last executing test programs: 2m7.758462636s ago: executing program 0 (id=2890): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x56, 0x0}, 0x24000851) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x44}}, 0x28000000) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000004c0)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x70bd28, 0xffffffff, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000003, 0xd, 0x5, 0x0, 0x3}, 0x4}}]}, {0xfffffffffffffe90}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 2m7.175822475s ago: executing program 0 (id=2892): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x3}}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd004000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) listen(r0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8}]}}}]}]}], {0x14}}, 0x78}}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380)=0x2, 0x4) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) close(r2) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x0) 2m6.155505134s ago: executing program 0 (id=2899): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1000, 0x8, 0x100000001}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@struct={0x5, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x2, 0x5}, {0x6, 0x0, 0x3}]}, @func={0x8, 0x0, 0x0, 0xc, 0x5}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0x5}, @ptr={0x2}]}, {0x0, [0x2e]}}, &(0x7f0000000240)=""/248, 0x67, 0xf8, 0x1, 0x800, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x7fff, 0x0}, 0x8) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8ba8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='net_prio.prioidx\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x11, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x25910366, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x7, 0x67, &(0x7f0000000140)=""/103, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, r1, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xb, 0x5}, 0x10, r2, r3, 0x6, &(0x7f0000000680)=[r4, r5, r6, r7, r8, 0x1], &(0x7f00000006c0)=[{0x3, 0x2, 0xf, 0xc}, {0x4, 0x2, 0x7, 0x2}, {0x3, 0x5, 0x4, 0x7}, {0x5, 0x1, 0x4, 0x3}, {0x0, 0x1, 0x2, 0x5}, {0x2, 0x4, 0x1, 0x6}], 0x10, 0x1ff}, 0x94) readv(r5, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/7, 0x7}, {&(0x7f0000000840)=""/123, 0x7b}, {&(0x7f00000008c0)=""/32, 0x20}, {&(0x7f0000000900)=""/32, 0x20}, {&(0x7f0000000940)=""/96, 0x60}, {&(0x7f00000009c0)}, {&(0x7f0000000a00)=""/36, 0x24}, {&(0x7f0000000a40)=""/78, 0x4e}], 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000d40)={'syztnl1\x00', 0x0, 0x8000, 0x7800, 0xfffffd3b, 0x80000000, {{0x2e, 0x4, 0x0, 0x2, 0xb8, 0x64, 0x0, 0x10, 0x4, 0x0, @multicast2, @private=0xa010102, {[@rr={0x7, 0x17, 0x7a, [@empty, @rand_addr=0x64010100, @multicast2, @local, @private=0xa010102]}, @lsrr={0x83, 0x2b, 0x94, [@local, @remote, @local, @broadcast, @multicast1, @broadcast, @private=0xa010101, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x5c, 0x3, [{0x6, 0x8, "e852565102be"}, {0x2, 0x4, "c213"}, {0x0, 0xf, "b3970d7df7b00ded704fd82bbf"}, {0x1, 0x10, "1db9dccec3668822c04e29f7a7de"}, {0x1, 0x2}, {0x0, 0x4, "14c9"}, {0x2, 0xd, "f663917e815fccf0b4afb4"}, {0x5, 0x8, "00e5f6ce932a"}, {0x2, 0x10, "a3c1887639b3ab3f0c9cb14703d0"}]}, @end]}}}}}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e80)=r2, 0x4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0x11, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x786, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0x4, 0x0, 0x6, 0x10, 0x7fff}, @generic={0x9, 0x8, 0x3, 0x4, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001000)='syzkaller\x00', 0x0, 0x8a, &(0x7f0000001040)=""/138, 0x41000, 0x8, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000001100)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001140)={0x5, 0x8, 0xd43, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001180)=[r0, r7, r8, r4, r5, r6], &(0x7f00000011c0)=[{0x1, 0x3, 0x4, 0x7}, {0x0, 0x4, 0x3, 0xd}], 0x10, 0x78}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0x15, &(0x7f0000000b40)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc00}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f0000000c00)='syzkaller\x00', 0x2, 0xd3, &(0x7f0000000c40)=""/211, 0x40f00, 0x42, '\x00', r9, @fallback=0x27, r10, 0x8, &(0x7f0000000ec0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000f00)={0x2, 0x2, 0x40, 0x2}, 0x10, r2, r11, 0x4, &(0x7f00000012c0)=[r0, r0, r6, r7, r7, 0xffffffffffffffff, r7, r6], &(0x7f0000001300)=[{0x1, 0x1, 0xf, 0x2}, {0x1, 0x3, 0xb, 0x7}, {0x1, 0x1, 0xd, 0x4}, {0x5, 0x52, 0x10, 0xb}], 0x10, 0xa}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=@getqdisc={0x28, 0x26, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff2, 0xa}, {0x3, 0xc}, {0xe, 0xc}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c012}, 0x20000104) sendmsg$FOU_CMD_GET(r8, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x854) pwrite64(r1, &(0x7f0000001600)="1f9e94bea543cbe425ed8b438082891af121fa8db8223ae8d6e86f71a4189bd30f48721aa62aaae951ddfdf6a098d57efe3ed9f609c77bb65189da923004b903bbfb0820f98eece8fcbad08017b3e621600da21e1b7318b63ba28fc7b29f7044aad1bea034a6cead33fc608e832316018f71218357c59e857d5d45b77f52586ff3a5a1df553df2d28638d0063dd8a21cc088f892c3ffb472ef746395f26feb7af34d34310ade51c7f84866616cdb88dbff648a6eaee64691a0355822e41a1e598a674ef306425137297f11d8de48af91d0e36fd0f0978f738699c28813", 0xdd, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@bloom_filter={0x1e, 0x4, 0xfffffffc, 0x5, 0x1000, r7, 0x2, '\x00', r9, r0, 0x5, 0x2, 0x2, 0xb}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001780)={0x8001}, 0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000018c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/177, 0xb1, 0x0, &(0x7f0000001880)=""/39, 0x27}, &(0x7f0000001900)=0x40) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d40), 0xc0000, 0x0) write$tun(r12, &(0x7f0000001d80)={@val={0x0, 0x80e}, @val={0x3, 0x1, 0x7, 0x2, 0x5, 0xfff}, @x25={0x0, 0x9, 0xfb, '\n!'}}, 0x13) recvfrom$l2tp6(r8, &(0x7f0000001dc0)=""/56, 0x38, 0x2120, &(0x7f0000001e00)={0xa, 0x0, 0x0, @private1}, 0x20) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, r13, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}}, 0x4004040) setsockopt$MRT_DEL_MFC_PROXY(r7, 0x0, 0xd3, &(0x7f0000001f80)={@multicast2, @dev={0xac, 0x14, 0x14, 0x31}, 0xffffffffffffffff, "2115ba0b37cc37e7ad5d6a29d27ff980321c955e0f867e41ade4f119fb03db4e", 0x8, 0x4, 0xc384, 0xf3a}, 0x3c) sendmsg$nl_route_sched(r7, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)=@getchain={0x74, 0x66, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xa, 0x2}, {0x4, 0xe}, {0x20, 0x6}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0xd567}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6c9}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xffffec40}, {0x8, 0xb, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008894}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000002100)={0x1d, r9, 0x2, {0x0, 0xf0, 0x3}}, 0x18) 2m5.967914316s ago: executing program 0 (id=2901): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000000c0)=0x20003, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) sendto$inet(r4, 0x0, 0x0, 0x20000010, &(0x7f0000000540)={0x2, 0x400, @empty}, 0x10) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@allocspi={0x124, 0x16, 0x1, 0x70bd28, 0x25dfdbfb, {{{@in6=@local, @in=@multicast2, 0x4e23, 0xf, 0x4e23, 0xe, 0x2, 0x20, 0x0, 0x5e}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@private=0xa010100, {0x8, 0x100, 0x5, 0x7, 0x1000, 0x1, 0x0, 0x10000}, {0x2, 0x9, 0x3, 0x195d}, {0x9, 0x6, 0xfffff800}, 0x70bd25, 0x3501, 0xa, 0x1, 0xda, 0xec}, 0x3, 0x32b}, [@lifetime_val={0x24, 0x9, {0x9, 0x2, 0x3, 0x8}}, @proto={0x5}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) (rerun: 64) 2m5.551175272s ago: executing program 0 (id=2904): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async, rerun: 32) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) (rerun: 32) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x1, 0x10000000000008, 0x12, 0x8, 0x7fffdffc, 0x8}, 0x0, 0x0, 0x0, 0x0) 2m5.375912199s ago: executing program 0 (id=2907): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r3, 0x6}, &(0x7f0000000200)=0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xfffff801}, 0x8) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) poll(&(0x7f00000022c0), 0x58, 0x8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) 2m2.75383663s ago: executing program 3 (id=2934): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x410, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5280}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000880}, 0x20042080) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r5, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc055}, 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x41}, 0x40040) close(r4) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) socketpair(0x23, 0x6, 0x3, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000017c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000000600)={0x1160, 0x14, 0x2, 0x70bd2b, 0x25dfdbfb, {0x1a, 0xe}, [@INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "d6a1479cde1e390a8effe7864473e23ff5865bf8dbeafa85a374c8bb0137ef21a90f3eb0b25d74710c9a0d58c00808bdd8e59c22e2eb8a5a186f3bbd22474739ac45d51e4e4e60415c49b5680e1a741307ef34e4175bed8481907b5810e75f1b9bb48b7f2264f740a595b42b74264c444f0db39c41e3ac58affdf708cb442e3f621fb2a98a0c9062a81f01898c23c959e1f203025251595bc13ef2a5675f16712a4da314a09be7b484fa4e43ac8fb342de2a9d3852414ff75ccd8c09c3ce70db1f207b8034b6459fad4c6f26ffcd7c76f6ac32135af2287634e304108ee0eca15719"}, @INET_DIAG_REQ_BYTECODE={0x60, 0x1, "b557b1e9d0e9364b1c6aad108e6bee29273a696c3c42c5086422be8edb6616df6432429c1333ed00753e1ad0c83d2a69b3eb22605bc81a0a3af4133488d42369817b1edbd42f9539a1e0602a8ba128aff7c962aec7f719b0154d616c"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1160}, 0x1, 0x0, 0x0, 0x4010}, 0x20000810) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000018c0)={'syztnl0\x00', &(0x7f0000001840)={'ip6_vti0\x00', 0x0, 0x29, 0x7d, 0x6, 0x1, 0x10, @empty, @remote, 0x8, 0x10, 0x8, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000001900)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f00000019c0)={&(0x7f0000001800), 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}}, 0x1) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a40), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, r14, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x89}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xb5a2ceb11c9095b2) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000001b40)=0x210000, 0x4) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r10) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x7c, r15, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x14}}}}, [@NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x10, 0x4, "3c91280e2ac4f7032839ab2e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000}, 0x40) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001d40), r0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x34, r16, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), r13) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x24, r17, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) 2m2.644913381s ago: executing program 1 (id=2936): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000880000009500040000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x94) 2m2.408065896s ago: executing program 3 (id=2938): syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaadf000040000008004d0000480000000000069078ac1e000300000000000000000000000087060000000100"/70, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) unshare(0x8040480) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r7, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x400}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x12c, r7, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5a87796dea77f64b23cce1b98555f6d8ce9c64d8e290a62c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8a3361347eecaa32c0a8fee84bbea07166c4797877905d86"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8bde1800a7aba8940b55a9a4832b3f9345053a844277abdc"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg\x00'}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r10, 0x29, 0x3d, &(0x7f0000000580)=""/201, &(0x7f0000000000)=0xc9) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x802, 0x8, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a", @ANYRES32=r4], 0x20}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a000100000000000000000081000001"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f00000002c0)="5416131afbac5783148fe25313458b56b3273539f836892692de5a0a4aa4cb7329a45305908fc7ae8d55a3d667b824a96797bcee7c83ef1a3a6bfc04f4e04fddc88c5e33b804c91b6cd1de9cf6e130f921995224b70f559861bcc0016b6ca3420981c5ad5835c6f9b09cfc0794bd04b20057f4a10573ee393d6748120840ecf88b079c2e10b07a") 2m2.383127319s ago: executing program 1 (id=2939): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000000000000007f000000001000000000000000100100000d000000"], 0x28}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket(0x8, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$IMGETCOUNT(r2, 0x61d9, &(0x7f0000000000)) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/35, 0x23}, {&(0x7f00000001c0)=""/227, 0xe3}, {&(0x7f00000000c0)=""/12, 0xc}], 0x3, 0x4f, 0x4200000) 2m2.158432763s ago: executing program 3 (id=2942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000001c0)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x2f, 0x6, "4109a9226863091ebabe1b4208b9a71d9ea381e602df8c418458cb9b31d55566eed75e5c5f875431975ffa05f9673d057327cb6f8f"}, {0x1, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000080)=0x60) 2m1.856936642s ago: executing program 3 (id=2945): unshare(0x22020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000200), 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) 2m0.760444127s ago: executing program 3 (id=2947): socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000200)=0x7, 0x4) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x8000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r6) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0xf, 0x0, 0x0) (async) shutdown(r6, 0x0) (async) recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) accept4$bt_l2cap(r6, &(0x7f0000000140)={0x1f, 0x0, @none}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="08100500020000000500530001000000"], 0x2c}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="018f00e4ff00000000006700000008000300", @ANYRES32=r12, @ANYBLOB="0800c300741300000800c40001"], 0x30}}, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) 2m0.652521622s ago: executing program 3 (id=2948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket$kcm(0x2, 0x3, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200)=0x10001, 0x12) sendfile(r6, r5, 0x0, 0xf03a0005) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f00000000c0), 0x9) sendfile(r8, r7, 0x0, 0x10000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="080008000300000000001400000045ad00170068000060679078ac1e0001ffffffff21f330d3d02417d57ed11df3d33970fa735062a809bb6a002d8184ff9636116e8e99f6402901a49a5b49b79ce5c411d8abefc9bee1e4a16b47a33a25336aab4366074a1a9743e8ed3799e08502d9860529e4e05bb2efd97e56fcb07fe58cc9a863efef05f89c"], 0x25) 2m0.488331625s ago: executing program 1 (id=2949): r0 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) ppoll(&(0x7f0000000000)=[{r0, 0x2003}, {r0, 0xf401}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x68000005}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x5, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x48}, @cb_func, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 2m0.295223013s ago: executing program 1 (id=2950): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='V', 0x1}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000100)=0x8, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000140)=0x4, 0x4) write(0xffffffffffffffff, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) 2m0.147722735s ago: executing program 1 (id=2952): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000007f000000040000000809000000000000", @ANYRES32=r2], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xa, r3, 0x4}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r10, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x2c}}, 0x2800c000) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r8) tee(r0, r7, 0x8f5, 0x100000000000000) r11 = accept4(r6, 0x0, &(0x7f00000000c0), 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x8000, 0x8000, 0x9, 0x4, {{0x25, 0x4, 0x2, 0x9, 0x94, 0x68, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x82, 0x2}, @generic={0x94, 0x11, "a598784b50c93be489712fa26fee7e"}, @timestamp={0x44, 0x28, 0x66, 0x0, 0x8, [0x10000, 0x200000, 0x41c5b085, 0xfffffff8, 0x0, 0x4, 0x7fffffff, 0x9, 0x10001]}, @timestamp_prespec={0x44, 0x44, 0x5, 0x3, 0x6, [{@loopback, 0x7f}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x7}, {@broadcast, 0x1}, {@local, 0x6}, {@multicast1, 0x5}, {@loopback, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff7f}]}]}}}}}) write$cgroup_type(r7, &(0x7f0000000180), 0x9) write(r4, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r12) 1m59.751952897s ago: executing program 1 (id=2955): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000) (async) shutdown(0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) socket$netlink(0x10, 0x3, 0x7) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000000)={{r5}, 0x2a, 0x80000007ff, 0x2}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) unshare(0x20000400) (async) write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d) (async) write$tun(r8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) epoll_create1(0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 1m53.634688059s ago: executing program 2 (id=2958): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x60}}, 0x0) 1m45.948891793s ago: executing program 2 (id=2960): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x19, 0x1d, 0x1, 0x200000, 0x2, {0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40091}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x38}, 0x2}, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x28}}, 0x2000007) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) syz_emit_ethernet(0xbd, &(0x7f0000000300)={@broadcast, @random="22c68a6a8fc6", @void, {@llc_tr={0x11, {@llc={0x80, 0x78, "ae", "d2d886054969c9abaa51bdf6605ff36704b2cf64a11282755a561b8779b4507dd7fbbbd2e7f31dfb609855e6bb517a427a251518ba7460ffc87301683fdbd9fd6a164f9b1d8e839014de9772f6c06b342bcf284506df929a7819d3d255be037b72fcd1669099f26c3aa47ce2a581017505d17d77c7ec995d1de71f705cd802034361bc95aeabd4a73464f4e120b318c89a8bff1c181d95e32aafb261a8eeaf58b3c8bd073a7b0c7300815828"}}}}}, 0x0) 1m43.890048119s ago: executing program 32 (id=2948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket$kcm(0x2, 0x3, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200)=0x10001, 0x12) sendfile(r6, r5, 0x0, 0xf03a0005) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f00000000c0), 0x9) sendfile(r8, r7, 0x0, 0x10000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="080008000300000000001400000045ad00170068000060679078ac1e0001ffffffff21f330d3d02417d57ed11df3d33970fa735062a809bb6a002d8184ff9636116e8e99f6402901a49a5b49b79ce5c411d8abefc9bee1e4a16b47a33a25336aab4366074a1a9743e8ed3799e08502d9860529e4e05bb2efd97e56fcb07fe58cc9a863efef05f89c"], 0x25) 1m41.708523117s ago: executing program 33 (id=2955): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async) listen(r1, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000) (async) shutdown(0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) socket$netlink(0x10, 0x3, 0x7) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000000)={{r5}, 0x2a, 0x80000007ff, 0x2}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) unshare(0x20000400) (async) write$cgroup_pid(r8, &(0x7f0000000000), 0x2a979d) (async) write$tun(r8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) epoll_create1(0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 1m34.62699295s ago: executing program 2 (id=2964): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffffe1, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000011c0)={@ifindex, 0x26, 0x0, 0x8000, 0x0, 0x0, 0x0, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001140), 0x0}, 0x40) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, 0x0, 0x2010) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 1m23.405588006s ago: executing program 2 (id=2967): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x2b, @multicast1, 0x4e22, 0x2, 'nq\x00', 0x10, 0x8, 0x52}, 0x2c) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000240)=0x42, 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x4999fa8a21843244) 1m13.889822548s ago: executing program 4 (id=2968): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x9}, &(0x7f0000000340)=0x8) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}}}, 0x10) unshare(0x6a040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000003800010326cc7002fadbdf25e1542c47"], 0x14}}, 0x40800) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) listen(r4, 0x7fff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xffffffffffffff86, 0x4100, 0x0, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r6) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00032dbd7000fddbdf2503000000050004000200000008000b00", @ANYRES32=r7, @ANYBLOB="08000600e00001050004000310000007000a104e230000050003006c0000000400250008000600ac1e000100"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) openat$tun(0xffffffffffffff9c, 0x0, 0x107600, 0x0) socket$rxrpc(0x21, 0x2, 0xa) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) 1m10.735612432s ago: executing program 2 (id=2969): r0 = socket(0x11, 0x2, 0x10001) recvfrom(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x40010100, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x30000080}]}}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000010c0)={@remote, @empty, 0x0}, &(0x7f0000001100)=0xc) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000002800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000001140)={0x1660, 0x13, 0x100, 0x70bd25, 0x25dfdbfb, {0x24, 0x4, 0x4, 0x3, {0x4e23, 0x4e22, [0x5e90000, 0xcb4, 0xf9, 0x9], [0x9, 0x3, 0x5, 0x9], r1, [0x9, 0x9]}, 0x5, 0xe511}, [@INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "2acf8527a373db5d5e924195000784dd76a0c67b59ac00e50d2fd1645c230d8769ce4598476b4f4eeaedef575b6d7d46d38cfaf1f51df20f32f3d32c362ab220181310b6114c845e094f2c308c0859ced557c250bd7383c1938ac7facd5a3e8abf5bbdb82ba92315650c78b4b04f9201e9819b53fe9de32cb260cb21453336e19753d46b5e0337e2dbec4f6fb0941b72ea35eb32e90952d7d28facf0aa697da34bf6a8c6e4feb84dfe8672de34b6f4f5334bed17b1c2fadeacfd67"}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "c704bb735be32ba8be905342be4296d7cc7676b8397ee4f64e792c951a8ee6fbf750837d97e6612381403e002e5328605c783fc04694e7383bbb564e6e6356484ead31e577903c40e9716bf66a6df185a0b5c5d84a1bc580312c96fee862bb65455d49693a62f54ed661b21f6229997cd7881d7e613a10fd738ecccbdf9deb8b1f65bf28bff4a97580b8bf65c2414607ce52ce905cea711b5b4e260b70d97eb61f"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "4f5124d0314a7ddd38024c7e457c1f23fb599315598c77295071953e5a83f81c010ae101065b5a83948146b03f673494dfb38d69511afeb5fcb1170b218c8f5778c24b9566bb05fe80d3d273a7b1004be320b2e0c7427ca4ae8e09589a9da690c2ef0da62628f6000ba5a41a032d05bfe5c7f4972cf367101a5c9115f20b655ba63aabdb3abc01851e3a80136febbc6986139611e3830a43d3ee6d1772c31d29c6aa99d380b1697370c93addc831a1a5ba1c843236b024d330d0a9d522d668200536b95cd576e96d2919bf4cb3157b44d1e5753bed394845a46d"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "141d05d55e402d1f9f19bda9466633a4499f11117da07e6c168cf5f6416bba48045df04f2d904d4f1e7c9a1ab4ae06cc0a20b581f43fd2e6ac7e9b94ea94ca0911eab0ef83d6d24bb54b638a5c4c932a10d537172bb87b7397a53858fcc3c53de40b"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "0dbf02d57ea44d22e13fbd19f0a446c55a3d8bfe1dcac665585bd463305944662549e108f57ec959f18e1152da5d0a8d54df11021e3a10e1ac3537a42b47655146068e7b1f44e338ea522a5644b8604d7cc70164112839bbeff9f2cbc7d8783d8fc1061ed96ca2ca272d868820fd130b3b7484ae38ac5c49644b6fc6f17846fba0a646610fa1bb5e6e7e624e77635ce5657a9d3de399769fc6112376694061a8a11caceeee57d2309dd0735444c296766e4c4aa220d7a3748dba0b087ceb92030ccb52ce415d303a7a30f3ef378f4cb3957bc6"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "6bd3d5e31dd84ebe349b19f624a5c87ca0b77ccf20c15d6a1b0b8b4a51f609aac8949cda6cff8241ea74c8b4e635e1993331ef8a4b299ff3cec8b0f63d7e9d74060fef646d827ec7a6bcd07a3ceec2bfeb702defa88395d8bb883b8ced9bcb64d28f17ae35e09e0f9b90506a52cfef953a9e89bf2afd62025d11af07ae9c5bfb36e891114ab6e0204f3aa81511731cdba2daba0e447c26cb9919a1bc80fd64b935d4ac"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "8e87dc3e6c421158e29bba5889605732bb386d75fc6198195a9c0b79e97b1fe58d0c29a003fdb35d2207fa748435970e341eb10b8198da36a3f406ae35063fa92913d4c27d5e9012ed41b8a0bfc2d3b6a174a5a97d3670338dc96521fd75cc55c8791acf5c753b19a7c00f2c627cbcebdd5e04ee87bae5827616bcfc40617627c551f27ef540a8bcda123c58d8160f37e1b6336f2f393e8a825e7fd79a471b8ee97d5efc0a88be2a87032e36542efd633ba665454600ad70dbf403c1f439e13b46e5881f17aba09be9bad029a8784447f38d143090b3fb79541034a8fd0a21"}, @INET_DIAG_REQ_BYTECODE={0xd4, 0x1, "7d9bb850d835570f111dab4d5873db77cb78af050a1452aaa170ada10e1f85d9eff3ca88af09bba352fec2e2acc2ec1f197749fd0ee320a9cf67e6adda7d50ade7b4c3709e546bc6664220499f34625bf2f6a628eae072b113f69d2d0d8b54d5a8c660bfc3f119b9707ac45762bf300be1aaffd9debafe9c60691918b1166008ecb5d382042cc20662f06992ac13906e22865f8f100071d4049968d9cbb5d71e248a59d7bbd85273aeaec1cae62996f382fbb3c457fdce5ce5e16105221364a9a9693279baedcb8a30c3e2923d940351"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "06851263987d31ca0a0dc2a065ecaa14c51f5f54ecc791367e28c2743538c427d0"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "74491129e62c69de5b5d47f1d9e9b429cdd2f34484aba7b446b7d6d7b7d97cc794619e36b7e8ddf5b297e7835df8e82efcba513dc182e236e4ea5ab3ee8e124cff92dcb55316d2bd38e082ac2d7896b58919aba81e9c5481e90b4be7b57dc95fb1a77f3695d060372e5c997dac0f3ee98d89b98fde9b0d70d9f0376a50094c33a12b731d3a8c9b9337435ff4922452852613c2a1060f708d7d163d26487e75bc4c168e2180a966898484a66b12cd878bd73770f85b2e4edd690e59b257d7d49fa8a6f58395e8f57df7bd912f9b83d6aacc909a19dcf6fcdedbeb4156868c5bad0df1788dc79b510e97848241fd40f7821f52c4f345177ba8a6542796861a3eb90f2bbfd17e4f47741d00e6bc22446f4317a38250b3698be8b5f6a5637fc3661326d85bb16e0bafd5eb9ae5d33af37fe10dda614ba692dde1b6a7d1c8bea3dd714d1466f1d8ab3cb3608d639ffae21b267c8f46d72fa726076536eba3b06008ea0b599746606f7589d8f81c689302d53c3b2973f7e69adb7489d9fe0a2a4e1e5e6f6778ac59664b172c7d43352d33b50e20c145ea66389a7eb3e012c6db40ffd0d5d4fb766476adc4f8447c8047921eaa1ea80985c7a99346fc36989d0940da13dfaddf37591af140f6237fd476ae3a94d0b4889f836ec7af7c941dfa49b334ed0ad47c4fec5ffb28a0e24e32c018386f3e7c14ffec56ac52806c881baad60cad593d764f4c1cd254fb1a03d5575100675002aeba8543a6454379e5c81e276682a7c14dec822d2379b43f2769461200fb16788650436e77d0dc70ac486bb7244aec1a9d02b0923cf1a7d60625b4853413ef76d6db27106f63830c78c6580a8b90708eb92d0498858265ad27c58d658ad6bdfe9e1bf20824bb41afcfd4420fca6a9ed9602be0c4908e0c715c5b02137c1b19c1a53a2e3c9c3002873031c43f7fb4a1fd76980039f5d35f358c3f3f71f588ea817c1a13b8f796d0432b31fd10f1cf529edf9e5628e0c2a396b345ac472a689d983cbdd2678bcb302d8ed0ddc2e2dbc043d1c22c1f02fef3db88af1f9c395b00cd75825f5cec793fde0896b036d48585cc9d94a852e031d726d79be93161e3e4c936d17d9bf93c6354cc5aad2cf1a90e468644a37bc09e02d5a8814bf4d2321342da2ae37f0bff64f696adf5a2bf0eec8f054dec947d0f555eb1aa896339439cb10de21a2c3be346ce6c8c40f23f443faf47552a6e858c6369c99a0ac74da333f2de6d968f803b780a11a788f379b0ae19af0d27a1de0f5527820ac8c2f1d744002507bdbda54635dd3a1bffdf84ca2f7fb27de56beffcbe66262b14e066fc44e7d5a54027415b094ad93da0475c01e281c8dd898842d08fedacbe34d24d2cf9c595c539319c6a9ca2a0de93cba69ad0164496241e7fb7497363bb0393d1039c052e38fbc69eb6df05a264f01f6c0f2ffc43daf80c21e4bdbc5e5028cfe0f32d8f52653d3c99dd676fc3e1dcc4454191c4008fec6fdbef5fe2294309e7c1c15d96e50ab26a2a3d3320d0f2357fe2dd079092c789dea7ace1b22856c62d11fd8a008ef1a499e7fd7bdd7a5b819510928113015affed8036fd49a4c4de405a9047ee69cd99d1b4c9054932e7c27149f56481de619aba08357aa07458b989ef9028346af27c9e72ba7f0270eec1ec0cdef1e203d59afaaf4d1d3b03eea134f37441065bda8e54ce7209362d7e359f70d68bfe15d93dc6a9a609310f66a32a1e1aff819dbae6ad44847f5fc2eecefe3ceb0659f17689c9bfa8dbf8fda3f110e7bf5b755072d2c04e823e79a527fb83487201139d2f72f09afdec6b45e1d6e6a85790ac165793f0a3f227e9ed5b61199f32910c2da88d1efe3d731bb57028062de2d9cd82d3f7773b0b1deeb20605ecc381042e591129b5681e18bcd0ef8e6edbe3aa7d12f1247557e78bea48d98c9bb397ca2895374484cabe245379648de379f45bb7e57ef5f829e48bcaa351f1cfe968d6cd320c485a70b79faecb7ddc94a45d373fabc1e0a6b96c2b114d69fa7997db1f2d825687f9adc71930adf951fa30a98fffc51d01d5ddf51b8ac843e1e1783323885c864814e132dcd2d137458242a4c96a6cac68be0122b11bd8985a1ddacc34af8fc45bc4bc99ab02698ab0c0d581eb2b60ae342f10f5861514fd8275db163f0ef335ddc1bc0ce865a4b90762808d5ad6b8de56b34ca348c5a9e52932e78bd858899fdfd6c133e0d4a8212eae4698f827d267da2a889adf14f9493ccea1fdf91d63a6f1772f847f80a9b699d7ef5f87336754d8c76b4723bb20c00ffb7e0adfee570bfe465a15a3e93a70a86c8ee0261c8dd273de62322ee8345528d2240ab85b47d1eed0e889c6b50dad39b39147ffbcd7e5777397a3d76fa000fdbe71abedc90635a088539b1e546714970b7721dcae1f26ef6ff729a5948b2f8f628db1bd9059c40a820cdb3ebf4ea7843c71c0228d56f557fddee77c0eb993a98f77a625a7cb076671f47cc22573922149ad03019ea20b63cd7e3b9c1bf02b77bd9ec764ee00fba8e37c2e308904b53176e91c1d9ae8828aac34c54315e3da5877390b8b70aff6a4005955d4582c4d10484de60c75136f4d235a4192a2c276206b994cf2e99e5c319ad36493ddb7eb59238efc72499036663ff96efe24a8a439e149f0732562d94572c457b3689df6a6b7520eb6f545eafca23882fe91459c8a479f20ed54c51bf1721bd54ee3585d5c55b5fdd73b2e3e4829dc057779bb1299fc35957659cd019adf91b05fa75e2f6fd8a11b28ffbb2baaf770de86672ef3af4ba3424971e663abba2d1b7d1ef818120856e868a20f4fbd336698a5e21140766ea4488e55999e4fc7b47d95478c95274decafe6d169acae20dd208d108f6d0bb925cd3183f529051195986b4a154125a7672ec6290b02d086d898b8f8cce696aaaa0da5792031966cdf1197144d295d9b1c0275f81c18b5a5220b70adf0866aeb1481969b3a6e3409bd0643fc2d7336f5ed85775398d28c428f597aa8da3a61353acd0b657f6df8234ce2d3a3ddb007b96ea4c72b03b98d91160d1d5d4ec7298d422b67409524c0bdd51956a6b3734ad1e09848c0bc9f467a0cfbea472c952cfd52ae1b3be120b678ae5b86203055e9895cbcc9ddada6c80627b56b7f676d2aede281097f0bb971050c14c8c1d8d6603e2bc95ed7445a410dec5c03b17320eb37120f44b073fe20a5bd2d4db28f4af308b5a404653b1112e76b8bec3647895499f8d979ec06093502bcfc74f424277983da017c50a9e498fc3a3a2cf779a4a3b25824bf20ed1685dd61165807a05022086acd9afb6f782e75535b2051a7f6b8d44241aa41ff8289a921e430e43f12d018ee161f38a79d3cb2455a223327a430d4bd5173784e40b50970bfe37e5d0cb14b515867f3e70a1a2de88ff8b77d352840c5fa147722a7b9e7e7eb6549ab5e0f76744fa17ab0e2481afe68bb181cd3dfe41dd282e71ded391adea0d9a23386b9bafac5f7ab72475fafe6ad7f2fc56937337acfe22bb7f3198d5edb1d09750d257dfb99764e69075baa870ba50d5d631e005f191d23f335cc5de23a405c0fd076a034ea4a73efbc27fcab34a709c52847289d2bfdd166d6f0a397ca334b65b761f6b421d93418b100a5e14264a2e8d3721cc5247362b3549fc617b75824108badfa9bc1c6ce6faa4aec7606f8694717bec750f822349abf40e3f2e9a3ade7cf44a484281213edaea267c9aff4c0524acbf6e51f991462acaed14bb1a437754d4b9702837a7f7b1fc78ea128b8af65f4b65c58f7d288257e76f93e80a445e0dad144423af3308fd74ddbf2589855d0154924f70aebdbe9e4ec06214264e88c53c9cc6995251ab9a92fc8745848b3dc94bbf487052b77196a6bac91b9505cdfcd23a6d841fbe5e54484309a7b386cd09f9b67a863d90c732ac531c3ddb15981a734fe98a8dad9c33ab0d958cd826cf13ccdc84f50262c93a534d6583255d75faeb1a3e56709ab782fdc185803499ab990a44477bea0e4ee8ab60db9a9033c7949119ee624fcb7bdf5618b231b69cc45fcc2c00ae0713acc8f50071ac3b887b43b1f746b545e5e45aca6ab6edf1fea363c683d7dfd15191d22b05f633ea418e7cccea5f8616f43f9fba8e90b77a81ddc1900a4bbc1a4689500fc28a5fa30580087fd2029f3f2410054f3c9555fd24b3c98af1385ed7bf2b318806ec0233cd767a12d383a174292782597316143758c8dbc28861ddc0e735b6fb29f8857d7a6bf8edf0d4ceff913813397533b8970ce92070de8a1edb81d8d9e2b6c1bffc4e3cae0150fb749de8aefbc45c4997ff6ce2c618b51d01b8ff7c7fc548e7a316fb6f3abf6c78e47fb9874f3541b83d7611b4197e22b73c792c09e91bc3af3760cbfa8df0da0ddee0d0aec4a353e185fb7609f974971b80447efed895244c66377799cbb9cf7aa555460f7f48cfb3cc1cd7db0fb64bc9f6826c53436503d75a22b85a297321d5e57322dca1dc891a1c7e18cec5ae993ca6bc4239798c1c0a0649cb9a989149c6582901312e0ec722e9d637870bf4f4d194c278d004037e6b2f80cb91a803d343b980069a156804a1eb5e38f2232971357d32ca53e27f6e2e2057bebd9d8542b0a985c899222fd54c841063c9b76ea37041e771e91f72dd6d4dfcf51a9634b5023941e47f4da7a1dc4b35595f914040d1aa225c76edcc36607fe688221f62df4e7f53548a0f6c4c8e7c2e54c4aaf9f7eccb9be1403df9fe6d5d43441e8643ebb6c6ead780423c157b62be3dd5f4346b503b6fb8134b27bf91ccab83808d395e21992de0a2a9d63ab1249d069b56a84eb47d181e8052bcbe42d91992d2c619f4924a8149ff4114ea840bf3ce51546dba9dbff3b21b7812b823ba4045ad6fef9cfb7c6238118f924e4db0a30e2b56b491e7cd7bc5da363e70736e72518b38f33bba277aa6d39a6eba6c6d2e343f582bebb3250b11d8c51b5e388c2cdcb5bf0d88f74c71625a0e710025a8b235705d97d10edae00f28a8f4aa24ef89a06c49897132af760777285c18336a62b0ce95977d13d9e87d16075493b40018bbc36274c3e255d349eec060d24a97c8af53f4a7c4bd1f56991b853964d1fbf68a5da2abcec6ec6cc3f489a32db7045a2c749f54cdfa8258c3a16308fdd567a0faebe7453feffe141ea3e797715781398e599932566fda889a5077e2cdddd81ffc314ac311332436af5db5a474ebc8facdac40f8d1311b668b231b14c421f4d7fe5c422e7b998e90a286bedbf44e1f205a3f21f6fb1d3ffb6110b6a3eeb485283cd9d5263f474d038b3522f5e23c80365d613184cd223c93ddfa38ae46148f25785da28a01c12647e7c3b55e356ab694fba264484a2fb39eaaebe62a8b166f645cce11976e3927dc213d277027940b2710ac613e6b05f528460b8a96c747b4260468d268db26a3e082828e0bf67f02490adefce3aa412510273c5e3e8f029246864ce937587e32e7ffcb3b5a75f8f26fb041bc461c10ae5e45e37767107bb3f964c2a95466f74c66c8115914e5390ab1008c2c2826ea024a9afc601e07e13e196badbc7880c5c33f12a9ccc47149fc3ce4973b42afeccf1586dd47b401c23f0d0953e02caf982be2f6dd5f209026e022bde280bd8ea6f936b3fdae6e6db0e992a0d7788028943b10ae0af6e16503418bc3837223eabc5f5b83edf1d148cb561309237b361707b376831f0f233252084d76cccb6d17b1c4d8536fe67d71efbafc425b81f133b691fba03a8e34683bb97d8fa382b38f2ba4e"}]}, 0x1660}, 0x1, 0x0, 0x0, 0x90}, 0x8000) 1m3.489171588s ago: executing program 4 (id=2970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000012f1aecd0800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x1b, r3, 0x1, 0xfc, 0x6, @local}, 0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x10, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "0049f2"}]}], {0x14}}, 0x94}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@loopback, @multicast2, 0x0}, &(0x7f0000000180)=0xc) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000005c0)={0x0, @aes128}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x2c020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r11, r11, 0x2f, 0x0, 0x4, @void, @value=r11}, 0x20) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x26) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r6, 0xe04, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0xaa9dac75f296b2ea) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r12, 0x103, 0x6, &(0x7f0000000200), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r13, 0x0, 0x0, &(0x7f0000000140), 0x4) 59.853984698s ago: executing program 2 (id=2971): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) bind(r0, &(0x7f0000000580)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000006c0)="ff83ffff106c3e5990f67e9eb3cf", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000006c0)="ff83ffff106c3e5990f67e9eb3cf", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r3, 0x0, 0x0, 0x800) (async) accept4$rose(r3, 0x0, 0x0, 0x800) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x40) unshare(0x8040480) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) socket$kcm(0x2, 0xa, 0x2) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000404e000000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'pimreg\x00', @remote}) write$tun(r2, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) (async) write$tun(r2, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) 50.303413542s ago: executing program 4 (id=2972): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9}, 0x14) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e1c, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000045c0)={0x0, 0x7fff}, &(0x7f0000004600)=0x8) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 43.28445387s ago: executing program 34 (id=2971): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) bind(r0, &(0x7f0000000580)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000006c0)="ff83ffff106c3e5990f67e9eb3cf", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000006c0)="ff83ffff106c3e5990f67e9eb3cf", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r3, 0x0, 0x0, 0x800) (async) accept4$rose(r3, 0x0, 0x0, 0x800) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x40) unshare(0x8040480) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) socket$kcm(0x2, 0xa, 0x2) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000404e000000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'pimreg\x00', @remote}) write$tun(r2, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) (async) write$tun(r2, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) 37.988535327s ago: executing program 4 (id=2974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f00000002c0)='connect aa:aa:aa:aa:aa:10 2', 0x19) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000f80), 0xffffffffffffffff) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x10}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x24}}, 0x44844) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x43}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000340)={'ip6tnl0\x00', {0x2, 0x0, @multicast2}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) recvmsg(r9, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="4a5505b139846a302bcfbc0e7f901f7d0fb5f607214f13953f82b18f762de2cc650e49b979f57b88fcfd43476b2cca71eb7936bec2141ef3c65e6d03edeca4ae23827bf6a20c3eff475e8289f4b3e31284c27278eb402a023836c112cd68cb8bf57485e5cc603f2f2408b73f7829a9fae970bdbe632377d62452e01d9c6648b286d2a1aec3b6cb048344cdafce5fc45de1e35e92b8b730f8296095410d2a3c4feedd13201bce7dac94ba7306bf16fea5146568bb3d00d51c63755f7713c7fa1ffdf077bbb51d27d56fec1143a7bd59d117b8905c3fc1a7c5697b0984b8b280", 0xdf) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff000010e800000800450000780000000000019078ac1e0001ac1414aa05009078e00000e0470000000000000000110000000000007f000001830300070700ac1e0001443c000364010101000000000000000b000000fb76cbfdc9f440ec2b1100e000000100000000ac1414bb00000000e000000250e141d6908cc05ecbab7796c900000000ac1e000100"], 0x0) 26.831629201s ago: executing program 4 (id=2975): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) clock_gettime(0x4, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x33f0, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x168, 0x3, 0x0, 0x1, [{0x128, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x47, 0x6, 0x1, 0x0, "2babe88d1bbdf2e94daebb5edfc3c71410af9b6a948c1bd68b07c7fd2d476fff1c04c415dc03571b53560cb13c901d88377c6d89dda3e0c0540582756cd7b242aee9d3"}, @NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x9d}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xbe}]}}}, {0x40, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xffffffff}]}}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xac}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}]}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x15, 0x6, 0x1, 0x0, "e0c49ea1ec4ccd64347c12420fdbbf2d1d"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x325c, 0x3, 0x0, 0x1, [{0x27a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "7f86ee1d7171e0c5d472bc0a9fe6b1412114891380187bbd8580b691a86fcaf8d18e3460f78cb35b8fd8f4f4b1c5d855da906f5337470f8935fcac771ec8d1f588469f5530b7369ed7f9b83b73dac96bace7fb100e9a766aa4f0793301746978ccaf33df9a84eaea73effc33f2f28ca62455abd92105ffdf06"}, @NFTA_DATA_VALUE={0x6d, 0x1, "af2d6baeef3efe1c8789b98aefc064ce6978e2658ccbeb6c3d07c9537f2e778704adb8d9bd7a10c44a110ddd79c48a23630a59a4795d607dd4d4e6733bc7b5a3de734f449e755e542390e2f0ae6d594a77a060c152241e95f6c1e1f39ff138d85bdcb9128d3a318e37"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "dd3c04136a30dfec9cbfcdf9ea75e8687f13e20eb0b2a78d924efcfc24c260788163b8719a00dbb353dab9ed636fc89654c48799ad0ad97d37b68d"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1d, 0x1, "65bfc0b92519b2e7c65d9a619c3abf64d14e58e5ba744a9313"}, @NFTA_DATA_VALUE={0xd6, 0x1, "b030f605fa586e29def54b2001f7a0e9446c0c48281279b0ebf29eebc8379600b5ace3a990b9ad1afb29c53013f080e52a96d06ec63089fe807019890a29d63f431bee091a41bcbbdb529dd5dbd56813b68ceea985b6b78b5376c0aea0850449756d89a2b93eb9f6ad96eea1d59ae383c0c81fc305c31e824b677200c0e14fa7bd924813983fa6a09e1eeadcc7ec258257fefae3f835d0fbeeec07a9ebce01501ccba6692143094d803f387696e0fccb0adedbe2eb103150e4453e52c2c4a2da0ea5c234b34dbcfcd39d0b7b040973f2945e"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x59}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x1ac, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x86, 0x1, "7a2fbc9a430e9d64f06242449d9c842fd29eb7a41b9ae21be21c28d156c64d7c8cbed4b62d14a1e8d9c1a048c55bb54daa3e229bae94fdef3efe159ab688082baf8e3ebb041b56a6227b3fadc56b5944447f9e593b888df84397a72afbaae0ea35f4b945b9b697fc0cbd7dab13162a1e8eaf8071d54ddf4d2926c944fe11adf3b605"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0xdc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "f284700c064a"}, @NFTA_DATA_VALUE={0x89, 0x1, "08d7178a0e07a7fe3d957f54d2f56000f6cb76800a0eefe492d40ac1e581ebdb9aeaf5788cd88a3830ff790fe7a89776ffe91a8ad2496ed1e1ef37ed4f3c5559fa9173a9532eee043b74536510f3179acbbf7a7d246d791888378dbbad537127bea634939af4b1e38ec9a7b75b00fc2ef1e26373e23a50fe4860fbf0d8970de360dc36c742"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_KEY={0x1114, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf2, 0x1, "e8993041e0c18e2188723a192c1dfdff36fc22df1770bffadde36e572d9bcf23c7ebce6da6c1b3fe06fc0cbea44f92ae9bff351b173601f4b9975093cfcbc18dae871ac424a951acaa7261a5e171cc1955cd3334b82890e5b7b59c86c138ef1601b50af5af1eb93eb9946ce53479dc055eb7c361af8e4c4e1a2783a75796b037689ac57ddafed88fbd729a283470c7c53ff79b76ab680c6318f8f1ffba479d4f895c0a05ed57da92cd046a8de5889a65052321d32c9df60a98a613a7c38f1d0ae25e485acdcab175e8cd9261b009605d22e73d8c104dcd1445315b5272ab56f40c1c8cb77241bb02eaa046ce7a71"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_KEY_END={0x10e8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xdf, 0x1, "db0e2b9f8a04d56fd5d40695cbc4bdd2c9b23a6875a0f5e30b9706f7ee65dbc34bec1a72f05ad6e5767adbb197b24b29e8f89a214eae527e491aa4aa4f6678597661049eec9df1dffebf0ad84de3c9b3e10bec6107fa6c485bf9a0f5e7e57ca2384ebc32e68c39ce87459d68b12cc8540c52a96c1b5e57f2109f4ad2df71fecc66775841a2b864d828997d568e5313b8d0a6e4b25a25a5273e4d658dca432e8ea8f6e44b17de238ad08d1c460e9ba400da54d5274b7799c527d4a1d80e0b5d7e90627c114f8ab8b76a984bd3b258659c7cae353a2f117df26c7351"}]}]}, {0x74, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffff7fffffff}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}, {0x474, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xe5, 0x6, 0x1, 0x0, "33243f67a7793f1cc1e0ee2c9d52fdef01f8391f5526bd415e9e4959d186d89debf7f0371e592997dae0400fe4f6e93cc2820618802a89885624f373d5692112f6827f006d1136a1b7ee76efd7002995bfde258e8c01f6b3a67d6aeb98d33b5257438f2b2d7eb23d8e1559cbed3af40ed67361e23c288c15720f617e408b5a343c19dfffd8f64f4fd8d1215425eecf719d35ebc70f1728bbf5073715a480de66cb429ff6c0e033f5181dddd1eaaece360b98acdee0f78b209aaa37ad67a4e0fb28a5874a1befae6bbda5729d91331e20709f1ceb7ee11b8da055e0da42991e2516"}, @NFTA_SET_ELEM_USERDATA={0x60, 0x6, 0x1, 0x0, "94369bbb3e27b266b30d350ceafb6d5157dab188150e20988768ba4869873736a920e598fbd6b0362ed2ae443c174f142357abb2ea6f1caf29696ed91438315548568daf3594d1c4b85de74b0d04d0a3728b78f25b0edfe1d6e4d0b4"}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}]}}}, @NFTA_SET_ELEM_USERDATA={0xd9, 0x6, 0x1, 0x0, "20e61ffad45cef549b644f673a0c8a0f892a1c65fb06f7dbf6c68693424646b8428ebf392f392b5f44eed37d0df1d28c7ebc9864b01fe8cd2e607468debe76555090116c3656762183d17b443228d54b17597d194bb0c1125f2b7876ea88230b33e32478a51f60c273b8430ae63443773af41102d35a46b69158cb022eafcc55aacf2d69704d8edf14763700f87559de59ba0f699e835e5025e4e7c9dd5df37db61ba43f54a13707099e69e6aeb765bc2a01cbd1ebee4a3a60c0b8c08b79aa54f6b7c83d8dd7a8ae6bc02a3448293193f6f434c154"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x224, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdc, 0x1, "2d6e72b8e6d8952cdb395ee4815a8041e2862e75356e2f143113a757fc1696316ad1d69abcd9abb67be42dbb403c46b816bb8e9df535d63fd8f781ffc049758e93e0d81b06ab7c7c7e09c9be5b0feac3b78f4f53b8c43d9f20e7540b7e2aa99b52d6d6431e387591737e557bde1c1263eafcf38b6e694e7f857f19db4287fccc893fd66b2a19b26af95f966c161f4c04ba916f23f1f9ce651a715d5639cd0852233218d7e57db9d29f4d024071df45922c4395172a1ab7de5f419b7d507bef9d949b7b2ef7cf959813688b2a94fb9bca743be13eb7060ec6"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x7d, 0x1, "1394331a499e944dff01949d869b51266f462a85482441fce6b5c563a2192cebe1b7778ca6140d3045df4b5fe6569b392ee5468d29824da748c766a54d9b955575780d5e111b4d2bcaa8049155694acd4e4532066c500e62b95c5e55ee9973c70e5e67e390c3ada4f21c22387cc3287077b991fe67129cd7c4"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x98, 0x1, "0943f7a78302c364359df1be5cf9b1b1a2252c4f4f852f1ad65df66f07bf37a7f019ef9d7d273af060794c4d5b7848f59d9251de169c084dc667926e4de0b4ab58f5fa69c6a05ea7fba7a66db91ebc1f9c6f4f0ca0bb2a36ae9a81c1ed430a2019ff5577f015c60c3d4878007f9bac0093199f4ba7f7e7fb8d74c545fb3aab4c9ad6722a1897f3833f2e865e2b5cf51153a13f90"}]}]}, {0x568, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6398}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x1e0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "60cd869a7cf73550df351225c159d7b27d528cb28f9b115a4d995aa0944f2707b5677753cc5dca1347dfe422c532d31fe9ae4104f9e4ddd33a7d12b78f7d245a7b47caea5162c8ad326eb236fd1bf63ec4813ce89cdb5aef4c5f6f45ed9dee547d24c502c09f7d2c7df25febb7b8ad67a8d31037d5c831e27d8c833eed71d45eb2145c5dbce4ebdd15d4afcb6df19dec52a70526b64d6bd001fcc9004f105954f838d6665ad6aa817d8aaa67f678bc048317202bb208a4e870b4eae6cb3410f5e589904735ed5a9e663bfd2ab9595a1a0ea6"}, @NFTA_DATA_VALUE={0x6d, 0x1, "1d50ec8e9e02ca9a31f114e3c543747aeaa5431b3314503160244fdcdfbb53cace6524d0577519a6c596d90c55a0d294403154b30b763af86669107e42fffaf9b415d204e41e5389641f78b801de21407423f7510f9b0f5eafa58167f149840403a858317021ab1c14"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x330, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdb, 0x1, "ec37545a673cedaf827cbf19dd0a004984e8ab80ab4ceacf88d47bde615402352a984e92fea64845b7315ee90190e45827faae74d686dbbb6331a7ac336af07735b13745a4d8b53f04790d32dd699e9768bba609ef81cc609edfe7e5af9e5cefc6120e7b83e437d1033d57660edca315322e9760576a6008d6ce345911436b75f8ed3881fbef9d2a9b819dde3167891019e6b5559b777551eee7a7fc751dbfe26521f38c83fa329eeb7916dd9534511b7320f95603d41daccf15e436c0e2b219841ec4b7eb6215c4002919821637270af350f1a2ba8503"}, @NFTA_DATA_VALUE={0xe5, 0x1, "f936b68514aebea68c6db9bc8968e15c6754d7b27b6ab705ea1380270698e41e809c8e412ee29660ecebf07744c3fc221edd000abf563d08a841e6945f4ff996f0c28fc7a94226c875363c315082ae4d138bff5121d712143b8ee5201120ab4871d6d1f5164e2c999b889b5be15e249f9255a830e319e019b5108a07355b8bbe60a88b083c1a581e4cdf88448abcfcba5e69c9e164ff6023890bee1e6e0d5963d8dcf2268c8290992dd1bbde8150b1e3bcab61edb4f2bb981b1b4f323f6a0d931b4e544429db9ade2bbfab3e48860e387247793cc03b023377d9ca7a9de2342e81"}, @NFTA_DATA_VALUE={0x2e, 0x1, "4717b8e3ef448fcfdc03fee62ed54f24db3b3ef57f53f3e8e73a087f7f0cf7b63894915990c9b8504b35"}, @NFTA_DATA_VALUE={0x18, 0x1, "28b60ab0b9b6831cf72f6c38f50504ced77da315"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x86, 0x1, "48fa053a8a543377d6dc636b2fb68bd4357305c78422b89646a74263ddacd50ec3c3bdb5034b102497deda6a41e0843d801c06649206c74e3996bfaa2d74b4bdc5a4091b675dc0691d51bc9394612ff7fd066bcec2207d570fe9473003edd401581674e934ec852e831bd433e11324fa96944d5b1fc83f72477732b3b610eb33ca1b"}, @NFTA_DATA_VALUE={0x32, 0x1, "35ac94620e8c4a3cbfe66b49dc07d204f110d197f61eb69f1195a8208fb2239da1124779f6d466564a147965da77"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffa}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x60, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2cc56cbce8f4825b}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x3488}}, 0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10, 0x80800) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000180)={{0x3a, @multicast2, 0x4e22, 0x0, 'fo\x00', 0x1, 0x8, 0x78}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x1, 0x6, 0x5, 0xd18}}, 0x44) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) 18.132110659s ago: executing program 4 (id=2976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001800010026bd7000ff5bdf2502001400fe02c80900080000060015000200000014001680100008800c000380050001"], 0x38}}, 0x40800) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r7], 0x30}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08"], 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r3, 0x33, 0x0, 0x7, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000450a0016006400000b3290780a6600feac1e0101328e00"/36], 0x24) 0s ago: executing program 35 (id=2976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001800010026bd7000ff5bdf2502001400fe02c80900080000060015000200000014001680100008800c000380050001"], 0x38}}, 0x40800) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r7], 0x30}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08"], 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r3, 0x33, 0x0, 0x7, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000450a0016006400000b3290780a6600feac1e0101328e00"/36], 0x24) kernel console output (not intermixed with test programs): ompute Engine, BIOS Google 08/18/2025 [ 344.401600][T14664] Call Trace: [ 344.401607][T14664] [ 344.401616][T14664] dump_stack_lvl+0x189/0x250 [ 344.401653][T14664] ? __pfx____ratelimit+0x10/0x10 [ 344.401684][T14664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.401709][T14664] ? __pfx__printk+0x10/0x10 [ 344.401744][T14664] ? __pfx___might_resched+0x10/0x10 [ 344.401764][T14664] ? fs_reclaim_acquire+0x7d/0x100 [ 344.401797][T14664] should_fail_ex+0x414/0x560 [ 344.401831][T14664] should_failslab+0xa8/0x100 [ 344.401859][T14664] __kmalloc_cache_noprof+0x70/0x3d0 [ 344.401882][T14664] ? wakeup_source_register+0x5b/0x380 [ 344.401915][T14664] wakeup_source_register+0x5b/0x380 [ 344.401947][T14664] ep_insert+0xef6/0x19e0 [ 344.401992][T14664] ? __pfx_ep_insert+0x10/0x10 [ 344.402021][T14664] ? __pfx___mutex_lock+0x10/0x10 [ 344.402055][T14664] ? bpf_lsm_capable+0x9/0x20 [ 344.402090][T14664] do_epoll_ctl+0x7f4/0xe80 [ 344.402126][T14664] __x64_sys_epoll_ctl+0x163/0x1a0 [ 344.402157][T14664] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 344.402182][T14664] ? rcu_is_watching+0x15/0xb0 [ 344.402210][T14664] ? do_syscall_64+0xbe/0x3b0 [ 344.402235][T14664] do_syscall_64+0xfa/0x3b0 [ 344.402253][T14664] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.402282][T14664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.402302][T14664] ? clear_bhb_loop+0x60/0xb0 [ 344.402326][T14664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.402345][T14664] RIP: 0033:0x7ff1f4d8eec9 [ 344.402363][T14664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.402380][T14664] RSP: 002b:00007ff1f5c1c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 344.402401][T14664] RAX: ffffffffffffffda RBX: 00007ff1f4fe5fa0 RCX: 00007ff1f4d8eec9 [ 344.402415][T14664] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 344.402427][T14664] RBP: 00007ff1f5c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 344.402439][T14664] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 344.402452][T14664] R13: 00007ff1f4fe6038 R14: 00007ff1f4fe5fa0 R15: 00007ffce61a2dd8 [ 344.402486][T14664] [ 344.993421][T14695] netlink: 'syz.4.2194': attribute type 10 has an invalid length. [ 345.015246][T14695] netlink: 'syz.4.2194': attribute type 10 has an invalid length. [ 345.042164][T14683] tipc: Resetting bearer [ 345.191221][T14702] netlink: 'syz.4.2196': attribute type 6 has an invalid length. [ 345.220219][T14702] __nla_validate_parse: 4 callbacks suppressed [ 345.220237][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'. [ 345.455642][T14710] FAULT_INJECTION: forcing a failure. [ 345.455642][T14710] name failslab, interval 1, probability 0, space 0, times 0 [ 345.480286][T14710] CPU: 1 UID: 0 PID: 14710 Comm: syz.4.2200 Not tainted syzkaller #0 PREEMPT(full) [ 345.480314][T14710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.480326][T14710] Call Trace: [ 345.480334][T14710] [ 345.480341][T14710] dump_stack_lvl+0x189/0x250 [ 345.480370][T14710] ? __pfx____ratelimit+0x10/0x10 [ 345.480401][T14710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.480424][T14710] ? __pfx__printk+0x10/0x10 [ 345.480454][T14710] ? __pfx___might_resched+0x10/0x10 [ 345.480472][T14710] ? fs_reclaim_acquire+0x7d/0x100 [ 345.480504][T14710] should_fail_ex+0x414/0x560 [ 345.480534][T14710] should_failslab+0xa8/0x100 [ 345.480560][T14710] __kmalloc_cache_noprof+0x70/0x3d0 [ 345.480591][T14710] ? wakeup_source_sysfs_add+0x57/0x2c0 [ 345.480623][T14710] wakeup_source_sysfs_add+0x57/0x2c0 [ 345.480653][T14710] wakeup_source_register+0x18a/0x380 [ 345.480682][T14710] ep_insert+0xef6/0x19e0 [ 345.480725][T14710] ? __pfx_ep_insert+0x10/0x10 [ 345.480750][T14710] ? __pfx___mutex_lock+0x10/0x10 [ 345.480783][T14710] ? bpf_lsm_capable+0x9/0x20 [ 345.480816][T14710] do_epoll_ctl+0x7f4/0xe80 [ 345.480851][T14710] __x64_sys_epoll_ctl+0x163/0x1a0 [ 345.480880][T14710] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 345.480903][T14710] ? rcu_is_watching+0x15/0xb0 [ 345.480929][T14710] ? do_syscall_64+0xbe/0x3b0 [ 345.480952][T14710] do_syscall_64+0xfa/0x3b0 [ 345.480968][T14710] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.480995][T14710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.481014][T14710] ? clear_bhb_loop+0x60/0xb0 [ 345.481037][T14710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.481055][T14710] RIP: 0033:0x7fa050b8eec9 [ 345.481074][T14710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.481090][T14710] RSP: 002b:00007fa04edee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 345.481111][T14710] RAX: ffffffffffffffda RBX: 00007fa050de5fa0 RCX: 00007fa050b8eec9 [ 345.481125][T14710] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 345.481136][T14710] RBP: 00007fa04edee090 R08: 0000000000000000 R09: 0000000000000000 [ 345.481147][T14710] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 345.481159][T14710] R13: 00007fa050de6038 R14: 00007fa050de5fa0 R15: 00007ffe7dfc2e58 [ 345.481190][T14710] [ 345.540449][T14707] vxcan1 speed is unknown, defaulting to 1000 [ 345.752092][T14712] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2199'. [ 345.964565][T14717] netlink: 'syz.4.2201': attribute type 13 has an invalid length. [ 346.305547][T14707] lo speed is unknown, defaulting to 1000 [ 346.321275][T14722] vxcan1 speed is unknown, defaulting to 1000 [ 346.374463][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2204'. [ 346.559534][T14730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2205'. [ 346.634307][T14734] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 346.969319][T14722] lo speed is unknown, defaulting to 1000 [ 347.175349][T14756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2213'. [ 347.235732][ T5845] Bluetooth: hci4: link tx timeout [ 347.241364][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 347.276511][T14756] netlink: 'syz.2.2213': attribute type 101 has an invalid length. [ 347.286016][T14756] netlink: 'syz.2.2213': attribute type 7 has an invalid length. [ 347.362767][T14758] vxcan1 speed is unknown, defaulting to 1000 [ 347.490058][T14770] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2216'. [ 347.822457][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 348.038914][T14789] bridge0: entered promiscuous mode [ 348.050677][T14791] vxcan1 speed is unknown, defaulting to 1000 [ 348.050967][T14758] lo speed is unknown, defaulting to 1000 [ 348.115652][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2222'. [ 348.132212][T14794] netlink: 'syz.3.2222': attribute type 30 has an invalid length. [ 348.142772][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'. [ 348.155917][T14794] netlink: 'syz.3.2222': attribute type 30 has an invalid length. [ 348.409615][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2223'. [ 348.749763][T14791] lo speed is unknown, defaulting to 1000 [ 349.295399][ T5157] Bluetooth: hci4: command 0x0405 tx timeout [ 349.718260][T14838] netlink: 'syz.1.2233': attribute type 1 has an invalid length. [ 350.126712][T14847] FAULT_INJECTION: forcing a failure. [ 350.126712][T14847] name failslab, interval 1, probability 0, space 0, times 0 [ 350.160104][T14847] CPU: 1 UID: 0 PID: 14847 Comm: syz.1.2236 Not tainted syzkaller #0 PREEMPT(full) [ 350.160131][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.160144][T14847] Call Trace: [ 350.160151][T14847] [ 350.160159][T14847] dump_stack_lvl+0x189/0x250 [ 350.160188][T14847] ? __pfx____ratelimit+0x10/0x10 [ 350.160222][T14847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.160245][T14847] ? __pfx__printk+0x10/0x10 [ 350.160282][T14847] ? __pfx___might_resched+0x10/0x10 [ 350.160303][T14847] ? fs_reclaim_acquire+0x7d/0x100 [ 350.160336][T14847] should_fail_ex+0x414/0x560 [ 350.160376][T14847] should_failslab+0xa8/0x100 [ 350.160403][T14847] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 350.160428][T14847] ? __kernfs_new_node+0x9c/0x7e0 [ 350.160447][T14847] ? is_bpf_text_address+0x292/0x2b0 [ 350.160466][T14847] kstrdup+0x42/0x100 [ 350.160492][T14847] __kernfs_new_node+0x9c/0x7e0 [ 350.160509][T14847] ? __lock_acquire+0xab9/0xd20 [ 350.160534][T14847] ? __pfx___kernfs_new_node+0x10/0x10 [ 350.160557][T14847] ? kernfs_root+0x1c/0x230 [ 350.160582][T14847] ? kernfs_root+0x1c/0x230 [ 350.160601][T14847] ? kernfs_root+0x1c/0x230 [ 350.160616][T14847] ? kernfs_root+0x1c/0x230 [ 350.160641][T14847] kernfs_new_node+0x102/0x210 [ 350.160668][T14847] kernfs_create_dir_ns+0x44/0x130 [ 350.160694][T14847] sysfs_create_dir_ns+0x123/0x280 [ 350.160724][T14847] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 350.160755][T14847] ? do_raw_spin_unlock+0x122/0x240 [ 350.160783][T14847] kobject_add_internal+0x59f/0xb40 [ 350.160812][T14847] kobject_add+0x155/0x220 [ 350.160839][T14847] ? __pfx_kobject_add+0x10/0x10 [ 350.160861][T14847] ? do_raw_spin_unlock+0x122/0x240 [ 350.160890][T14847] ? get_device_parent+0x366/0x3a0 [ 350.160921][T14847] device_add+0x408/0xb50 [ 350.160945][T14847] ? device_initialize+0x24b/0x440 [ 350.160974][T14847] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 350.161008][T14847] wakeup_source_register+0x18a/0x380 [ 350.161040][T14847] ep_insert+0xef6/0x19e0 [ 350.161084][T14847] ? __pfx_ep_insert+0x10/0x10 [ 350.161107][T14847] ? __pfx___mutex_lock+0x10/0x10 [ 350.161142][T14847] ? bpf_lsm_capable+0x9/0x20 [ 350.161175][T14847] do_epoll_ctl+0x7f4/0xe80 [ 350.161211][T14847] __x64_sys_epoll_ctl+0x163/0x1a0 [ 350.161242][T14847] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 350.161266][T14847] ? rcu_is_watching+0x15/0xb0 [ 350.161295][T14847] ? do_syscall_64+0xbe/0x3b0 [ 350.161319][T14847] do_syscall_64+0xfa/0x3b0 [ 350.161337][T14847] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.161373][T14847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.161393][T14847] ? clear_bhb_loop+0x60/0xb0 [ 350.161417][T14847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.161436][T14847] RIP: 0033:0x7fce9bf8eec9 [ 350.161454][T14847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.161471][T14847] RSP: 002b:00007fce9ce4d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 350.161492][T14847] RAX: ffffffffffffffda RBX: 00007fce9c1e5fa0 RCX: 00007fce9bf8eec9 [ 350.161507][T14847] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 350.161519][T14847] RBP: 00007fce9ce4d090 R08: 0000000000000000 R09: 0000000000000000 [ 350.161531][T14847] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 350.161543][T14847] R13: 00007fce9c1e6038 R14: 00007fce9c1e5fa0 R15: 00007ffd1fd797f8 [ 350.161577][T14847] [ 350.161736][T14847] kobject: kobject_add_internal failed for wakeup14 (error: -12 parent: wakeup) [ 350.567886][T14856] bond8: option packets_per_slave: invalid value (1802723700) [ 350.575920][T14856] bond8: option packets_per_slave: allowed values 0 - 65535 [ 350.609866][T14856] bond8 (unregistering): Released all slaves [ 351.053682][T14879] macsec0: entered allmulticast mode [ 351.077456][T14879] veth1_macvtap: entered allmulticast mode [ 351.091387][T14879] macsec0: left allmulticast mode [ 351.101281][T14879] veth1_macvtap: left allmulticast mode [ 351.142077][T14879] __nla_validate_parse: 1 callbacks suppressed [ 351.142097][T14879] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2243'. [ 351.194584][T14879] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2243'. [ 351.406583][T14887] netlink: 'syz.3.2246': attribute type 16 has an invalid length. [ 351.426985][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'. [ 351.522428][T14884] vxcan1 speed is unknown, defaulting to 1000 [ 352.210593][T14904] vlan2: entered promiscuous mode [ 352.263092][T14908] sctp: [Deprecated]: syz.2.2252 (pid 14908) Use of int in maxseg socket option. [ 352.263092][T14908] Use struct sctp_assoc_value instead [ 352.271073][T14913] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2253'. [ 352.557259][T14884] lo speed is unknown, defaulting to 1000 [ 352.619019][T14935] FAULT_INJECTION: forcing a failure. [ 352.619019][T14935] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 352.634338][T14935] CPU: 1 UID: 0 PID: 14935 Comm: syz.0.2255 Not tainted syzkaller #0 PREEMPT(full) [ 352.634372][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 352.634385][T14935] Call Trace: [ 352.634392][T14935] [ 352.634399][T14935] dump_stack_lvl+0x189/0x250 [ 352.634429][T14935] ? __pfx____ratelimit+0x10/0x10 [ 352.634461][T14935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.634485][T14935] ? __pfx__printk+0x10/0x10 [ 352.634515][T14935] ? __might_fault+0xb0/0x130 [ 352.634549][T14935] should_fail_ex+0x414/0x560 [ 352.634580][T14935] _copy_from_user+0x2d/0xb0 [ 352.634607][T14935] __x64_sys_epoll_ctl+0x126/0x1a0 [ 352.634636][T14935] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 352.634669][T14935] ? do_syscall_64+0xbe/0x3b0 [ 352.634692][T14935] do_syscall_64+0xfa/0x3b0 [ 352.634709][T14935] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.634736][T14935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.634756][T14935] ? clear_bhb_loop+0x60/0xb0 [ 352.634781][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.634799][T14935] RIP: 0033:0x7f1afd78eec9 [ 352.634817][T14935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.634833][T14935] RSP: 002b:00007f1afe6f3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 352.634853][T14935] RAX: ffffffffffffffda RBX: 00007f1afd9e6090 RCX: 00007f1afd78eec9 [ 352.634867][T14935] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 352.634877][T14935] RBP: 00007f1afe6f3090 R08: 0000000000000000 R09: 0000000000000000 [ 352.634889][T14935] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 352.634901][T14935] R13: 00007f1afd9e6128 R14: 00007f1afd9e6090 R15: 00007ffefdd7d778 [ 352.634931][T14935] [ 352.843644][T14934] bond8: option updelay: invalid value (18446744072065443590) [ 352.851584][T14934] bond8: option updelay: allowed values 0 - 2147483647 [ 352.860724][T14934] bond8 (unregistering): Released all slaves [ 352.894022][T14924] vxcan1 speed is unknown, defaulting to 1000 [ 353.031440][T14934] bond8: option updelay: invalid value (18446744072065443590) [ 353.065394][T14934] bond8: option updelay: allowed values 0 - 2147483647 [ 353.075852][T14934] bond8 (unregistering): Released all slaves [ 353.187128][T14934] bond8: option updelay: invalid value (18446744072065443590) [ 353.197352][T14934] bond8: option updelay: allowed values 0 - 2147483647 [ 353.208369][T14934] bond8 (unregistering): Released all slaves [ 353.314354][T14934] bond8: option updelay: invalid value (18446744072065443590) [ 353.322880][T14934] bond8: option updelay: allowed values 0 - 2147483647 [ 353.332200][T14934] bond8 (unregistering): Released all slaves [ 353.358168][T14924] lo speed is unknown, defaulting to 1000 [ 353.444210][T14934] bond8: option updelay: invalid value (18446744072065443590) [ 353.462832][T14934] bond8: option updelay: allowed values 0 - 2147483647 [ 353.476311][T14934] bond8 (unregistering): Released all slaves [ 354.069558][T14943] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 354.081191][T14943] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 354.132524][T14943] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.154469][T14943] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 354.189568][T14943] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 354.198547][T14943] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 354.247019][T14943] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 354.265821][T14943] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 354.494466][T14959] FAULT_INJECTION: forcing a failure. [ 354.494466][T14959] name failslab, interval 1, probability 0, space 0, times 0 [ 354.532888][T14959] CPU: 1 UID: 0 PID: 14959 Comm: syz.2.2263 Not tainted syzkaller #0 PREEMPT(full) [ 354.532919][T14959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.532931][T14959] Call Trace: [ 354.532939][T14959] [ 354.532947][T14959] dump_stack_lvl+0x189/0x250 [ 354.532981][T14959] ? __pfx____ratelimit+0x10/0x10 [ 354.533013][T14959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.533037][T14959] ? __pfx__printk+0x10/0x10 [ 354.533072][T14959] ? __pfx___might_resched+0x10/0x10 [ 354.533092][T14959] ? fs_reclaim_acquire+0x7d/0x100 [ 354.533124][T14959] should_fail_ex+0x414/0x560 [ 354.533156][T14959] should_failslab+0xa8/0x100 [ 354.533183][T14959] kmem_cache_alloc_noprof+0x73/0x3c0 [ 354.533204][T14959] ? __kernfs_new_node+0xd7/0x7e0 [ 354.533230][T14959] __kernfs_new_node+0xd7/0x7e0 [ 354.533250][T14959] ? __lock_acquire+0xab9/0xd20 [ 354.533274][T14959] ? __pfx___kernfs_new_node+0x10/0x10 [ 354.533297][T14959] ? kernfs_root+0x1c/0x230 [ 354.533322][T14959] ? kernfs_root+0x1c/0x230 [ 354.533338][T14959] ? kernfs_root+0x1c/0x230 [ 354.533352][T14959] ? kernfs_root+0x1c/0x230 [ 354.533373][T14959] kernfs_new_node+0x102/0x210 [ 354.533396][T14959] kernfs_create_dir_ns+0x44/0x130 [ 354.533421][T14959] sysfs_create_dir_ns+0x123/0x280 [ 354.533452][T14959] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 354.533485][T14959] ? do_raw_spin_unlock+0x122/0x240 [ 354.533514][T14959] kobject_add_internal+0x59f/0xb40 [ 354.533549][T14959] kobject_add+0x155/0x220 [ 354.533578][T14959] ? __pfx_kobject_add+0x10/0x10 [ 354.533600][T14959] ? __kasan_kmalloc+0x93/0xb0 [ 354.533648][T14959] ? kobject_init+0x83/0x1e0 [ 354.533672][T14959] get_device_parent+0x316/0x3a0 [ 354.533704][T14959] device_add+0x2e1/0xb50 [ 354.533727][T14959] ? device_initialize+0x24b/0x440 [ 354.533754][T14959] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 354.533784][T14959] wakeup_source_register+0x18a/0x380 [ 354.533813][T14959] ep_insert+0xef6/0x19e0 [ 354.533856][T14959] ? __pfx_ep_insert+0x10/0x10 [ 354.533881][T14959] ? __pfx___mutex_lock+0x10/0x10 [ 354.533914][T14959] ? bpf_lsm_capable+0x9/0x20 [ 354.533947][T14959] do_epoll_ctl+0x7f4/0xe80 [ 354.533987][T14959] __x64_sys_epoll_ctl+0x163/0x1a0 [ 354.534016][T14959] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 354.534048][T14959] ? do_syscall_64+0xbe/0x3b0 [ 354.534073][T14959] do_syscall_64+0xfa/0x3b0 [ 354.534092][T14959] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.534119][T14959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.534138][T14959] ? clear_bhb_loop+0x60/0xb0 [ 354.534161][T14959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.534180][T14959] RIP: 0033:0x7fa2d9b8eec9 [ 354.534199][T14959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.534216][T14959] RSP: 002b:00007fa2daa34038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 354.534237][T14959] RAX: ffffffffffffffda RBX: 00007fa2d9de6090 RCX: 00007fa2d9b8eec9 [ 354.534250][T14959] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 354.534261][T14959] RBP: 00007fa2daa34090 R08: 0000000000000000 R09: 0000000000000000 [ 354.534274][T14959] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 354.534285][T14959] R13: 00007fa2d9de6128 R14: 00007fa2d9de6090 R15: 00007fff6a530148 [ 354.534317][T14959] [ 354.534329][T14959] kobject: kobject_add_internal failed for wakeup (error: -12 parent: virtual) [ 355.147467][T14977] netlink: 'syz.3.2268': attribute type 1 has an invalid length. [ 355.376123][T14987] netlink: 'syz.1.2270': attribute type 13 has an invalid length. [ 355.394301][T14987] netlink: 'syz.1.2270': attribute type 17 has an invalid length. [ 355.424335][T14987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.458784][T14993] netlink: 'syz.3.2269': attribute type 13 has an invalid length. [ 355.469277][T14993] netlink: 'syz.3.2269': attribute type 17 has an invalid length. [ 355.492853][T14993] erspan0: left promiscuous mode [ 355.516266][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2272'. [ 355.547230][T14993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.636903][T15006] netlink: 'syz.4.2272': attribute type 4 has an invalid length. [ 355.710489][T14993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.740755][T15013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.786840][T15015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.797177][T14987] vxcan1 speed is unknown, defaulting to 1000 [ 355.816271][T14991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.883174][T14993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.032389][T15019] netlink: 'syz.4.2276': attribute type 1 has an invalid length. [ 356.057881][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 356.079965][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2278'. [ 356.133093][T15019] netlink: 'syz.4.2276': attribute type 12 has an invalid length. [ 356.158017][T15019] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2276'. [ 356.248403][T15029] FAULT_INJECTION: forcing a failure. [ 356.248403][T15029] name failslab, interval 1, probability 0, space 0, times 0 [ 356.261271][T15029] CPU: 0 UID: 0 PID: 15029 Comm: syz.2.2279 Not tainted syzkaller #0 PREEMPT(full) [ 356.261298][T15029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 356.261310][T15029] Call Trace: [ 356.261318][T15029] [ 356.261326][T15029] dump_stack_lvl+0x189/0x250 [ 356.261355][T15029] ? __pfx____ratelimit+0x10/0x10 [ 356.261385][T15029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.261409][T15029] ? __pfx__printk+0x10/0x10 [ 356.261442][T15029] ? __pfx___might_resched+0x10/0x10 [ 356.261462][T15029] ? fs_reclaim_acquire+0x7d/0x100 [ 356.261495][T15029] should_fail_ex+0x414/0x560 [ 356.261527][T15029] should_failslab+0xa8/0x100 [ 356.261554][T15029] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 356.261579][T15029] ? __kernfs_new_node+0x9c/0x7e0 [ 356.261605][T15029] kstrdup+0x42/0x100 [ 356.261634][T15029] __kernfs_new_node+0x9c/0x7e0 [ 356.261654][T15029] ? __lock_acquire+0xab9/0xd20 [ 356.261681][T15029] ? __pfx___kernfs_new_node+0x10/0x10 [ 356.261702][T15029] ? kernfs_root+0x1c/0x230 [ 356.261729][T15029] ? kernfs_root+0x1c/0x230 [ 356.261754][T15029] ? kernfs_root+0x1c/0x230 [ 356.261779][T15029] kernfs_new_node+0x102/0x210 [ 356.261805][T15029] kernfs_create_link+0xa7/0x200 [ 356.261835][T15029] sysfs_do_create_link_sd+0x83/0x110 [ 356.261858][T15029] device_add_class_symlinks+0x1cf/0x240 [ 356.261889][T15029] device_add+0x475/0xb50 [ 356.261914][T15029] ? device_initialize+0x24b/0x440 [ 356.261942][T15029] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 356.261975][T15029] wakeup_source_register+0x18a/0x380 [ 356.262006][T15029] ep_insert+0xef6/0x19e0 [ 356.262049][T15029] ? __pfx_ep_insert+0x10/0x10 [ 356.262073][T15029] ? __pfx___mutex_lock+0x10/0x10 [ 356.262106][T15029] ? bpf_lsm_capable+0x9/0x20 [ 356.262136][T15029] do_epoll_ctl+0x7f4/0xe80 [ 356.262169][T15029] __x64_sys_epoll_ctl+0x163/0x1a0 [ 356.262196][T15029] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 356.262220][T15029] ? rcu_is_watching+0x15/0xb0 [ 356.262248][T15029] ? do_syscall_64+0xbe/0x3b0 [ 356.262272][T15029] do_syscall_64+0xfa/0x3b0 [ 356.262289][T15029] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.262317][T15029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.262333][T15029] ? clear_bhb_loop+0x60/0xb0 [ 356.262354][T15029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.262373][T15029] RIP: 0033:0x7fa2d9b8eec9 [ 356.262391][T15029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.262408][T15029] RSP: 002b:00007fa2daa55038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 356.262430][T15029] RAX: ffffffffffffffda RBX: 00007fa2d9de5fa0 RCX: 00007fa2d9b8eec9 [ 356.262445][T15029] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 356.262456][T15029] RBP: 00007fa2daa55090 R08: 0000000000000000 R09: 0000000000000000 [ 356.262468][T15029] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 356.262480][T15029] R13: 00007fa2d9de6038 R14: 00007fa2d9de5fa0 R15: 00007fff6a530148 [ 356.262510][T15029] [ 356.570012][T15001] vxcan1 speed is unknown, defaulting to 1000 [ 356.570436][T14987] lo speed is unknown, defaulting to 1000 [ 356.903980][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'. [ 356.940758][T15036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2281'. [ 357.043548][T15036] bond7: entered promiscuous mode [ 357.053117][T15036] 8021q: adding VLAN 0 to HW filter on device bond7 [ 357.218428][T15022] vxcan1 speed is unknown, defaulting to 1000 [ 357.218466][T15001] lo speed is unknown, defaulting to 1000 [ 357.757399][T15022] lo speed is unknown, defaulting to 1000 [ 359.141966][T15072] dummy0: mtu less than device minimum [ 359.543523][T15090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2297'. [ 359.647973][T15093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2298'. [ 359.755967][T15082] pim6reg: entered allmulticast mode [ 359.773781][T15081] pim6reg: left allmulticast mode [ 359.976847][T15109] : entered promiscuous mode [ 359.990721][T15107] IPv6: sit1: Disabled Multicast RS [ 360.217055][T15120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2303'. [ 360.445982][T15140] netlink: 'syz.3.2308': attribute type 13 has an invalid length. [ 360.454358][T15140] netlink: 'syz.3.2308': attribute type 17 has an invalid length. [ 360.468414][T15134] syzkaller1: entered promiscuous mode [ 360.473953][T15134] syzkaller1: entered allmulticast mode [ 360.512673][T15140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.537584][T15137] vxcan1 speed is unknown, defaulting to 1000 [ 360.615792][T15140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.688584][T15140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.713858][T15148] tipc: Enabled bearer , priority 0 [ 360.724318][T15151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2313'. [ 360.762755][T15151] vlan2: entered promiscuous mode [ 360.780998][T15148] tipc: Disabling bearer [ 360.832786][T15132] vxcan1 speed is unknown, defaulting to 1000 [ 360.834327][T15137] lo speed is unknown, defaulting to 1000 [ 361.118871][T15159] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20000 [ 361.445751][T15175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2320'. [ 361.504981][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2320'. [ 361.524404][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2320'. [ 361.607126][T15132] lo speed is unknown, defaulting to 1000 [ 361.746356][T15182] FAULT_INJECTION: forcing a failure. [ 361.746356][T15182] name failslab, interval 1, probability 0, space 0, times 0 [ 361.819960][T15182] CPU: 1 UID: 0 PID: 15182 Comm: syz.1.2322 Not tainted syzkaller #0 PREEMPT(full) [ 361.819990][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.820001][T15182] Call Trace: [ 361.820009][T15182] [ 361.820016][T15182] dump_stack_lvl+0x189/0x250 [ 361.820043][T15182] ? __pfx____ratelimit+0x10/0x10 [ 361.820072][T15182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.820094][T15182] ? __pfx__printk+0x10/0x10 [ 361.820124][T15182] ? __pfx___might_resched+0x10/0x10 [ 361.820144][T15182] ? fs_reclaim_acquire+0x7d/0x100 [ 361.820174][T15182] should_fail_ex+0x414/0x560 [ 361.820214][T15182] should_failslab+0xa8/0x100 [ 361.820241][T15182] kmem_cache_alloc_noprof+0x73/0x3c0 [ 361.820261][T15182] ? __kernfs_new_node+0xd7/0x7e0 [ 361.820285][T15182] __kernfs_new_node+0xd7/0x7e0 [ 361.820304][T15182] ? __lock_acquire+0xab9/0xd20 [ 361.820329][T15182] ? __pfx___kernfs_new_node+0x10/0x10 [ 361.820348][T15182] ? kernfs_root+0x1c/0x230 [ 361.820375][T15182] ? kernfs_root+0x1c/0x230 [ 361.820392][T15182] ? kernfs_root+0x1c/0x230 [ 361.820407][T15182] ? kernfs_root+0x1c/0x230 [ 361.820431][T15182] kernfs_new_node+0x102/0x210 [ 361.820457][T15182] __kernfs_create_file+0x4b/0x2e0 [ 361.820486][T15182] sysfs_add_file_mode_ns+0x238/0x300 [ 361.820522][T15182] internal_create_group+0x66d/0x1110 [ 361.820561][T15182] ? __pfx_internal_create_group+0x10/0x10 [ 361.820595][T15182] sysfs_create_groups+0x59/0x120 [ 361.820619][T15182] device_add_attrs+0x1c4/0x5a0 [ 361.820653][T15182] ? __pfx_device_add_attrs+0x10/0x10 [ 361.820676][T15182] ? kobject_put+0x43f/0x480 [ 361.820705][T15182] ? device_add_class_symlinks+0x21f/0x240 [ 361.820737][T15182] device_add+0x496/0xb50 [ 361.820760][T15182] ? device_initialize+0x24b/0x440 [ 361.820787][T15182] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 361.820820][T15182] wakeup_source_register+0x18a/0x380 [ 361.820850][T15182] ep_insert+0xef6/0x19e0 [ 361.820894][T15182] ? __pfx_ep_insert+0x10/0x10 [ 361.820918][T15182] ? __pfx___mutex_lock+0x10/0x10 [ 361.820949][T15182] ? bpf_lsm_capable+0x9/0x20 [ 361.820981][T15182] do_epoll_ctl+0x7f4/0xe80 [ 361.821017][T15182] __x64_sys_epoll_ctl+0x163/0x1a0 [ 361.821048][T15182] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 361.821071][T15182] ? rcu_is_watching+0x15/0xb0 [ 361.821099][T15182] ? do_syscall_64+0xbe/0x3b0 [ 361.821125][T15182] do_syscall_64+0xfa/0x3b0 [ 361.821142][T15182] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.821171][T15182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.821197][T15182] ? clear_bhb_loop+0x60/0xb0 [ 361.821222][T15182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.821241][T15182] RIP: 0033:0x7fce9bf8eec9 [ 361.821258][T15182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.821275][T15182] RSP: 002b:00007fce9ce4d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 361.821296][T15182] RAX: ffffffffffffffda RBX: 00007fce9c1e5fa0 RCX: 00007fce9bf8eec9 [ 361.821310][T15182] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 361.821322][T15182] RBP: 00007fce9ce4d090 R08: 0000000000000000 R09: 0000000000000000 [ 361.821334][T15182] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 361.821346][T15182] R13: 00007fce9c1e6038 R14: 00007fce9c1e5fa0 R15: 00007ffd1fd797f8 [ 361.821379][T15182] [ 362.736743][T15198] netlink: 'syz.0.2328': attribute type 13 has an invalid length. [ 362.994297][T15216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2331'. [ 363.503716][ T9] lo speed is unknown, defaulting to 1000 [ 363.510054][T15216] bond0: (slave rose0): Error: Device can not be enslaved while up [ 363.528074][ T9] syz0: Port: 1 Link DOWN [ 363.563756][T15230] FAULT_INJECTION: forcing a failure. [ 363.563756][T15230] name failslab, interval 1, probability 0, space 0, times 0 [ 363.618214][T15232] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2336'. [ 363.644991][T14527] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.653512][T14527] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.670058][T15230] CPU: 1 UID: 0 PID: 15230 Comm: syz.1.2335 Not tainted syzkaller #0 PREEMPT(full) [ 363.670086][T15230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 363.670098][T15230] Call Trace: [ 363.670106][T15230] [ 363.670114][T15230] dump_stack_lvl+0x189/0x250 [ 363.670144][T15230] ? __pfx____ratelimit+0x10/0x10 [ 363.670175][T15230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.670199][T15230] ? __pfx__printk+0x10/0x10 [ 363.670232][T15230] ? __pfx___might_resched+0x10/0x10 [ 363.670252][T15230] ? fs_reclaim_acquire+0x7d/0x100 [ 363.670282][T15230] should_fail_ex+0x414/0x560 [ 363.670314][T15230] should_failslab+0xa8/0x100 [ 363.670342][T15230] kmem_cache_alloc_noprof+0x73/0x3c0 [ 363.670364][T15230] ? __kernfs_new_node+0xd7/0x7e0 [ 363.670390][T15230] __kernfs_new_node+0xd7/0x7e0 [ 363.670410][T15230] ? __lock_acquire+0xab9/0xd20 [ 363.670438][T15230] ? __pfx___kernfs_new_node+0x10/0x10 [ 363.670459][T15230] ? kernfs_root+0x1c/0x230 [ 363.670486][T15230] ? kernfs_root+0x1c/0x230 [ 363.670504][T15230] ? kernfs_root+0x1c/0x230 [ 363.670520][T15230] ? kernfs_root+0x1c/0x230 [ 363.670545][T15230] kernfs_new_node+0x102/0x210 [ 363.670572][T15230] __kernfs_create_file+0x4b/0x2e0 [ 363.670599][T15230] sysfs_add_file_mode_ns+0x238/0x300 [ 363.670637][T15230] internal_create_group+0x66d/0x1110 [ 363.670676][T15230] ? __pfx_internal_create_group+0x10/0x10 [ 363.670710][T15230] sysfs_create_groups+0x59/0x120 [ 363.670734][T15230] device_add_attrs+0x1c4/0x5a0 [ 363.670767][T15230] ? __pfx_device_add_attrs+0x10/0x10 [ 363.670797][T15230] ? kobject_put+0x43f/0x480 [ 363.670826][T15230] ? device_add_class_symlinks+0x21f/0x240 [ 363.670855][T15230] device_add+0x496/0xb50 [ 363.670880][T15230] ? device_initialize+0x24b/0x440 [ 363.670909][T15230] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 363.670942][T15230] wakeup_source_register+0x18a/0x380 [ 363.670973][T15230] ep_insert+0xef6/0x19e0 [ 363.671017][T15230] ? __pfx_ep_insert+0x10/0x10 [ 363.671042][T15230] ? __pfx___mutex_lock+0x10/0x10 [ 363.671075][T15230] ? bpf_lsm_capable+0x9/0x20 [ 363.671108][T15230] do_epoll_ctl+0x7f4/0xe80 [ 363.671144][T15230] __x64_sys_epoll_ctl+0x163/0x1a0 [ 363.671174][T15230] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 363.671198][T15230] ? rcu_is_watching+0x15/0xb0 [ 363.671226][T15230] ? do_syscall_64+0xbe/0x3b0 [ 363.671250][T15230] do_syscall_64+0xfa/0x3b0 [ 363.671268][T15230] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.671297][T15230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.671315][T15230] ? clear_bhb_loop+0x60/0xb0 [ 363.671338][T15230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.671356][T15230] RIP: 0033:0x7fce9bf8eec9 [ 363.671373][T15230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.671388][T15230] RSP: 002b:00007fce9ce4d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 363.671409][T15230] RAX: ffffffffffffffda RBX: 00007fce9c1e5fa0 RCX: 00007fce9bf8eec9 [ 363.671423][T15230] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 363.671435][T15230] RBP: 00007fce9ce4d090 R08: 0000000000000000 R09: 0000000000000000 [ 363.671448][T15230] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 363.671460][T15230] R13: 00007fce9c1e6038 R14: 00007fce9c1e5fa0 R15: 00007ffd1fd797f8 [ 363.671494][T15230] [ 364.009956][T14527] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.018808][T14527] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.063439][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2336'. [ 364.081164][T15238] netlink: 'syz.4.2337': attribute type 83 has an invalid length. [ 364.127969][T14527] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.141543][T14527] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.154379][T14527] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.172237][T14527] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.271236][T15246] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2339'. [ 364.286157][T15246] openvswitch: netlink: Flow key attr not present in new flow. [ 364.329459][T15238] vxcan1 speed is unknown, defaulting to 1000 [ 364.767794][T15272] FAULT_INJECTION: forcing a failure. [ 364.767794][T15272] name failslab, interval 1, probability 0, space 0, times 0 [ 364.781294][T15272] CPU: 1 UID: 0 PID: 15272 Comm: syz.0.2348 Not tainted syzkaller #0 PREEMPT(full) [ 364.781322][T15272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 364.781338][T15272] Call Trace: [ 364.781346][T15272] [ 364.781354][T15272] dump_stack_lvl+0x189/0x250 [ 364.781384][T15272] ? __pfx____ratelimit+0x10/0x10 [ 364.781415][T15272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.781438][T15272] ? __pfx__printk+0x10/0x10 [ 364.781473][T15272] ? __pfx___might_resched+0x10/0x10 [ 364.781493][T15272] ? fs_reclaim_acquire+0x7d/0x100 [ 364.781526][T15272] should_fail_ex+0x414/0x560 [ 364.781558][T15272] should_failslab+0xa8/0x100 [ 364.781586][T15272] kmem_cache_alloc_noprof+0x73/0x3c0 [ 364.781609][T15272] ? __kernfs_new_node+0xd7/0x7e0 [ 364.781635][T15272] __kernfs_new_node+0xd7/0x7e0 [ 364.781655][T15272] ? __lock_acquire+0xab9/0xd20 [ 364.781681][T15272] ? __pfx___kernfs_new_node+0x10/0x10 [ 364.781703][T15272] ? kernfs_root+0x1c/0x230 [ 364.781729][T15272] ? kernfs_root+0x1c/0x230 [ 364.781746][T15272] ? kernfs_root+0x1c/0x230 [ 364.781761][T15272] ? kernfs_root+0x1c/0x230 [ 364.781785][T15272] kernfs_new_node+0x102/0x210 [ 364.781811][T15272] __kernfs_create_file+0x4b/0x2e0 [ 364.781841][T15272] sysfs_add_file_mode_ns+0x238/0x300 [ 364.781878][T15272] internal_create_group+0x66d/0x1110 [ 364.781924][T15272] ? __pfx_internal_create_group+0x10/0x10 [ 364.781957][T15272] sysfs_create_groups+0x59/0x120 [ 364.781981][T15272] device_add_attrs+0x1c4/0x5a0 [ 364.782022][T15272] ? __pfx_device_add_attrs+0x10/0x10 [ 364.782045][T15272] ? kobject_put+0x43f/0x480 [ 364.782074][T15272] ? device_add_class_symlinks+0x21f/0x240 [ 364.782103][T15272] device_add+0x496/0xb50 [ 364.782128][T15272] ? device_initialize+0x24b/0x440 [ 364.782156][T15272] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 364.782189][T15272] wakeup_source_register+0x18a/0x380 [ 364.782219][T15272] ep_insert+0xef6/0x19e0 [ 364.782264][T15272] ? __pfx_ep_insert+0x10/0x10 [ 364.782288][T15272] ? __pfx___mutex_lock+0x10/0x10 [ 364.782321][T15272] ? bpf_lsm_capable+0x9/0x20 [ 364.782353][T15272] do_epoll_ctl+0x7f4/0xe80 [ 364.782385][T15272] __x64_sys_epoll_ctl+0x163/0x1a0 [ 364.782413][T15272] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 364.782437][T15272] ? rcu_is_watching+0x15/0xb0 [ 364.782464][T15272] ? do_syscall_64+0xbe/0x3b0 [ 364.782489][T15272] do_syscall_64+0xfa/0x3b0 [ 364.782506][T15272] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.782541][T15272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.782559][T15272] ? clear_bhb_loop+0x60/0xb0 [ 364.782580][T15272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.782596][T15272] RIP: 0033:0x7f1afd78eec9 [ 364.782613][T15272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.782630][T15272] RSP: 002b:00007f1afe714038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 364.782650][T15272] RAX: ffffffffffffffda RBX: 00007f1afd9e5fa0 RCX: 00007f1afd78eec9 [ 364.782664][T15272] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 364.782674][T15272] RBP: 00007f1afe714090 R08: 0000000000000000 R09: 0000000000000000 [ 364.782686][T15272] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 364.782698][T15272] R13: 00007f1afd9e6038 R14: 00007f1afd9e5fa0 R15: 00007ffefdd7d778 [ 364.782731][T15272] [ 365.174504][T15281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2349'. [ 365.186260][T15267] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 365.274015][T15238] lo speed is unknown, defaulting to 1000 [ 365.402080][T15288] vxcan1 speed is unknown, defaulting to 1000 [ 365.720088][T15296] netlink: 'syz.3.2353': attribute type 13 has an invalid length. [ 365.730015][T15296] netlink: 'syz.3.2353': attribute type 17 has an invalid length. [ 365.758394][T15296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.902292][T15296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.974169][T15303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.026268][T15294] vxcan1 speed is unknown, defaulting to 1000 [ 366.104444][T15288] lo speed is unknown, defaulting to 1000 [ 366.696991][T15304] vxcan1 speed is unknown, defaulting to 1000 [ 366.699014][T15294] lo speed is unknown, defaulting to 1000 [ 366.997924][T15317] FAULT_INJECTION: forcing a failure. [ 366.997924][T15317] name failslab, interval 1, probability 0, space 0, times 0 [ 367.016488][T15317] CPU: 0 UID: 0 PID: 15317 Comm: syz.0.2359 Not tainted syzkaller #0 PREEMPT(full) [ 367.016517][T15317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.016530][T15317] Call Trace: [ 367.016539][T15317] [ 367.016548][T15317] dump_stack_lvl+0x189/0x250 [ 367.016578][T15317] ? __pfx____ratelimit+0x10/0x10 [ 367.016606][T15317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.016629][T15317] ? __pfx__printk+0x10/0x10 [ 367.016665][T15317] ? __pfx___might_resched+0x10/0x10 [ 367.016685][T15317] ? fs_reclaim_acquire+0x7d/0x100 [ 367.016727][T15317] should_fail_ex+0x414/0x560 [ 367.016759][T15317] should_failslab+0xa8/0x100 [ 367.016784][T15317] kmem_cache_alloc_noprof+0x73/0x3c0 [ 367.016805][T15317] ? __kernfs_new_node+0xd7/0x7e0 [ 367.016833][T15317] __kernfs_new_node+0xd7/0x7e0 [ 367.016852][T15317] ? __lock_acquire+0xab9/0xd20 [ 367.016879][T15317] ? __pfx___kernfs_new_node+0x10/0x10 [ 367.016901][T15317] ? kernfs_root+0x1c/0x230 [ 367.016928][T15317] ? kernfs_root+0x1c/0x230 [ 367.016946][T15317] ? kernfs_root+0x1c/0x230 [ 367.016962][T15317] ? kernfs_root+0x1c/0x230 [ 367.016987][T15317] kernfs_new_node+0x102/0x210 [ 367.017015][T15317] __kernfs_create_file+0x4b/0x2e0 [ 367.017044][T15317] sysfs_add_file_mode_ns+0x238/0x300 [ 367.017083][T15317] internal_create_group+0x66d/0x1110 [ 367.017121][T15317] ? __pfx_internal_create_group+0x10/0x10 [ 367.017156][T15317] sysfs_create_groups+0x59/0x120 [ 367.017180][T15317] device_add_attrs+0x1c4/0x5a0 [ 367.017214][T15317] ? __pfx_device_add_attrs+0x10/0x10 [ 367.017238][T15317] ? kobject_put+0x43f/0x480 [ 367.017266][T15317] ? device_add_class_symlinks+0x21f/0x240 [ 367.017296][T15317] device_add+0x496/0xb50 [ 367.017321][T15317] ? device_initialize+0x24b/0x440 [ 367.017350][T15317] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 367.017383][T15317] wakeup_source_register+0x18a/0x380 [ 367.017415][T15317] ep_insert+0xef6/0x19e0 [ 367.017458][T15317] ? __pfx_ep_insert+0x10/0x10 [ 367.017482][T15317] ? __pfx___mutex_lock+0x10/0x10 [ 367.017515][T15317] ? bpf_lsm_capable+0x9/0x20 [ 367.017548][T15317] do_epoll_ctl+0x7f4/0xe80 [ 367.017585][T15317] __x64_sys_epoll_ctl+0x163/0x1a0 [ 367.017615][T15317] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 367.017639][T15317] ? rcu_is_watching+0x15/0xb0 [ 367.017666][T15317] ? do_syscall_64+0xbe/0x3b0 [ 367.017690][T15317] do_syscall_64+0xfa/0x3b0 [ 367.017716][T15317] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.017745][T15317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.017764][T15317] ? clear_bhb_loop+0x60/0xb0 [ 367.017789][T15317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.017809][T15317] RIP: 0033:0x7f1afd78eec9 [ 367.017826][T15317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.017844][T15317] RSP: 002b:00007f1afe714038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 367.017865][T15317] RAX: ffffffffffffffda RBX: 00007f1afd9e5fa0 RCX: 00007f1afd78eec9 [ 367.017879][T15317] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 367.017891][T15317] RBP: 00007f1afe714090 R08: 0000000000000000 R09: 0000000000000000 [ 367.017903][T15317] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 367.017915][T15317] R13: 00007f1afd9e6038 R14: 00007f1afd9e5fa0 R15: 00007ffefdd7d778 [ 367.017950][T15317] [ 367.462118][T15304] lo speed is unknown, defaulting to 1000 [ 367.618398][T15324] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2360'. [ 367.666041][T15324] 8021q: VLANs not supported on ip6tnl0 [ 367.797360][T15325] netlink: 'syz.0.2360': attribute type 2 has an invalid length. [ 367.808932][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2360'. [ 367.836570][T15322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2360'. [ 367.859240][T15322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2360'. [ 368.030518][T15331] syzkaller1: entered promiscuous mode [ 368.046495][T15331] syzkaller1: entered allmulticast mode [ 368.058802][T15331] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 368.070465][T15331] IPVS: ip_vs_add_dest(): server weight less than zero [ 368.478235][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2363'. [ 368.537789][T15339] netlink: 'syz.4.2363': attribute type 4 has an invalid length. [ 368.557431][T15339] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2363'. [ 368.660988][T15339] .`: renamed from bond0 [ 370.258712][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'. [ 370.277801][T15395] macsec1: entered promiscuous mode [ 370.283056][T15395] bridge0: entered promiscuous mode [ 370.290603][T15395] bridge0: port 1(macsec1) entered blocking state [ 370.297333][T15395] bridge0: port 1(macsec1) entered disabled state [ 370.305312][T15395] macsec1: entered allmulticast mode [ 370.314121][T15395] bridge0: entered allmulticast mode [ 370.323546][T15395] macsec1: left allmulticast mode [ 370.329826][T15395] bridge0: left allmulticast mode [ 370.336769][T15395] bridge0: left promiscuous mode [ 370.632514][T15423] macvtap1: entered promiscuous mode [ 370.639197][T15423] veth1_to_hsr: entered promiscuous mode [ 370.646595][T15423] macvtap1: entered allmulticast mode [ 370.652243][T15423] veth1_to_hsr: entered allmulticast mode [ 370.659929][T15428] netlink: 'syz.0.2384': attribute type 13 has an invalid length. [ 370.669121][T15428] netlink: 'syz.0.2384': attribute type 17 has an invalid length. [ 370.832589][T15428] 8021q: adding VLAN 0 to HW filter on device .` [ 370.842805][T15428] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.882574][T15428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.922168][ T55] lo speed is unknown, defaulting to 1000 [ 370.934484][ T55] syz0: Port: 1 Link ACTIVE [ 370.943355][T15433] netlink: 'syz.1.2387': attribute type 21 has an invalid length. [ 370.957647][T15433] netlink: 'syz.1.2387': attribute type 13 has an invalid length. [ 370.973186][T15440] bond12: option arp_validate: invalid value (18446744073491447809) [ 370.983164][T15440] bond12 (unregistering): Released all slaves [ 371.012977][T15431] vxcan1 speed is unknown, defaulting to 1000 [ 371.019460][T15428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.079085][T15435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.100638][T15433] tipc: Resetting bearer [ 371.191427][T15433] veth1_to_hsr: left allmulticast mode [ 371.197346][T15433] veth1_to_hsr: left promiscuous mode [ 371.252241][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 371.297290][T15452] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 371.317427][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2390'. [ 371.412235][T15455] netlink: 'syz.4.2391': attribute type 1 has an invalid length. [ 371.426243][T15452] team1: entered promiscuous mode [ 371.431136][T15455] netlink: 'syz.4.2391': attribute type 1 has an invalid length. [ 371.435105][T15452] team1: entered allmulticast mode [ 371.450368][T15431] lo speed is unknown, defaulting to 1000 [ 371.698346][T15468] vxcan1 speed is unknown, defaulting to 1000 [ 371.825651][T15476] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.832971][T15476] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.844470][T15476] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.863700][T15476] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.905447][T15476] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.922327][T15476] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.955391][T15476] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.965933][T15476] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 371.983968][T15476] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 372.223970][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2398'. [ 372.290213][T15486] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 372.319719][T15486] team0: Device ipvlan4 is already an upper device of the team interface [ 372.651319][T15468] lo speed is unknown, defaulting to 1000 [ 372.668261][T15515] FAULT_INJECTION: forcing a failure. [ 372.668261][T15515] name failslab, interval 1, probability 0, space 0, times 0 [ 372.681897][T15515] CPU: 1 UID: 0 PID: 15515 Comm: syz.4.2403 Not tainted syzkaller #0 PREEMPT(full) [ 372.681937][T15515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 372.681950][T15515] Call Trace: [ 372.681957][T15515] [ 372.681965][T15515] dump_stack_lvl+0x189/0x250 [ 372.681996][T15515] ? __pfx____ratelimit+0x10/0x10 [ 372.682027][T15515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.682051][T15515] ? __pfx__printk+0x10/0x10 [ 372.682087][T15515] ? __pfx___might_resched+0x10/0x10 [ 372.682106][T15515] ? fs_reclaim_acquire+0x7d/0x100 [ 372.682138][T15515] should_fail_ex+0x414/0x560 [ 372.682168][T15515] should_failslab+0xa8/0x100 [ 372.682194][T15515] kmem_cache_alloc_noprof+0x73/0x3c0 [ 372.682215][T15515] ? __kernfs_new_node+0xd7/0x7e0 [ 372.682233][T15515] ? kasan_save_track+0x4f/0x80 [ 372.682258][T15515] __kernfs_new_node+0xd7/0x7e0 [ 372.682277][T15515] ? __lock_acquire+0xab9/0xd20 [ 372.682302][T15515] ? __pfx___kernfs_new_node+0x10/0x10 [ 372.682321][T15515] ? kernfs_root+0x1c/0x230 [ 372.682345][T15515] ? kernfs_root+0x1c/0x230 [ 372.682364][T15515] ? kernfs_root+0x1c/0x230 [ 372.682379][T15515] ? kernfs_root+0x1c/0x230 [ 372.682404][T15515] kernfs_new_node+0x102/0x210 [ 372.682430][T15515] __kernfs_create_file+0x4b/0x2e0 [ 372.682460][T15515] sysfs_add_file_mode_ns+0x238/0x300 [ 372.682497][T15515] internal_create_group+0x66d/0x1110 [ 372.682534][T15515] ? __pfx_internal_create_group+0x10/0x10 [ 372.682568][T15515] sysfs_create_groups+0x59/0x120 [ 372.682591][T15515] device_add_attrs+0x1c4/0x5a0 [ 372.682625][T15515] ? __pfx_device_add_attrs+0x10/0x10 [ 372.682648][T15515] ? kobject_put+0x43f/0x480 [ 372.682676][T15515] ? device_add_class_symlinks+0x21f/0x240 [ 372.682706][T15515] device_add+0x496/0xb50 [ 372.682731][T15515] ? device_initialize+0x24b/0x440 [ 372.682759][T15515] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 372.682792][T15515] wakeup_source_register+0x18a/0x380 [ 372.682823][T15515] ep_insert+0xef6/0x19e0 [ 372.682865][T15515] ? __pfx_ep_insert+0x10/0x10 [ 372.682890][T15515] ? __pfx___mutex_lock+0x10/0x10 [ 372.682931][T15515] ? bpf_lsm_capable+0x9/0x20 [ 372.682963][T15515] do_epoll_ctl+0x7f4/0xe80 [ 372.682999][T15515] __x64_sys_epoll_ctl+0x163/0x1a0 [ 372.683029][T15515] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 372.683062][T15515] ? do_syscall_64+0xbe/0x3b0 [ 372.683087][T15515] do_syscall_64+0xfa/0x3b0 [ 372.683105][T15515] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.683139][T15515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.683158][T15515] ? clear_bhb_loop+0x60/0xb0 [ 372.683181][T15515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.683199][T15515] RIP: 0033:0x7fa050b8eec9 [ 372.683218][T15515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.683235][T15515] RSP: 002b:00007fa04edcd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 372.683255][T15515] RAX: ffffffffffffffda RBX: 00007fa050de6090 RCX: 00007fa050b8eec9 [ 372.683268][T15515] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 372.683280][T15515] RBP: 00007fa04edcd090 R08: 0000000000000000 R09: 0000000000000000 [ 372.683292][T15515] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 372.683304][T15515] R13: 00007fa050de6128 R14: 00007fa050de6090 R15: 00007ffe7dfc2e58 [ 372.683338][T15515] [ 373.140952][T15521] xt_l2tp: missing protocol rule (udp|l2tpip) [ 373.608572][T15526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2406'. [ 373.621102][T15535] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 374.157981][T15554] netlink: 'syz.4.2415': attribute type 1 has an invalid length. [ 374.356723][T15554] bond0: entered promiscuous mode [ 374.369961][T15554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.415851][T15559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.424264][T15559] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 374.435632][T15559] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 374.461045][T15559] bond0: (slave wireguard0): making interface the new active one [ 374.471304][T15559] wireguard0: entered promiscuous mode [ 374.479559][T15559] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 374.501974][T15562] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address [ 374.522605][T15562] bond0: (slave wireguard1): Enslaving as a backup interface with an up link [ 374.731999][T15577] FAULT_INJECTION: forcing a failure. [ 374.731999][T15577] name failslab, interval 1, probability 0, space 0, times 0 [ 374.755513][T15577] CPU: 0 UID: 0 PID: 15577 Comm: syz.4.2418 Not tainted syzkaller #0 PREEMPT(full) [ 374.755542][T15577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.755553][T15577] Call Trace: [ 374.755561][T15577] [ 374.755569][T15577] dump_stack_lvl+0x189/0x250 [ 374.755597][T15577] ? __pfx____ratelimit+0x10/0x10 [ 374.755627][T15577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.755651][T15577] ? __pfx__printk+0x10/0x10 [ 374.755685][T15577] ? __pfx___might_resched+0x10/0x10 [ 374.755704][T15577] ? fs_reclaim_acquire+0x7d/0x100 [ 374.755736][T15577] should_fail_ex+0x414/0x560 [ 374.755766][T15577] should_failslab+0xa8/0x100 [ 374.755793][T15577] kmem_cache_alloc_noprof+0x73/0x3c0 [ 374.755814][T15577] ? __kernfs_new_node+0xd7/0x7e0 [ 374.755840][T15577] __kernfs_new_node+0xd7/0x7e0 [ 374.755860][T15577] ? __lock_acquire+0xab9/0xd20 [ 374.755894][T15577] ? __pfx___kernfs_new_node+0x10/0x10 [ 374.755916][T15577] ? kernfs_root+0x1c/0x230 [ 374.755943][T15577] ? kernfs_root+0x1c/0x230 [ 374.755960][T15577] ? kernfs_root+0x1c/0x230 [ 374.755975][T15577] ? kernfs_root+0x1c/0x230 [ 374.756001][T15577] kernfs_new_node+0x102/0x210 [ 374.756027][T15577] __kernfs_create_file+0x4b/0x2e0 [ 374.756056][T15577] sysfs_add_file_mode_ns+0x238/0x300 [ 374.756094][T15577] internal_create_group+0x66d/0x1110 [ 374.756132][T15577] ? __pfx_internal_create_group+0x10/0x10 [ 374.756168][T15577] sysfs_create_groups+0x59/0x120 [ 374.756189][T15577] device_add_attrs+0x1c4/0x5a0 [ 374.756219][T15577] ? __pfx_device_add_attrs+0x10/0x10 [ 374.756241][T15577] ? kobject_put+0x43f/0x480 [ 374.756267][T15577] ? device_add_class_symlinks+0x21f/0x240 [ 374.756298][T15577] device_add+0x496/0xb50 [ 374.756323][T15577] ? device_initialize+0x24b/0x440 [ 374.756349][T15577] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 374.756380][T15577] wakeup_source_register+0x18a/0x380 [ 374.756411][T15577] ep_insert+0xef6/0x19e0 [ 374.756455][T15577] ? __pfx_ep_insert+0x10/0x10 [ 374.756481][T15577] ? __pfx___mutex_lock+0x10/0x10 [ 374.756518][T15577] ? bpf_lsm_capable+0x9/0x20 [ 374.756552][T15577] do_epoll_ctl+0x7f4/0xe80 [ 374.756587][T15577] __x64_sys_epoll_ctl+0x163/0x1a0 [ 374.756617][T15577] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 374.756650][T15577] ? do_syscall_64+0xbe/0x3b0 [ 374.756676][T15577] do_syscall_64+0xfa/0x3b0 [ 374.756694][T15577] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.756722][T15577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.756741][T15577] ? clear_bhb_loop+0x60/0xb0 [ 374.756765][T15577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.756784][T15577] RIP: 0033:0x7fa050b8eec9 [ 374.756802][T15577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.756820][T15577] RSP: 002b:00007fa04edcd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 374.756839][T15577] RAX: ffffffffffffffda RBX: 00007fa050de6090 RCX: 00007fa050b8eec9 [ 374.756853][T15577] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 374.756864][T15577] RBP: 00007fa04edcd090 R08: 0000000000000000 R09: 0000000000000000 [ 374.756876][T15577] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 374.756888][T15577] R13: 00007fa050de6128 R14: 00007fa050de6090 R15: 00007ffe7dfc2e58 [ 374.756924][T15577] [ 375.344452][T15587] bond12: entered promiscuous mode [ 375.350334][T15587] 8021q: adding VLAN 0 to HW filter on device bond12 [ 375.486875][T15590] vxcan1 speed is unknown, defaulting to 1000 [ 375.521624][T15606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2424'. [ 375.567640][T15605] netlink: 'syz.2.2424': attribute type 1 has an invalid length. [ 375.585176][T15605] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2424'. [ 375.882558][T15629] netlink: 'syz.1.2428': attribute type 1 has an invalid length. [ 375.899350][T15629] netlink: 'syz.1.2428': attribute type 4 has an invalid length. [ 375.915428][T15629] netlink: 15538 bytes leftover after parsing attributes in process `syz.1.2428'. [ 375.927143][T15630] netlink: 'syz.4.2429': attribute type 13 has an invalid length. [ 375.951263][T15630] netlink: 'syz.4.2429': attribute type 17 has an invalid length. [ 376.047150][T15630] tipc: Resetting bearer [ 376.053024][T15630] tipc: Resetting bearer [ 376.172051][T15630] 8021q: adding VLAN 0 to HW filter on device .` [ 376.185416][T15630] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.194292][T15630] net_ratelimit: 24 callbacks suppressed [ 376.194298][T15630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.220116][T15590] lo speed is unknown, defaulting to 1000 [ 376.248006][T15641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.331377][T15631] vxcan1 speed is unknown, defaulting to 1000 [ 376.378501][T15630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.523410][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2433'. [ 376.755991][T15657] FAULT_INJECTION: forcing a failure. [ 376.755991][T15657] name failslab, interval 1, probability 0, space 0, times 0 [ 376.769445][T15657] CPU: 0 UID: 0 PID: 15657 Comm: syz.1.2435 Not tainted syzkaller #0 PREEMPT(full) [ 376.769472][T15657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.769484][T15657] Call Trace: [ 376.769492][T15657] [ 376.769500][T15657] dump_stack_lvl+0x189/0x250 [ 376.769529][T15657] ? __pfx____ratelimit+0x10/0x10 [ 376.769560][T15657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.769583][T15657] ? __pfx__printk+0x10/0x10 [ 376.769618][T15657] ? __pfx___might_resched+0x10/0x10 [ 376.769639][T15657] ? fs_reclaim_acquire+0x7d/0x100 [ 376.769672][T15657] should_fail_ex+0x414/0x560 [ 376.769704][T15657] should_failslab+0xa8/0x100 [ 376.769737][T15657] kmem_cache_alloc_noprof+0x73/0x3c0 [ 376.769759][T15657] ? __kernfs_new_node+0xd7/0x7e0 [ 376.769785][T15657] __kernfs_new_node+0xd7/0x7e0 [ 376.769814][T15657] ? __lock_acquire+0xab9/0xd20 [ 376.769841][T15657] ? __pfx___kernfs_new_node+0x10/0x10 [ 376.769863][T15657] ? kernfs_root+0x1c/0x230 [ 376.769890][T15657] ? kernfs_root+0x1c/0x230 [ 376.769909][T15657] ? kernfs_root+0x1c/0x230 [ 376.769924][T15657] ? kernfs_root+0x1c/0x230 [ 376.769948][T15657] kernfs_new_node+0x102/0x210 [ 376.769976][T15657] __kernfs_create_file+0x4b/0x2e0 [ 376.770006][T15657] sysfs_add_file_mode_ns+0x238/0x300 [ 376.770044][T15657] internal_create_group+0x66d/0x1110 [ 376.770083][T15657] ? __pfx_internal_create_group+0x10/0x10 [ 376.770118][T15657] sysfs_create_groups+0x59/0x120 [ 376.770141][T15657] device_add_attrs+0x1c4/0x5a0 [ 376.770175][T15657] ? __pfx_device_add_attrs+0x10/0x10 [ 376.770197][T15657] ? kobject_put+0x43f/0x480 [ 376.770225][T15657] ? device_add_class_symlinks+0x21f/0x240 [ 376.770255][T15657] device_add+0x496/0xb50 [ 376.770280][T15657] ? device_initialize+0x24b/0x440 [ 376.770308][T15657] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 376.770348][T15657] wakeup_source_register+0x18a/0x380 [ 376.770386][T15657] ep_insert+0xef6/0x19e0 [ 376.770429][T15657] ? __pfx_ep_insert+0x10/0x10 [ 376.770460][T15657] ? __pfx___mutex_lock+0x10/0x10 [ 376.770494][T15657] ? bpf_lsm_capable+0x9/0x20 [ 376.770527][T15657] do_epoll_ctl+0x7f4/0xe80 [ 376.770562][T15657] __x64_sys_epoll_ctl+0x163/0x1a0 [ 376.770592][T15657] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 376.770616][T15657] ? rcu_is_watching+0x15/0xb0 [ 376.770645][T15657] ? do_syscall_64+0xbe/0x3b0 [ 376.770670][T15657] do_syscall_64+0xfa/0x3b0 [ 376.770687][T15657] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.770716][T15657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.770736][T15657] ? clear_bhb_loop+0x60/0xb0 [ 376.770761][T15657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.770779][T15657] RIP: 0033:0x7fce9bf8eec9 [ 376.770798][T15657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.770820][T15657] RSP: 002b:00007fce9ce2c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 376.770840][T15657] RAX: ffffffffffffffda RBX: 00007fce9c1e6090 RCX: 00007fce9bf8eec9 [ 376.770854][T15657] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 376.770865][T15657] RBP: 00007fce9ce2c090 R08: 0000000000000000 R09: 0000000000000000 [ 376.770878][T15657] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 376.770890][T15657] R13: 00007fce9c1e6128 R14: 00007fce9c1e6090 R15: 00007ffd1fd797f8 [ 376.770924][T15657] [ 377.202072][T15631] lo speed is unknown, defaulting to 1000 [ 377.650208][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2444'. [ 378.134206][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2451'. [ 378.272527][T15718] netlink: 'syz.1.2453': attribute type 4 has an invalid length. [ 378.319461][T15722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2450'. [ 378.942169][T15730] bond6: option arp_interval: invalid value (18446744073709551615) [ 378.988603][T15730] bond6: option arp_interval: allowed values 0 - 2147483647 [ 378.999198][T15730] bond6 (unregistering): Released all slaves [ 379.226424][T15733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2456'. [ 379.273775][T15740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2456'. [ 379.335012][T15742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2458'. [ 379.350756][ T30] audit: type=1107 audit(1759606544.205:7): pid=15732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 379.373829][T15742] openvswitch: netlink: Flow actions attr not present in new flow. [ 379.625601][T15748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2461'. [ 379.698484][T15748] vxcan1 speed is unknown, defaulting to 1000 [ 379.943331][T15765] netlink: 'syz.1.2464': attribute type 11 has an invalid length. [ 380.104285][T15773] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2465'. [ 380.114563][T15773] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2465'. [ 380.167585][T15748] lo speed is unknown, defaulting to 1000 [ 380.183478][T15776] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2467'. [ 380.239173][T15775] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2468'. [ 380.398242][T15787] netlink: 'syz.1.2470': attribute type 13 has an invalid length. [ 380.406676][T15787] netlink: 'syz.1.2470': attribute type 17 has an invalid length. [ 380.431148][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'. [ 380.486088][T15787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.499873][T15787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.544007][T15787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.623313][T15792] vxcan1 speed is unknown, defaulting to 1000 [ 380.637703][T15787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.773714][T15806] netlink: 14212 bytes leftover after parsing attributes in process `syz.4.2476'. [ 381.029206][T15792] lo speed is unknown, defaulting to 1000 [ 381.029228][T15814] veth0_macvtap: mtu less than device minimum [ 381.053396][T15807] netlink: 'syz.2.2475': attribute type 4 has an invalid length. [ 381.237315][T15820] IPv6: NLM_F_CREATE should be specified when creating new route [ 382.077030][T15851] 8021q: adding VLAN 0 to HW filter on device bond8 [ 382.086643][T15851] bridge0: port 1(bond8) entered blocking state [ 382.093150][T15851] bridge0: port 1(bond8) entered disabled state [ 382.105652][T15851] bond8: entered allmulticast mode [ 382.119587][T15851] bond8: entered promiscuous mode [ 382.130436][T15851] bridge0: port 1(bond8) entered blocking state [ 382.136910][T15851] bridge0: port 1(bond8) entered forwarding state [ 382.341429][T14508] bridge0: port 1(bond8) entered disabled state [ 382.382866][T15873] FAULT_INJECTION: forcing a failure. [ 382.382866][T15873] name failslab, interval 1, probability 0, space 0, times 0 [ 382.436023][T15873] CPU: 0 UID: 0 PID: 15873 Comm: syz.3.2497 Not tainted syzkaller #0 PREEMPT(full) [ 382.436059][T15873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 382.436072][T15873] Call Trace: [ 382.436079][T15873] [ 382.436088][T15873] dump_stack_lvl+0x189/0x250 [ 382.436117][T15873] ? __pfx____ratelimit+0x10/0x10 [ 382.436148][T15873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.436172][T15873] ? __pfx__printk+0x10/0x10 [ 382.436208][T15873] ? __pfx___might_resched+0x10/0x10 [ 382.436228][T15873] ? fs_reclaim_acquire+0x7d/0x100 [ 382.436261][T15873] should_fail_ex+0x414/0x560 [ 382.436292][T15873] should_failslab+0xa8/0x100 [ 382.436320][T15873] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 382.436345][T15873] ? kobject_set_name_vargs+0x61/0x110 [ 382.436373][T15873] kvasprintf+0xdc/0x190 [ 382.436400][T15873] ? __pfx_kvasprintf+0x10/0x10 [ 382.436435][T15873] ? kvasprintf_const+0xe1/0x240 [ 382.436461][T15873] kobject_set_name_vargs+0x61/0x110 [ 382.436486][T15873] dev_set_name+0xd4/0x120 [ 382.436515][T15873] ? __pfx_dev_set_name+0x10/0x10 [ 382.436537][T15873] ? __init_waitqueue_head+0xa9/0x150 [ 382.436569][T15873] ? device_initialize+0x24b/0x440 [ 382.436598][T15873] wakeup_source_sysfs_add+0x1a9/0x2c0 [ 382.436632][T15873] wakeup_source_register+0x18a/0x380 [ 382.436663][T15873] ep_insert+0xff3/0x19e0 [ 382.436708][T15873] ? __pfx_ep_insert+0x10/0x10 [ 382.436753][T15873] ? bpf_lsm_capable+0x9/0x20 [ 382.436786][T15873] do_epoll_ctl+0x7f4/0xe80 [ 382.436822][T15873] __x64_sys_epoll_ctl+0x163/0x1a0 [ 382.436853][T15873] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 382.436877][T15873] ? rcu_is_watching+0x15/0xb0 [ 382.436905][T15873] ? do_syscall_64+0xbe/0x3b0 [ 382.436929][T15873] do_syscall_64+0xfa/0x3b0 [ 382.436947][T15873] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.436975][T15873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.436995][T15873] ? clear_bhb_loop+0x60/0xb0 [ 382.437019][T15873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.437043][T15873] RIP: 0033:0x7ff1f4d8eec9 [ 382.437060][T15873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.437078][T15873] RSP: 002b:00007ff1f5c1c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 382.437099][T15873] RAX: ffffffffffffffda RBX: 00007ff1f4fe5fa0 RCX: 00007ff1f4d8eec9 [ 382.437113][T15873] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 382.437125][T15873] RBP: 00007ff1f5c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 382.437137][T15873] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 382.437149][T15873] R13: 00007ff1f4fe6038 R14: 00007ff1f4fe5fa0 R15: 00007ffce61a2dd8 [ 382.437183][T15873] [ 382.484466][T15878] netlink: 'syz.0.2498': attribute type 13 has an invalid length. [ 382.726775][T15878] netlink: 'syz.0.2498': attribute type 17 has an invalid length. [ 382.835503][T15878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.900478][T15891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.155350][T15878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.184173][T15875] vxcan1 speed is unknown, defaulting to 1000 [ 383.519703][T15908] tun0: tun_chr_ioctl cmd 1074025681 [ 383.862225][T15925] 8021q: adding VLAN 0 to HW filter on device bond8 [ 384.098906][T15875] lo speed is unknown, defaulting to 1000 [ 384.212712][T15943] netlink: 'syz.2.2513': attribute type 1 has an invalid length. [ 384.224323][T15943] sctp: [Deprecated]: syz.2.2513 (pid 15943) Use of int in max_burst socket option. [ 384.224323][T15943] Use struct sctp_assoc_value instead [ 384.476318][T15953] netlink: 'syz.1.2516': attribute type 4 has an invalid length. [ 384.748330][T15970] __nla_validate_parse: 4 callbacks suppressed [ 384.748348][T15970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2519'. [ 384.773066][T15971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2521'. [ 385.016618][T15984] netlink: 'syz.1.2524': attribute type 13 has an invalid length. [ 385.024577][T15984] netlink: 'syz.1.2524': attribute type 17 has an invalid length. [ 385.067892][T15984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.090186][T15985] siw: device registration error -23 [ 385.165392][T15984] netlink: 'syz.1.2524': attribute type 13 has an invalid length. [ 385.173575][T15984] netlink: 'syz.1.2524': attribute type 17 has an invalid length. [ 385.213561][T15984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.246152][T15995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2526'. [ 385.367494][T15999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2527'. [ 385.485574][T16001] openvswitch: netlink: IP tunnel dst address not specified [ 385.775968][T15999] bond9: entered promiscuous mode [ 385.781776][T15999] 8021q: adding VLAN 0 to HW filter on device bond9 [ 385.941845][T15999] bond9 (unregistering): Released all slaves [ 385.987148][T16004] 8021q: VLANs not supported on bond0 [ 386.066722][T16009] tipc: Enabling of bearer rejected, already enabled [ 386.287793][T16025] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.388530][T16030] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 386.761526][T16053] netlink: 'syz.1.2542': attribute type 3 has an invalid length. [ 386.830837][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 386.936591][T16069] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2541'. [ 387.021496][T16078] netlink: 'syz.1.2544': attribute type 13 has an invalid length. [ 387.039901][T16078] netlink: 'syz.1.2544': attribute type 17 has an invalid length. [ 387.053403][T16080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2549'. [ 387.091574][T16078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.109314][T16080] netlink: 'syz.2.2549': attribute type 1 has an invalid length. [ 387.121134][T16079] netlink: 'syz.4.2548': attribute type 12 has an invalid length. [ 387.194243][T16086] netlink: 'syz.2.2551': attribute type 1 has an invalid length. [ 387.202789][T16086] netlink: 15582 bytes leftover after parsing attributes in process `syz.2.2551'. [ 387.227825][T16084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.238912][T16071] vxcan1 speed is unknown, defaulting to 1000 [ 387.290757][T16078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.448166][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2553'. [ 387.463572][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2553'. [ 387.719486][T16071] lo speed is unknown, defaulting to 1000 [ 387.728338][T16101] vxcan1 speed is unknown, defaulting to 1000 [ 388.195493][T16101] lo speed is unknown, defaulting to 1000 [ 388.382692][T16117] team0: Unable to change to the same mode the team is in [ 388.448580][T16124] netlink: 'syz.0.2562': attribute type 1 has an invalid length. [ 388.541304][T16124] netlink: 'syz.0.2562': attribute type 2 has an invalid length. [ 388.550305][T16124] netlink: 'syz.0.2562': attribute type 2 has an invalid length. [ 389.780673][T16148] __nla_validate_parse: 5 callbacks suppressed [ 389.780694][T16148] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.2570'. [ 389.847077][T16148] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.2570'. [ 390.427341][T16170] veth0: entered promiscuous mode [ 390.433108][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'. [ 390.480602][T16170] veth0 (unregistering): left promiscuous mode [ 390.709860][T16179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.726392][T16172] vxcan1 speed is unknown, defaulting to 1000 [ 390.745022][T16183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2579'. [ 391.020125][T16172] lo speed is unknown, defaulting to 1000 [ 391.228464][T16197] vxcan1 speed is unknown, defaulting to 1000 [ 391.252728][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2583'. [ 391.520949][T16208] syzkaller1: entered promiscuous mode [ 391.527319][T16208] syzkaller1: entered allmulticast mode [ 391.547584][T16202] netlink: 'syz.2.2583': attribute type 1 has an invalid length. [ 391.819925][T16197] lo speed is unknown, defaulting to 1000 [ 391.932276][T16226] pimreg: tun_chr_ioctl cmd 35111 [ 392.390571][T16240] macvtap2: entered allmulticast mode [ 392.398398][T16240] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 392.447470][T16240] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 392.558021][T16239] netlink: 'syz.1.2589': attribute type 1 has an invalid length. [ 392.576019][T16239] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2589'. [ 392.600048][T16232] vxcan1 speed is unknown, defaulting to 1000 [ 393.502323][T16248] bond9: entered promiscuous mode [ 393.516463][T16248] bond9: entered allmulticast mode [ 393.529660][T16248] 8021q: adding VLAN 0 to HW filter on device bond9 [ 393.564302][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'. [ 393.593181][T16232] lo speed is unknown, defaulting to 1000 [ 393.786345][T16270] vlan3: entered promiscuous mode [ 394.014067][T16252] vxcan1 speed is unknown, defaulting to 1000 [ 394.289519][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2598'. [ 394.426553][T16287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2598'. [ 394.857692][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2601'. [ 395.243758][T16315] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2606'. [ 395.264293][T16315] bond0: entered promiscuous mode [ 395.431983][T16252] lo speed is unknown, defaulting to 1000 [ 395.707997][T16332] 8021q: adding VLAN 0 to HW filter on device bond9 [ 395.779908][T16332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.978088][T16336] syzkaller1: entered promiscuous mode [ 396.033094][T16336] syzkaller1: entered allmulticast mode [ 396.344443][T16356] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2616'. [ 396.370266][T16355] netlink: 'syz.3.2617': attribute type 21 has an invalid length. [ 396.503001][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2619'. [ 396.546295][T16359] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2618'. [ 396.577960][T16359] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2618'. [ 396.694551][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2619'. [ 396.795505][T16362] bond10: entered promiscuous mode [ 396.814465][T16362] 8021q: adding VLAN 0 to HW filter on device bond10 [ 396.834534][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2621'. [ 396.853578][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2621'. [ 396.862965][T16367] vxcan1 speed is unknown, defaulting to 1000 [ 396.881179][T16375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2621'. [ 396.995471][T16370] 8021q: adding VLAN 0 to HW filter on device bond10 [ 397.010679][T16370] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 397.049381][T16370] bond10: (slave vcan0): Error -95 calling set_mac_address [ 397.321376][T16367] lo speed is unknown, defaulting to 1000 [ 397.366120][T16383] netlink: 'syz.4.2624': attribute type 13 has an invalid length. [ 397.385649][T16383] netlink: 'syz.4.2624': attribute type 17 has an invalid length. [ 397.410374][T16383] tipc: Resetting bearer [ 397.429644][T16383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.527556][T16383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.550502][T16386] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1178943980/1178943982 [ 397.561739][T16386] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1178943980/1178943982 [ 397.637065][T16397] netlink: 'syz.1.2627': attribute type 10 has an invalid length. [ 397.644570][T16383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.797877][T16384] vxcan1 speed is unknown, defaulting to 1000 [ 398.147908][T16413] netlink: 'syz.0.2632': attribute type 1 has an invalid length. [ 398.243715][T16413] 8021q: adding VLAN 0 to HW filter on device bond6 [ 398.309145][T16415] bond6: (slave gretap3): making interface the new active one [ 398.319649][T16415] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 398.417132][T16384] lo speed is unknown, defaulting to 1000 [ 398.586980][T16424] netlink: 'syz.1.2635': attribute type 8 has an invalid length. [ 398.768710][T16432] netlink: 'syz.2.2639': attribute type 96 has an invalid length. [ 399.023792][T16444] vxcan1 speed is unknown, defaulting to 1000 [ 399.343905][T16460] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 399.367694][T16460] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 399.466635][T16465] netlink: 'syz.0.2645': attribute type 10 has an invalid length. [ 399.906428][T16444] lo speed is unknown, defaulting to 1000 [ 400.157747][T16486] netlink: 'syz.2.2654': attribute type 2 has an invalid length. [ 400.229354][T16489] __nla_validate_parse: 13 callbacks suppressed [ 400.229381][T16489] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2655'. [ 400.275759][T16489] tc_dump_action: action bad kind [ 400.436423][T16499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2658'. [ 401.053606][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2665'. [ 401.376224][T16547] tipc: Enabling of bearer rejected, failed to enable media [ 401.656261][T16555] sctp: [Deprecated]: syz.1.2672 (pid 16555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.656261][T16555] Use struct sctp_sack_info instead [ 401.721101][T16573] FAULT_INJECTION: forcing a failure. [ 401.721101][T16573] name failslab, interval 1, probability 0, space 0, times 0 [ 401.735062][T16573] CPU: 0 UID: 0 PID: 16573 Comm: syz.3.2675 Not tainted syzkaller #0 PREEMPT(full) [ 401.735090][T16573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.735101][T16573] Call Trace: [ 401.735109][T16573] [ 401.735117][T16573] dump_stack_lvl+0x189/0x250 [ 401.735145][T16573] ? __pfx____ratelimit+0x10/0x10 [ 401.735174][T16573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.735197][T16573] ? __pfx__printk+0x10/0x10 [ 401.735228][T16573] ? __pfx___might_resched+0x10/0x10 [ 401.735247][T16573] ? fs_reclaim_acquire+0x7d/0x100 [ 401.735276][T16573] should_fail_ex+0x414/0x560 [ 401.735303][T16573] should_failslab+0xa8/0x100 [ 401.735328][T16573] kmem_cache_alloc_noprof+0x73/0x3c0 [ 401.735349][T16573] ? __kernfs_new_node+0xd7/0x7e0 [ 401.735372][T16573] __kernfs_new_node+0xd7/0x7e0 [ 401.735389][T16573] ? __lock_acquire+0xab9/0xd20 [ 401.735414][T16573] ? __pfx___kernfs_new_node+0x10/0x10 [ 401.735433][T16573] ? kernfs_root+0x1c/0x230 [ 401.735458][T16573] ? kernfs_root+0x1c/0x230 [ 401.735477][T16573] ? kernfs_root+0x1c/0x230 [ 401.735500][T16573] kernfs_new_node+0x102/0x210 [ 401.735538][T16573] kernfs_create_link+0xa7/0x200 [ 401.735568][T16573] sysfs_do_create_link_sd+0x83/0x110 [ 401.735590][T16573] device_add_class_symlinks+0x1cf/0x240 [ 401.735622][T16573] device_add+0x475/0xb50 [ 401.735647][T16573] ? device_initialize+0x24b/0x440 [ 401.735675][T16573] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 401.735709][T16573] wakeup_source_register+0x18a/0x380 [ 401.735741][T16573] ep_insert+0xff3/0x19e0 [ 401.735785][T16573] ? __pfx_ep_insert+0x10/0x10 [ 401.735827][T16573] ? bpf_lsm_capable+0x9/0x20 [ 401.735860][T16573] do_epoll_ctl+0x7f4/0xe80 [ 401.735897][T16573] __x64_sys_epoll_ctl+0x163/0x1a0 [ 401.735928][T16573] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 401.735953][T16573] ? rcu_is_watching+0x15/0xb0 [ 401.735979][T16573] ? do_syscall_64+0xbe/0x3b0 [ 401.736001][T16573] do_syscall_64+0xfa/0x3b0 [ 401.736017][T16573] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.736043][T16573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.736061][T16573] ? clear_bhb_loop+0x60/0xb0 [ 401.736085][T16573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.736104][T16573] RIP: 0033:0x7ff1f4d8eec9 [ 401.736122][T16573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.736139][T16573] RSP: 002b:00007ff1f5c1c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 401.736159][T16573] RAX: ffffffffffffffda RBX: 00007ff1f4fe5fa0 RCX: 00007ff1f4d8eec9 [ 401.736174][T16573] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 401.736186][T16573] RBP: 00007ff1f5c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 401.736198][T16573] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 401.736211][T16573] R13: 00007ff1f4fe6038 R14: 00007ff1f4fe5fa0 R15: 00007ffce61a2dd8 [ 401.736244][T16573] [ 401.887278][T16570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.232165][T16586] vxcan1 speed is unknown, defaulting to 1000 [ 402.247820][T16590] netlink: 'syz.3.2677': attribute type 1 has an invalid length. [ 402.391754][T16571] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 402.422140][T16592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2678'. [ 402.537867][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2679'. [ 402.567583][T16599] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2680'. [ 402.645410][T16597] 8021q: adding VLAN 0 to HW filter on device bond13 [ 402.804580][T16607] netlink: 25188 bytes leftover after parsing attributes in process `syz.3.2680'. [ 403.009296][T16587] netlink: 'syz.4.2676': attribute type 2 has an invalid length. [ 403.044542][T16625] FAULT_INJECTION: forcing a failure. [ 403.044542][T16625] name failslab, interval 1, probability 0, space 0, times 0 [ 403.095110][T16625] CPU: 0 UID: 0 PID: 16625 Comm: syz.3.2687 Not tainted syzkaller #0 PREEMPT(full) [ 403.095137][T16625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.095147][T16625] Call Trace: [ 403.095154][T16625] [ 403.095162][T16625] dump_stack_lvl+0x189/0x250 [ 403.095191][T16625] ? __pfx____ratelimit+0x10/0x10 [ 403.095219][T16625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.095240][T16625] ? __pfx__printk+0x10/0x10 [ 403.095272][T16625] ? __pfx___might_resched+0x10/0x10 [ 403.095291][T16625] ? fs_reclaim_acquire+0x7d/0x100 [ 403.095323][T16625] should_fail_ex+0x414/0x560 [ 403.095353][T16625] should_failslab+0xa8/0x100 [ 403.095378][T16625] kmem_cache_alloc_noprof+0x73/0x3c0 [ 403.095398][T16625] ? __kernfs_new_node+0xd7/0x7e0 [ 403.095414][T16625] ? kasan_save_track+0x4f/0x80 [ 403.095438][T16625] __kernfs_new_node+0xd7/0x7e0 [ 403.095458][T16625] ? __lock_acquire+0xab9/0xd20 [ 403.095483][T16625] ? __pfx___kernfs_new_node+0x10/0x10 [ 403.095503][T16625] ? kernfs_root+0x1c/0x230 [ 403.095527][T16625] ? kernfs_root+0x1c/0x230 [ 403.095545][T16625] ? kernfs_root+0x1c/0x230 [ 403.095561][T16625] ? kernfs_root+0x1c/0x230 [ 403.095585][T16625] kernfs_new_node+0x102/0x210 [ 403.095611][T16625] __kernfs_create_file+0x4b/0x2e0 [ 403.095639][T16625] sysfs_add_file_mode_ns+0x238/0x300 [ 403.095677][T16625] internal_create_group+0x66d/0x1110 [ 403.095710][T16625] ? rwsem_wake+0xec/0x140 [ 403.095733][T16625] ? __pfx_rwsem_wake+0x10/0x10 [ 403.095759][T16625] ? __pfx_internal_create_group+0x10/0x10 [ 403.095793][T16625] sysfs_create_groups+0x59/0x120 [ 403.095817][T16625] device_add_attrs+0x1c4/0x5a0 [ 403.095850][T16625] ? __pfx_device_add_attrs+0x10/0x10 [ 403.095874][T16625] ? kobject_put+0x43f/0x480 [ 403.095902][T16625] ? device_add_class_symlinks+0x21f/0x240 [ 403.095929][T16625] device_add+0x496/0xb50 [ 403.095953][T16625] ? device_initialize+0x24b/0x440 [ 403.095980][T16625] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 403.096009][T16625] wakeup_source_register+0x18a/0x380 [ 403.096038][T16625] ep_insert+0xff3/0x19e0 [ 403.096081][T16625] ? __pfx_ep_insert+0x10/0x10 [ 403.096125][T16625] ? bpf_lsm_capable+0x9/0x20 [ 403.096157][T16625] do_epoll_ctl+0x7f4/0xe80 [ 403.096190][T16625] __x64_sys_epoll_ctl+0x163/0x1a0 [ 403.096220][T16625] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 403.096243][T16625] ? rcu_is_watching+0x15/0xb0 [ 403.096271][T16625] ? do_syscall_64+0xbe/0x3b0 [ 403.096294][T16625] do_syscall_64+0xfa/0x3b0 [ 403.096313][T16625] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.096341][T16625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.096360][T16625] ? clear_bhb_loop+0x60/0xb0 [ 403.096382][T16625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.096400][T16625] RIP: 0033:0x7ff1f4d8eec9 [ 403.096417][T16625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.096433][T16625] RSP: 002b:00007ff1f5c1c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 403.096453][T16625] RAX: ffffffffffffffda RBX: 00007ff1f4fe5fa0 RCX: 00007ff1f4d8eec9 [ 403.096468][T16625] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 403.096479][T16625] RBP: 00007ff1f5c1c090 R08: 0000000000000000 R09: 0000000000000000 [ 403.096491][T16625] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000002 [ 403.096503][T16625] R13: 00007ff1f4fe6038 R14: 00007ff1f4fe5fa0 R15: 00007ffce61a2dd8 [ 403.096537][T16625] [ 403.491398][T16632] syzkaller1: entered promiscuous mode [ 403.516195][T16632] syzkaller1: entered allmulticast mode [ 403.527172][T16635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2689'. [ 403.539731][T16586] lo speed is unknown, defaulting to 1000 [ 403.755998][T16642] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.930350][T16651] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2694'. [ 403.967857][T16651] netlink: 'syz.0.2694': attribute type 1 has an invalid length. [ 404.245926][T16662] syzkaller1: entered promiscuous mode [ 404.269331][T16662] syzkaller1: entered allmulticast mode [ 404.482082][T16668] netlink: 'syz.0.2698': attribute type 9 has an invalid length. [ 404.526874][T16668] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2698'. [ 404.912467][T16676] netlink: 'syz.3.2700': attribute type 101 has an invalid length. [ 404.920886][T16676] netlink: 'syz.3.2700': attribute type 7 has an invalid length. [ 405.273823][T16692] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 405.296650][T16692] bond0: (slave gre0): Error -95 calling set_mac_address [ 405.473794][T16708] veth5: entered promiscuous mode [ 405.495686][T16712] tipc: Enabling of bearer rejected, already enabled [ 405.506537][T16712] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 405.642736][T16720] xfrm1: entered allmulticast mode [ 405.775761][T16731] netlink: 'syz.0.2717': attribute type 1 has an invalid length. [ 405.783726][T16732] netlink: 'syz.0.2717': attribute type 1 has an invalid length. [ 405.824188][T16731] 8021q: adding VLAN 0 to HW filter on device bond8 [ 405.870158][T16742] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 405.951923][T16744] gretap2: entered promiscuous mode [ 406.108424][T16752] __nla_validate_parse: 2 callbacks suppressed [ 406.108446][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 406.143247][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2722'. [ 406.554442][T16774] netlink: 'syz.1.2732': attribute type 12 has an invalid length. [ 406.800200][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2735'. [ 406.810600][T16787] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 407.073120][T16800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2739'. [ 407.107733][T16804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2740'. [ 407.402035][T16822] vxcan1 speed is unknown, defaulting to 1000 [ 407.451123][T16829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2747'. [ 407.482694][T16830] netlink: 'syz.0.2746': attribute type 39 has an invalid length. [ 407.503617][T16831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2748'. [ 407.516933][T16829] bond14: entered promiscuous mode [ 407.522711][T16829] 8021q: adding VLAN 0 to HW filter on device bond14 [ 407.597689][T16835] 8021q: adding VLAN 0 to HW filter on device bond15 [ 407.610404][T16835] bond15: entered promiscuous mode [ 407.619534][T16835] bond14: (slave bond15): Enslaving as an active interface with an up link [ 407.717753][T16836] sctp: [Deprecated]: syz.2.2750 (pid 16836) Use of int in max_burst socket option deprecated. [ 407.717753][T16836] Use struct sctp_assoc_value instead [ 407.766735][T16822] lo speed is unknown, defaulting to 1000 [ 408.049693][T16854] vxcan1 speed is unknown, defaulting to 1000 [ 408.295748][T16867] hsr0: entered allmulticast mode [ 408.300986][T16867] hsr_slave_0: entered allmulticast mode [ 408.307363][T16867] hsr_slave_1: entered allmulticast mode [ 408.329508][T16866] hsr_slave_0: left promiscuous mode [ 408.336100][T16866] hsr_slave_1: left promiscuous mode [ 408.350829][T16866] hsr0 (unregistering): left allmulticast mode [ 408.362213][T16854] lo speed is unknown, defaulting to 1000 [ 408.607571][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2757'. [ 408.616955][T16869] vxcan1 speed is unknown, defaulting to 1000 [ 408.697569][T16881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2757'. [ 409.113590][T16886] netlink: 'syz.2.2758': attribute type 21 has an invalid length. [ 409.136524][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2758'. [ 409.161962][T16888] tipc: Enabled bearer , priority 0 [ 409.169930][T16869] lo speed is unknown, defaulting to 1000 [ 409.176918][T16886] netlink: 'syz.2.2758': attribute type 21 has an invalid length. [ 409.186534][T16888] syzkaller0: entered promiscuous mode [ 409.194101][T16888] syzkaller0: entered allmulticast mode [ 409.243598][T16888] tipc: Resetting bearer [ 409.257348][T16887] tipc: Resetting bearer [ 409.302742][T16887] tipc: Disabling bearer [ 409.344534][T16893] netlink: 'syz.2.2760': attribute type 1 has an invalid length. [ 409.355279][T16893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.141866][T16936] vxcan1 speed is unknown, defaulting to 1000 [ 411.245305][T16949] __nla_validate_parse: 4 callbacks suppressed [ 411.245325][T16949] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2771'. [ 411.352438][T16952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2774'. [ 411.807940][T16956] syzkaller0: entered promiscuous mode [ 411.815376][T16956] syzkaller0: entered allmulticast mode [ 411.848079][T16936] lo speed is unknown, defaulting to 1000 [ 412.043451][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 412.174929][T16972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2781'. [ 412.582100][T16990] macsec1: entered promiscuous mode [ 412.587938][T16990] macsec1: entered allmulticast mode [ 412.841897][T17007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2787'. [ 412.911526][T14525] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.922263][T14525] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.952436][T14525] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.998904][T14525] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.284496][T17026] sctp: [Deprecated]: syz.3.2794 (pid 17026) Use of int in maxseg socket option. [ 413.284496][T17026] Use struct sctp_assoc_value instead [ 413.314050][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2794'. [ 413.334440][T17020] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2793'. [ 413.443546][T17029] lo speed is unknown, defaulting to 1000 [ 413.600007][T17022] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2795'. [ 413.656244][T17022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2795'. [ 413.675843][T17022] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2795'. [ 414.671394][T17058] tipc: Enabled bearer , priority 0 [ 414.704800][T17038] lo speed is unknown, defaulting to 1000 [ 414.743553][T17058] tipc: Resetting bearer [ 414.820776][T17054] tipc: Disabling bearer [ 415.455328][T17083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.655513][T17078] lo speed is unknown, defaulting to 1000 [ 415.664235][T17094] netlink: 'syz.3.2811': attribute type 4 has an invalid length. [ 416.363195][T17101] __nla_validate_parse: 2 callbacks suppressed [ 416.363215][T17101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2813'. [ 416.961673][T17120] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2819'. [ 417.046578][T17124] tipc: Enabled bearer , priority 0 [ 417.059065][T17125] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 417.087479][T17124] syzkaller0: entered promiscuous mode [ 417.093245][T17124] syzkaller0: entered allmulticast mode [ 417.107620][T17127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2820'. [ 417.133608][T17125] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 417.145773][T17124] tipc: Resetting bearer [ 417.156216][T17125] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 417.165510][T17125] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 417.206780][T17125] tipc: Resetting bearer [ 417.227129][T17132] netlink: 'syz.1.2821': attribute type 21 has an invalid length. [ 417.237922][T17132] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2821'. [ 417.271922][T17125] tipc: Disabling bearer [ 417.393874][T17141] netlink: 'syz.1.2824': attribute type 10 has an invalid length. [ 417.402465][T17141] veth1_vlan: entered allmulticast mode [ 417.409955][T17141] veth1_vlan: left promiscuous mode [ 417.417576][T17141] team0: Device veth1_vlan failed to register rx_handler [ 417.427224][T17140] nbd: must specify a size in bytes for the device [ 417.472793][T17144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2826'. [ 417.474568][T17147] nbd: must specify a size in bytes for the device [ 417.742658][T17160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2827'. [ 417.782615][T17160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2827'. [ 417.793273][T17160] netlink: 'syz.3.2827': attribute type 4 has an invalid length. [ 417.796377][T17161] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2827'. [ 418.031038][T17175] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 418.165479][T17181] netlink: 'syz.0.2836': attribute type 1 has an invalid length. [ 418.193813][T17181] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2836'. [ 418.545616][T17192] delete_channel: no stack [ 418.579629][T17192] netlink: 'syz.0.2837': attribute type 1 has an invalid length. [ 418.595203][T17192] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2837'. [ 418.747092][T17186] delete_channel: no stack [ 419.082284][ T5157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 419.095468][ T5157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 419.112647][ T5157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 419.147862][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 419.157513][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 419.178481][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 419.187061][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 419.201197][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 419.210687][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 419.222457][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 419.345224][T17221] lo speed is unknown, defaulting to 1000 [ 419.661371][T17236] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 420.384427][T17221] chnl_net:caif_netlink_parms(): no params data found [ 420.413316][T17276] netlink: 'syz.1.2857': attribute type 7 has an invalid length. [ 420.459430][T17282] netlink: 'syz.0.2858': attribute type 13 has an invalid length. [ 420.472283][T17282] netlink: 'syz.0.2858': attribute type 17 has an invalid length. [ 420.625246][T17282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.643605][T17285] netlink: 'syz.1.2860': attribute type 1 has an invalid length. [ 420.679767][T17221] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.697173][T17221] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.705052][T17221] bridge_slave_0: entered allmulticast mode [ 420.713085][T17221] bridge_slave_0: entered promiscuous mode [ 420.725668][T17288] sctp: [Deprecated]: syz.4.2861 (pid 17288) Use of int in maxseg socket option. [ 420.725668][T17288] Use struct sctp_assoc_value instead [ 420.765758][T17297] openvswitch: netlink: ct_state flags 00000781 unsupported [ 420.781523][T17277] lo speed is unknown, defaulting to 1000 [ 420.787711][T17221] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.801031][T17221] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.818852][T17221] bridge_slave_1: entered allmulticast mode [ 420.836967][T17221] bridge_slave_1: entered promiscuous mode [ 420.915075][T17302] sctp: [Deprecated]: syz.3.2865 (pid 17302) Use of int in max_burst socket option. [ 420.915075][T17302] Use struct sctp_assoc_value instead [ 420.946655][T17221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.999123][T17221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.133889][T17303] syzkaller1: entered promiscuous mode [ 421.142084][T17303] syzkaller1: entered allmulticast mode [ 421.154253][T17221] team0: Port device team_slave_0 added [ 421.165461][T17221] team0: Port device team_slave_1 added [ 421.295533][ T5845] Bluetooth: hci3: command tx timeout [ 421.307661][T17221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.328191][T17221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.357902][T17221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.395640][T17221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.403975][T17221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.439705][T17221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.671349][T17221] hsr_slave_0: entered promiscuous mode [ 421.681561][T17221] hsr_slave_1: entered promiscuous mode [ 421.709823][T17321] lo speed is unknown, defaulting to 1000 [ 421.848492][T17339] netlink: 'syz.3.2872': attribute type 1 has an invalid length. [ 421.919906][T17346] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 422.024323][T17339] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 422.036888][T17339] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 422.130661][T17350] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 422.196173][T17346] vlan0: entered allmulticast mode [ 422.201675][T17346] bridge0: entered allmulticast mode [ 422.468667][T17221] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.657887][T17221] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.744893][T17221] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.829597][T17366] __nla_validate_parse: 6 callbacks suppressed [ 422.829615][T17366] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2880'. [ 422.846254][T17366] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2880'. [ 422.848341][T17221] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.129754][T17221] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 423.158141][T17221] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 423.220925][T17221] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 423.253370][T17221] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 423.375470][ T5845] Bluetooth: hci3: command tx timeout [ 423.439881][T17399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2889'. [ 423.496358][T17399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2889'. [ 423.527653][T17221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.613373][T17221] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.659679][T17404] lo speed is unknown, defaulting to 1000 [ 423.721347][T14546] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.728604][T14546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.752426][T14546] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.759677][T14546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.846599][T17408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2890'. [ 423.858955][T17408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2890'. [ 424.464397][T17420] bond0: option miimon: invalid value (18446744072937799680) [ 424.476814][T17420] bond0: option miimon: allowed values 0 - 2147483647 [ 424.612719][T17221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.688771][T17221] veth0_vlan: entered promiscuous mode [ 424.841258][T17221] veth1_vlan: entered promiscuous mode [ 424.853994][T17433] netlink: 'syz.3.2896': attribute type 4 has an invalid length. [ 424.884022][T17433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2896'. [ 424.923194][T17434] lo speed is unknown, defaulting to 1000 [ 424.939933][T17221] veth0_macvtap: entered promiscuous mode [ 424.972288][T17221] veth1_macvtap: entered promiscuous mode [ 425.018906][T17221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.260178][T17221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.377750][T14534] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.396846][T14534] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.457982][ T5845] Bluetooth: hci3: command tx timeout [ 425.477803][T14534] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.534215][T14534] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.713420][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2902'. [ 425.794037][T14508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.811541][T14508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.891960][T14508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.906456][T14508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.268414][T17488] netlink: 'syz.1.2911': attribute type 13 has an invalid length. [ 426.305188][T17488] netlink: 'syz.1.2911': attribute type 17 has an invalid length. [ 426.412984][T17488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.570881][T17491] lo speed is unknown, defaulting to 1000 [ 426.739459][T17508] netlink: 'syz.3.2916': attribute type 1 has an invalid length. [ 426.766897][T17508] netlink: 'syz.3.2916': attribute type 1 has an invalid length. [ 426.976685][T17513] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2918'. [ 426.989460][T17513] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2918'. [ 427.314491][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.325097][ T5157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.334183][ T5157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.354584][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.366179][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.536416][ T5845] Bluetooth: hci3: command tx timeout [ 427.580490][T17524] lo speed is unknown, defaulting to 1000 [ 427.668807][T17541] netlink: 'syz.3.2924': attribute type 4 has an invalid length. [ 427.726645][T17541] netlink: 'syz.3.2924': attribute type 4 has an invalid length. [ 427.892646][T17548] __nla_validate_parse: 2 callbacks suppressed [ 427.892664][T17548] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2926'. [ 428.144012][T17556] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2928'. [ 428.166525][T17556] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2928'. [ 428.348805][T17568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2931'. [ 428.540385][T17524] chnl_net:caif_netlink_parms(): no params data found [ 428.630681][T17578] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2932'. [ 428.740068][T17590] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2935'. [ 428.741540][T17524] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.756655][T17524] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.764586][T17524] bridge_slave_0: entered allmulticast mode [ 428.773729][T17524] bridge_slave_0: entered promiscuous mode [ 428.784434][T17524] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.792278][T17524] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.796467][T17589] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2935'. [ 428.799968][T17524] bridge_slave_1: entered allmulticast mode [ 428.819732][T17524] bridge_slave_1: entered promiscuous mode [ 428.827115][T17590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2935'. [ 428.870488][T17589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2935'. [ 428.962330][T17524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.981862][T17599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2938'. [ 429.005768][T17524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.046308][T17605] netlink: 'syz.4.2940': attribute type 1 has an invalid length. [ 429.182227][T17605] 8021q: adding VLAN 0 to HW filter on device bond5 [ 429.216456][T17606] lo speed is unknown, defaulting to 1000 [ 429.384000][T17524] team0: Port device team_slave_0 added [ 429.399584][T17524] team0: Port device team_slave_1 added [ 429.455755][ T5845] Bluetooth: hci1: command tx timeout [ 429.532487][T17524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.540713][T17524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.585434][T17524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.625832][T17524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.632947][T17524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.668264][T17524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.715109][T17619] lo speed is unknown, defaulting to 1000 [ 429.953232][T17524] hsr_slave_0: entered promiscuous mode [ 429.960348][T17524] hsr_slave_1: entered promiscuous mode [ 429.976098][T17524] debugfs: 'hsr0' already exists in 'hsr' [ 429.992086][T17524] Cannot create hsr debugfs directory [ 430.130425][T17632] 8021q: VLANs not supported on caif0 [ 430.974993][T17645] syzkaller1: entered promiscuous mode [ 430.988308][T17645] syzkaller1: entered allmulticast mode [ 431.509105][T17524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.536754][ T5845] Bluetooth: hci1: command tx timeout [ 431.584454][T17524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 433.624078][ T5845] Bluetooth: hci1: command tx timeout [ 435.704532][ T5845] Bluetooth: hci1: command tx timeout [ 440.231699][T17524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 441.433098][T17524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 446.593551][T17670] lo speed is unknown, defaulting to 1000 [ 455.362897][T17524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.924239][T17524] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.254285][T14503] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.268052][T14503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.834423][T14508] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.844076][T14508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.943647][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 471.153030][ T5157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 471.504251][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 472.194312][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 472.721941][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 473.663300][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 473.812714][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 473.962436][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 474.114275][T17712] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20002 [ 474.551896][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 474.632528][T14546] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.774103][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 475.391209][ T5845] Bluetooth: hci2: command tx timeout [ 477.493023][ T5855] Bluetooth: hci2: command tx timeout [ 477.702901][ T5855] Bluetooth: hci5: command tx timeout [ 477.732351][T14546] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.542945][ T5855] Bluetooth: hci2: command tx timeout [ 479.783940][ T5855] Bluetooth: hci5: command tx timeout [ 481.633764][ T5855] Bluetooth: hci2: command tx timeout [ 481.863166][ T5855] Bluetooth: hci5: command tx timeout [ 483.943124][ T5855] Bluetooth: hci5: command tx timeout [ 484.594218][T14546] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.804191][T14546] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.114006][T17715] lo speed is unknown, defaulting to 1000 [ 509.012962][T14546] bond8: left allmulticast mode [ 509.153340][T14546] bond8: left promiscuous mode [ 509.324135][T14546] bridge0: port 1(bond8) entered disabled state [ 513.993637][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 514.552610][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 514.692952][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 515.221802][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 515.413396][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 518.503832][ T5855] Bluetooth: hci1: command tx timeout [ 520.622165][ T5855] Bluetooth: hci1: command tx timeout [ 522.661490][ T5855] Bluetooth: hci1: command tx timeout [ 524.750983][ T5855] Bluetooth: hci1: command tx timeout [ 532.822064][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 533.221859][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 533.364068][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 534.022409][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 534.631965][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 536.364172][ T5845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 536.563894][ T5845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 536.712911][ T5845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 537.182517][ T5157] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 537.539442][ T5157] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 538.512056][ T5157] Bluetooth: hci3: command tx timeout [ 538.991702][T17757] __nla_validate_parse: 9 callbacks suppressed [ 538.991723][T17757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2976'. [ 539.554362][ T5855] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 539.712910][ T5855] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 539.854022][ T5855] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 540.282093][ T5855] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 540.351318][ T5855] Bluetooth: hci6: command tx timeout [ 540.600248][ T5855] Bluetooth: hci3: command tx timeout [ 540.628466][ T5855] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 542.443189][ T5157] Bluetooth: hci6: command tx timeout [ 542.662874][ T5157] Bluetooth: hci3: command tx timeout [ 543.072942][ T5157] Bluetooth: hci7: command tx timeout [ 544.503661][ T5157] Bluetooth: hci6: command tx timeout [ 544.751602][ T5157] Bluetooth: hci3: command tx timeout [ 545.164411][ T5157] Bluetooth: hci7: command tx timeout [ 546.601591][ T5157] Bluetooth: hci6: command tx timeout [ 547.223534][ T5157] Bluetooth: hci7: command tx timeout [ 549.312791][ T5157] Bluetooth: hci7: command tx timeout [ 553.533718][T14546] dvmrp0 (unregistering): left allmulticast mode [ 571.492528][ T5855] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 571.653146][ T5855] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 571.753825][ T5855] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 572.382222][T17760] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 572.532279][T17760] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 572.803020][T17760] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 572.823578][T17760] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 573.174218][ T5157] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 573.993091][ T5845] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 574.203884][ T5845] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 575.382581][ T5845] Bluetooth: hci8: command tx timeout [ 576.892995][T14546] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 576.943111][ T5845] Bluetooth: hci9: command tx timeout [ 577.464381][ T5845] Bluetooth: hci8: command tx timeout [ 577.793236][T14546] bond0 (unregistering): Released all slaves [ 578.602883][T14546] bond1 (unregistering): (slave bond2): Releasing backup interface [ 579.001478][ T5845] Bluetooth: hci9: command tx timeout [ 579.524384][T14546] bond1 (unregistering): (slave bond3): Releasing backup interface [ 579.573488][ T5845] Bluetooth: hci8: command tx timeout [ 580.761925][T14546] bond1 (unregistering): (slave bond4): Releasing backup interface [ 581.083160][ T5845] Bluetooth: hci9: command tx timeout [ 581.621689][ T5845] Bluetooth: hci8: command tx timeout [ 581.684045][T14546] bond1 (unregistering): Released all slaves [ 583.152805][ T5845] Bluetooth: hci9: command tx timeout [ 592.253251][ T5855] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 592.433229][ T5855] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 592.572705][ T5855] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 593.124210][T14546] bond2 (unregistering): Released all slaves [ 593.214366][ T5855] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 593.473377][T17771] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 593.581534][T17771] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 593.883534][T17760] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 593.982212][T17760] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 594.814252][T17778] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 594.952907][T17778] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 595.172475][T17778] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 595.193569][T17760] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 595.523522][ T5855] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 595.703417][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 596.682700][ T5157] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 596.743915][ T5157] Bluetooth: hci10: command tx timeout [ 596.954098][ T5157] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 597.792193][ T5157] Bluetooth: hci11: command tx timeout [ 598.832114][ T5157] Bluetooth: hci10: command tx timeout [ 599.623786][ T5157] Bluetooth: hci12: command tx timeout [ 599.903033][ T5157] Bluetooth: hci11: command tx timeout [ 600.852889][ T5157] Bluetooth: hci5: command 0x0406 tx timeout [ 600.903225][ T5157] Bluetooth: hci10: command tx timeout [ 601.732911][ T5157] Bluetooth: hci12: command tx timeout [ 601.964501][ T5845] Bluetooth: hci11: command tx timeout [ 602.979553][ T5845] Bluetooth: hci10: command tx timeout [ 603.664239][T14546] bond3 (unregistering): Released all slaves [ 603.791663][ T5845] Bluetooth: hci12: command tx timeout [ 604.033919][ T5845] Bluetooth: hci11: command tx timeout [ 605.873372][ T5845] Bluetooth: hci12: command tx timeout [ 611.673623][T14546] bond4 (unregistering): Released all slaves [ 620.574035][T14546] bond5 (unregistering): Released all slaves [ 629.344122][T14546] bond6 (unregistering): Released all slaves [ 632.893313][ T5157] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 633.182904][ T5157] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 633.331684][ T5157] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 633.612897][ T5157] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 633.813515][ T5157] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 634.764084][ T5845] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 634.981231][ T5845] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 635.162785][ T5845] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 635.552790][ T5845] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 635.933917][ T5845] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 636.434466][ T5845] Bluetooth: hci13: command tx timeout [ 638.453043][ T5845] Bluetooth: hci14: command tx timeout [ 638.502157][ T5845] Bluetooth: hci13: command tx timeout [ 640.511758][ T5157] Bluetooth: hci14: command tx timeout [ 640.593497][ T5157] Bluetooth: hci13: command tx timeout [ 641.792898][ T5157] Bluetooth: hci1: command 0x0406 tx timeout [ 642.434454][T14546] bond7 (unregistering): Released all slaves [ 642.604111][ T5157] Bluetooth: hci14: command tx timeout [ 642.662540][ T5157] Bluetooth: hci13: command tx timeout [ 644.703304][ T5845] Bluetooth: hci14: command tx timeout [ 654.114446][T14546] bond8 (unregistering): Released all slaves [ 654.962914][ T5157] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 655.063024][ T5157] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 655.419870][ T5157] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 655.932426][ T5157] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 656.131585][ T5157] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 657.314459][ T5855] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 657.611876][ T5855] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 657.734499][ T5855] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 658.129888][ T5855] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 658.552219][ T5855] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 658.603783][T17778] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 658.724445][T17778] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 658.894130][ T5845] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 659.074538][ T5845] Bluetooth: hci15: command tx timeout [ 659.552749][ T5855] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 659.873202][ T5855] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 661.143655][ T5845] Bluetooth: hci15: command tx timeout [ 661.392480][ T5845] Bluetooth: hci16: command tx timeout [ 662.343220][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 662.362843][T17778] Bluetooth: hci6: command 0x0406 tx timeout [ 662.521435][T17778] Bluetooth: hci17: command tx timeout [ 662.783515][ T31] INFO: task kworker/1:14:12692 blocked for more than 143 seconds. [ 662.974266][ T31] Not tainted syzkaller #0 [ 663.073134][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 663.223404][ T31] task:kworker/1:14 state:D stack:24264 pid:12692 tgid:12692 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 663.224400][ T5855] Bluetooth: hci15: command tx timeout [ 663.352661][ T31] Workqueue: events switchdev_deferred_process_work [ 663.472782][ T5855] Bluetooth: hci16: command tx timeout [ 663.553984][ T31] Call Trace: [ 663.881441][ T31] [ 663.884432][ T31] __schedule+0x1798/0x4cc0 [ 663.984337][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 664.081708][ T31] ? __pfx___schedule+0x10/0x10 [ 664.403524][ T31] ? schedule+0x91/0x360 [ 664.472224][ T31] schedule+0x165/0x360 [ 664.563359][ T31] schedule_preempt_disabled+0x13/0x30 [ 664.583852][ T5855] Bluetooth: hci17: command tx timeout [ 664.671530][ T31] __mutex_lock+0x7e6/0x1350 [ 664.691439][ T31] ? look_up_lock_class+0x74/0x170 [ 664.699694][ T31] ? __mutex_lock+0x5bb/0x1350 [ 664.704509][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 664.732689][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 664.963102][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 665.042851][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 665.163162][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 665.321535][ T5855] Bluetooth: hci15: command tx timeout [ 665.501778][ T31] switchdev_deferred_process_work+0xe/0x20 [ 665.561525][ T5855] Bluetooth: hci16: command tx timeout [ 665.663202][ T31] process_scheduled_works+0xade/0x17b0 [ 665.821629][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 666.043395][ T31] worker_thread+0x8a0/0xda0 [ 666.211143][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 666.422391][ T31] ? __kthread_parkme+0x7b/0x200 [ 666.544109][ T31] kthread+0x711/0x8a0 [ 666.663010][ T5855] Bluetooth: hci17: command tx timeout [ 666.791884][ T31] ? __pfx_worker_thread+0x10/0x10 [ 666.911698][ T31] ? __pfx_kthread+0x10/0x10 [ 667.123603][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 667.284128][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 667.384283][ T5855] Bluetooth: hci7: command 0x0406 tx timeout [ 667.622427][ T5855] Bluetooth: hci16: command tx timeout [ 667.801798][ T31] ? __pfx_kthread+0x10/0x10 [ 667.893686][ T31] ret_from_fork+0x436/0x7d0 [ 668.193251][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 668.321500][ T31] ? __switch_to_asm+0x39/0x70 [ 668.482260][ T31] ? __switch_to_asm+0x33/0x70 [ 668.602643][ T31] ? __pfx_kthread+0x10/0x10 [ 668.723067][ T31] ret_from_fork_asm+0x1a/0x30 [ 668.742180][ T5855] Bluetooth: hci17: command tx timeout [ 668.839920][ T31] [ 668.853884][ T31] INFO: task kworker/u8:49:14527 blocked for more than 149 seconds. [ 669.144327][ T31] Not tainted syzkaller #0 [ 669.351670][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.632599][ T31] task:kworker/u8:49 state:D stack:21472 pid:14527 tgid:14527 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 669.832648][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 670.001202][ T31] Call Trace: [ 670.004532][ T31] [ 670.094459][ T31] __schedule+0x1798/0x4cc0 [ 670.213280][ T31] ? __lock_acquire+0xab9/0xd20 [ 670.282131][ T31] ? __lock_acquire+0xab9/0xd20 [ 670.493017][ T31] ? __pfx___schedule+0x10/0x10 [ 670.694349][ T31] ? schedule+0x91/0x360 [ 670.854394][ T31] schedule+0x165/0x360 [ 670.911973][ T31] schedule_preempt_disabled+0x13/0x30 [ 670.993107][ T31] __mutex_lock+0x7e6/0x1350 [ 671.093538][ T31] ? __mutex_lock+0x5bb/0x1350 [ 671.422920][ T31] ? addrconf_verify_work+0x19/0x30 [ 671.673268][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 671.763014][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 671.903872][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 672.004082][ T31] addrconf_verify_work+0x19/0x30 [ 672.171191][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 672.284380][ T31] process_scheduled_works+0xade/0x17b0 [ 672.563096][ T31] ? __pfx_process_scheduled_works+0x10/0x10