sys_sendmsg+0x972/0x9f0 [ 871.946764][ T30] ? __might_fault+0xaf/0x130 [ 871.951434][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 871.956722][ T30] ? import_iovec+0x73/0xa0 [ 871.961234][ T30] ___sys_sendmsg+0x2a5/0x360 [ 871.965900][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 871.970824][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 871.976014][ T30] ? futex_wait+0x2a2/0x390 [ 871.980521][ T30] ? __fget_files+0x2a/0x420 [ 871.985099][ T30] ? __fget_files+0x3a0/0x420 [ 872.004082][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 872.009740][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 872.015277][ T30] ? rcu_is_watching+0x15/0xb0 [ 872.021021][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.028107][ T30] do_syscall_64+0x15f/0xf80 [ 872.033923][ T30] ? trace_irq_disable+0x3b/0x140 [ 872.039761][ T30] ? clear_bhb_loop+0x40/0x90 [ 872.044483][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.050613][ T30] RIP: 0033:0x7f82d4f9cdd9 [ 872.055075][ T30] RSP: 002b:00007f82d5eda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.065375][ T30] RAX: ffffffffffffffda RBX: 00007f82d5215fa0 RCX: 00007f82d4f9cdd9 [ 872.074719][ T30] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000003 [ 872.083642][ T30] RBP: 00007f82d5032d69 R08: 0000000000000000 R09: 0000000000000000 [ 872.092695][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.102049][ T30] R13: 00007f82d5216038 R14: 00007f82d5215fa0 R15: 00007ffd19aa4b28 [ 872.111788][ T30] [ 872.115060][ T30] [ 872.115060][ T30] Showing all locks held in the system: [ 872.122790][ T30] 2 locks held by ksoftirqd/0/15: [ 872.127819][ T30] 1 lock held by khungtaskd/30: [ 872.132673][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 872.142577][ T30] 1 lock held by dhcpcd/5289: [ 872.147271][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_deladdr+0x1c1/0x790 [ 872.156820][ T30] 2 locks held by getty/5379: [ 872.161510][ T30] #0: ffff8880367d70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 872.171299][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 872.181432][ T30] 3 locks held by kworker/0:7/5762: [ 872.186641][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 872.197640][ T30] #1: ffffc90004a67c40 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 872.332850][ T30] #2: ffffffff900dbc20 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 872.344253][ T30] 3 locks held by kworker/u8:21/6152: [ 872.349633][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 872.361329][ T30] #1: ffffc90005aefc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 872.373615][ T30] #2: ffff8880b2380780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 872.383804][ T30] 4 locks held by kworker/0:9/10932: [ 872.389099][ T30] 3 locks held by kworker/u8:35/12366: [ 872.394558][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 872.406239][ T30] #1: ffffc9000d30fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 872.417578][ T30] #2: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 872.426587][ T30] 2 locks held by syz.0.4173/21930: [ 872.431789][ T30] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 872.510505][ T30] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 872.520735][ T30] 3 locks held by syz.1.5090/25401: [ 872.525936][ T30] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 872.534154][ T30] #1: ffff88809941c6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 872.557254][ T5637] Bluetooth: hci2: command tx timeout [ 872.564076][ T30] #2: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 872.574625][ T30] 1 lock held by syz-executor/28271: [ 872.579918][ T30] 2 locks held by kworker/0:0/28516: [ 872.585214][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 872.596204][ T30] #1: ffffc9000541fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 872.606506][ T30] 2 locks held by syz-executor/29596: [ 872.611880][ T30] #0: ffffffff9030e1b0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 872.622070][ T30] #1: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 872.631175][ T30] 4 locks held by syz.5.6218/29684: [ 872.636373][ T30] #0: ffffffff900dbc20 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x19a/0x5a0 [ 872.646493][ T30] #1: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_rfkill_set_block+0x1e/0x50 [ 872.673968][ T30] #2: ffff8880b2380780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_leave+0x182/0x230 [ 872.683679][ T30] #3: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 872.694626][ T30] [ 872.697123][ T30] ============================================= [ 872.697123][ T30] [ 872.705556][ T30] NMI backtrace for cpu 1 [ 872.705571][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 872.705591][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 872.705602][ T30] Call Trace: [ 872.705609][ T30] [ 872.705616][ T30] dump_stack_lvl+0xe8/0x150 [ 872.705641][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 872.705668][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 872.705690][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 872.705719][ T30] sys_info+0x135/0x170 [ 872.705742][ T30] watchdog+0xfd3/0x1030 [ 872.705773][ T30] ? watchdog+0x1c9/0x1030 [ 872.705803][ T30] kthread+0x388/0x470 [ 872.705826][ T30] ? __pfx_watchdog+0x10/0x10 [ 872.705848][ T30] ? __pfx_kthread+0x10/0x10 [ 872.705870][ T30] ret_from_fork+0x514/0xb70 [ 872.705892][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 872.705911][ T30] ? __switch_to+0xc79/0x1410 [ 872.705938][ T30] ? __pfx_kthread+0x10/0x10 [ 872.705961][ T30] ret_from_fork_asm+0x1a/0x30 [ 872.705996][ T30] [ 872.706002][ T30] Sending NMI from CPU 1 to CPUs 0: [ 872.826372][ C0] NMI backtrace for cpu 0 [ 872.826388][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 872.826405][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 872.826414][ C0] RIP: 0010:__lock_acquire+0x1450/0x2cf0 [ 872.826435][ C0] Code: 90 0f 0b 90 31 ed 65 48 8b 05 cc 49 97 11 48 3b 84 24 e0 00 00 00 0f 85 69 16 00 00 89 e8 48 81 c4 e8 00 00 00 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 cc cc cc cc cc 4d 85 ff 4c 8b 6c 24 10 0f 84 c8 [ 872.826448][ C0] RSP: 0018:ffffc90000007670 EFLAGS: 00000082 [ 872.826462][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 872.826472][ C0] RDX: 00000000f9b69732 RSI: 0000000059f00800 RDI: ffffffff8e692ec0 [ 872.826482][ C0] RBP: 0000000000000001 R08: ffffffff8176e256 R09: ffffffff8e95cd60 [ 872.826492][ C0] R10: ffffc90000007878 R11: ffffffff81b0d880 R12: 0000000000000002 [ 872.826502][ C0] R13: ffffffff8e95cd60 R14: ffffffff8e692ec0 R15: 0000000000000003 [ 872.826513][ C0] FS: 0000000000000000(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 872.826525][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 872.826536][ C0] CR2: 00007ffc2a948208 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 872.826549][ C0] Call Trace: [ 872.826555][ C0] [ 872.826561][ C0] ? unwind_next_frame+0xa6/0x2550 [ 872.826579][ C0] lock_acquire+0x106/0x350 [ 872.826594][ C0] ? unwind_next_frame+0xa6/0x2550 [ 872.826614][ C0] ? unwind_next_frame+0xa6/0x2550 [ 872.826631][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 872.826647][ C0] ? unwind_next_frame+0xa6/0x2550 [ 872.826664][ C0] unwind_next_frame+0xc3/0x2550 [ 872.826680][ C0] ? unwind_next_frame+0xa6/0x2550 [ 872.826699][ C0] ? unwind_next_frame+0xa6/0x2550 [ 872.826715][ C0] ? kasan_save_stack+0x3e/0x60 [ 872.826734][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 872.826750][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 872.826771][ C0] arch_stack_walk+0x11b/0x150 [ 872.826792][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 872.826809][ C0] stack_trace_save+0xa9/0x100 [ 872.826829][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 872.826853][ C0] kasan_save_stack+0x3e/0x60 [ 872.826871][ C0] ? kasan_save_stack+0x3e/0x60 [ 872.826893][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 872.826928][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 872.826944][ C0] insert_work+0x3d/0x330 [ 872.826959][ C0] __queue_work+0xccf/0xfc0 [ 872.826977][ C0] ? __queue_work+0x1a1/0xfc0 [ 872.826993][ C0] call_timer_fn+0x192/0x5e0 [ 872.827010][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 872.827024][ C0] ? call_timer_fn+0xd4/0x5e0 [ 872.827040][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 872.827059][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 872.827079][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 872.827096][ C0] __run_timer_base+0x67e/0x8b0 [ 872.827115][ C0] ? ktime_get+0x45/0x220 [ 872.827140][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 872.827161][ C0] run_timer_softirq+0xb7/0x170 [ 872.827176][ C0] handle_softirqs+0x22a/0x840 [ 872.827192][ C0] ? __irq_exit_rcu+0xca/0x220 [ 872.827209][ C0] __irq_exit_rcu+0xca/0x220 [ 872.827224][ C0] irq_exit_rcu+0x9/0x30 [ 872.827237][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 872.827254][ C0] [ 872.827259][ C0] [ 872.827265][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 872.827281][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 872.827298][ C0] Code: 4b 7e 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 31 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 872.827310][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 872.827322][ C0] RAX: 0000000000279a65 RBX: ffffffff819a815a RCX: 0000000080000001 [ 872.827333][ C0] RDX: 0000000000000001 RSI: ffffffff8dfa897a RDI: ffffffff8c28abe0 [ 872.827343][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 872.827354][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 872.827364][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 872.827376][ C0] ? do_idle+0x36a/0x5f0 [ 872.827396][ C0] default_idle+0x9/0x20 [ 872.827414][ C0] default_idle_call+0x72/0xb0 [ 872.827433][ C0] do_idle+0x36a/0x5f0 [ 872.827450][ C0] ? __pfx_do_idle+0x10/0x10 [ 872.827468][ C0] ? do_idle+0x5c5/0x5f0 [ 872.827485][ C0] cpu_startup_entry+0x43/0x60 [ 872.827501][ C0] rest_init+0x2de/0x300 [ 872.827521][ C0] start_kernel+0x38a/0x3e0 [ 872.827541][ C0] x86_64_start_reservations+0x24/0x30 [ 872.827556][ C0] x86_64_start_kernel+0x143/0x1c0 [ 872.827571][ C0] common_startup_64+0x13e/0x147 [ 872.827596][ C0] [ 873.334075][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 873.340956][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 873.350076][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 873.360135][ T30] Call Trace: [ 873.363421][ T30] [ 873.366358][ T30] vpanic+0x56c/0xa60 [ 873.370351][ T30] ? __pfx___schedule+0x10/0x10 [ 873.375214][ T30] ? __pfx_vpanic+0x10/0x10 [ 873.379730][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 873.385912][ T30] panic+0xc5/0xd0 [ 873.389645][ T30] ? __pfx_panic+0x10/0x10 [ 873.394075][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 873.399478][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 873.405656][ T30] watchdog+0x102c/0x1030 [ 873.410007][ T30] ? watchdog+0x1c9/0x1030 [ 873.414438][ T30] kthread+0x388/0x470 [ 873.418521][ T30] ? __pfx_watchdog+0x10/0x10 [ 873.423205][ T30] ? __pfx_kthread+0x10/0x10 [ 873.427817][ T30] ret_from_fork+0x514/0xb70 [ 873.432418][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 873.437537][ T30] ? __switch_to+0xc79/0x1410 [ 873.442227][ T30] ? __pfx_kthread+0x10/0x10 [ 873.446828][ T30] ret_from_fork_asm+0x1a/0x30 [ 873.451616][ T30] [ 873.455125][ T30] Kernel Offset: disabled [ 873.459454][ T30] Rebooting in 86400 seconds..