last executing test programs: 3.493986301s ago: executing program 1 (id=13556): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000700)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000040000000000000000400000000000000104800000200002000a0000000000000000000000000000000000120000000000010000000d0001007564703a73"], 0x6c}}, 0x0) 3.408087561s ago: executing program 1 (id=13557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x20) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xba, 0x757}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x108, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0xeb, 0xe, [@chsw_timing={0x68, 0x4}, @random={0x0, 0xdf, "6213a7f4cceaac455a2551dd2c01bd30314e0fc6395120099b65c39d4abfd2209adaf3280c13eb24a48b17131c3942a883b4b97f8174ac84157c01edc6a171b4b6a700caf7d3b2dc58cb41eab32e75ef0173f14041fb5621a31b977b5c3bc953056a3293f17f41db5d66544ffc7b62a39a286fa9cfc164c0eee4df2ac71ff22a7066262aac2ed1a399b137e0be6383081241903597d404d51b289565047eea9469de44de86c805b6c63d27d137d850456e8642ec3bab61b88a44c3920bf23d720781be2668c4c37e9c7c91fc6d2e5b13485b11dfe943bc09a53467541807da"}]}]]}, 0x108}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc10}, 0x1) r6 = socket(0x10, 0x80003, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0xc, 0x6, 0xb, 0x8, 0x5}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp', 0x5) 3.208092431s ago: executing program 4 (id=13560): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) (async) r6 = socket$unix(0x1, 0x5, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0x3, 0xb}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4811}, 0x200c840) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r12, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r16, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.083866552s ago: executing program 1 (id=13562): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@typedef={0xd, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x2e, 0x2e, 0x30, 0x5f, 0x6f, 0x30, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000140)=""/9, 0x30, 0x9, 0x1, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000a000000911185000000000095a931481ea87fe61eabad9951f314a2a134507a05664f03c356c25926e75878aa6eb745015145590eb6f8858bf4ace9431992de724fef9435b22c2d9f072930e3dff5baafd4908c"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x12, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(r2, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12100, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2.996274432s ago: executing program 4 (id=13563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x65, 0x8, 0x0, 0xfffa}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x64000000}, 0x94) 2.866679451s ago: executing program 4 (id=13567): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) 2.746205904s ago: executing program 4 (id=13570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001400000000608000140000000ff080001400000000208000140000000013400018008000140764f15e208000140000000000800014000000007ebfd014000000000080001400000000908000140000000001c000180080001400000002808000140000000cb08000140000000031400018008000140000000050800014000000001"], 0x140}, 0x1, 0x0, 0x0, 0x98ad45ccb5c69825}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000012c0), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'gretap0\x00', &(0x7f0000001300)={'gre0\x00', 0x0, 0x1, 0x80, 0x9, 0x0, {{0x4c, 0x4, 0x0, 0x9, 0x130, 0x65, 0x0, 0x3, 0x4, 0x0, @multicast2, @remote, {[@end, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x0, 0x9, "26c7b010aa25f4"}, {0x2, 0xa, "dadfe22c65806b21"}]}, @rr={0x7, 0x2b, 0x1f, [@private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x19}, @remote, @loopback, @multicast1, @empty, @loopback]}, @cipso={0x86, 0x68, 0x3, [{0x1, 0xf, "80a3f8745be65e71f9a2d4f284"}, {0x0, 0xd, "a1b339364e6271e82810e0"}, {0x2, 0x5, "77300f"}, {0x0, 0x5, "9361e3"}, {0x0, 0xb, "5ae77f4699633dc553"}, {0x6, 0xe, "1324dcceeb9f8924b7a5e7e8"}, {0x1, 0xb, "7266983c097996f1a6"}, {0x0, 0x10, "950bedf65951da01280a6f5cc0b8"}, {0x2, 0x8, "8153140f4ecc"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x69, 0x0, [{0x0, 0xe, "8a2e80769c119648d7baab46"}, {0x1, 0xf, "4566db719cd7d76cf315ef09fc"}, {0x6, 0x3, "e3"}, {0x7, 0x5, "2e1ee4"}, {0x0, 0x6, "2a8a4861"}, {0x5, 0xd, "afb299f2bffc69e07ad09c"}, {0x1, 0xc, "04034b2949f84b306807"}, {0x1, 0x4, "9682"}, {0x0, 0xf, "adff29d94ebd7cfa781bab6d8e"}, {0x5, 0xc, "dcbcad4a7766144b7127"}]}]}}}}}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000001580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x4c, r6, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_VERSION={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$packet(0x11, 0x3, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000280)="05ac2d814e83ea34af2c63a528e9a1a201019a86d63e4169e2d99357c73e5cd0a506462420b097d21e4420966e8ef2848e7577043ac0e5770000000020347d2d11b4eaa017c7b52ceeb6ed3d86505ea0", 0x50, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x3, 0x6, @remote}, 0x14) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) 2.725713545s ago: executing program 1 (id=13571): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000400)="87aa8e258efc073bcc70e077131653ec68ba", 0x12) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000041000000000000002000000000e81d5", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x29, 0xd0, 0x0, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x56, &(0x7f00000018c0)=""/176}}, {{&(0x7f0000001700)=@ieee802154={0x24, @short}, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)=""/213}, {&(0x7f0000001e00)=""/53}, {&(0x7f0000001e40)=""/2}], 0x0, &(0x7f0000001ec0)}, 0x3}], 0x15cbc1ab4c0933f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x600000d, 0x8031, 0xffffffffffffffff, 0x2a9000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c040000", @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x800) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f0000000500)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532ffff80002c9e6061c361eb9a51e01014dacaba8d5dd185c013c44ad60dc383a434c1051b8af8be4c927ef23d64d1d7306b96b2d7778f1df530a7a26c3aa97c2d351ebb434f4fc9be188561f161998ef185311face4e9be2f2365b76e7fea8f2234d60faa25cb80d26217fc267a70555ce3340b25e3179f13057364203fdce353a53ec42570913e874d8466a40799ea3bbc919d009f89d2b4831c139d1c0555a287253bde4e10556a787163", 0xd6}], 0x3}, 0x0) close(r2) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000340), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000011fb042b53a989078d00000000000000004f31ce04850000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x5, 0x4000c3, 0x40, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x40, 0xf373, 0x1c}}) 1.893378638s ago: executing program 1 (id=13576): r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="c3000e000300"}) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000020000000000000000800", 0x1e) r3 = socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0x4) r4 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x4, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.624006329s ago: executing program 4 (id=13579): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYBLOB="01001027bd700000dbdf252800000008000200", @ANYRES32=r5, @ANYRESDEC=r3, @ANYBLOB="ba264f581b5c22", @ANYRESOCT=r2, @ANYRES8=r0], 0x34}}, 0x4004850) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="28a9a66fa89fc134d8788b13d5ce855e33276c46b58feb6214f3fc1152daa60244a390a085c30f05388c225430c6fc097bf5f06f144f0647fe2e539d68075b0482118de87e850939806dcda4dc63c0125da7a233cc16bf6f86118f2365bf706f052294b2f86cab5bf24e23795402c87008aaf6dd291f156040d6", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf251b00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40080) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = accept(r6, &(0x7f00000000c0)=@x25={0x9, @remote}, &(0x7f0000000140)=0x80) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r3) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="cab7648e3cfc85ad30b9baa1ba59ceed8683d59768b667508c78734277bf043d77be71a507766e599c79bd8cb759a965b39e0d885fc8a6d404259578a2b6614d5d7eda1613039c8920a866f928f9fd8892013f4772ac38e2fa7610326f65cefd06e96631666729032eafa401d1cdaf79380afedcbd023cd1848bdf11ca02c7474281da035f6ae8268adffd4c744000e249a8c3c9f14e3bd2ba013eb96be3a8bb76c941142f0450df3796317231d2c35cca38a1599884baf4aa6edf0d74e8c744470895", @ANYRES16=r8, @ANYBLOB="20002abd7000fcdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) setsockopt$inet6_udp_int(r6, 0x11, 0x65, &(0x7f0000000000), 0x4) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r12, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x8001}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r13, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000300)={0x20000046, &(0x7f00000002c0)=[{0x4b3, 0x8, 0x2, 0x7}]}, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.470255463s ago: executing program 1 (id=13580): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x1c) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ADDRESS={0xa}]}, 0x97}, 0x1, 0x0, 0x0, 0x45844}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x44) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c845) sendmmsg$alg(r5, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}], 0x1, 0x20044000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000390440bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0198000000000000180012800e00010077697265677561726400000004000280094532428c529d7076b2da3d1b24b31a2141d107b992a0c7d241baa32b8019ab89302a9e67c018fbc55cb7710f05a10474cafe5484eed7f1fe8fd347ad74f3357fefcdf6148dbf32fc5ad254d24fa01e471a9df310cc3a0e5aac80456d1bc67b3903a58ca50a9f526849e7ef46977d33b823e0665fa7352fc57dade6cb85057c9da9b676b9fb80e70ce65bda3bee0db55634c2deeef05322"], 0x38}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) 1.187928762s ago: executing program 0 (id=13584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xcd, 0x4, 0xaf4585f225cdc3e8, 0x64, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000025c1020000ff88125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb060f", 0x2f}], 0x1}, 0x4005) 939.229689ms ago: executing program 3 (id=13588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x65, 0x8, 0x0, 0xfffa, 0xfff3}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x3e00}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 791.279612ms ago: executing program 0 (id=13589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x205, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0xf5}, 0x90) 790.404563ms ago: executing program 2 (id=13590): r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="c3000e000300"}) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000020000000000000000800", 0x1e) r3 = socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0x4) r4 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x4, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 789.944642ms ago: executing program 3 (id=13591): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c890}, 0x4040840) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x48850) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, 0x0, 0x105beec262c852b3, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4018041}, 0x2008080) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fbdbdf251000000005001000030000000600110073040000050010000a00000008000100", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x2000c000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "9c979b32261fbabdae20"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe93e43e9da39542d"}}]}, 0x158}}, 0x844) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) 739.409577ms ago: executing program 0 (id=13592): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000700)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000000000000040000000000000000400000000000000104800000200002000a0000000000000000000000000000000000000000000400010000000d0001007564703a73"], 0x6c}}, 0x0) 708.716161ms ago: executing program 3 (id=13593): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040010}, 0x8000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r3 = socket$inet(0x2, 0x6, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xa000040}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xf0}, 0x1, 0x0, 0x0, 0x600c004}, 0x24040011) ioctl$BTRFS_IOC_ENCODED_READ(r3, 0x80809440, &(0x7f0000000680)={&(0x7f0000000640)=[{&(0x7f0000000580)="bb75a8", 0x3}, {&(0x7f00000005c0)="66f1a858f016440efa70622b1c33bd5bdb062ff201dbede564e05007d8146b2c88d05184814adcaf6fe67cd124", 0x2d}, {&(0x7f0000000600)="271ebeede0665e8f643a27d3df8f70717b336a1a77df7a9f07d1f8c8eb42f999", 0x20}], 0x3, 0x1, 0x0, 0x0, 0x7ff, 0x7, 0x5, 0x5}) r9 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r9, &(0x7f0000000700)={0x1a, 0x313, 0x8, 0x9, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x10001, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000780)=0x0) ioctl$TUNSETOWNER(r10, 0x400454cc, r11) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair(0x18, 0x6, 0x1, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r13, 0x84, 0x75, &(0x7f0000000800)={0x0, 0x80000000}, &(0x7f0000000840)=0x8) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2d044400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, r14, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4080) ioctl$HCIINQUIRY(r12, 0x800448f0, &(0x7f0000000a80)={0xffffffffffffffff, 0x4, "71c8f4", 0xb, 0x8}) ioctl$XFS_IOC_START_COMMIT(r12, 0x80585882, &(0x7f0000000ac0)={0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(r16, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x18c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_ADT={0xc0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip_vti0\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xff}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'macsec0\x00'}}]}]}, 0x18c}}, 0x44800) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, r2, 0x200, 0x3ff, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) getpeername$unix(r16, &(0x7f0000000ec0), &(0x7f0000000f40)=0x6e) 632.459941ms ago: executing program 2 (id=13594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) 583.652511ms ago: executing program 0 (id=13595): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)={0x20, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @nested={0x8, 0x82, 0x0, 0x1, [@nested={0x4, 0x15a}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc94e52d035f3eab1}, 0x8000) connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x0, {0xa, 0x4e22, 0x9, @loopback, 0x400}}, 0x40) (async) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x2, @remote, 0x8001}}}, 0x84) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x91, 0x3, 0x2}]}}}], 0x18}, 0x20000810) 509.284265ms ago: executing program 4 (id=13596): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0xf, 0x4, 0x39d}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x748}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xda}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x1b, 0x3, 0xca, {0x8, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) 430.729374ms ago: executing program 2 (id=13597): r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x7800, 0x8000, 0x6, 0xdd4, {{0x1c, 0x4, 0x1, 0x3, 0x70, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @broadcast, {[@timestamp={0x44, 0x1c, 0x56, 0x0, 0xe, [0x6506, 0xf9a, 0x6d4, 0xb, 0x2341, 0x8]}, @cipso={0x86, 0x2a, 0x1, [{0x7, 0x5, "26fd78"}, {0x0, 0x11, "b6c9287b992fbb5d58625f454f2d10"}, {0x0, 0xe, "3343799da8f677d935afcaa8"}]}, @timestamp_prespec={0x44, 0x14, 0xa, 0x3, 0xa, [{@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x1}]}]}}}}}) sendmsg$xdp(r0, &(0x7f0000000680)={&(0x7f0000000100)={0x2c, 0x9, r1, 0x5}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="ab0731187a588afbf25c5f819407690542a76933a5dd75ebad5bc0e284e248ecc2ebd01a6d5104035f1284ad5689858c7e774633e6aeaaadf688d8ea3265872ff29df421b78e2298a763a531ac7cbbc3f313dbdd46ec7b03ff46342bc8887e6813a6cffe5c876024df320732d55df0ac696c96b595af5c877ae9466907ca8a600bc736485470188ccbdbc4e03accf76b196be1677b00f0939ec36b84d20f55a05b973a67ca86398e5660b8e0666803ed0fc9053359eebd4986425d0805f480c9c5e2de92683cb552887f643c6ed2d040aa8bad17220a", 0xd6}, {&(0x7f0000000240)="6b55f917a3e5f27a2c486e688c63d920bafb983d4cde7acb2b53ed9e2cd098494d072439fbd779e550bf36703011d8829dc9f3847262558e539a026882bbe1768bf493a9dbc5e1", 0x47}, {&(0x7f00000002c0)="9b555e8202abfd5831df1cb688003d6fa2442fe143c415b3bbb26e5c7fc2ca5b8b8db1b966bb70655927bfd36fcf441624cd8a85b256d415c4ee9c3c8633b15f5cc7b509896d4c60f76bfcfda87724ac67b7454911b8a69ef4694886d9ed9a38de71149d1ee18371519011d8fe9a256448364614fa1e79cbaf6a0ee12390bb9bb6ba4e59b452ccda83a856eb673cb2819206198aeccd2afee79046c39efd0d11c9fbf8d1e7252d296e2ab8c0382fb2284de7ec7c0314da9f6e81da3012f76279477be89f5ff67e06840eabf2c2a787", 0xcf}, {&(0x7f00000003c0)="324b70dec2ea88ec3f854a44c45251653edaf00d64153bdb03245212150b1c8fd38f5628b0ae0d60089e1388d2cd37ab5ff9951725559d62b52664ff9492694a97331ca444fa5aace53fabcd73337b27ebb8c41f204611aabb10d5ad31644a450450ef6e244b92f926957e77015c907c5886780fb556aacb57a17e2e9de504393ca1b7e52d2fe4d9b3e9c093483f19b9bb49a8233c54f47defd4055134ce1f8c1b", 0xa1}, {&(0x7f0000000480)="ba6da3b61840cb9c8f471bd759debb5dc3ab772b25d2d5376c98e2a2365158fb87f8a20c27befe0e0bb1de1a663d6a1ed55cd44480f32d0b93c2a77858804cd06c973138b418cc0065fa7cbe007848ded8bada3a79454a7ed8caf4476b7b3e236102d994644c4e5ae1efcdbcdbc0a2d096a350f0f02c951349f8ab3f228760336a6d1a305bcce935f1a77358442517d68cec1ce03048489f36e9ef41d36b41006c1e6d4048a8a0", 0xa7}, {&(0x7f0000000540)="fbf5", 0x2}, {&(0x7f0000000580)="d7a0dc37a68b600bd62060d1a8f78401112645800d8235f6256c67d47a56ddd38d3718d0045b7c24d11103c5133839fc030449ff859138ad54fe383b62bb3f4cb43d5f0e018f3be9fd02eb83489bfe0ebed7f8", 0x53}], 0x7, 0x0, 0x0, 0x4000000}, 0x240608d5) sendmsg$xdp(r0, &(0x7f0000000940)={&(0x7f00000006c0)={0x2c, 0x8, r1, 0x3e}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000700)="447233bb167662cf41bd284210b3b3f264ae31c2d2fa97c2a98725e91c9cd6061a8e8442a11fce0bfde5ab2f7fcc8800db74f6e646c88ecccf7e3397b38f2aa22512f4a41109ad8e5dd897d3f194fc9c5d3f8f5fd54839f176fa6ef710433faa187e64d8e13262bf07f12d18330b5028937ca42d411d4f16c128c9762bd5a4cf2871c50f82e892662662208331d5470b3189f6a709ad05843b4478d8a36f05f69f49af240dcd512159a2acb5acf63741e76782d295d8e390af970cf4403b085c307e126f015f1d", 0xc7}, {&(0x7f0000000800)="a3c173af1cc733f605602135f0a2509f0cbcf808fe116b43316d2bd51ceae61d53f0b6e7daa36c9a019c3863a5ebd440571687ca637e62d42c236e0c9c3365b147b5f0d0ab159564ff4f7eab1e1c3de5744083db50423980858ba18d585b6d20b24abbf1d3429ffc30ba93fa1b55039ff2d2ed7edb93b2ba8e5d24b0e76329a3c3b48ae09abd65cc8b4c255dda1a258e104cebbe946197dafd8fd81e2612ac5035e73d5bc117740cc5d0542056c3c2e08692658165321761387feee3eee5b91218b9a3c1e9eec7d4b1e897e21cfcd341937b501b0a39b3a5e23bcd218491715825a921eb0e3be08e", 0xe8}], 0x2, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000d80)={0x0, @dev={0xac, 0x14, 0x14, 0x3c}, 0x4e22, 0x1, 'wlc\x00', 0xe, 0xfffffffb, 0x74}, 0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e00), r2) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x9100a000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, r6, 0x80d, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x20000804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x800, 0x1, 0x6}}, @typedef={0x2, 0x0, 0x0, 0x8, 0x3}, @typedef={0x8, 0x0, 0x0, 0x8, 0x2}, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0]}}, &(0x7f0000001200)=""/153, 0x63, 0x99, 0x0, 0x5, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r2, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000013c0)=[0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x9, 0x1f, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3d6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001780)='syzkaller\x00', 0x92d1, 0x5d, &(0x7f00000017c0)=""/93, 0x41000, 0x10, '\x00', r1, @fallback=0x2c, r2, 0x8, &(0x7f0000001840)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001880)={0x5, 0x7, 0xffffffff, 0x80000001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000018c0)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000019c0)={r2, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f00000031c0)={{r2, &(0x7f0000001a00)='[\x00', 0x282000, &(0x7f0000001a40)={@align=0x1, {0x80, 0x5, 0x3, 0x5}}, 0x7, &(0x7f0000001a80)={@_ha_fsid}, &(0x7f0000001ac0)=0x37ed}, 0x8, &(0x7f00000030c0)=[{0x2, 0xf, &(0x7f0000001b00)='wlc\x00', &(0x7f0000001b40), 0x0, 0x2}, {0x3, 0x0, &(0x7f0000001b80)='\x00', &(0x7f0000001bc0), 0x0, 0x2}, {0x2, 0x0, &(0x7f0000001c00)='NET_DM\x00', &(0x7f0000001c40)="3ea87e7a5a62dd668a30c413a37aeacc36cf594a67ae8f815a108dc9bd2592eb923de6e30fd206ab2468101c2b63f81f42b898ea31f745c73792576cc277c86926026a60a8905f2fca37138c4b4ffdce3289e42ff051d118c6b9eef1eb9550ab941a370b128278c3805e046b79b79ef733cdca16ee5c5816b8cc5c301dedc8589069c030146659f3d0a8e69b4a91a27f84955ee2e76d3d9c7de145bad5b369d47bb9fc0095e115bca4a4734c7d1382776b46188ef86410678eaa97dd3a0a", 0xbe}, {0x2, 0x7, &(0x7f0000001d00)='#,/,},^\x00', &(0x7f0000001d40)="19f46e057ad5a03c11ad6ffb28e359ba62cbfa0c7ced8e8a58067b38b034b2b06eb5a0d16cc09873ab754698f97d258cd840b07bc80d1391586aa3d7592c7e35d6ce9b8c0e895e53ef5145480c2d494bbdaeab3661a9e1e267ba843bf635a05d8b29c3a4385cb12f86109def04f9eb54097c003660964af369cddefcaebd0e3478a15a5a6edd8e6583d5996c86824092e2e5a945504d7e0b778db1c7bf1ee9a22df6580aaafdfe059c85aea3a2d4a54db62ec78f0b9b330fc1cb19947cf644a714aafa2aa505f690eedded424ecd6a222ae800060e211f1536fc05ea9a4c", 0xde, 0x28}, {0x3, 0x0, &(0x7f0000001e40)='NET_DM\x00', &(0x7f0000001e80)="9228e2625d83b9", 0x7, 0x19}, {0x1, 0x8, &(0x7f0000001ec0)='\x00', &(0x7f0000001f00)="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", 0x1000}, {0x1, 0x2, &(0x7f0000002f00)=':]\'\x00', &(0x7f0000002f40)="524cf0ebef1a292fcdba56555c8949973d7753466efbb7691b1f56f35266eda3483008e8ed1bf6a8698821ea1ea6e35687f3017187efc0838eb12ec123fa3b1482348547447220e17e3dc3ef8c378807fcc0c6af3538408e235f92903a2b23509f0683c8c4f00e0683a39cadb42b44762788e675dcf79a74dc5d8c4db222872b1dea8407d627f2e7d7da842d81330ad9f6612de243484f2366b5ff9ba036d87fd6c3a38e02a28a1633a9be0337d4b01ed2c7e7c9f826fd99649d39fea0f622261d70f63802f43d792b48623d8c16d62e110e4e87e4a66f2cacaf85", 0xdb, 0x2}, {0x3, 0x9, &(0x7f0000003040)='-\x00', &(0x7f0000003080)="3c74eba8daa2f90f59b56161eb1af5da1dcf36ffd3b304a4fd946f9247e9a42f23972ce38562e9af904036", 0x2b, 0x12}]}) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003280)=@generic={&(0x7f0000003240)='./file0\x00', 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000033c0)={0x18, 0xa, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x529}, @ldst={0x1, 0x3, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff0}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x9, 0x0, 0x6, 0xfffffffffffffffd}, @alu={0x7, 0x0, 0x3, 0x0, 0xb, 0x3526ebd93164c76a, 0xfffffffffffffff0}]}, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0x5e, &(0x7f0000001100)=""/94, 0x0, 0x0, '\x00', r1, @fallback=0x31, r7, 0x8, &(0x7f0000001300)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001340)={0x3, 0x10, 0x8, 0x459}, 0x10, r9, r10, 0x9, &(0x7f00000032c0)=[r11, r12, r13, 0x1, 0xffffffffffffffff], &(0x7f0000003300)=[{0x0, 0x4, 0xa}, {0x3, 0x2, 0xf, 0xc}, {0x5, 0x2, 0xe, 0x9}, {0x3, 0x3, 0xa, 0x6}, {0x4, 0x5, 0x9, 0xa}, {0x1, 0x3, 0x3, 0x3}, {0x0, 0x4, 0x9, 0x4}, {0xb5a, 0x5, 0x7, 0xb}, {0x2, 0x3, 0x8, 0x2}], 0x10, 0x7fff}, 0x94) connect$inet(r2, &(0x7f0000003480)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000034c0)) r14 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r14, 0x29, 0xcb, &(0x7f0000003500)={0xffffffffffffffff, 0x390b1151fa1377a1, 0x2, r8, 0x8}, 0xc) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000003580), r12) sendmsg$DEVLINK_CMD_PORT_GET(r12, &(0x7f0000003700)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000036c0)={&(0x7f00000035c0)={0xf0, r15, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xf0}}, 0x880) ioctl$AUTOFS_IOC_EXPIRE(r10, 0x810c9365, &(0x7f0000003740)={{0x8, 0x45d0}, 0x100, './file0\x00'}) sendmsg$NFT_BATCH(r12, &(0x7f0000006d80)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006d40)={&(0x7f00000038c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x100, 0x14, 0xa, 0x905, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x89, 0x8, "77b5508fea3b99fde0d25f02b94c4b5543727cb4757f31674b18d035b1d59973ea6dc887e80e58cc113cc569ffce131496b809850783dc67b5d2553e2c9f8c333dc4f1bb1c1ad21ebfe943704c9fe61b045255bc8053b8ec73586e9c287948a88a08e2adf01b7804d76fd38b9d8f67ca7f649a1f8f1e913fc31cdbf4c0a3cf435d3151db0a"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x34, 0x8, "d4623290c324da636c3cac893416f53b5fd20d1a5c3577446fd2f6561a72568317c5e0a509800c835cebb362d2c28581"}]}, @NFT_MSG_DELSETELEM={0x3170, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1db8, 0x3, 0x0, 0x1, [{0x42c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x428, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x98, 0x1, "75ce888e7aa0c7cdf275a580e2307d1ea88ddf09336ac7c7c4a5cb60c02bde4bbef66d28a276d4a48541d61c3e2b2a1e3db0b3cad8874a6595c73cf1f1e39496d060a9a4077b1f0f6329856a0800d93c04d7cdb7d95bcc2356ffaa4f271981bc7fd6e261a754386dfc67f92fa8da7958745d17ce502945ba2cae99ca2517f9bdf752a9c43f64345c7b603f34adbd554983092681"}, @NFTA_DATA_VALUE={0xd7, 0x1, "1d6b7a02859a527cf58bf7e033da1486a139b87e77758452776ee810b24eaf8d238d28cd6c99909c159fcd261552dcf274b4dc0611ac756d5348d4dd494c24f6b9ac82a563b0cb5403c40473456483342f91da59e7cfc5906dedbb73683e553272c70b30ddbbe8ace704995f953390a8fc6524cf8c7b89e695665ea8aceba22986ba77f34f5719064fbff88999c14ca6ae1a477e0ec09465f47b5b7955a03b5e75c676b5e07aad28eb4dc7b95aaa684e1388463555114b45dfda0b5393f04414ff1edef26ea1c3ede62684eb98918d56cebe64"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xe6, 0x1, "9a87cabafd0fcfd429717d16afc8518ec27d2a066f166472a22c3e7472fc267e9335e774c64f866e7ec2dd0c4be50ea8fd176dae40b689d07feec378e1c283d86f60fa7bb8b5377a8b4a0431dcfe94a635766ec8f7c4290894448990b1bb9b7528e41ba75743ab7737fc027e5d5fe548c20e63663bda19103025561544b6f166c0992eb1d0ad68d61a21e3d968504cacd925ff400cff913f50fe15bfa949d1a0afe7003b4531b1a30bc3c828c9cbdfd3d45a7bd3218566ea94e14f5b11162ea3f619904cb25c3759b68fe942099081afaffc359d00abd0814445b08d04dc1bc75b50"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "899eb8b6e6f69c4442db0327f976c804d24bf76f2426685c13a76fc09cc4fd3cc84437316a4fcf42d2991bd042afc6a32c803356ceef352927b1c1d9358aa63cfaf04912343e796366412d56cc3cd9b443c87ba760510c151d872117a6514c96bc12f5294258b014f50a30f93435202c1303132ad3cd399196ecacb35fd0d2bdb2cbb9c6100af52ac40c741654e19767f57acba82de0b99a9499677e623104065b2ff37a92f6b8a44846956ed6d9ae08309355a453b2753a320228bfc3afeca50bd49eb22b1d7e62eea32a0dfe03e673fe0ef8039ef6762b0b768b3e3c0a4547"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x1988, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x100, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "654a315a7743f8ee14893f23f7377b18f479d43084f250c1ebe6fc69d18080a3b4e20a204ef9397bca51fe452d633c2f50c0802aac7c49e879562540c5294dcf6ce16b2757ca3dd41530085d902ca86bc54990ebe0af15071e9dbfef9ed8194e11ab0baef0b5899c74849d993e02d8d4df12fc211954a491dd17919f73d775d51e0857d776494f4bcf9b2a4c838acf7b5a435d7aa5dad852b4ed145e50fd9381"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x2ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xf8, 0x1, "6bd736d8107c126e13ce014f1c12efa676c92aab3d60695b1bdc314837b3efa5389528c99c6a614a2830aee493fb7855bdbd0c62ef421f03bd80173a142f4646e1633d771de96ea5f202c01e62ede36c4bb1c93de0bbc34ce097539791652683b0aae6ceb71b49e933b72974377ef501825b86152307c61c13a8f0e9d20e397a24ae1fd9c482c32d0b714a4c9dd3ab9192deb6e7295f99bca22405b6c8b90d3c13822280a42909e6643592cbe5bcd481b57250f537d091f6fd34aacd27d7418a33ba0d7d9136e11b87eda1bbe6a51497d58189fa112a043d9db3a4099cf302806d94018af0f73bd228c41be9dcb6a79c21bf8ffb"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "40cd8e10c872fd1efe61e502d4090debbe396da3aab1c468baddc31b59313c0cf1808b4c5208b4934beaa6d0a80ef678af6b940dd13751f642d6d503fab994c645a9a9c560fd43551cbeabad29da0fde4008330af794c37b01d68fbd32cb70b50b222ac6a630d32857af60ef50736fd6b2df7865e4f2ac187d7a706976c31c8445fd19123f4c142c519eae89cd246c12bd8a323112d9efe1e3ea2f039726efa83bdaedbd783f39eec2c5bf7350821d12a153000b3eee2eb6edd282e675e8ec95e2abc2072eab66b9212ba494ba842694f69bdd9fa3081cce3d277c7f71110ad8"}, @NFTA_DATA_VALUE={0xca, 0x1, "d7fd7447a6b95711eafa9c646ad4c1817173934a8df4f85cd2fc0a061e96a1bdb24524c874ab3f7403ce2827da14eb7782781a9b51010f42901573103a324ac7ff55135a8a2570c0f43b00af48089764f77812e54dee242861d7166454ccdbd0db5fba894c604aee246bfd1eba25d7ce1112576bdbbe9cd051d809ec45937453b09fad490d43add70406ded4be9428f15803d73c425c68a5302ce315cebb85e8b02c2fb78ea0afbca480c2bc1b0281e53f17ec70019c6c396f1ddbfa6beef45fb987347b7b95"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1580, 0xb, 0x0, 0x1, [{0x12b0, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x12a0, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x78, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "395fab41d4f3ef368cae258dfbc4af73e3212b0c903f2c638dd9c65d4b919b3b65b87ea61d6071643582908d0a87985578bc45a0e7e0ae19c0d74a8557"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_FROM_DATA={0x1204, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe5, 0x1, "b3cafc1e148df699f109735ca69a675829724124bc94a7f881dd3ed7f7b62dcf65398b2e8297d4ec10733d6eb0c7aabb1012778ff04438bb6a7d70656774eae3f6876921119ddc84a4ee7d0deb6b5f1ee0987722a0f3d6dff20305bb89594483ea296b817bffc43a5bd5981d2a767c18b0250e056382b8daba5dc439ad609bd0e2bbbad03839d98acaa079264db1d729b758111c5cfa7e73805116401b543d745299cdceaf91de880976b2f7969cab5ed48f7d0fd71629418f2b03f7875c7c566067e88228b21d10edd24fb27de5aaeb67b14b9cda2a946e6c78a047e64c221872"}, @NFTA_DATA_VALUE={0xe3, 0x1, "7666cb8b74699ee76b412135c2dc0d35f7515d99a2a9550e68f43061d83cf8441b640a17b68d52b7077d1835d0df96ff6a2d3b966754036c63623091d7c67a46ed1d4952ea176cbafbf78c14a01afa1a4c06acc53e7ef258c02f214ca9dab7438dcfc40796d5276825e4a5cf72b876945597893b6c3113cd373444ec43fe71ce36997c506505777eb08008e391594a11d792c6b156bafac854219c6ba179b6335887046b07e68565a2afb77a4ef82991dd6107e3d68ff3e1040ccc26cca245aaaba338e0b7efd8f9bd370fb4d04f95d1f57579784f64d00bc93acefb6b0437"}, @NFTA_DATA_VALUE={0x1004, 0x1, "21a23316e569f9f1888a250f2924cf8d1bd0e922831e29526e362c6b14431e3268d75abdcc2ea8115921b9b67ad49503b4b5b5ecb61fe672fc3cb877cc454cd02f577b9b63b9dfd4bc5e2451aba3377a43671815520fb370369815a5888eacfb9dd693fa6eeac8e75083bfe7d4fdf86baaeeb640521bc51ab9430f50692ae409420ea27cd72d227e17f8a706feccfa4962e2081cf0e0c3e3ffae0f855f0be5e206996cf7a97569a9d7a66a5013d853481b3246e3ea0c3766292e37214bcf35611e64b6d867992c5be6b2729dd5f869d27cd0685b2918d88becd5ad35cbdf14cf41ee11c19d83efc7bf79249daea8f36910345be4e7a29130cf14cf2ccb0d96a2c5e0e9bcef48d45eeebd118a0e3a4354f9bd7316d2a039312a6214f0afa24a1d3ef3f9a17a943a864cecaaadbc2b833a87a64bac579afc58a337a9c22d2dcb2ba06014897b332fbe89257d48a3cf3cd42cacaedb024c3b0887d96f1123fa56b460ee5280c69dac8e9aca06811e28d59348bfee06323a798ee82ff926b26072620a915af76188dea227ef3b61ad03cd8d5f507797ad38065f775c130c111683889b19ea863425b0a37afe183dc1f57339e573fdcf273a4d2f241e93879965c26ab4d62d3e70fead5160437b3ecd100eb3547625e6f9b4420613293f4162dd8e3ff9e4f54c01f88b9002802a44bf074b45e20f2646068ac7ed388eafbe19ff0ef8e18fe4dcecca34eb7be1eb62f37c63519d8d350b585aea4d152115998e79422ada5e5f22cd4cef325abc3f76f79379da101ff8056da160dccbf7974de59de37212806383bc0c6a4ced752d1e3ba57c2ffcac294e58779e34f559d5f3524a685d7760c29445fb3dc492ade89835f28772844910d69ef0f01ac4c7351bc43c5b3e6aa27dbb35db4cd3b0a2e674fa47642718c07d101648fbdadee06707a6fad3fde5daecdb518c0dc2bd9badbeaf4890c7f0b42e3c96e895e63b8fa4a0cb6ef11010796d6bbaef219eb3e405688592d16d596a16805a351866946f94e568b21950c2f7f3fc131b3259ffbb303e0e5d27f1220201e52dc4dc8b3f1106894fa4e952df4f06cfbc6f349f93a3dec2966c472a2b2873cee924305d19b202363128de81b654669ca484b6d10087beeb92f84cbefa42ba883ba5d8db0707f20b550b62bbc822e195895c692055f09446f6d806f3a66e654a254d3c3a61bda1f82cd2474210e56819972cd68cf107e3e42e969f621aeb7794347f2c6826a79d983b800fc6657deb8b6bd9763c066e74f2474776e2e4b64fd4563233f00a5a6413a2c57304882c49f943460684ff5b280ad6e2ce00a993b6ef278d95949c2dacd0b906fdf0b54335f5d9427630b14210c2c9a1013ad0ff80a0a6337d0acdad0ab8c8f8f4dcffb461770938d84056cfd041e9363f78a1398fa035197aa9b612c7415491e6c20a0c89350bde685689584fc87fc2decfc5dc1f2d0a0a9f58bd272b782859d7fb005967e3cc967591a195f0d0463fdc33f8db3a5f50e68bc9fa40c820c9213745a3f08fbc81c736da5c324cb113a15145caef69e71f504aa2ae05aead4505d0e7838b4b51155a38b81b4c1f95758f23e5d045f0c173827aebad06a1725d71c079c17a0e44e123b18725661d952cb45a20e55d83582dccb641349ebc598f2aba896348390be0c17e206537799fb81ff570b0b17aa270e17afcddd54f7b553f4046616b27fcea6552274285c6e2c24178823ac619d3e5c95c3bf7e75dd5ff24df6cdc4dbbb57bf3062eacb42104002c1f0c9c7dc478bf0413b621bdd7763bbc3324538e14e02d42dc384563d1778ae559d67739481f1ea0c5a3e52ef91b3671d3ef483248d91d2ca8523cc38fb00bfac6316516dac119e5fd0a01357a598260909e2aebd74e7a83408b842b7ed77df0125948a4d6bd805d5276ec62bb9c55fdf33195d0bf265653efdd458dc7441a8c2ffb0ff659347646b7526b1e8350bd5311d93a36e1944529537a726cf2346aa92fbbbc7b0249eab9feb98e177273a08f6f2343c7f30cb597ec0b31c8e5b331961e61f7c8925f581dfce0dd0730a5720062055619ca11cf476e6b04c1b97e11f4a15b31d8005b7b17ce79cfdf1e0262d207de00255284ac5c0663aa6bd9a51d7507c4222c2112e7afe3118810c7c4ca7430a739e57608bec68812124ac8ad590abdddb8097d3c6ec2d77866f1338a7d88d50e19ac2e226195d176e5f6f0c3bc37aba3eec8d2ee0d9b3676ff467b57a9ffd6c5e5c78ee3faf12654dad1766390c2d932d8b98b0c67f52cf69d4c6dd36963b31d65d2dae19be9b4dccf3c2b3b5f34ccb80db4fec930f5acad057006f09ef2882f5576d926cbebd759e75befca909a870ab47596317bd1f34eba3b8dbb55a1efd3ab4c38831120945aebdbc98614f2d53a12acae125dff399b10e0762bb8027da1ec421aa8b991d5182cfc9ca53595e6324a46da3e9349321c72a63416efd26e62d53f1de17e2d9ef3dfec744bb7bcf3ed3c837e7f50639d3a0266c569cfd8ff6a0c5c3702d466cf494901b080e3bfe4e159b388e7e938c266e761c51ded99501f49df0567a1c0ea19fe2cd4f6ccf60a10d4338014ecbed0c85d43cbefe89ca488f1aa7e4ee114c9e32b214b7c84c90c7242a93f4de70da74711b148b220c4e72cc0ed9ab94f442e725a6fc3f7b8c23a2a56aef2f882608d990ac95761ad322315ea568d1bf5d948e970942111ea6423ed462f38f20cc8f6d88f62b5712b2039b1f58cc311b4bc5c787939120bac68fb38778209b8e1639781bda7771f8307236a0bd1d205664ddd7f28d82590b8e8fe8d97467790ee71e34036b04d5af9476f20692bdb2068e7c4a58865da9ec01e8e2aded889079b7ce62d0b525f15da27df36b42f9034173d6ecf03e71af6ffee39f6339fbc901fd046ad5179a6238145c53afb24c5572e58a4c728a1dfd7128ef581f84a3a817f6f39b9f91c2e36c9d3d40a3627b72d70f2227a3437e8e865ef61c7b413bc66fdc52551f4f2e515f0b5714658b9b1fd14701fb991da5fa2bcdea19f363d29097b26bc94638efa40808ed053d685d0548d53d67390fa8c149958d612debc449bb72c50472fececcb11c02a08b4d41232e4321cd0aa06c546340452116b81992b07e1b3fac4e70c7c6f5f85610a5163a4a2954066bde8e2d65350bf311f099b03fb13fbe2f02ec9c38240175304716c427cc5cbca9c267bddf580512495005d57f15b357fe015203040b0f13a76165c9a2830d7d108d4d87308b061f2e26342ee3350d87fb07913d3f87d8f26394d477522f5e873aaed1edbb867780f81d56359a16174176d5cb8cfaa80f1cac0152bb9ae1e6319a56e68e5f3bcc1108eb4a708900e2d24e1f9a0b8c0645a6d23ec1590cdcc0f6f52a473c8d5d596cbfae0a19b36d7d7071b57f84c3c0cfdeb7e3ca5cbc96540bbc03884c6378a9ea586569abd125d1b33b65bea75b13de1c7bc5d0a26af800f7b687b6870941d336db2f422f93f8b7a2e81f3b8e60a1b3112ff063ae86f35530d6987dec53ea989dc0ffd4ae5042f2f4a2f144990097665aa87ad2591dc43fc6b77113fb328a52d5e823d64780a729e5a2c5297a6fe2e3247b0591111144ed3afb9f321cd983ce869bc7fcf3dfebfb1947880f35c7b2b1b6cc4b568a93c11cf0058d509cbbbf60b276cb0de35e705361f24f74818232888e13b5df5cb416606fd7c47fb78ee38aad0a2491cc736954b6f6c0584420cd3f275401fe8be45fede300cfcf0a0a6fa5b8d0cdf7d3561137a60e8f9c8f50d9a0f92efbf37d0f4db9effa9fb2f0adb318ef535b9be243b031f3ad8ef6e4e9a0c95d4cd3e840baf34d8506a9f444f65120496da79c308ebd5d2036e4e90592605648b2764f2366a5f450c08e19675c5acba684f280fb60f2cc9b79b64c85f530ffd6062e051d738dba2bf45bc28e2e8e0884467cc48dcbd2d8b2c5864dc507452aee232946f48ab27424960f298ccaa51409ec94a8418f3c7489796c66f902c1d9df3bb1f2471d33e266e7d5b5747ac3b5d3a755fb863bc37f4bf2f21998c0bd2491098d8f25afbb2d0d3459fd53d98744c1ee199b4e72776e6e6129d773c28e07221e6ffe345f70e66544345798cf36ec5d5d9820e1c0e1e7e8eaa1fcfe91e362094da53559f2a4a87244e07d5805d86aa91675319d83168f20b5c61cad98acdfc4e0b61736c429e1dc4a840d4610a5b1d248974461419dd59ba490b5805b3bf7f2782ef0a90d4fa4424a8e216652ebdd05e6bc800280d41676163012ed281c29739a4f4f4d91c50e78aef202bffe9f2b583b7fc9d6435540f591b2f31d91fcaa745a172f2f75dcca8f4a7c1d5716ea7c060d6558eafd42555c43d18d9a3e7dc633fa40433f34d47d5b21f758bae39b6faadf0050528a102895682c7eb60be12e5e4e79bf095a7b8a36cd16ed5c1323930cc4dfc51fdcc9a0dfd25dd45d46ccbbbfd77f3aac835fa259fda346a107911492fa1b63de204a8a3dfd537a1f4b80eda898b412b4a2dde1ed764b4ea8ae0295d8d45b9893da56169ab1c9620f8a8e567e5ee5d1e5a3e37656f5358dab811359d9e982828a9028e0d89ca2d83e134fdd15d4472328c13f80e65b63aabfe000e4c8c0700246ba44f5b2d1e70d724ff3e4fc01da398f404ac41105c920b09030fb8cdf363192fdc3b8abf795e6ec50b7fc782c23b074d990ea47af95f7f96ec246082bf647addcc2fd01642371afb77d233e7c4c88cf80f19315ea6d38e9e4fa244b368b4ba421f17fe7017e7d4dfbd36175c8d42dd3d0444c2ce12aba9d44147564cb02f78adc232e4fcd0aebf4a13e01b6360bc45fd250fe36defbeaaf025ac698447fc0b9e907e92bc664ac4962d1604054ec52810202a16203a2c7f4e30154950e843a5e782229e4df8fd40f55c2a39f666371385f07534af4bf2d4b96cf504497ea34446d1251e780cca9503988456849e7c6d20b768e351cf43b9764ffad3aadf528e40aa9187b8858523c93520a327e05da04fb52b73a935f3f134aaa9cfb613377cc95cf7b79d71276b95d7ff5ec42e67d05ccdfa0033004ec0792128a350f6094f212bf2c9ee85516533566b4ce372c9f44fd8115478f8599d48b847309fafc4f1993a767a945fd4a50f61e7dce9a85c8dd79306a1ee9142e6bed273bace582ba61391139dddfe4485c99ee88cf7bfa227d67a6b278bbda61f2ef2d340f2b8ee6c19227bd42086c96191cc89eb0e887aef59e56530b131f2f8fe4d28c3f50a53eec913a98199e7258d3d6015fa30ecd9d94ca0268e6fbccebe722e8df687f3b735e01ffd72598d90c6408428f27c3d296c7a40f7c4f8ac76da0e14e2b3f73adb5e71c85a47b989703871842a835eec0b9dbc1fc968eb6c6f0f03f393aee8e0699b45b01fd7903f55eb9a19128fbe133291bb01c2660af54bdf7dcb749ef6ec5710d2ebdb83cb608330f577f285e7c22895621939587f2831506541a3f853e39735999e333e72e9cf7e9d8707084e4247b9f6467b86d7276bdda91f1ab4d04cc28b6a121dc61a4d0008f23d99f57c0a60784021368d973c7dda71edfe6a4b5c3980f4054b8269c3d7a1960025ba05bb44e77b3353da7af41468b134113c54c243bd0e70e4d6489806d1b63564845137e891f20dd578934491face84b662aa6064879c7f84225e1e7b18d2524af1564438b45aef036b62183781ebeceead397848c8fcf8d3b32a42710d082519e702bd62eb7e9cdf7b82e508bf6887cd7a6ca291f320debd1761e9ad656c2d2d8914"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_RANGE_OP={0x8}]}}}, {0x2a8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x298, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x118, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb4, 0x1, "501a501511d3678a7fc4a429ef33dd7cdefb2205abb276d7c95b98b711ae214d883a0207a610df043ea90ba5933da945b052d7d5c424f12b7ac94d74d8fc36b467a2ae622984e51c3b6f5a31e90ef256ab2cfe281e7863a772461f7e81fe66457cde93466c2cd330a71f94fa23b47dcc55d40e892c3e5db349549281819b9937ced2b95aa418e7eab099635ab6193318d0cb40238288b6c3478b7eaa72a98971d80d880a5d8c5f4d144fee1834cdac41"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "d754090e44de10cc294774cb3a48ef0a35e8"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1f0}, @NFTA_BITWISE_XOR={0x124, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xc266add51a69d232}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x30, 0x1, "4244e44de047a73bba2d6edc2c20679271013e1e6c3e3ef51e1d599342eff4b23a4997225d0a5bce7c404d89"}, @NFTA_DATA_VALUE={0xae, 0x1, "316099f9ee2d2c852baf3f1806932bfd5fb12cbe797276139238711debeef1a5bfb63a45dae79d3ad4a0b1bdf4a141cad6e12c5fcbcc185d1869cb4b4f487971dfeb7af8b680b0c412f48f5795343541802ebb13e200cbca8c0dcf5b58f7b9be7c42b8d696034f681f9e046dbf83b0134b25df4c1a64f9ec4621be750cb3817d1ba248eea030d8837cd9bf2531d6aa043c98e4762ac87b593212c7de99925713ee2284e625b2102ad962"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_BITWISE_MASK={0x24, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x136c, 0x3, 0x0, 0x1, [{0x1368, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x12d8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x80, 0x1, "656f7b85ae2df311f2ec96c852eaa78a340e81c30278869801ace005a22f944a8b25c9f9f83f5973f4ee1d2b477ba1d0201444743f61b0ba37726f85692b86d7321c45fd82d5fe4af9b18f33f6b2c907569cb7f0f334ac6119ff3456c1c364e64377dc0c07670fc92eb784e92dd7c1a54bef8c11f23f4cdc867f84fe"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "66bf4f143180639a5dfd7ce84af1ec96b8248fbaf46f4110eea13e18c9c130685187078e0eb0d1390130d2ac42f4633628750c3cc099d11a3a8f5e4963461caa14fc00765ea485809e1683edd58e8336c74eec4efc5be15c463bdfe1f2984065652edddb876d12a0e2d00ff51ffdd6183855f64e21d07910c1a957f1e25610a924be4437979d27661bc9d695f43851563f12cca7a4c7ea5a41eb141c10c70ee3cea652a949f172f481deeca0075912d3b1cfd882e5690de844335edcd5f94d88ce3f3a6b"}, @NFTA_DATA_VALUE={0x98, 0x1, "ec2065946e190b01b7562e02a93fff8a1e1b9a9a0983ad0a5e47b9c8602db81db31e707da92c440b3a304822109133afd49f6b08984548e2642923257057995187cdf2f5441e7b99489e7f767e849e64c44081dc14a2073cc8359ce0300441060504ade802ef0be7b5e94a9a93f944f4c9924594fce1dc5306b120d81d4a19aceb4171e4e02eafe72fd97712807b4b03bd503cf3"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x7b, 0x1, "4a18238e71eb24c069b6ce016b5b1865bb50607ab70a6267ff3792625aee594bab4ad4853d0c37e514a4aff23f3d7b1735721a137fb18cda8ca9dd2424a5c097152355ecaa2a12257229368e573eea79404870de9f626718e6e0ac7664cb6d14d113fbb7dd61c50abef424d5b0f0078101cd055f195ca9"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x68, 0x6, 0x1, 0x0, "cf41cbd6c6ac1f5490c3bcee308515d5e28e4acddd6ace1c3109b862895b8158b236cbdb5b3571e1d01f2e0487923e34e319da7560e2ad25ed21372fe593c212d04ca0d021841dd7d5aea5bf8d193852d09891d530ecc581cf69e00adc46f107157207e1"}]}]}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}}, @NFT_MSG_DELOBJ={0x1a0, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0xaa, 0x8, "1aa1e1219182d31b6800b89faf3336d81478e0bffd9bb20bba7aa432746a109b57bd36bfd4ca783739c2c2ee97feab17385425a2c45307902f05cb48708458b1a72fe88f296183bb861edaecaf71857d5fd8d75fcdfc1e7b689361aa7ea8c7ec36f7414789c2230fef9f665ce42c36b06cef6f756bec040fe5725c65528092c9ad9ba9df006e0529cc12be05ebec15226f10509e49952355c782e1ee581919f97e2ed6067d40"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x98, 0x8, "c0919892da676155d48ed941b660f65baeafc2f46aca0eca578e9c1d7617def2a12a0bc21cd76ea8c94fdb0f0fde7cee108429060cd5799f0f29fc87d04d25a773a12894b6f75b08e3c169c764b880a9055c1b00830592c7c1e655345cc07304c14026909df51322694e090e7f378cb8041e4260dbdb509fceae919097bbd39882699fffd2bb90f4002f231258ec81b483f1a1df"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x101, 0x0, 0x0, {0x14fe4d01a42aeb16, 0x0, 0x2}, [@NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3474}}, 0x4000001) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000006dc0)={0x29, @rand_addr=0x64010100, 0x4e23, 0x1, 'wrr\x00', 0x20, 0x4, 0x30}, 0x2c) 307.431082ms ago: executing program 3 (id=13598): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x65, 0x8, 0x0, 0xfffa}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xd0ff0000}, 0x94) 306.889793ms ago: executing program 0 (id=13599): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x3, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e20, 0xe3d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3, @local, 0x8}}]}, 0x70}}, 0x4) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000e8008000b0006000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r4, &(0x7f0000001740)={&(0x7f0000000300)=@hci, 0x80, &(0x7f0000001600)=[{&(0x7f0000000400)=""/174, 0xae}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2, &(0x7f0000001640)=""/247, 0xf7}, 0x2112) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x4080) 210.666025ms ago: executing program 2 (id=13600): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4000, @any, 0x3, 0x1}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x67) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000000) 192.911527ms ago: executing program 3 (id=13601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES64=r0, @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 76.212004ms ago: executing program 2 (id=13602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x205, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x300}, 0x90) 75.765708ms ago: executing program 0 (id=13603): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00}, 0x94) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c890}, 0x4040840) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x48850) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, 0x0, 0x105beec262c852b3, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4018041}, 0x2008080) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fbdbdf251000000005001000030000000600110073040000050010000a00000008000100", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x2000c000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe, 0x1, "9c979b32261fbabdae20"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe93e43e9da39542d"}}]}, 0x158}}, 0x844) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) 75.557964ms ago: executing program 3 (id=13604): r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="c3000e000300"}) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e", 0x1f) r3 = socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0x4) r4 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x4, 0xcd}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 0s ago: executing program 2 (id=13605): r0 = socket$packet(0x11, 0xa, 0x300) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000500)={r0, &(0x7f0000000180)='\x00', 0x503300, &(0x7f0000000200)={@_ha_fsid={[0x80, 0x40]}, {0x337a, 0x6, 0x6, 0x6}}, 0xc, &(0x7f0000000340), &(0x7f00000004c0)=0x800}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf25010000000000000001410000001c001700f5ff060000000669623a7465616d5f736c6176655f3000"], 0x38}}, 0x4c000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) close(0x3) r2 = socket$kcm(0xf, 0x3, 0x2) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) socket$kcm(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x19ea5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x50, 0x0, &(0x7f0000000700)) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000dea17c45c8d260c9", 0x10}], 0x1}, 0x40000) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x40004) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c747fe0a760fc38c74b763e2b37f5d0727cdebe08ae20cdbc5f3e5898fdf21ee5d91dc974f53d8964c8fb9de2c6e5388864194ef107ffc08af1650ca06c4b52296ce37d7af9590d5f5d8a51005899b5bd7bd124d86d2fee8740db1126e03dd796f9e513c570a4d466a7bc5e82651ed7b760e9db1eab5f191bb466b02b612d0239fdbe6ee882510a2ed6cff9f0b602e24708937f1ab4a6d4d6447803d210ac712", @ANYRESOCT=r5, @ANYRESOCT=r1, @ANYBLOB='\x00'/28], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r3], 0xb4}, 0x1, 0x0, 0x0, 0xc1}, 0x0) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x1c, &(0x7f0000000b40)=ANY=[@ANYRES16=r5, @ANYRESOCT, @ANYRES32=r1, @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000400bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e72119", 0x9d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) kernel console output (not intermixed with test programs): ing up backlog [ 1405.654196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.711246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.758792][ T7770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.767127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.830913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1409.697412][ T7775] bond6 (unregistering): (slave gretap1): Releasing backup interface [ 1409.928147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.014370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.860778][ T7775] bond17 (unregistering): (slave bridge8): Releasing active interface [ 1412.151637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.191915][ T7775] bond0 (unregistering): Released all slaves [ 1412.205073][ T7775] bond1 (unregistering): (slave veth3): Releasing active interface [ 1412.216793][ T7775] bond1 (unregistering): Released all slaves [ 1412.232894][ T7775] bond2 (unregistering): Released all slaves [ 1412.246666][ T7775] bond3 (unregistering): Released all slaves [ 1412.272910][ T7775] bond4 (unregistering): Released all slaves [ 1412.294660][ T7775] bond5 (unregistering): (slave batadv1): Releasing active interface [ 1412.305948][ T7775] bond5 (unregistering): Released all slaves [ 1412.327122][ T7775] bond6 (unregistering): (slave bond7): Releasing backup interface [ 1412.337780][ T7775] bond6 (unregistering): Released all slaves [ 1412.355687][ T7775] bond7 (unregistering): Released all slaves [ 1412.387821][ T7775] bond8 (unregistering): Released all slaves [ 1412.407470][ T7775] bond9 (unregistering): Released all slaves [ 1412.423509][ T7775] bond10 (unregistering): Released all slaves [ 1412.439801][ T7775] bond11 (unregistering): Released all slaves [ 1412.457579][ T7775] bond12 (unregistering): Released all slaves [ 1412.491146][ T7775] bond13 (unregistering): Released all slaves [ 1412.511499][ T7775] bond14 (unregistering): Released all slaves [ 1412.525145][ T7775] bond15 (unregistering): Released all slaves [ 1412.538715][ T7775] bond16 (unregistering): Released all slaves [ 1412.554232][ T7775] bond17 (unregistering): Released all slaves [ 1412.576064][ T7775] bond18 (unregistering): Released all slaves [ 1412.619674][ T7775] bond19 (unregistering): (slave veth5): Releasing backup interface [ 1412.631244][ T7775] bond19 (unregistering): Released all slaves [ 1412.646924][T15895] netlink: 'syz.4.12348': attribute type 3 has an invalid length. [ 1412.808701][T15917] syz_tun: entered allmulticast mode [ 1412.888969][T15909] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12353'. [ 1412.905603][ T7774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.913663][ T7774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.031399][ T7774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.088905][T15917] syz_tun: left allmulticast mode [ 1413.110123][ T7774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.172430][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12358'. [ 1413.184339][T15926] 8021q: VLANs not supported on sit0 [ 1413.277074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.374745][T15936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12361'. [ 1413.434528][ T7775] tipc: Disabling bearer [ 1413.460989][ T7775] tipc: Left network mode [ 1413.511338][T15936] macsec2: entered promiscuous mode [ 1413.523440][T15936] dummy0: entered promiscuous mode [ 1413.528906][T15936] macsec2: entered allmulticast mode [ 1413.534400][T15936] dummy0: entered allmulticast mode [ 1413.549641][T15936] dummy0: left allmulticast mode [ 1413.554783][T15936] dummy0: left promiscuous mode [ 1413.806520][T15938] syzkaller0: entered promiscuous mode [ 1413.847945][T15938] syzkaller0: entered allmulticast mode [ 1414.041057][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12364'. [ 1414.788460][ T9091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1414.802216][ T9091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1414.811444][ T9091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1414.820270][ T9091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1414.828124][ T9091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1415.030318][T15962] FAULT_INJECTION: forcing a failure. [ 1415.030318][T15962] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.044541][T15962] CPU: 1 UID: 0 PID: 15962 Comm: syz.2.12367 Not tainted syzkaller #0 PREEMPT(full) [ 1415.044565][T15962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1415.044575][T15962] Call Trace: [ 1415.044584][T15962] [ 1415.044594][T15962] dump_stack_lvl+0xe8/0x150 [ 1415.044619][T15962] should_fail_ex+0x412/0x560 [ 1415.044642][T15962] should_failslab+0xa8/0x100 [ 1415.044665][T15962] __kmalloc_cache_noprof+0x88/0x660 [ 1415.044687][T15962] ? ipv6_flowlabel_opt+0xf1e/0x29c0 [ 1415.044711][T15962] ipv6_flowlabel_opt+0xf1e/0x29c0 [ 1415.044798][T15962] ? __lock_acquire+0x6b5/0x2cf0 [ 1415.044831][T15962] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1415.044859][T15962] ? __lock_acquire+0x6b5/0x2cf0 [ 1415.044883][T15962] ? do_raw_spin_lock+0x12b/0x2f0 [ 1415.044901][T15962] ? lock_sock_nested+0x6a/0x100 [ 1415.044920][T15962] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1415.044941][T15962] ? __local_bh_enable_ip+0xd0/0x130 [ 1415.044954][T15962] do_ipv6_setsockopt+0xd9f/0x3150 [ 1415.044974][T15962] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1415.044985][T15962] ? kstrtouint+0x6e/0xe0 [ 1415.044998][T15962] ? aa_label_sk_perm+0x532/0x6e0 [ 1415.045009][T15962] ? get_pid_task+0x20/0x1f0 [ 1415.045025][T15962] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1415.045037][T15962] ? get_pid_task+0x20/0x1f0 [ 1415.045048][T15962] ? get_pid_task+0x20/0x1f0 [ 1415.045059][T15962] ? get_pid_task+0x20/0x1f0 [ 1415.045076][T15962] ? __lock_acquire+0x6b5/0x2cf0 [ 1415.045096][T15962] ? aa_sk_perm+0x6d5/0x900 [ 1415.045109][T15962] ipv6_setsockopt+0x59/0x170 [ 1415.045124][T15962] rawv6_setsockopt+0x276/0x5f0 [ 1415.045138][T15962] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 1415.045149][T15962] ? aa_sock_opt_perm+0xff/0x1a0 [ 1415.045163][T15962] ? sock_common_setsockopt+0x36/0xc0 [ 1415.045176][T15962] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1415.045189][T15962] do_sock_setsockopt+0x17c/0x1b0 [ 1415.045207][T15962] __x64_sys_setsockopt+0x13d/0x1b0 [ 1415.045223][T15962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.045234][T15962] do_syscall_64+0x15f/0xf80 [ 1415.045249][T15962] ? trace_irq_disable+0x3b/0x140 [ 1415.045264][T15962] ? clear_bhb_loop+0x40/0x90 [ 1415.045276][T15962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.045286][T15962] RIP: 0033:0x7fab7539ce59 [ 1415.045298][T15962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.045307][T15962] RSP: 002b:00007fab76248028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1415.045319][T15962] RAX: ffffffffffffffda RBX: 00007fab75615fa0 RCX: 00007fab7539ce59 [ 1415.045326][T15962] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 1415.045332][T15962] RBP: 00007fab76248090 R08: 0000000000000020 R09: 0000000000000000 [ 1415.045338][T15962] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1415.045344][T15962] R13: 00007fab75616038 R14: 00007fab75615fa0 R15: 00007ffdcad10ff8 [ 1415.045360][T15962] [ 1416.943459][ T9091] Bluetooth: hci1: command tx timeout [ 1419.014500][ T9091] Bluetooth: hci1: command tx timeout [ 1420.615163][T15952] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 1420.624112][T15952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.633441][T15952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.677113][T15953] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 1420.684939][T15953] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 1420.692691][T15953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.700061][T15953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1420.707661][T15953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.714916][T15953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1420.723616][T15953] bridge0: entered promiscuous mode [ 1420.728949][T15953] bridge0: entered allmulticast mode [ 1420.763036][T15972] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12368'. [ 1421.002922][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12370'. [ 1421.113376][T15978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1421.122143][T15994] netlink: 'syz.3.12374': attribute type 1 has an invalid length. [ 1421.152583][T15978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.161271][T15978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1421.168867][T15978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.197522][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1421.221090][T15998] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20004 [ 1421.230637][ T9091] Bluetooth: hci1: command tx timeout [ 1421.238110][T16000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12374'. [ 1421.274094][T15998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12376'. [ 1421.283702][T15998] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12376'. [ 1421.845851][T16015] gre1: entered promiscuous mode [ 1421.939711][T16019] netlink: zone id is out of range [ 1421.945064][T16019] netlink: zone id is out of range [ 1421.971542][T16019] netlink: zone id is out of range [ 1421.977050][T16019] netlink: zone id is out of range [ 1421.982955][T16019] netlink: zone id is out of range [ 1421.988338][T16019] netlink: zone id is out of range [ 1421.993731][T16019] netlink: zone id is out of range [ 1421.999299][T16019] netlink: zone id is out of range [ 1422.004811][T16019] netlink: zone id is out of range [ 1422.010209][T16019] netlink: zone id is out of range [ 1422.061323][T15957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.069427][T15957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.120224][T15957] bridge_slave_0: entered allmulticast mode [ 1422.128889][T15957] bridge_slave_0: entered promiscuous mode [ 1422.138172][T15957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.145784][T15957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.153323][T15957] bridge_slave_1: entered allmulticast mode [ 1422.161990][T15957] bridge_slave_1: entered promiscuous mode [ 1422.326238][T15957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.339464][T15957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.384971][T15957] team0: Port device team_slave_0 added [ 1422.393958][T15957] team0: Port device team_slave_1 added [ 1422.563147][T16033] sctp: [Deprecated]: syz.0.12384 (pid 16033) Use of int in maxseg socket option. [ 1422.563147][T16033] Use struct sctp_assoc_value instead [ 1422.578341][T15957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.585548][T15957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.611928][T15957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.648619][T16028] hsr0: entered promiscuous mode [ 1422.676093][T15957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.683602][T15957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.710104][T15957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.749855][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803dbe1c00: rx timeout, send abort [ 1422.840227][T15957] hsr_slave_0: entered promiscuous mode [ 1422.847932][T15957] hsr_slave_1: entered promiscuous mode [ 1422.875706][T15957] debugfs: 'hsr0' already exists in 'hsr' [ 1422.881755][T15957] Cannot create hsr debugfs directory [ 1422.888098][T16038] syzkaller0: entered promiscuous mode [ 1422.893600][T16038] syzkaller0: entered allmulticast mode [ 1423.028709][T16038] tipc: Enabled bearer , priority 0 [ 1423.182683][ T7775] veth0_macvtap: left promiscuous mode [ 1423.196403][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803dbe2000: rx timeout, send abort [ 1423.230374][ T7775] veth1_vlan: left promiscuous mode [ 1423.235685][ T7775] veth0_vlan: left promiscuous mode [ 1423.302501][ T9091] Bluetooth: hci1: command tx timeout [ 1423.307253][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803dbe1c00: abort rx timeout. Force session deactivation [ 1423.405251][T16053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12391'. [ 1423.462195][ T7775] pim6reg (unregistering): left allmulticast mode [ 1423.747598][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803dbe2000: abort rx timeout. Force session deactivation [ 1423.929327][T16037] tipc: Resetting bearer [ 1423.992183][T16037] tipc: Disabling bearer [ 1424.005775][T16052] tipc: Enabling of bearer rejected, failed to enable media [ 1424.018074][T16053] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1424.099540][T15957] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1424.168477][T16066] netlink: 'syz.0.12395': attribute type 3 has an invalid length. [ 1424.185377][T16068] syzkaller1: entered promiscuous mode [ 1424.193904][T16068] syzkaller1: entered allmulticast mode [ 1424.215305][T16070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12397'. [ 1424.225632][T16070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12397'. [ 1424.226240][T16066] nbd: nbd0 already in use [ 1424.242944][T16066] block nbd0: NBD_DISCONNECT [ 1424.250585][T16066] block nbd0: shutting down sockets [ 1424.329795][T16068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.337868][T16068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.349387][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12398'. [ 1424.397532][T16068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1424.408862][T16068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1424.549654][ T6345] page_pool_release_retry() stalled pool shutdown: id 178, 1 inflight 847 sec [ 1424.801451][T16068] syzkaller1: left promiscuous mode [ 1424.807051][T16068] syzkaller1: left allmulticast mode [ 1424.815533][T16074] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1424.874861][ T7776] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.952164][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12401'. [ 1425.127808][ T7776] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.136874][ T7776] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.146023][ T7776] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.173212][T15957] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1425.452463][T16100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.465447][T16100] netlink: 'syz.3.12406': attribute type 3 has an invalid length. [ 1425.587566][T16105] netlink: 'syz.0.12409': attribute type 1 has an invalid length. [ 1425.588586][T16106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1426.068255][T16105] ip6gretap1: entered promiscuous mode [ 1426.077814][T16105] ip6gretap1: entered allmulticast mode [ 1426.091150][T15957] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.140867][T16117] tipc: Enabled bearer , priority 0 [ 1426.149113][T16117] syzkaller0: entered promiscuous mode [ 1426.155840][T16117] syzkaller0: entered allmulticast mode [ 1426.335251][T16121] FAULT_INJECTION: forcing a failure. [ 1426.335251][T16121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1426.369985][T16121] CPU: 1 UID: 0 PID: 16121 Comm: syz.3.12412 Not tainted syzkaller #0 PREEMPT(full) [ 1426.370009][T16121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1426.370020][T16121] Call Trace: [ 1426.370027][T16121] [ 1426.370035][T16121] dump_stack_lvl+0xe8/0x150 [ 1426.370059][T16121] should_fail_ex+0x412/0x560 [ 1426.370086][T16121] _copy_from_user+0x2d/0xb0 [ 1426.370109][T16121] ___sys_sendmsg+0x1c6/0x360 [ 1426.370126][T16121] ? __lock_acquire+0x6b5/0x2cf0 [ 1426.370148][T16121] ? __pfx____sys_sendmsg+0x10/0x10 [ 1426.370196][T16121] ? __fget_files+0x2a/0x420 [ 1426.370215][T16121] ? __fget_files+0x3a0/0x420 [ 1426.370242][T16121] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1426.370261][T16121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1426.370286][T16121] ? __pfx_ksys_write+0x10/0x10 [ 1426.370316][T16121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.370334][T16121] do_syscall_64+0x15f/0xf80 [ 1426.370356][T16121] ? trace_irq_disable+0x3b/0x140 [ 1426.370379][T16121] ? clear_bhb_loop+0x40/0x90 [ 1426.370398][T16121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.370413][T16121] RIP: 0033:0x7ff285d9ce59 [ 1426.370429][T16121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.370443][T16121] RSP: 002b:00007ff286ba1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1426.370460][T16121] RAX: ffffffffffffffda RBX: 00007ff286015fa0 RCX: 00007ff285d9ce59 [ 1426.370472][T16121] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 1426.370482][T16121] RBP: 00007ff286ba1090 R08: 0000000000000000 R09: 0000000000000000 [ 1426.370492][T16121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.370502][T16121] R13: 00007ff286016038 R14: 00007ff286015fa0 R15: 00007ffe43a3c7a8 [ 1426.370530][T16121] [ 1426.374764][T16118] bond1: option ad_user_port_key: invalid value (65535) [ 1426.625319][T16118] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 1426.641101][T16118] bond1 (unregistering): Released all slaves [ 1426.668928][T16122] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1426.756321][T15957] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1426.776742][T16133] FAULT_INJECTION: forcing a failure. [ 1426.776742][T16133] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.799697][T16133] CPU: 0 UID: 0 PID: 16133 Comm: syz.0.12415 Not tainted syzkaller #0 PREEMPT(full) [ 1426.799720][T16133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1426.799730][T16133] Call Trace: [ 1426.799737][T16133] [ 1426.799744][T16133] dump_stack_lvl+0xe8/0x150 [ 1426.799769][T16133] should_fail_ex+0x412/0x560 [ 1426.799795][T16133] should_failslab+0xa8/0x100 [ 1426.799818][T16133] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1426.799837][T16133] ? __alloc_skb+0x1d0/0x7d0 [ 1426.799854][T16133] ? __local_bh_enable_ip+0xd0/0x130 [ 1426.799874][T16133] __alloc_skb+0x1d0/0x7d0 [ 1426.799896][T16133] ovs_ct_limit_cmd_get+0x18e/0x1010 [ 1426.799924][T16133] ? rcu_is_watching+0x15/0xb0 [ 1426.799944][T16133] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 1426.799965][T16133] ? __nla_parse+0x40/0x60 [ 1426.799990][T16133] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1426.800010][T16133] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1426.800035][T16133] genl_family_rcv_msg_doit+0x22a/0x330 [ 1426.800061][T16133] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1426.800100][T16133] genl_rcv_msg+0x61c/0x7a0 [ 1426.800125][T16133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1426.800143][T16133] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 1426.800159][T16133] ? __pfx_ref_tracker_free+0x10/0x10 [ 1426.800188][T16133] netlink_rcv_skb+0x232/0x4b0 [ 1426.800206][T16133] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1426.800225][T16133] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1426.800252][T16133] ? down_read+0x270/0x2e0 [ 1426.800264][T16133] ? genl_rcv+0xd/0x40 [ 1426.800281][T16133] genl_rcv+0x28/0x40 [ 1426.800296][T16133] netlink_unicast+0x75c/0x8e0 [ 1426.800325][T16133] netlink_sendmsg+0x813/0xb40 [ 1426.800348][T16133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1426.800363][T16133] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1426.800384][T16133] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1426.800407][T16133] ____sys_sendmsg+0x972/0x9f0 [ 1426.800423][T16133] ? __might_fault+0xaf/0x130 [ 1426.800446][T16133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1426.800470][T16133] ? import_iovec+0x73/0xa0 [ 1426.800494][T16133] ___sys_sendmsg+0x2a5/0x360 [ 1426.800509][T16133] ? __lock_acquire+0x6b5/0x2cf0 [ 1426.800531][T16133] ? __pfx____sys_sendmsg+0x10/0x10 [ 1426.800579][T16133] ? __fget_files+0x2a/0x420 [ 1426.800596][T16133] ? __fget_files+0x3a0/0x420 [ 1426.800626][T16133] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1426.800642][T16133] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1426.800665][T16133] ? __pfx_ksys_write+0x10/0x10 [ 1426.800692][T16133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.800710][T16133] do_syscall_64+0x15f/0xf80 [ 1426.800729][T16133] ? trace_irq_disable+0x3b/0x140 [ 1426.800751][T16133] ? clear_bhb_loop+0x40/0x90 [ 1426.800770][T16133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.800786][T16133] RIP: 0033:0x7fd5c3b9ce59 [ 1426.800802][T16133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.800814][T16133] RSP: 002b:00007fd5c4a49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1426.800830][T16133] RAX: ffffffffffffffda RBX: 00007fd5c3e15fa0 RCX: 00007fd5c3b9ce59 [ 1426.800839][T16133] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1426.800848][T16133] RBP: 00007fd5c4a49090 R08: 0000000000000000 R09: 0000000000000000 [ 1426.800857][T16133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.800865][T16133] R13: 00007fd5c3e16038 R14: 00007fd5c3e15fa0 R15: 00007ffe7a098908 [ 1426.800890][T16133] [ 1426.808948][T16125] __nla_validate_parse: 2 callbacks suppressed [ 1426.808966][T16125] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12413'. [ 1427.253066][T16116] tipc: Resetting bearer [ 1427.353671][T16116] tipc: Disabling bearer [ 1427.413576][ T7775] IPVS: stop unused estimator thread 0... [ 1427.688051][T15957] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1427.712474][T15957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1427.723898][T15957] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1427.748842][T15957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1427.771415][T15957] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1427.812307][T15957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1427.822152][T15957] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1427.872917][T16160] net_ratelimit: 335 callbacks suppressed [ 1427.872936][T16160] netlink: zone id is out of range [ 1427.886292][T16160] netlink: zone id is out of range [ 1427.891595][T16160] netlink: zone id is out of range [ 1427.896811][T16160] netlink: zone id is out of range [ 1427.902200][T16160] netlink: zone id is out of range [ 1427.909631][T16160] netlink: zone id is out of range [ 1427.912854][T15957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1427.914939][T16160] netlink: zone id is out of range [ 1427.932511][T16160] netlink: zone id is out of range [ 1427.938267][T16160] netlink: zone id is out of range [ 1427.945143][T16160] netlink: zone id is out of range [ 1428.069102][T15957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.151303][T15957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.165729][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.183419][ T7782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1428.262810][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.272451][ T7771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1428.440451][T16180] netlink: 'syz.3.12433': attribute type 1 has an invalid length. [ 1428.535762][T16189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12433'. [ 1428.617119][T15957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1428.671760][ T7775] bond1: left allmulticast mode [ 1428.677912][ T7775] bond1: left promiscuous mode [ 1428.688073][ T7775] bridge0: port 3(bond1) entered disabled state [ 1428.756579][ T7775] bridge_slave_1: left allmulticast mode [ 1428.762620][ T7775] bridge_slave_1: left promiscuous mode [ 1428.768939][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.779952][ T7775] bridge_slave_0: left allmulticast mode [ 1428.785967][ T7775] bridge_slave_0: left promiscuous mode [ 1428.792304][ T7775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.829616][ T7775] dvmrp0: left allmulticast mode [ 1428.888377][T16203] FAULT_INJECTION: forcing a failure. [ 1428.888377][T16203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1428.958346][T16203] CPU: 0 UID: 0 PID: 16203 Comm: syz.4.12439 Not tainted syzkaller #0 PREEMPT(full) [ 1428.958372][T16203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1428.958503][T16203] Call Trace: [ 1428.958515][T16203] [ 1428.958525][T16203] dump_stack_lvl+0xe8/0x150 [ 1428.958551][T16203] should_fail_ex+0x412/0x560 [ 1428.958577][T16203] _copy_from_iter+0x1d3/0x1670 [ 1428.958602][T16203] ? rcu_is_watching+0x15/0xb0 [ 1428.958627][T16203] ? __pfx__copy_from_iter+0x10/0x10 [ 1428.958970][T16203] ? netlink_sendmsg+0x650/0xb40 [ 1428.958995][T16203] ? skb_put+0x11b/0x210 [ 1428.959021][T16203] netlink_sendmsg+0x6c0/0xb40 [ 1428.959049][T16203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1428.959069][T16203] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1428.959092][T16203] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1428.959117][T16203] ____sys_sendmsg+0x972/0x9f0 [ 1428.959134][T16203] ? __might_fault+0xaf/0x130 [ 1428.959161][T16203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1428.959203][T16203] ? import_iovec+0x73/0xa0 [ 1428.959230][T16203] ___sys_sendmsg+0x2a5/0x360 [ 1428.959254][T16203] ? __lock_acquire+0x6b5/0x2cf0 [ 1428.959276][T16203] ? __pfx____sys_sendmsg+0x10/0x10 [ 1428.959325][T16203] ? __fget_files+0x2a/0x420 [ 1428.959343][T16203] ? __fget_files+0x3a0/0x420 [ 1428.959371][T16203] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1428.959391][T16203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1428.959416][T16203] ? __pfx_ksys_write+0x10/0x10 [ 1428.959443][T16203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.959461][T16203] do_syscall_64+0x15f/0xf80 [ 1428.959483][T16203] ? trace_irq_disable+0x3b/0x140 [ 1428.959507][T16203] ? clear_bhb_loop+0x40/0x90 [ 1428.959527][T16203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.959543][T16203] RIP: 0033:0x7fd177b9ce59 [ 1428.959561][T16203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.959575][T16203] RSP: 002b:00007fd178a60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1428.959593][T16203] RAX: ffffffffffffffda RBX: 00007fd177e15fa0 RCX: 00007fd177b9ce59 [ 1428.959605][T16203] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 1428.959620][T16203] RBP: 00007fd178a60090 R08: 0000000000000000 R09: 0000000000000000 [ 1428.959630][T16203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1428.959641][T16203] R13: 00007fd177e16038 R14: 00007fd177e15fa0 R15: 00007fff835bcb88 [ 1428.959669][T16203] [ 1428.988352][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12433'. [ 1431.092254][ T7775] bond0 (unregistering): (slave bridge6): Releasing backup interface [ 1431.102286][ T7775] bridge6 (unregistering): left promiscuous mode [ 1431.188409][ T7775] team0: Port device bridge7 removed [ 1431.427100][ T7775] team0: Port device bridge8 removed [ 1432.087929][ T7779] smbdirect: ib_dev[syz1] removed [ 1432.104210][ T7775]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.118531][ T7775]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1432.128264][ T7775]  (unregistering): Released all slaves [ 1432.139123][ T7775] bond1 (unregistering): Released all slaves [ 1432.152693][ T7775] bond2 (unregistering): Released all slaves [ 1432.189862][ T7775] bond3 (unregistering): Released all slaves [ 1432.208534][ T7775] bond4 (unregistering): Released all slaves [ 1432.225441][ T7775] bond5 (unregistering): Released all slaves [ 1432.241668][ T7775] bond0 (unregistering): Released all slaves [ 1432.659085][ T7775] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1433.222424][ T7775] bond5 (unregistering): (slave bridge3): Releasing active interface [ 1433.371166][ T7775] bond1 (unregistering): Released all slaves [ 1433.389924][ T7775] bond2 (unregistering): Released all slaves [ 1433.404571][ T7775] bond3 (unregistering): Released all slaves [ 1433.419623][ T7775] bond0 (unregistering): Released all slaves [ 1433.435750][ T7775] bond4 (unregistering): Released all slaves [ 1433.466548][ T7775] bond5 (unregistering): Released all slaves [ 1433.499952][T16189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1433.566558][T16213] pimreg: tun_chr_ioctl cmd 1074025677 [ 1433.572473][T16213] pimreg: linktype set to 823 [ 1433.953754][ T7775] : left promiscuous mode [ 1434.147084][T16255] xt_CT: No such helper "snmp" [ 1434.283843][T16267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12456'. [ 1434.375040][T16267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12456'. [ 1434.401568][T15957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1434.401615][T16276] net_ratelimit: 335 callbacks suppressed [ 1434.401638][T16276] netlink: zone id is out of range [ 1434.468892][T15957] veth0_vlan: entered promiscuous mode [ 1434.481221][T16276] netlink: zone id is out of range [ 1434.486739][T16276] netlink: zone id is out of range [ 1434.492057][T16276] netlink: zone id is out of range [ 1434.549210][T15957] veth1_vlan: entered promiscuous mode [ 1434.577212][T15957] veth0_macvtap: entered promiscuous mode [ 1434.588603][T15957] veth1_macvtap: entered promiscuous mode [ 1434.614460][T16276] netlink: zone id is out of range [ 1434.619718][T16276] netlink: zone id is out of range [ 1434.624928][T16276] netlink: zone id is out of range [ 1434.630228][T16276] netlink: zone id is out of range [ 1434.635366][T16276] netlink: zone id is out of range [ 1434.640497][T16276] netlink: zone id is out of range [ 1434.692451][T16279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12456'. [ 1434.703111][ T7775] tipc: Left network mode [ 1434.771343][T15957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1434.854076][T16279] nbd: nbd64 already in use [ 1434.961142][T15957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1434.976345][ T7775] tipc: Left network mode [ 1435.050701][ T7774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.211455][ T7774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.231568][ T7774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.241505][ T7774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.260239][T16294] mac80211_hwsim hwsim336 ŞŞŞŞŞ;: renamed from wlan0 (while UP) [ 1435.569233][ T7778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.577448][ T7778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.618614][ T7775] IPVS: stopping backup sync thread 24894 ... [ 1435.892379][ T7778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.900454][ T7778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.998085][T16306] netlink: 'syz.4.12467': attribute type 1 has an invalid length. [ 1436.124145][T16318] syzkaller0: entered promiscuous mode [ 1436.129873][T16318] syzkaller0: entered allmulticast mode [ 1436.198936][T16313] netlink: 'syz.4.12467': attribute type 10 has an invalid length. [ 1436.207240][T16313] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12467'. [ 1436.216818][T16313] dummy0: entered promiscuous mode [ 1436.233993][T16318] syzkaller1: entered promiscuous mode [ 1436.240528][T16318] syzkaller1: entered allmulticast mode [ 1436.455337][T16333] tipc: Started in network mode [ 1436.460993][T16333] tipc: Node identity d22f2af75661, cluster identity 4711 [ 1436.489740][T16333] tipc: Enabled bearer , priority 0 [ 1436.540663][T16328] syzkaller0: entered promiscuous mode [ 1436.547002][T16328] syzkaller0: entered allmulticast mode [ 1436.576961][T16328] tipc: Resetting bearer [ 1436.585535][T16327] tipc: Resetting bearer [ 1436.611156][T16327] tipc: Disabling bearer [ 1437.206493][T16343] tipc: Enabling of bearer rejected, failed to enable media [ 1437.726027][T16373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12488'. [ 1437.986688][T16382] tipc: Started in network mode [ 1437.992497][T16382] tipc: Node identity 00000000000000004000000000000001, cluster identity 4711 [ 1438.002698][T16382] tipc: Enabling of bearer rejected, failed to enable media [ 1438.328793][T16396] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12496'. [ 1438.338676][T16396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12496'. [ 1438.408079][T16396] netlink: 160 bytes leftover after parsing attributes in process `syz.4.12496'. [ 1438.419338][T16396] netlink: 'syz.4.12496': attribute type 11 has an invalid length. [ 1439.299709][T16424] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12505'. [ 1439.314554][T16425] tipc: Enabling of bearer rejected, failed to enable media [ 1439.384624][T16428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12505'. [ 1439.408010][T16416] syzkaller0: entered promiscuous mode [ 1439.471591][T16416] syzkaller0: entered allmulticast mode [ 1439.546089][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12505'. [ 1439.615721][T16424] net_ratelimit: 335 callbacks suppressed [ 1439.615737][T16424] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1439.630530][T16424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1439.777636][T16439] netlink: zone id is out of range [ 1439.783069][T16439] netlink: zone id is out of range [ 1439.788913][T16439] netlink: zone id is out of range [ 1439.794041][T16439] netlink: zone id is out of range [ 1439.819413][T16439] netlink: zone id is out of range [ 1439.828101][T16439] netlink: zone id is out of range [ 1439.835036][T16439] netlink: zone id is out of range [ 1439.840728][T16439] netlink: zone id is out of range [ 1439.868881][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12511'. [ 1439.960163][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12511'. [ 1440.195059][T16461] tipc: Enabling of bearer rejected, failed to enable media [ 1440.582611][T16487] syzkaller0: entered promiscuous mode [ 1440.588233][T16487] syzkaller0: entered allmulticast mode [ 1441.364240][T16510] syzkaller0: entered promiscuous mode [ 1441.370732][T16510] syzkaller0: entered allmulticast mode [ 1442.038615][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12546'. [ 1447.895318][T16574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12562'. [ 1447.905831][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12562'. [ 1447.914921][T16574] netlink: 'syz.0.12562': attribute type 15 has an invalid length. [ 1448.078271][T16581] net_ratelimit: 337 callbacks suppressed [ 1448.078303][T16581] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1448.520131][T16593] syzkaller0: entered promiscuous mode [ 1448.525959][T16593] syzkaller0: entered allmulticast mode [ 1449.537222][T16630] netlink: 'syz.0.12579': attribute type 1 has an invalid length. [ 1455.381415][T16664] netlink: 'syz.1.12588': attribute type 1 has an invalid length. [ 1455.468039][T16664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1455.532168][T16674] syzkaller0: entered promiscuous mode [ 1455.542948][T16674] syzkaller0: entered allmulticast mode [ 1455.820630][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12596'. [ 1455.925968][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 1455.949964][T16692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12596'. [ 1456.057455][T16697] syzkaller0: entered promiscuous mode [ 1456.063128][T16697] syzkaller0: entered allmulticast mode [ 1458.178742][T16653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1458.357004][T16705] FAULT_INJECTION: forcing a failure. [ 1458.357004][T16705] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.378034][T16705] CPU: 0 UID: 0 PID: 16705 Comm: syz.1.12602 Not tainted syzkaller #0 PREEMPT(full) [ 1458.378056][T16705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1458.378065][T16705] Call Trace: [ 1458.378072][T16705] [ 1458.378078][T16705] dump_stack_lvl+0xe8/0x150 [ 1458.378103][T16705] should_fail_ex+0x412/0x560 [ 1458.378125][T16705] should_failslab+0xa8/0x100 [ 1458.378147][T16705] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1458.378166][T16705] ? __alloc_skb+0x186/0x7d0 [ 1458.378183][T16705] ? __alloc_skb+0x1d0/0x7d0 [ 1458.378198][T16705] ? __local_bh_enable_ip+0xd0/0x130 [ 1458.378216][T16705] __alloc_skb+0x1d0/0x7d0 [ 1458.378258][T16705] netlink_sendmsg+0x5d4/0xb40 [ 1458.378281][T16705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1458.378298][T16705] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1458.378324][T16705] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1458.378344][T16705] ____sys_sendmsg+0x972/0x9f0 [ 1458.378359][T16705] ? __might_fault+0xaf/0x130 [ 1458.378385][T16705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1458.378407][T16705] ? import_iovec+0x73/0xa0 [ 1458.378428][T16705] ___sys_sendmsg+0x2a5/0x360 [ 1458.378444][T16705] ? __lock_acquire+0x6b5/0x2cf0 [ 1458.378463][T16705] ? __pfx____sys_sendmsg+0x10/0x10 [ 1458.378506][T16705] ? __fget_files+0x2a/0x420 [ 1458.378521][T16705] ? __fget_files+0x3a0/0x420 [ 1458.378545][T16705] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1458.378561][T16705] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1458.378582][T16705] ? __pfx_ksys_write+0x10/0x10 [ 1458.378607][T16705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.378622][T16705] do_syscall_64+0x15f/0xf80 [ 1458.378649][T16705] ? trace_irq_disable+0x3b/0x140 [ 1458.378668][T16705] ? clear_bhb_loop+0x40/0x90 [ 1458.378686][T16705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.378699][T16705] RIP: 0033:0x7faea7d9ce59 [ 1458.378714][T16705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.378726][T16705] RSP: 002b:00007faea8d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1458.378742][T16705] RAX: ffffffffffffffda RBX: 00007faea8015fa0 RCX: 00007faea7d9ce59 [ 1458.378752][T16705] RDX: 0000000000044040 RSI: 0000200000000040 RDI: 0000000000000003 [ 1458.378760][T16705] RBP: 00007faea8d13090 R08: 0000000000000000 R09: 0000000000000000 [ 1458.378768][T16705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1458.378776][T16705] R13: 00007faea8016038 R14: 00007faea8015fa0 R15: 00007ffdbe21cfe8 [ 1458.378800][T16705] [ 1462.521708][T16722] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1462.530176][T16722] CPU: 1 UID: 0 PID: 16722 Comm: syz.1.12605 Not tainted syzkaller #0 PREEMPT(full) [ 1462.530202][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1462.530213][T16722] Call Trace: [ 1462.530222][T16722] [ 1462.530232][T16722] dump_stack_lvl+0xe8/0x150 [ 1462.530260][T16722] sysfs_warn_dup+0x8e/0xa0 [ 1462.530284][T16722] sysfs_do_create_link_sd+0xc0/0x110 [ 1462.530309][T16722] device_add_class_symlinks+0x1cf/0x240 [ 1462.530333][T16722] device_add+0x475/0xbb0 [ 1462.530357][T16722] wiphy_register+0x1fb1/0x2fe0 [ 1462.530397][T16722] ? __pfx_wiphy_register+0x10/0x10 [ 1462.530420][T16722] ? __pfx_netdev_run_todo+0x10/0x10 [ 1462.530439][T16722] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1462.530465][T16722] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1462.530494][T16722] ieee80211_register_hw+0x3c53/0x4910 [ 1462.530532][T16722] ? ieee80211_register_hw+0x1951/0x4910 [ 1462.530585][T16722] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1462.530613][T16722] ? __asan_memset+0x22/0x50 [ 1462.530633][T16722] ? __hrtimer_setup+0x1b7/0x260 [ 1462.530653][T16722] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1462.530678][T16722] mac80211_hwsim_new_radio+0x3327/0x57f0 [ 1462.530732][T16722] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1462.530753][T16722] ? kstrndup+0xbf/0x160 [ 1462.530780][T16722] hwsim_new_radio_nl+0xe20/0x26e0 [ 1462.530799][T16722] ? unwind_next_frame+0xa6/0x2550 [ 1462.530837][T16722] ? is_bpf_text_address+0x26/0x2b0 [ 1462.530868][T16722] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1462.530891][T16722] ? __kernel_text_address+0xd/0x30 [ 1462.530912][T16722] ? unwind_get_return_address+0x4d/0x90 [ 1462.530932][T16722] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1462.530955][T16722] ? arch_stack_walk+0xfb/0x150 [ 1462.531023][T16722] ? stack_trace_save+0xa9/0x100 [ 1462.531047][T16722] ? __pfx_stack_trace_save+0x10/0x10 [ 1462.531075][T16722] ? stack_depot_save_flags+0x33/0x810 [ 1462.531112][T16722] ? __nla_validate_parse+0x2480/0x2dc0 [ 1462.531136][T16722] ? ____sys_sendmsg+0x972/0x9f0 [ 1462.531151][T16722] ? ___sys_sendmsg+0x2a5/0x360 [ 1462.531181][T16722] ? __pfx___nla_validate_parse+0x10/0x10 [ 1462.531220][T16722] ? rcu_is_watching+0x15/0xb0 [ 1462.531241][T16722] ? trace_kmalloc+0x2a/0xf0 [ 1462.531270][T16722] ? __nla_parse+0x40/0x60 [ 1462.531298][T16722] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1462.531320][T16722] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1462.531349][T16722] genl_family_rcv_msg_doit+0x22a/0x330 [ 1462.531379][T16722] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1462.531414][T16722] ? bpf_lsm_capable+0x9/0x20 [ 1462.531429][T16722] ? security_capable+0x7e/0x2c0 [ 1462.531456][T16722] genl_rcv_msg+0x61c/0x7a0 [ 1462.531484][T16722] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1462.531504][T16722] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1462.531541][T16722] netlink_rcv_skb+0x232/0x4b0 [ 1462.531559][T16722] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1462.531582][T16722] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1462.531617][T16722] ? down_read+0x270/0x2e0 [ 1462.531633][T16722] ? genl_rcv+0xd/0x40 [ 1462.531656][T16722] genl_rcv+0x28/0x40 [ 1462.531675][T16722] netlink_unicast+0x75c/0x8e0 [ 1462.531711][T16722] netlink_sendmsg+0x813/0xb40 [ 1462.531740][T16722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1462.531762][T16722] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1462.531785][T16722] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1462.531811][T16722] ____sys_sendmsg+0x972/0x9f0 [ 1462.531828][T16722] ? __might_fault+0xaf/0x130 [ 1462.531856][T16722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1462.531884][T16722] ? import_iovec+0x73/0xa0 [ 1462.531913][T16722] ___sys_sendmsg+0x2a5/0x360 [ 1462.531929][T16722] ? __lock_acquire+0x6b5/0x2cf0 [ 1462.531954][T16722] ? __pfx____sys_sendmsg+0x10/0x10 [ 1462.531989][T16722] ? futex_wake+0x4ac/0x580 [ 1462.532041][T16722] ? __fget_files+0x2a/0x420 [ 1462.532062][T16722] ? __fget_files+0x3a0/0x420 [ 1462.532094][T16722] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1462.532115][T16722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1462.532142][T16722] ? rcu_is_watching+0x15/0xb0 [ 1462.532172][T16722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.532191][T16722] do_syscall_64+0x15f/0xf80 [ 1462.532214][T16722] ? trace_irq_disable+0x3b/0x140 [ 1462.532239][T16722] ? clear_bhb_loop+0x40/0x90 [ 1462.532260][T16722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.532277][T16722] RIP: 0033:0x7faea7d9ce59 [ 1462.532297][T16722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.532312][T16722] RSP: 002b:00007faea8cb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1462.532332][T16722] RAX: ffffffffffffffda RBX: 00007faea8016270 RCX: 00007faea7d9ce59 [ 1462.532344][T16722] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d [ 1462.532356][T16722] RBP: 00007faea7e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1462.532365][T16722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1462.532375][T16722] R13: 00007faea8016308 R14: 00007faea8016270 R15: 00007ffdbe21cfe8 [ 1462.532405][T16722] [ 1463.440214][T16741] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12608'. [ 1463.475062][T16741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1463.487742][T16741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1463.539077][T16741] bond0 (unregistering): Released all slaves [ 1463.560352][T16745] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12610'. [ 1463.580736][T16745] xt_hashlimit: invalid rate [ 1463.587819][T16744] syzkaller0: entered promiscuous mode [ 1463.593349][T16744] syzkaller0: entered allmulticast mode [ 1464.356646][T16753] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12612'. [ 1464.372207][T16755] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12613'. [ 1464.541459][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12612'. [ 1464.584303][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12612'. [ 1464.691402][T16765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1464.702285][T16765] netlink: 'syz.3.12616': attribute type 16 has an invalid length. [ 1464.710591][T16765] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12616'. [ 1465.153644][T16776] sctp: [Deprecated]: syz.3.12620 (pid 16776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1465.153644][T16776] Use struct sctp_sack_info instead [ 1465.509989][T16787] syzkaller1: entered promiscuous mode [ 1465.516563][T16787] syzkaller1: entered allmulticast mode [ 1465.572317][T16790] sctp: [Deprecated]: syz.2.12623 (pid 16790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1465.572317][T16790] Use struct sctp_sack_info instead [ 1465.606087][T16794] netlink: 'syz.4.12625': attribute type 13 has an invalid length. [ 1465.664220][T16796] sctp: [Deprecated]: syz.2.12623 (pid 16796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1465.664220][T16796] Use struct sctp_sack_info instead [ 1465.789093][T16796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1465.834872][ T6346] IPVS: starting estimator thread 0... [ 1466.092497][T16799] IPVS: using max 34 ests per chain, 81600 per kthread [ 1466.712999][T16832] syzkaller0: entered promiscuous mode [ 1466.772060][T16832] syzkaller0: entered allmulticast mode [ 1466.950596][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12642'. [ 1466.960230][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12642'. [ 1466.983622][T16848] netlink: 'syz.2.12644': attribute type 2 has an invalid length. [ 1466.997151][T16848] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12644'. [ 1467.013746][T16852] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1467.239954][T16863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1467.836903][T16889] FAULT_INJECTION: forcing a failure. [ 1467.836903][T16889] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.850463][T16889] CPU: 1 UID: 0 PID: 16889 Comm: syz.4.12656 Not tainted syzkaller #0 PREEMPT(full) [ 1467.850487][T16889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1467.850497][T16889] Call Trace: [ 1467.850504][T16889] [ 1467.850511][T16889] dump_stack_lvl+0xe8/0x150 [ 1467.850538][T16889] should_fail_ex+0x412/0x560 [ 1467.850563][T16889] should_failslab+0xa8/0x100 [ 1467.850589][T16889] __kmalloc_noprof+0xe8/0x760 [ 1467.850612][T16889] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1467.850639][T16889] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1467.850667][T16889] genl_family_rcv_msg_doit+0xd9/0x330 [ 1467.850700][T16889] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1467.850725][T16889] ? __pfx_genl_get_cmd+0x10/0x10 [ 1467.850743][T16889] ? __pfx_ovs_flow_cmd_get+0x10/0x10 [ 1467.850763][T16889] ? __pfx_ovs_flow_cmd_dump+0x10/0x10 [ 1467.850795][T16889] genl_rcv_msg+0x61c/0x7a0 [ 1467.850820][T16889] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1467.850839][T16889] ? __pfx_ovs_flow_cmd_get+0x10/0x10 [ 1467.850858][T16889] ? __pfx_ref_tracker_free+0x10/0x10 [ 1467.850887][T16889] netlink_rcv_skb+0x232/0x4b0 [ 1467.850905][T16889] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1467.850926][T16889] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1467.850959][T16889] ? down_read+0x270/0x2e0 [ 1467.850973][T16889] ? genl_rcv+0xd/0x40 [ 1467.850994][T16889] genl_rcv+0x28/0x40 [ 1467.851012][T16889] netlink_unicast+0x75c/0x8e0 [ 1467.851044][T16889] netlink_sendmsg+0x813/0xb40 [ 1467.851070][T16889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1467.851090][T16889] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1467.851113][T16889] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1467.851138][T16889] ____sys_sendmsg+0x972/0x9f0 [ 1467.851155][T16889] ? __might_fault+0xaf/0x130 [ 1467.851181][T16889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1467.851206][T16889] ? import_iovec+0x73/0xa0 [ 1467.851231][T16889] ___sys_sendmsg+0x2a5/0x360 [ 1467.851246][T16889] ? __lock_acquire+0x6b5/0x2cf0 [ 1467.851268][T16889] ? __pfx____sys_sendmsg+0x10/0x10 [ 1467.851320][T16889] ? __fget_files+0x2a/0x420 [ 1467.851338][T16889] ? __fget_files+0x3a0/0x420 [ 1467.851366][T16889] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1467.851387][T16889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1467.851413][T16889] ? __pfx_ksys_write+0x10/0x10 [ 1467.851443][T16889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.851461][T16889] do_syscall_64+0x15f/0xf80 [ 1467.851482][T16889] ? trace_irq_disable+0x3b/0x140 [ 1467.851505][T16889] ? clear_bhb_loop+0x40/0x90 [ 1467.851524][T16889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.851540][T16889] RIP: 0033:0x7fd177b9ce59 [ 1467.851558][T16889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1467.851571][T16889] RSP: 002b:00007fd178a60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1467.851590][T16889] RAX: ffffffffffffffda RBX: 00007fd177e15fa0 RCX: 00007fd177b9ce59 [ 1467.851601][T16889] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1467.851612][T16889] RBP: 00007fd178a60090 R08: 0000000000000000 R09: 0000000000000000 [ 1467.851622][T16889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.851632][T16889] R13: 00007fd177e16038 R14: 00007fd177e15fa0 R15: 00007fff835bcb88 [ 1467.851661][T16889] [ 1467.855139][T16872] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1468.429414][T16900] syzkaller0: entered promiscuous mode [ 1468.435311][T16900] syzkaller0: entered allmulticast mode [ 1468.630772][T16918] __nla_validate_parse: 1 callbacks suppressed [ 1468.630791][T16918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12665'. [ 1468.648340][T16919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12665'. [ 1468.955895][T16930] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12667'. [ 1468.969347][T16930] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1469.017036][T16925] gretap0: entered promiscuous mode [ 1469.685364][T16960] syzkaller0: entered promiscuous mode [ 1469.691146][T16960] syzkaller0: entered allmulticast mode [ 1469.974747][T16970] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12680'. [ 1469.988811][T16970] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12680'. [ 1469.998135][T16973] tipc: Enabling of bearer rejected, failed to enable media [ 1470.025984][T16969] netlink: 192 bytes leftover after parsing attributes in process `syz.3.12680'. [ 1470.235047][T16993] netlink: 'syz.0.12689': attribute type 16 has an invalid length. [ 1470.253835][T16996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12688'. [ 1470.486730][T17011] tipc: Enabling of bearer rejected, failed to enable media [ 1470.786092][T17025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12699'. [ 1470.861492][T17027] syzkaller0: entered promiscuous mode [ 1470.867354][T17027] syzkaller0: entered allmulticast mode [ 1470.892344][T17032] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12702'. [ 1470.988891][T17033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12699'. [ 1471.038728][T17033] nbd: nbd64 already in use [ 1471.355968][T17041] openvswitch: netlink: ufid size 32 bytes exceeds the range (1, 16) [ 1471.365184][T17041] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1471.997186][ T7775] veth1_to_team: left promiscuous mode [ 1472.004251][ T7775] dummy0: left promiscuous mode [ 1472.026245][ T7775] hsr_slave_0: left promiscuous mode [ 1472.033260][ T7775] hsr_slave_1: left promiscuous mode [ 1472.559522][ T7775] team0 (unregistering): Port device team_slave_1 removed [ 1473.307668][T17059] tipc: Enabling of bearer rejected, failed to enable media [ 1473.499342][T17084] syzkaller0: entered promiscuous mode [ 1473.516109][T17084] syzkaller0: entered allmulticast mode [ 1473.714226][T17092] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1473.715561][T17095] sctp: [Deprecated]: syz.4.12720 (pid 17095) Use of int in maxseg socket option. [ 1473.715561][T17095] Use struct sctp_assoc_value instead [ 1474.050623][T17110] lo speed is unknown, defaulting to 1000 [ 1474.121496][T17118] __nla_validate_parse: 3 callbacks suppressed [ 1474.121516][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12724'. [ 1474.368959][T17110] lo speed is unknown, defaulting to 1000 [ 1474.414085][T17098] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1474.422028][T17110] lo speed is unknown, defaulting to 1000 [ 1474.465907][T17135] netlink: 'syz.3.12731': attribute type 10 has an invalid length. [ 1474.474353][ T8794] IPVS: starting estimator thread 0... [ 1474.482817][T17130] xt_hashlimit: size too large, truncated to 1048576 [ 1474.503347][T17133] netlink: 'syz.3.12731': attribute type 10 has an invalid length. [ 1474.576142][T17139] netlink: 'syz.1.12729': attribute type 1 has an invalid length. [ 1474.584270][T17139] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12729'. [ 1474.624256][T17136] IPVS: using max 37 ests per chain, 88800 per kthread [ 1475.012845][T17146] syzkaller0: entered promiscuous mode [ 1475.039834][T17146] syzkaller0: entered allmulticast mode [ 1475.159932][ T7775] IPVS: stop unused estimator thread 0... [ 1475.176690][ T8762] lo speed is unknown, defaulting to 1000 [ 1475.184857][ T7775] IPVS: stop unused estimator thread 0... [ 1475.204128][T17110] infiniband syz0: set active [ 1475.210429][T17110] infiniband syz0: added lo [ 1475.225804][T17110] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1475.230902][T17110] infiniband syz0: Couldn't open port 1 [ 1475.258192][T17110] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1475.273584][T17110] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1475.292858][T17110] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1475.321858][T17110] RDS/IB: syz0: added [ 1475.326959][T17110] smc: adding ib device syz0 with port count 1 [ 1475.333194][T17110] smc: ib device syz0 port 1 has no pnetid [ 1475.339795][ T8762] lo speed is unknown, defaulting to 1000 [ 1475.350236][T17110] lo speed is unknown, defaulting to 1000 [ 1475.657221][T17110] lo speed is unknown, defaulting to 1000 [ 1475.969463][T17110] lo speed is unknown, defaulting to 1000 [ 1476.340756][T17188] netlink: 'syz.1.12746': attribute type 1 has an invalid length. [ 1476.411383][T17188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.465646][T17191] tipc: Enabled bearer , priority 0 [ 1476.492700][T17188] bond0: (slave gretap1): making interface the new active one [ 1476.502163][T17188] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1476.613387][T17110] lo speed is unknown, defaulting to 1000 [ 1476.624435][T17188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12746'. [ 1476.717154][T17188] bond0 (unregistering): (slave gretap1): Releasing active interface [ 1476.750484][T17188] bond0 (unregistering): Released all slaves [ 1476.899156][T17194] syzkaller0: entered promiscuous mode [ 1476.911978][T17194] syzkaller0: entered allmulticast mode [ 1476.936271][T17110] lo speed is unknown, defaulting to 1000 [ 1477.296542][T17110] lo speed is unknown, defaulting to 1000 [ 1477.452021][T17110] lo speed is unknown, defaulting to 1000 [ 1477.533987][ T9841] tipc: Node number set to 1073741825 [ 1477.705101][T17110] lo speed is unknown, defaulting to 1000 [ 1478.029784][T17110] lo speed is unknown, defaulting to 1000 [ 1478.593574][T17234] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12760'. [ 1478.650544][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12760'. [ 1478.704736][T17236] veth0: entered promiscuous mode [ 1478.798097][T17240] syzkaller0: entered promiscuous mode [ 1478.803819][T17240] syzkaller0: entered allmulticast mode [ 1479.031520][T17242] tipc: Enabling of bearer rejected, failed to enable media [ 1479.063095][T17235] veth0: left promiscuous mode [ 1479.132091][T17244] pim6reg: entered allmulticast mode [ 1479.139489][T17244] pim6reg: left allmulticast mode [ 1479.346481][T17256] netlink: 'syz.1.12769': attribute type 1 has an invalid length. [ 1479.377283][T17256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.455705][T17261] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12772'. [ 1479.495768][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.503168][T17261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.602267][T17272] netlink: 'syz.1.12773': attribute type 21 has an invalid length. [ 1479.646758][T17270] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12774'. [ 1479.660735][T17274] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12773'. [ 1479.730782][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12773'. [ 1479.740780][T17272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1479.781534][T17272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.837385][T17280] syzkaller0: entered promiscuous mode [ 1479.844622][T17282] sctp: [Deprecated]: syz.4.12777 (pid 17282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1479.844622][T17282] Use struct sctp_sack_info instead [ 1479.870588][T17280] syzkaller0: entered allmulticast mode [ 1479.948972][T17282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.101854][T17294] netlink: 'syz.3.12782': attribute type 1 has an invalid length. [ 1480.109799][T17294] netlink: 228 bytes leftover after parsing attributes in process `syz.3.12782'. [ 1480.163098][T17294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12782'. [ 1480.197537][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12783'. [ 1480.349536][T17313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12789'. [ 1480.724452][T17342] netlink: 'syz.0.12797': attribute type 1 has an invalid length. [ 1480.766997][T17341] rdma_rxe: rxe_newlink: failed to add lo [ 1480.778726][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12796'. [ 1480.803895][T17341] netlink: 112 bytes leftover after parsing attributes in process `syz.2.12796'. [ 1480.835570][T17347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1480.842879][T17347] IPv6: NLM_F_CREATE should be set when creating new route [ 1480.852664][T17347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1481.156211][T17364] netlink: 'syz.4.12805': attribute type 39 has an invalid length. [ 1481.458060][T17376] netlink: 'syz.2.12808': attribute type 9 has an invalid length. [ 1481.470782][T17380] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1481.666046][T17386] rdma_rxe: rxe_newlink: failed to add lo [ 1482.198038][ T7775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.255467][ T7775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.292563][ T7775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.356067][ T7775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.625329][T17441] netlink: 'syz.1.12829': attribute type 1 has an invalid length. [ 1482.745426][T17441] bond2: (slave dummy0): making interface the new active one [ 1482.782350][T17441] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1482.821011][T17455] bond2: entered promiscuous mode [ 1482.838013][T17455] dummy0: entered promiscuous mode [ 1483.118304][T17469] netlink: 'syz.4.12840': attribute type 18 has an invalid length. [ 1483.238340][T17441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.246077][T17441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.323921][T17441] bond2: (slave dummy0): Releasing active interface [ 1483.333875][T17441] dummy0: left promiscuous mode [ 1483.468854][T17441] bridge_slave_0: left allmulticast mode [ 1483.481113][T17441] bridge_slave_0: left promiscuous mode [ 1483.488789][T17441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.515653][T17441] bridge_slave_1: left allmulticast mode [ 1483.523096][T17441] bridge_slave_1: left promiscuous mode [ 1483.529266][T17441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.602474][T17441] team0: Port device team_slave_0 removed [ 1483.626999][T17441] team0: Port device team_slave_1 removed [ 1483.641437][T17441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1483.664710][T17441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1483.711066][T17441] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1483.757122][T17439] bond2: left promiscuous mode [ 1483.969767][T17495] rdma_rxe: rxe_newlink: failed to add lo [ 1484.225404][T17509] netlink: 'syz.4.12850': attribute type 1 has an invalid length. [ 1484.264520][T17512] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 1484.384688][T17523] tipc: Enabling of bearer rejected, failed to enable media [ 1484.454203][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1484.576674][T17527] sctp: [Deprecated]: syz.1.12855 (pid 17527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1484.576674][T17527] Use struct sctp_sack_info instead [ 1484.661657][T17533] __nla_validate_parse: 27 callbacks suppressed [ 1484.661676][T17533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12858'. [ 1484.725597][T17535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12857'. [ 1484.824657][T17540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1484.935125][T17540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.093741][T22789] lo speed is unknown, defaulting to 1000 [ 1485.215546][T17559] netlink: 'syz.0.12865': attribute type 13 has an invalid length. [ 1485.341902][ T8762] page_pool_release_retry() stalled pool shutdown: id 178, 1 inflight 908 sec [ 1485.593453][T17570] sctp: [Deprecated]: syz.3.12870 (pid 17570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1485.593453][T17570] Use struct sctp_sack_info instead [ 1485.605795][T17571] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1485.616780][T17570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1485.685127][T17571] sctp: [Deprecated]: syz.4.12869 (pid 17571) Use of int in maxseg socket option. [ 1485.685127][T17571] Use struct sctp_assoc_value instead [ 1485.705830][T17574] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12872'. [ 1486.397004][T17604] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12881'. [ 1486.408062][T17604] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1486.867016][T17585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1486.999033][T17627] sctp: [Deprecated]: syz.2.12891 (pid 17627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1486.999033][T17627] Use struct sctp_sack_info instead [ 1487.073531][T17627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1487.232402][T17632] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1487.273519][T17634] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12894'. [ 1487.285313][T17634] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12894'. [ 1487.769565][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12897'. [ 1487.786878][T17652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12899'. [ 1487.838762][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12897'. [ 1487.851302][ T7774] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.866885][ T7774] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.880668][ T7774] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.891316][ T7774] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1487.955475][T17660] syzkaller0: entered promiscuous mode [ 1487.982155][T17660] syzkaller0: entered allmulticast mode [ 1487.990395][ T7775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.002037][T17660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.097238][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12903'. [ 1488.117733][ T9841] IPVS: starting estimator thread 0... [ 1488.216396][T17680] tipc: Enabling of bearer rejected, failed to enable media [ 1488.300901][T17688] tipc: Enabling of bearer rejected, failed to enable media [ 1488.394771][T17674] IPVS: using max 37 ests per chain, 88800 per kthread [ 1488.410366][T17693] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 1488.762440][T17715] : renamed from veth0_to_bond (while UP) [ 1489.183602][T17735] netlink: 'syz.4.12925': attribute type 1 has an invalid length. [ 1489.258072][T17738] netlink: 'syz.0.12926': attribute type 1 has an invalid length. [ 1489.266896][T17738] netlink: 'syz.0.12926': attribute type 1 has an invalid length. [ 1489.309904][T17735] bond1: entered promiscuous mode [ 1489.334139][T17735] bond1: entered allmulticast mode [ 1489.374998][T17735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1489.602996][T17759] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20000 [ 1489.688633][T17746] __nla_validate_parse: 6 callbacks suppressed [ 1489.688654][T17746] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12918'. [ 1489.837535][T17746] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1490.185565][T17790] netlink: 'syz.0.12944': attribute type 13 has an invalid length. [ 1490.248604][ T29] audit: type=1804 audit(1779242719.691:11): pid=17787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.12943" name="/newroot/209/memory.events" dev="tmpfs" ino=1092 res=1 errno=0 [ 1490.326043][ T29] audit: type=1800 audit(1779242719.721:12): pid=17787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12943" name="memory.events" dev="tmpfs" ino=1092 res=0 errno=0 [ 1490.461668][T17804] xt_hashlimit: max too large, truncated to 1048576 [ 1490.479155][T17804] xt_ecn: cannot match TCP bits for non-tcp packets [ 1490.579800][T17814] netlink: 556 bytes leftover after parsing attributes in process `syz.4.12954'. [ 1490.586191][T17815] netlink: 'syz.3.12950': attribute type 1 has an invalid length. [ 1490.629064][T17804] netlink: 'syz.3.12950': attribute type 1 has an invalid length. [ 1490.669182][T17803] lo speed is unknown, defaulting to 1000 [ 1490.822585][T17823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12956'. [ 1491.207866][T17834] netlink: 384 bytes leftover after parsing attributes in process `syz.4.12960'. [ 1491.236760][T17834] lo: Caught tx_queue_len zero misconfig [ 1491.351909][T17838] syz0: rxe_newlink: already configured on lo [ 1491.384037][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12962'. [ 1491.572046][T17859] netlink: 'syz.2.12966': attribute type 13 has an invalid length. [ 1491.594462][T17860] netlink: 'syz.1.12968': attribute type 13 has an invalid length. [ 1491.603346][T17860] netlink: 'syz.1.12968': attribute type 17 has an invalid length. [ 1491.876903][T17870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12968'. [ 1492.191776][T17860] gretap0: left promiscuous mode [ 1492.292086][T17860] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.313532][T17860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1492.436739][T17860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1492.451443][T17860] veth1_vlan: left promiscuous mode [ 1492.461964][T17860] veth0_vlan: left promiscuous mode [ 1492.470132][T17860] veth0_vlan: entered promiscuous mode [ 1492.484300][T17860] veth1_vlan: entered promiscuous mode [ 1492.502757][T17860] veth1_macvtap: left promiscuous mode [ 1492.511553][T17860] veth0_macvtap: left promiscuous mode [ 1492.520022][T17860] veth0_macvtap: entered promiscuous mode [ 1492.541059][T17860] veth1_macvtap: entered promiscuous mode [ 1492.558096][T17860] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1492.572875][T17860] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1492.585606][T17860] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1492.597621][T17860] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1492.612209][T17860] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1492.636815][T17860] gretap0: entered promiscuous mode [ 1492.648275][T17860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1492.658200][T17860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1493.062843][T17877] syzkaller0: entered promiscuous mode [ 1493.081098][T17877] syzkaller0: entered allmulticast mode [ 1498.615009][T17904] bridge2: entered promiscuous mode [ 1498.620481][T17904] bridge2: entered allmulticast mode [ 1498.629087][T17904] team0: Port device bridge2 added [ 1498.654630][T17911] bridge3: entered promiscuous mode [ 1498.660252][T17911] bridge3: entered allmulticast mode [ 1498.677129][T17911] team0: Port device bridge3 added [ 1498.871019][T17926] syzkaller0: entered promiscuous mode [ 1498.877825][T17926] syzkaller0: entered allmulticast mode [ 1498.889628][T17926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12983'. [ 1498.978139][T17930] sctp: [Deprecated]: syz.4.12982 (pid 17930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1498.978139][T17930] Use struct sctp_sack_info instead [ 1499.087344][T17929] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12982'. [ 1499.445300][T17950] netlink: 'syz.3.12991': attribute type 1 has an invalid length. [ 1499.485831][T17950] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1499.542940][T17950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.588240][T17950] bond4: (slave bond0): Enslaving as a backup interface with an up link [ 1499.620184][T17953] netlink: 'syz.3.12991': attribute type 10 has an invalid length. [ 1499.648226][T17953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12991'. [ 1499.742685][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12994'. [ 1499.769890][T17960] netlink: 'syz.0.12994': attribute type 1 has an invalid length. [ 1499.794267][T17960] netlink: 'syz.0.12994': attribute type 2 has an invalid length. [ 1499.823056][T17960] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12994'. [ 1499.844438][T17960] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1499.879726][T17964] syzkaller0: entered promiscuous mode [ 1499.885596][T17964] syzkaller0: entered allmulticast mode [ 1500.470971][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13008'. [ 1500.518144][T17995] erspan0: entered promiscuous mode [ 1500.530069][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13007'. [ 1500.541638][T17995] macvtap1: entered promiscuous mode [ 1500.552094][T17995] macvtap1: entered allmulticast mode [ 1500.574785][T17995] erspan0: entered allmulticast mode [ 1500.609148][T17998] tc_dump_action: action bad kind [ 1500.689397][T17998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13007'. [ 1500.730427][T17998] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13007'. [ 1500.751148][T17998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13007'. [ 1500.971963][T18022] geneve3: entered promiscuous mode [ 1500.983814][T18015] syzkaller0: entered promiscuous mode [ 1500.999226][T18015] syzkaller0: entered allmulticast mode [ 1501.421890][T18038] netlink: 'syz.0.13021': attribute type 1 has an invalid length. [ 1501.911919][T18068] netlink: 'syz.4.13032': attribute type 10 has an invalid length. [ 1501.941663][T18046] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 1501.949399][T18046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.957341][T18046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.217135][T18101] netlink: 'syz.1.13033': attribute type 27 has an invalid length. [ 1502.381350][T18046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1502.967553][T18068] team0: Port device veth1_to_hsr added [ 1503.001864][T18078] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.045772][T18078] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.126203][T18078] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.147848][T18078] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.221309][T18142] tipc: Enabled bearer , priority 0 [ 1503.231240][T18142] syzkaller0: entered promiscuous mode [ 1503.260542][T18142] syzkaller0: entered allmulticast mode [ 1503.330196][T18142] tipc: Resetting bearer [ 1503.356865][T18141] tipc: Resetting bearer [ 1503.469598][T18141] tipc: Disabling bearer [ 1503.609943][T18146] syzkaller1: entered promiscuous mode [ 1503.616733][T18146] syzkaller1: entered allmulticast mode [ 1503.629292][T18152] syzkaller0: entered promiscuous mode [ 1503.644329][T18152] syzkaller0: entered allmulticast mode [ 1504.335076][T18175] __nla_validate_parse: 9 callbacks suppressed [ 1504.335095][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13050'. [ 1505.041694][T18189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13056'. [ 1505.082100][T18189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1505.096408][T18189] bond2: entered promiscuous mode [ 1505.101662][T18189] bond2: entered allmulticast mode [ 1505.113619][T18189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1505.123220][T18189] team0: Port device bond2 added [ 1505.177503][ T7778] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1505.209552][ T7778] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1505.258307][ T7778] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1505.270404][ T7778] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1505.447907][T18203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13061'. [ 1505.481711][T18203] ip6gre1: entered promiscuous mode [ 1505.487422][T18203] ip6gre1: entered allmulticast mode [ 1505.695132][T18210] bond0: entered allmulticast mode [ 1505.700843][T18210] bond_slave_0: entered allmulticast mode [ 1505.707433][T18210] bond_slave_1: entered allmulticast mode [ 1505.979844][T18231] netlink: 'syz.0.13068': attribute type 1 has an invalid length. [ 1505.993575][T18231] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13068'. [ 1506.051310][T18229] sctp: [Deprecated]: syz.1.13067 (pid 18229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1506.051310][T18229] Use struct sctp_sack_info instead [ 1506.076715][T18229] sctp: [Deprecated]: syz.1.13067 (pid 18229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1506.076715][T18229] Use struct sctp_sack_info instead [ 1506.102596][T18229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1506.622331][T18258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13076'. [ 1506.639370][T18258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13076'. [ 1506.810338][T18267] bond0: entered promiscuous mode [ 1507.341858][T18293] sctp: [Deprecated]: syz.4.13088 (pid 18293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1507.341858][T18293] Use struct sctp_sack_info instead [ 1507.359418][T18293] sctp: [Deprecated]: syz.4.13088 (pid 18293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1507.359418][T18293] Use struct sctp_sack_info instead [ 1507.365935][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13089'. [ 1507.387674][T18295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13089'. [ 1507.418013][T18293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.563555][T18303] lo: Caught tx_queue_len zero misconfig [ 1507.570559][T18303] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 1507.578807][T18303] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13091'. [ 1507.590443][T18303] syzkaller0: entered promiscuous mode [ 1507.598109][T18303] syzkaller0: entered allmulticast mode [ 1507.608200][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13091'. [ 1507.647194][T18303] tc action pedit offset must be on 32 bit boundaries [ 1507.658690][T18303] tc action pedit offset must be on 32 bit boundaries [ 1507.665685][T18303] tc action pedit offset must be on 32 bit boundaries [ 1507.672687][T18303] tc action pedit offset must be on 32 bit boundaries [ 1507.679947][T18303] tc action pedit offset must be on 32 bit boundaries [ 1507.687494][T18303] tc action pedit offset must be on 32 bit boundaries [ 1507.695007][T18303] tc action pedit offset must be on 32 bit boundaries [ 1507.702236][T18303] tc action pedit offset must be on 32 bit boundaries [ 1507.709515][T18303] tc action pedit offset must be on 32 bit boundaries [ 1507.716889][T18303] tc action pedit offset must be on 32 bit boundaries [ 1507.723954][T18303] 0: reclassify loop, rule prio 0, protocol 800 [ 1507.988560][T18315] xt_bpf: check failed: parse error [ 1508.210250][T18327] ipvlan1: entered promiscuous mode [ 1508.227075][T18327] ipvlan1: left promiscuous mode [ 1508.451348][T18342] netlink: 'syz.0.13103': attribute type 1 has an invalid length. [ 1508.524250][T18342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1508.743282][T18349] netlink: 'syz.0.13103': attribute type 1 has an invalid length. [ 1508.834517][T18347] bond2: (slave veth3): Enslaving as an active interface with an up link [ 1509.536570][T18358] __nla_validate_parse: 4 callbacks suppressed [ 1509.536589][T18358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13107'. [ 1509.706476][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13107'. [ 1509.959765][T18365] sctp: [Deprecated]: syz.4.13109 (pid 18365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1509.959765][T18365] Use struct sctp_sack_info instead [ 1509.977295][T18365] sctp: [Deprecated]: syz.4.13109 (pid 18365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1509.977295][T18365] Use struct sctp_sack_info instead [ 1510.093484][T18366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1514.369461][T18358] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1514.539026][T18378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13111'. [ 1514.624771][T18381] xt_l2tp: v2 doesn't support IP mode [ 1514.814715][T18378] netlink: 'syz.1.13111': attribute type 30 has an invalid length. [ 1514.833906][T18378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13111'. [ 1514.925798][T18378] bond3: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1514.941859][T18392] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20004 [ 1514.949905][T18392] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1514.972096][T18378] bond3 (unregistering): Released all slaves [ 1515.263351][T18404] syzkaller0: entered promiscuous mode [ 1515.280355][T18404] syzkaller0: entered allmulticast mode [ 1515.320878][T18406] sctp: [Deprecated]: syz.1.13122 (pid 18406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1515.320878][T18406] Use struct sctp_sack_info instead [ 1515.338315][T18406] sctp: [Deprecated]: syz.1.13122 (pid 18406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1515.338315][T18406] Use struct sctp_sack_info instead [ 1515.358540][T18406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1515.609091][T18417] xt_hashlimit: size too large, truncated to 1048576 [ 1515.627167][T18417] xt_hashlimit: max too large, truncated to 1048576 [ 1515.793439][T18429] netlink: 'syz.3.13130': attribute type 1 has an invalid length. [ 1515.802654][T18433] veth0: entered promiscuous mode [ 1515.821913][T18433] veth0: left promiscuous mode [ 1515.850201][T18438] netlink: 'syz.0.13132': attribute type 1 has an invalid length. [ 1515.891659][T18440] veth5: entered allmulticast mode [ 1515.901221][T18440] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 1516.048115][T18451] syzkaller0: entered promiscuous mode [ 1516.057796][T18451] syzkaller0: entered allmulticast mode [ 1516.298106][T18455] netlink: 'syz.1.13138': attribute type 2 has an invalid length. [ 1516.445534][T18463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13141'. [ 1516.616552][T18473] tunl0: Caught tx_queue_len zero misconfig [ 1516.718536][T18475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13144'. [ 1516.827398][T18481] sctp: [Deprecated]: syz.3.13146 (pid 18481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1516.827398][T18481] Use struct sctp_sack_info instead [ 1516.876989][T18481] sctp: [Deprecated]: syz.3.13146 (pid 18481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1516.876989][T18481] Use struct sctp_sack_info instead [ 1516.948305][T18481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1517.035799][T18485] syzkaller0: entered promiscuous mode [ 1517.041978][T18485] syzkaller0: entered allmulticast mode [ 1517.352642][T18498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13154'. [ 1517.401642][T18500] netlink: 'syz.0.13155': attribute type 13 has an invalid length. [ 1517.564756][T18507] netlink: 'syz.4.13157': attribute type 1 has an invalid length. [ 1517.573156][T18507] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13157'. [ 1517.655474][T18504] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 1517.989672][T18525] Unsupported ieee802154 address type: 0 [ 1518.219559][T18534] syzkaller0: entered promiscuous mode [ 1518.225725][T18534] syzkaller0: entered allmulticast mode [ 1518.504339][T18540] netlink: 228 bytes leftover after parsing attributes in process `syz.1.13168'. [ 1518.579691][T18540] netlink: 'syz.1.13168': attribute type 17 has an invalid length. [ 1518.730650][T18548] sctp: [Deprecated]: syz.0.13170 (pid 18548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1518.730650][T18548] Use struct sctp_sack_info instead [ 1518.768006][T18548] sctp: [Deprecated]: syz.0.13170 (pid 18548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1518.768006][T18548] Use struct sctp_sack_info instead [ 1518.873339][T18550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1519.257944][T18537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1519.321800][T18537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1519.823591][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13172'. [ 1519.840866][T18078] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1519.849782][T18078] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.860073][T18078] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1519.921401][T18078] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.932832][T18078] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1519.941844][T18078] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.952321][T18078] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1519.966655][T18078] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.038962][T18580] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13180'. [ 1520.048745][T18580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13180'. [ 1520.056612][T18582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13181'. [ 1520.114453][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13181'. [ 1520.123610][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13181'. [ 1520.193901][T18590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13182'. [ 1520.759490][T18614] lo speed is unknown, defaulting to 1000 [ 1520.988810][T18637] netlink: 'syz.3.13197': attribute type 1 has an invalid length. [ 1521.044683][T18637] netlink: 88 bytes leftover after parsing attributes in process `syz.3.13197'. [ 1521.057420][T18637] netlink: 'syz.3.13197': attribute type 1 has an invalid length. [ 1521.066236][T18637] netlink: 634 bytes leftover after parsing attributes in process `syz.3.13197'. [ 1521.153285][T18621] lo: Caught tx_queue_len zero misconfig [ 1521.164353][T18621] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13193'. [ 1521.218077][T18637] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input15 [ 1521.808795][T18664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.862678][T18664] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1521.883780][T18664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1521.902436][T18664] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1521.950131][T18667] tipc: Enabling of bearer rejected, failed to enable media [ 1522.024834][T18119] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1522.088702][T18078] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1522.097925][T18078] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1522.161479][T18671] syzkaller0: entered promiscuous mode [ 1522.167234][T18671] syzkaller0: entered allmulticast mode [ 1522.209423][T18114] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1522.259218][T18114] bond3: active interface up! [ 1522.268624][T18078] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1522.277725][T18078] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1522.348943][T18678] team0: Mode changed to "activebackup" [ 1522.494545][T18682] netlink: 'syz.3.13206': attribute type 4 has an invalid length. [ 1522.582575][ T5628] Bluetooth: hci5: command 0x0406 tx timeout [ 1522.815808][T18697] syzkaller0: entered promiscuous mode [ 1522.822303][T18697] syzkaller0: entered allmulticast mode [ 1523.290215][T18722] lo speed is unknown, defaulting to 1000 [ 1523.353777][T18725] netlink: 192 bytes leftover after parsing attributes in process `syz.0.13217'. [ 1523.538516][T18727] lo speed is unknown, defaulting to 1000 [ 1523.845655][T18734] netlink: 'syz.2.13219': attribute type 7 has an invalid length. [ 1523.853572][T18734] netlink: 'syz.2.13219': attribute type 8 has an invalid length. [ 1525.645899][T18688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1525.999056][T18747] syzkaller0: entered promiscuous mode [ 1526.021197][T18747] syzkaller0: entered allmulticast mode [ 1526.340873][T18770] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1526.348601][T18778] __nla_validate_parse: 2 callbacks suppressed [ 1526.348621][T18778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13232'. [ 1528.555393][T18778] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1528.736848][T18791] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13237'. [ 1528.923210][T18804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13241'. [ 1529.007744][T18799] netlink: 180 bytes leftover after parsing attributes in process `syz.4.13240'. [ 1529.041323][T18811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13245'. [ 1529.069121][T18813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13246'. [ 1529.094252][T18813] netlink: 'syz.2.13246': attribute type 7 has an invalid length. [ 1529.102631][T18813] netlink: 'syz.2.13246': attribute type 8 has an invalid length. [ 1529.110454][T18813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13246'. [ 1529.126359][T18799] can: request_module (can-proto-4) failed. [ 1529.211397][T18819] syzkaller0: entered promiscuous mode [ 1529.217612][T18819] syzkaller0: entered allmulticast mode [ 1529.640207][T18821] syzkaller0: entered promiscuous mode [ 1529.652151][T18821] syzkaller0: entered allmulticast mode [ 1529.744555][T18830] netlink: 'syz.3.13252': attribute type 1 has an invalid length. [ 1529.789579][T18830] bond5: (slave bridge2): making interface the new active one [ 1529.801473][T18830] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 1529.994366][T18844] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1530.300015][T18869] tipc: Enabling of bearer rejected, failed to enable media [ 1530.359841][T18862] netlink: 'syz.0.13261': attribute type 13 has an invalid length. [ 1530.446329][T18843] infiniband uyz0: set down [ 1530.451179][T18843] infiniband uyz0: added bridge_slave_1 [ 1530.559589][T18843] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1530.586614][T18843] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1530.603972][T18843] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1530.629560][T18843] RDS/IB: uyz0: added [ 1530.634082][T18843] smc: adding ib device uyz0 with port count 1 [ 1530.641669][T18843] smc: ib device uyz0 port 1 has no pnetid [ 1530.819456][T18862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.828269][T18862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.644849][T18862] erspan0: left allmulticast mode [ 1531.711956][T18131] lo speed is unknown, defaulting to 1000 [ 1531.717758][T18131] syz0: Port: 1 Link DOWN [ 1531.740704][T17881] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1531.749768][T17881] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.765254][T17881] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1531.821805][T18894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1531.831781][T17881] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.831922][T18131] lo speed is unknown, defaulting to 1000 [ 1531.852579][T17881] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1531.861475][T17881] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.883098][T17881] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1531.906096][T17881] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.943722][T18899] syzkaller0: entered promiscuous mode [ 1531.949241][T18899] syzkaller0: entered allmulticast mode [ 1532.045803][T18898] lo speed is unknown, defaulting to 1000 [ 1532.062718][T18908] ip6erspan0: entered allmulticast mode [ 1532.486741][T18922] syzkaller0: entered promiscuous mode [ 1532.508661][T18922] syzkaller0: entered allmulticast mode [ 1532.601770][T18926] netlink: 116 bytes leftover after parsing attributes in process `syz.3.13277'. [ 1532.635001][T18928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13278'. [ 1532.644323][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13278'. [ 1532.692970][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13278'. [ 1532.712915][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13278'. [ 1533.786239][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13285'. [ 1533.819000][T18963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1534.044755][T18972] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.13288'. [ 1534.070576][T18972] netlink: 324 bytes leftover after parsing attributes in process `syz.3.13288'. [ 1534.082932][T18974] netlink: 'syz.4.13289': attribute type 1 has an invalid length. [ 1534.147850][T18976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13289'. [ 1534.196658][T18974] bond3: entered promiscuous mode [ 1534.204689][T18974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1534.220980][T18976] bond3: entered allmulticast mode [ 1534.297921][T18974] bond3: (slave bridge1): making interface the new active one [ 1534.305741][T18974] bridge1: entered promiscuous mode [ 1534.311341][T18974] bridge1: entered allmulticast mode [ 1534.319300][T18974] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1534.403196][T18984] netlink: 72 bytes leftover after parsing attributes in process `syz.4.13292'. [ 1534.647164][T18992] syzkaller0: entered promiscuous mode [ 1534.652938][T18992] syzkaller0: entered allmulticast mode [ 1534.776797][T18995] sctp: [Deprecated]: syz.4.13297 (pid 18995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1534.776797][T18995] Use struct sctp_sack_info instead [ 1534.805873][T18995] sctp: [Deprecated]: syz.4.13297 (pid 18995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1534.805873][T18995] Use struct sctp_sack_info instead [ 1534.851046][T18995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.993875][T19026] netlink: 'syz.0.13309': attribute type 32 has an invalid length. [ 1536.750204][T19052] FAULT_INJECTION: forcing a failure. [ 1536.750204][T19052] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.764696][T19052] CPU: 1 UID: 0 PID: 19052 Comm: syz.0.13319 Not tainted syzkaller #0 PREEMPT(full) [ 1536.764721][T19052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1536.764731][T19052] Call Trace: [ 1536.764739][T19052] [ 1536.764747][T19052] dump_stack_lvl+0xe8/0x150 [ 1536.764771][T19052] should_fail_ex+0x412/0x560 [ 1536.764798][T19052] should_failslab+0xa8/0x100 [ 1536.764823][T19052] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1536.764846][T19052] ? __alloc_skb+0x1d0/0x7d0 [ 1536.764867][T19052] ? __local_bh_enable_ip+0xd0/0x130 [ 1536.764888][T19052] __alloc_skb+0x1d0/0x7d0 [ 1536.764911][T19052] ? netlink_ack_tlv_len+0x78/0x210 [ 1536.764930][T19052] netlink_ack+0x146/0xa50 [ 1536.764944][T19052] ? kernel_text_address+0xa5/0xe0 [ 1536.764969][T19052] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1536.764990][T19052] ? arch_stack_walk+0xfb/0x150 [ 1536.765016][T19052] audit_receive+0x6af/0x2810 [ 1536.765036][T19052] ? stack_trace_save+0xa9/0x100 [ 1536.765068][T19052] ? __pfx_audit_receive+0x10/0x10 [ 1536.765086][T19052] ? __kasan_slab_alloc+0x6c/0x80 [ 1536.765113][T19052] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1536.765132][T19052] ? __alloc_skb+0x27d/0x7d0 [ 1536.765151][T19052] ? netlink_sendmsg+0x5d4/0xb40 [ 1536.765175][T19052] ? __lock_acquire+0x6b5/0x2cf0 [ 1536.765205][T19052] ? __netlink_lookup+0xc6/0x8b0 [ 1536.765232][T19052] ? netlink_deliver_tap+0x2e/0x1b0 [ 1536.765250][T19052] ? netlink_deliver_tap+0x2e/0x1b0 [ 1536.765272][T19052] ? netlink_deliver_tap+0x2e/0x1b0 [ 1536.765288][T19052] ? netlink_deliver_tap+0x2e/0x1b0 [ 1536.765308][T19052] netlink_unicast+0x75c/0x8e0 [ 1536.765342][T19052] netlink_sendmsg+0x813/0xb40 [ 1536.765368][T19052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.765389][T19052] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1536.765412][T19052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1536.765436][T19052] ____sys_sendmsg+0x972/0x9f0 [ 1536.765452][T19052] ? __might_fault+0xaf/0x130 [ 1536.765478][T19052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1536.765504][T19052] ? import_iovec+0x73/0xa0 [ 1536.765529][T19052] ___sys_sendmsg+0x2a5/0x360 [ 1536.765545][T19052] ? __lock_acquire+0x6b5/0x2cf0 [ 1536.765566][T19052] ? __pfx____sys_sendmsg+0x10/0x10 [ 1536.765617][T19052] ? __fget_files+0x2a/0x420 [ 1536.765635][T19052] ? __fget_files+0x3a0/0x420 [ 1536.765663][T19052] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1536.765682][T19052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1536.765708][T19052] ? __pfx_ksys_write+0x10/0x10 [ 1536.765737][T19052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.765755][T19052] do_syscall_64+0x15f/0xf80 [ 1536.765777][T19052] ? trace_irq_disable+0x3b/0x140 [ 1536.765799][T19052] ? clear_bhb_loop+0x40/0x90 [ 1536.765818][T19052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.765834][T19052] RIP: 0033:0x7fd5c3b9ce59 [ 1536.765851][T19052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.765864][T19052] RSP: 002b:00007fd5c4a49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1536.765882][T19052] RAX: ffffffffffffffda RBX: 00007fd5c3e15fa0 RCX: 00007fd5c3b9ce59 [ 1536.765893][T19052] RDX: 0000000000048000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1536.765904][T19052] RBP: 00007fd5c4a49090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.765914][T19052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1536.765923][T19052] R13: 00007fd5c3e16038 R14: 00007fd5c3e15fa0 R15: 00007ffe7a098908 [ 1536.765951][T19052] [ 1536.796955][T19055] tipc: Enabling of bearer rejected, failed to enable media [ 1536.844959][T19057] openvswitch: netlink: Flow key attr not present in new flow. [ 1537.369659][T19065] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1537.392693][T19065] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1537.404400][T19065] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 1537.441730][T19065] bond6: (slave vcan1): Error -95 calling set_mac_address [ 1537.466407][T19070] x_tables: duplicate underflow at hook 1 [ 1537.733793][T19079] __nla_validate_parse: 125 callbacks suppressed [ 1537.733811][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13329'. [ 1537.872796][T19090] netlink: 'syz.3.13331': attribute type 11 has an invalid length. [ 1537.911433][T19089] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16 [ 1538.089318][T19097] bond4: entered allmulticast mode [ 1538.144335][T19094] syzkaller0: entered promiscuous mode [ 1538.162778][T19094] syzkaller0: entered allmulticast mode [ 1538.215976][T19104] netlink: 'syz.3.13337': attribute type 12 has an invalid length. [ 1538.229580][T19104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13337'. [ 1538.259706][T19099] syzkaller0: entered promiscuous mode [ 1538.265402][T19099] syzkaller0: entered allmulticast mode [ 1538.272272][T19104] bond0: option primary_reselect: invalid value (22) [ 1538.280489][T19097] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1538.286609][T19097] syzkaller1: linktype set to 805 [ 1538.306056][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13336'. [ 1538.580158][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13342'. [ 1538.684703][T19127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13345'. [ 1538.722944][T19122] syzkaller0: entered promiscuous mode [ 1538.728456][T19122] syzkaller0: entered allmulticast mode [ 1538.758722][T19130] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13346'. [ 1538.988257][T19143] syzkaller0: entered promiscuous mode [ 1539.009723][T19143] syzkaller0: entered allmulticast mode [ 1539.320227][T19166] syzkaller0: entered promiscuous mode [ 1539.325745][T19166] syzkaller0: entered allmulticast mode [ 1540.305817][T19180] sctp: [Deprecated]: syz.2.13362 (pid 19180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1540.305817][T19180] Use struct sctp_sack_info instead [ 1540.323942][T19180] sctp: [Deprecated]: syz.2.13362 (pid 19180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1540.323942][T19180] Use struct sctp_sack_info instead [ 1540.394191][T19184] bond4: entered promiscuous mode [ 1540.400266][T19184] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1540.411330][T19180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1540.544946][T19198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1540.585702][T19200] tipc: Enabling of bearer rejected, failed to enable media [ 1540.630224][T19190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13366'. [ 1540.757853][T19209] syzkaller0: entered promiscuous mode [ 1540.763905][T19209] syzkaller0: entered allmulticast mode [ 1541.229507][T19230] bridge5: entered allmulticast mode [ 1541.236666][T19230] netlink: 'syz.0.13382': attribute type 1 has an invalid length. [ 1541.244594][T19230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1541.291311][T19230] netlink: 'syz.0.13382': attribute type 1 has an invalid length. [ 1541.299160][T19230] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13382'. [ 1541.347580][T19230] NCSI netlink: No device for ifindex 0 [ 1541.429133][T19233] sctp: [Deprecated]: syz.0.13384 (pid 19233) Use of int in max_burst socket option. [ 1541.429133][T19233] Use struct sctp_assoc_value instead [ 1541.538683][T19238] tipc: Enabling of bearer rejected, failed to enable media [ 1541.555088][T19238] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13385'. [ 1541.616831][T19246] syzkaller0: entered promiscuous mode [ 1541.622348][T19246] syzkaller0: entered allmulticast mode [ 1541.629534][T19247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13385'. [ 1541.783026][T19251] syzkaller0: entered promiscuous mode [ 1541.788536][T19251] syzkaller0: entered allmulticast mode [ 1542.775192][ T5628] Bluetooth: hci1: command 0x0405 tx timeout [ 1542.788219][T19292] __nla_validate_parse: 5 callbacks suppressed [ 1542.788236][T19292] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13403'. [ 1545.660872][ T912] page_pool_release_retry() stalled pool shutdown: id 178, 1 inflight 968 sec [ 1546.650097][T19272] lo speed is unknown, defaulting to 1000 [ 1546.658496][T19300] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13406'. [ 1546.668085][T19300] netlink: 47 bytes leftover after parsing attributes in process `syz.4.13406'. [ 1546.713056][T19300] netlink: 'syz.4.13406': attribute type 6 has an invalid length. [ 1546.720996][T19300] netlink: 'syz.4.13406': attribute type 6 has an invalid length. [ 1546.784515][T19300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1546.960194][T19310] bond3: option xmit_hash_policy: invalid value (10) [ 1547.005543][T19310] bond3 (unregistering): Released all slaves [ 1547.112872][T19321] netlink: 'syz.3.13410': attribute type 4 has an invalid length. [ 1547.138947][T19322] netlink: 'syz.3.13410': attribute type 4 has an invalid length. [ 1547.160537][T19321] netlink: 'syz.3.13410': attribute type 4 has an invalid length. [ 1547.190145][T19322] tipc: Enabled bearer , priority 0 [ 1547.214541][T19321] tipc: Enabling of bearer rejected, already enabled [ 1547.253335][T19322] syzkaller0: entered promiscuous mode [ 1547.258591][T19329] netlink: 84 bytes leftover after parsing attributes in process `syz.0.13413'. [ 1547.267959][T19329] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13413'. [ 1547.276998][T19329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13413'. [ 1547.281756][T19322] syzkaller0: entered allmulticast mode [ 1547.442320][T19335] netlink: 'syz.0.13415': attribute type 6 has an invalid length. [ 1547.453091][T19335] netlink: 232 bytes leftover after parsing attributes in process `syz.0.13415'. [ 1547.483597][T19321] tipc: Resetting bearer [ 1547.490975][T19335] netlink: 5252 bytes leftover after parsing attributes in process `syz.0.13415'. [ 1547.515286][T19338] netlink: 'syz.1.13416': attribute type 1 has an invalid length. [ 1547.573883][T19320] tipc: Resetting bearer [ 1547.611983][T19320] tipc: Disabling bearer [ 1547.792708][T19338] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1547.853855][T19344] bond3: (slave geneve3): making interface the new active one [ 1547.866263][T19344] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1547.897577][T19293] udevd[19293]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1548.023290][T19353] syzkaller0: entered promiscuous mode [ 1548.028812][T19353] syzkaller0: entered allmulticast mode [ 1548.098822][T19353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13417'. [ 1548.195374][T19366] 8021q: VLANs not supported on xfrm0 [ 1548.261812][T19371] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1548.300486][T19371] netlink: 136 bytes leftover after parsing attributes in process `syz.1.13421'. [ 1548.556034][T19371] netlink: 'syz.1.13421': attribute type 11 has an invalid length. [ 1548.589002][T19371] netlink: 'syz.1.13421': attribute type 4 has an invalid length. [ 1548.606836][T19386] x_tables: duplicate underflow at hook 1 [ 1548.611368][T19371] netlink: 199780 bytes leftover after parsing attributes in process `syz.1.13421'. [ 1549.062635][T19407] netlink: 'syz.0.13431': attribute type 1 has an invalid length. [ 1549.092376][T19409] lo speed is unknown, defaulting to 1000 [ 1549.160246][T19413] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13434'. [ 1549.293264][T19407] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1549.458356][T19411] veth7: entered allmulticast mode [ 1549.483605][T19411] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1549.517182][T19418] bond5 (unregistering): (slave veth7): Releasing active interface [ 1549.542931][T19418] bond5 (unregistering): Released all slaves [ 1550.058498][T19433] netlink: 774 bytes leftover after parsing attributes in process `syz.1.13439'. [ 1550.077633][T19433] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13439'. [ 1550.146713][T19436] netlink: 185388 bytes leftover after parsing attributes in process `syz.4.13441'. [ 1550.173053][T19439] netlink: 'syz.2.13440': attribute type 2 has an invalid length. [ 1550.367958][T19441] ip6tnl1: entered promiscuous mode [ 1550.713232][T19468] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 1550.738634][T19468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13451'. [ 1550.749808][T19468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13451'. [ 1550.945661][T19470] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 1550.973494][T19470] bond4 (unregistering): Released all slaves [ 1551.004491][T19489] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1551.104887][T19489] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1551.194115][T19489] bond5 (unregistering): Released all slaves [ 1551.311188][T19494] lo speed is unknown, defaulting to 1000 [ 1551.569143][T19506] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.13460'. [ 1551.929896][T19513] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 1552.629432][T19534] bond4: entered promiscuous mode [ 1552.638483][T19534] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1552.672357][T19536] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1552.684583][T19536] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1552.702202][T19536] bond4: (slave ip6gre1): Error -95 calling set_mac_address [ 1552.850738][T19547] syzkaller0: entered promiscuous mode [ 1552.858441][T19547] syzkaller0: entered allmulticast mode [ 1553.119288][T19550] __nla_validate_parse: 1 callbacks suppressed [ 1553.119306][T19550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13474'. [ 1553.146071][T19551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.155577][T19551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.168931][T19551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.297492][T19551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.312114][T19551] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1553.342669][ T7778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.349972][ T7778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.377080][ T7778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.384383][ T7778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.530589][T19562] ip6tnl0: Caught tx_queue_len zero misconfig [ 1553.625291][T19565] gtp0: entered allmulticast mode [ 1553.698667][T19565] 5nč: entered promiscuous mode [ 1553.930808][T19584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13483'. [ 1554.090758][T19589] syzkaller0: entered promiscuous mode [ 1554.095584][T19591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13485'. [ 1554.096260][T19589] syzkaller0: entered allmulticast mode [ 1554.577685][T19604] tipc: Enabling of bearer rejected, failed to enable media [ 1554.658696][T19609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13493'. [ 1554.830100][T19612] tipc: Failed to remove unknown binding: 66,0,0/1073741825:1573660139/1573660141 [ 1554.851277][T19612] tipc: Failed to remove unknown binding: 66,0,0/1073741825:1573660139/1573660140 [ 1554.877973][T19601] tipc: Failed to remove unknown binding: 66,0,0/1073741825:1573660139/1573660141 [ 1554.887744][T19601] tipc: Failed to remove unknown binding: 66,0,0/1073741825:1573660139/1573660140 [ 1554.999391][T19615] netlink: 'syz.2.13495': attribute type 1 has an invalid length. [ 1555.008114][T19615] netlink: 88 bytes leftover after parsing attributes in process `syz.2.13495'. [ 1555.023889][T19615] netlink: 658 bytes leftover after parsing attributes in process `syz.2.13495'. [ 1555.043153][T19615] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17 [ 1555.222614][T19618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13496'. [ 1555.267948][T19618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13496'. [ 1555.294453][T19618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13496'. [ 1555.428601][T19625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13499'. [ 1555.585117][T19633] FAULT_INJECTION: forcing a failure. [ 1555.585117][T19633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1555.598192][T19633] CPU: 1 UID: 0 PID: 19633 Comm: syz.1.13501 Not tainted syzkaller #0 PREEMPT(full) [ 1555.598215][T19633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1555.598225][T19633] Call Trace: [ 1555.598233][T19633] [ 1555.598240][T19633] dump_stack_lvl+0xe8/0x150 [ 1555.598265][T19633] should_fail_ex+0x412/0x560 [ 1555.598291][T19633] _copy_from_user+0x2d/0xb0 [ 1555.598314][T19633] ___sys_recvmsg+0x175/0x590 [ 1555.598330][T19633] ? get_pid_task+0x20/0x1f0 [ 1555.598349][T19633] ? get_pid_task+0x20/0x1f0 [ 1555.598371][T19633] ? __pfx____sys_recvmsg+0x10/0x10 [ 1555.598392][T19633] ? __fget_files+0x2a/0x420 [ 1555.598427][T19633] ? __fget_files+0x3a0/0x420 [ 1555.598456][T19633] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1555.598475][T19633] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1555.598502][T19633] ? __pfx_ksys_write+0x10/0x10 [ 1555.598531][T19633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.598549][T19633] do_syscall_64+0x15f/0xf80 [ 1555.598571][T19633] ? trace_irq_disable+0x3b/0x140 [ 1555.598594][T19633] ? clear_bhb_loop+0x40/0x90 [ 1555.598614][T19633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.598630][T19633] RIP: 0033:0x7faea7d9ce59 [ 1555.598647][T19633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1555.598661][T19633] RSP: 002b:00007faea8d13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1555.598680][T19633] RAX: ffffffffffffffda RBX: 00007faea8015fa0 RCX: 00007faea7d9ce59 [ 1555.598692][T19633] RDX: 0000000040000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1555.598703][T19633] RBP: 00007faea8d13090 R08: 0000000000000000 R09: 0000000000000000 [ 1555.598713][T19633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1555.598722][T19633] R13: 00007faea8016038 R14: 00007faea8015fa0 R15: 00007ffdbe21cfe8 [ 1555.598750][T19633] [ 1555.674054][T19642] FAULT_INJECTION: forcing a failure. [ 1555.674054][T19642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1555.917511][T19642] CPU: 1 UID: 0 PID: 19642 Comm: syz.2.13505 Not tainted syzkaller #0 PREEMPT(full) [ 1555.917535][T19642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1555.917546][T19642] Call Trace: [ 1555.917553][T19642] [ 1555.917560][T19642] dump_stack_lvl+0xe8/0x150 [ 1555.917583][T19642] should_fail_ex+0x412/0x560 [ 1555.917606][T19642] _copy_to_user+0x31/0xb0 [ 1555.917630][T19642] simple_read_from_buffer+0xe1/0x170 [ 1555.917652][T19642] proc_fail_nth_read+0x1bb/0x230 [ 1555.917673][T19642] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1555.917693][T19642] ? rw_verify_area+0x2a6/0x4d0 [ 1555.917710][T19642] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1555.917727][T19642] vfs_read+0x20c/0xa70 [ 1555.917751][T19642] ? __pfx___mutex_lock+0x10/0x10 [ 1555.917767][T19642] ? __pfx_vfs_read+0x10/0x10 [ 1555.917786][T19642] ? __fget_files+0x2a/0x420 [ 1555.917807][T19642] ? __fget_files+0x3a0/0x420 [ 1555.917823][T19642] ? __fget_files+0x2a/0x420 [ 1555.917848][T19642] ksys_read+0x150/0x270 [ 1555.917869][T19642] ? __pfx_ksys_read+0x10/0x10 [ 1555.917892][T19642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.917906][T19642] do_syscall_64+0x15f/0xf80 [ 1555.917925][T19642] ? trace_irq_disable+0x3b/0x140 [ 1555.917946][T19642] ? clear_bhb_loop+0x40/0x90 [ 1555.917967][T19642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.917982][T19642] RIP: 0033:0x7fab7535d68e [ 1555.917998][T19642] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1555.918010][T19642] RSP: 002b:00007fab76247fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1555.918038][T19642] RAX: ffffffffffffffda RBX: 00007fab762486c0 RCX: 00007fab7535d68e [ 1555.918049][T19642] RDX: 000000000000000f RSI: 00007fab762480a0 RDI: 0000000000000003 [ 1555.918058][T19642] RBP: 00007fab76248090 R08: 0000000000000000 R09: 0000000000000000 [ 1555.918067][T19642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1555.918076][T19642] R13: 00007fab75616038 R14: 00007fab75615fa0 R15: 00007ffdcad10ff8 [ 1555.918100][T19642] [ 1556.360395][T19659] sctp: [Deprecated]: syz.2.13509 (pid 19659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1556.360395][T19659] Use struct sctp_sack_info instead [ 1556.378800][T19659] sctp: [Deprecated]: syz.2.13509 (pid 19659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1556.378800][T19659] Use struct sctp_sack_info instead [ 1556.419337][T19659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1556.549403][T19673] netlink: 'syz.1.13513': attribute type 4 has an invalid length. [ 1556.566224][T19673] netlink: 'syz.1.13513': attribute type 4 has an invalid length. [ 1556.580348][T19673] netlink: 'syz.1.13513': attribute type 1 has an invalid length. [ 1556.858909][T19691] netlink: 'syz.1.13519': attribute type 1 has an invalid length. [ 1557.100564][T19700] lo speed is unknown, defaulting to 1000 [ 1557.152274][T19703] xt_limit: Overflow, try lower: 28676/2147483648 [ 1557.314507][T19706] tipc: Enabling of bearer rejected, failed to enable media [ 1557.429184][T19710] syzkaller0: entered promiscuous mode [ 1557.434694][T19710] syzkaller0: entered allmulticast mode [ 1557.676216][T19720] veth4: entered allmulticast mode [ 1558.335050][T19740] syzkaller0: entered promiscuous mode [ 1558.340565][T19740] syzkaller0: entered allmulticast mode [ 1558.415312][T19757] syzkaller0: entered promiscuous mode [ 1558.428867][T19757] syzkaller0: entered allmulticast mode [ 1558.436233][T19755] syzkaller0: entered promiscuous mode [ 1558.445525][T19755] syzkaller0: entered allmulticast mode [ 1558.518287][T19760] __nla_validate_parse: 10 callbacks suppressed [ 1558.518306][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13542'. [ 1558.621479][T19764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13543'. [ 1562.580695][T19774] tipc: Cannot configure node identity twice [ 1562.741397][T19790] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13547'. [ 1563.231386][T19822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13555'. [ 1563.314861][T19826] tipc: Enabling of bearer rejected, failed to enable media [ 1563.508769][T19834] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1563.544466][T19834] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1563.569358][T19834] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1563.625654][T19834] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1563.898402][T19856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13566'. [ 1564.108148][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13570'. [ 1564.117155][T19867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13570'. [ 1564.130019][T19867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13570'. [ 1564.159766][T19869] netlink: 'syz.1.13571': attribute type 12 has an invalid length. [ 1564.167703][T19869] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13571'. [ 1564.203456][T19867] syzkaller0: entered promiscuous mode [ 1564.221499][T19867] syzkaller0: entered allmulticast mode [ 1564.229903][T19867] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.13570'. [ 1564.317968][T19871] bridge0: left promiscuous mode [ 1564.323562][T19871] bridge0: left allmulticast mode [ 1564.335629][T19871] bond4: (slave bond0): speed changed to 0 on port 1 [ 1564.342492][T19871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.366098][T19871] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.375882][T19871] dummy0: left promiscuous mode [ 1564.383822][T19871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1564.435251][T19871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1564.450239][T19871] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1564.467557][T19871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1564.491073][T19871] veth1_vlan: left promiscuous mode [ 1564.498505][T19871] veth0_vlan: left promiscuous mode [ 1564.505530][T19871] veth0_vlan: entered promiscuous mode [ 1564.513225][T19871] veth1_vlan: entered promiscuous mode [ 1564.524913][T19871] veth1_macvtap: left promiscuous mode [ 1564.532230][T19871] veth0_macvtap: left promiscuous mode [ 1564.541055][T19871] veth0_macvtap: entered promiscuous mode [ 1564.548501][T19871] veth1_macvtap: entered promiscuous mode [ 1564.562754][T19871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1564.598039][T19871] bond2: left promiscuous mode [ 1564.608900][T19871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1564.631442][T19871] veth3: left promiscuous mode [ 1564.636254][T19871] veth3: left allmulticast mode [ 1564.646528][T19871] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1564.655136][T19871] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1564.665398][T19871] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1564.678116][T19871] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1564.688413][T19871] gre1: left promiscuous mode [ 1564.707530][T19871] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1564.751269][T18119] bond4: (slave bond0): link status up again after 0 ms [ 1564.778436][T19871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1564.814625][T19871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1564.822166][T18116] bond4: (slave bond0): link status up again after 0 ms [ 1564.838759][T19871] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1564.857327][T18078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.864599][T18078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.864727][T19884] netlink: 'syz.2.13575': attribute type 2 has an invalid length. [ 1564.879836][T18078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.887094][T18078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1564.916746][T18078] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 1564.924057][T18078] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 1564.940348][T18119] bond4: (slave bond0): link status up again after 0 ms [ 1564.964193][T18119] bond4: (slave bond0): link status up again after 0 ms [ 1564.994049][T18119] bond4: (slave bond0): link status up again after 0 ms [ 1564.996879][ T4270] syz1: Port: 1 Link ACTIVE [ 1565.002870][T18119] bond4: (slave bond0): link status definitely up, 20000 Mbps full duplex [ 1565.017833][T18119] bond4: active interface up! [ 1565.028560][T18117] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.037848][T18117] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.068319][T18114] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1565.078632][T18114] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1565.092877][T18114] bond2: active interface up! [ 1565.125496][T19888] veth1_to_team: Caught tx_queue_len zero misconfig [ 1565.139646][T19894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13578'. [ 1565.149178][T18112] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.157426][T18112] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.187601][T18112] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.195872][T18112] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.204199][T18112] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.212353][T18112] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.467265][T19904] lo speed is unknown, defaulting to 1000 [ 1565.871346][T19923] netlink: 'syz.2.13587': attribute type 2 has an invalid length. [ 1566.020274][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13591'. [ 1566.108252][T19934] tipc: Enabling of bearer rejected, failed to enable media [ 1566.527068][T19953] IPVS: set_ctl: invalid protocol: 0 172.20.20.60:20002 [ 1566.555282][T19957] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1566.775366][T19971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13603'. [ 1566.802984][T19969] ------------[ cut here ]------------ [ 1566.809330][T19969] !cfg80211_chandef_valid(chandef) [ 1566.809358][T19969] WARNING: net/wireless/chan.c:904 at cfg80211_chandef_dfs_required+0xe0c/0xed0, CPU#0: syz.3.13604/19969 [ 1566.826144][T19969] Modules linked in: [ 1566.834556][T19969] CPU: 0 UID: 0 PID: 19969 Comm: syz.3.13604 Not tainted syzkaller #0 PREEMPT(full) [ 1566.844166][T19969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1566.855099][T19969] RIP: 0010:cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 1566.861902][T19969] Code: de e8 58 de c0 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 09 da c0 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 3b f4 ff ff e8 f5 d9 c0 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 28 f4 ff ff e8 72 79 a5 00 89 d1 80 e1 [ 1566.882243][T19969] RSP: 0018:ffffc90004c976e0 EFLAGS: 00010287 [ 1566.888403][T19969] RAX: ffffffff8b04ea6b RBX: ffff8880764498e8 RCX: 0000000000080000 [ 1566.896464][T19969] RDX: ffffc9000ed04000 RSI: 00000000000005d7 RDI: 00000000000005d8 [ 1566.904510][T19969] RBP: ffffc90004c97870 R08: ffffffff8225a3ef R09: ffff8880b863f5e8 [ 1566.912488][T19969] R10: dffffc0000000000 R11: ffffed1012338558 R12: 0000000000000006 [ 1566.922245][T19969] R13: dffffc0000000000 R14: ffffc90004c979e0 R15: ffff888076448018 [ 1566.930591][T19969] FS: 00007ff286ba16c0(0000) GS:ffff88812527a000(0000) knlGS:0000000000000000 [ 1566.939822][T19969] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1566.946479][T19969] CR2: 00007fab755e8158 CR3: 00000000b0e10000 CR4: 00000000003526f0 [ 1566.954518][T19969] Call Trace: [ 1566.957788][T19969] [ 1566.960707][T19969] ? kvfree_call_rcu+0x9f/0x430 [ 1566.965655][T19969] ? ieee80211_free_chanctx+0x2dc/0x390 [ 1566.971221][T19969] ? __pfx_ieee80211_free_chanctx+0x10/0x10 [ 1566.977224][T19969] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 1566.983763][T19969] _ieee80211_link_use_channel+0x28c/0x860 [ 1566.989648][T19969] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 1566.996508][T19969] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 1567.002866][T19969] ieee80211_set_monitor_channel+0x6fd/0xa10 [ 1567.008894][T19969] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 1567.016300][T19969] cfg80211_set_monitor_channel+0x22d/0x5f0 [ 1567.022206][T19969] cfg80211_wext_siwfreq+0x717/0x850 [ 1567.027786][T19969] ? __mutex_lock+0x608/0x1550 [ 1567.032552][T19969] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 1567.038421][T19969] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 1567.044270][T19969] ioctl_standard_call+0xcb/0x1b0 [ 1567.049297][T19969] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 1567.055156][T19969] wext_ioctl_dispatch+0xee/0x410 [ 1567.060186][T19969] ? __pfx_ioctl_standard_call+0x10/0x10 [ 1567.065856][T19969] wext_handle_ioctl+0x10f/0x1d0 [ 1567.070793][T19969] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1567.076270][T19969] ? do_futex+0x333/0x420 [ 1567.080597][T19969] ? file_init_path+0x434/0x590 [ 1567.085542][T19969] sock_ioctl+0x159/0x7f0 [ 1567.089878][T19969] ? __pfx_sock_ioctl+0x10/0x10 [ 1567.094858][T19969] ? __fget_files+0x2a/0x420 [ 1567.099456][T19969] ? __fget_files+0x3a0/0x420 [ 1567.104209][T19969] ? __fget_files+0x2a/0x420 [ 1567.108813][T19969] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1567.113814][T19969] ? __pfx_sock_ioctl+0x10/0x10 [ 1567.118814][T19969] __se_sys_ioctl+0xfc/0x170 [ 1567.123474][T19969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.129607][T19969] do_syscall_64+0x15f/0xf80 [ 1567.134270][T19969] ? trace_irq_disable+0x3b/0x140 [ 1567.139304][T19969] ? clear_bhb_loop+0x40/0x90 [ 1567.144095][T19969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.149991][T19969] RIP: 0033:0x7ff285d9ce59 [ 1567.154494][T19969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.174411][T19969] RSP: 002b:00007ff286ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1567.182839][T19969] RAX: ffffffffffffffda RBX: 00007ff286015fa0 RCX: 00007ff285d9ce59 [ 1567.190925][T19969] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000003 [ 1567.198991][T19969] RBP: 00007ff285e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1567.207059][T19969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1567.215107][T19969] R13: 00007ff286016038 R14: 00007ff286015fa0 R15: 00007ffe43a3c7a8 [ 1567.223194][T19969] [ 1567.226416][T19969] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1567.233710][T19969] CPU: 0 UID: 0 PID: 19969 Comm: syz.3.13604 Not tainted syzkaller #0 PREEMPT(full) [ 1567.243168][T19969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1567.253214][T19969] Call Trace: [ 1567.256484][T19969] [ 1567.259401][T19969] vpanic+0x56c/0xa60 [ 1567.263391][T19969] ? __pfx__printk+0x10/0x10 [ 1567.267987][T19969] ? __pfx_vpanic+0x10/0x10 [ 1567.272485][T19969] ? is_bpf_text_address+0x292/0x2b0 [ 1567.277762][T19969] ? is_bpf_text_address+0x26/0x2b0 [ 1567.282960][T19969] panic+0xc5/0xd0 [ 1567.286674][T19969] ? __pfx_panic+0x10/0x10 [ 1567.291089][T19969] __warn+0x315/0x4c0 [ 1567.295055][T19969] ? cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 1567.301195][T19969] ? cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 1567.307346][T19969] __report_bug+0x29a/0x540 [ 1567.311844][T19969] ? cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 1567.317981][T19969] ? __pfx___report_bug+0x10/0x10 [ 1567.322994][T19969] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1567.328613][T19969] ? mac80211_hwsim_config+0x129/0xd30 [ 1567.334101][T19969] ? __pfx___mutex_lock+0x10/0x10 [ 1567.339128][T19969] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1567.345115][T19969] ? cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 1567.351269][T19969] report_bug+0x16a/0x220 [ 1567.355601][T19969] ? cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 1567.361743][T19969] ? cfg80211_chandef_dfs_required+0xe0e/0xed0 [ 1567.368485][T19969] handle_bug+0x9c/0x200 [ 1567.372715][T19969] exc_invalid_op+0x1a/0x50 [ 1567.377229][T19969] asm_exc_invalid_op+0x1a/0x20 [ 1567.382088][T19969] RIP: 0010:cfg80211_chandef_dfs_required+0xe0c/0xed0 [ 1567.388841][T19969] Code: de e8 58 de c0 f6 48 83 fb 3f 0f 87 aa 00 00 00 e8 09 da c0 f6 b8 01 00 00 00 89 d9 48 d3 e0 e9 3b f4 ff ff e8 f5 d9 c0 f6 90 <0f> 0b 90 b8 ea ff ff ff e9 28 f4 ff ff e8 72 79 a5 00 89 d1 80 e1 [ 1567.408517][T19969] RSP: 0018:ffffc90004c976e0 EFLAGS: 00010287 [ 1567.414568][T19969] RAX: ffffffff8b04ea6b RBX: ffff8880764498e8 RCX: 0000000000080000 [ 1567.422521][T19969] RDX: ffffc9000ed04000 RSI: 00000000000005d7 RDI: 00000000000005d8 [ 1567.430474][T19969] RBP: ffffc90004c97870 R08: ffffffff8225a3ef R09: ffff8880b863f5e8 [ 1567.438426][T19969] R10: dffffc0000000000 R11: ffffed1012338558 R12: 0000000000000006 [ 1567.446380][T19969] R13: dffffc0000000000 R14: ffffc90004c979e0 R15: ffff888076448018 [ 1567.454348][T19969] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 1567.459385][T19969] ? cfg80211_chandef_dfs_required+0xe0b/0xed0 [ 1567.465547][T19969] ? kvfree_call_rcu+0x9f/0x430 [ 1567.470406][T19969] ? ieee80211_free_chanctx+0x2dc/0x390 [ 1567.475966][T19969] ? __pfx_ieee80211_free_chanctx+0x10/0x10 [ 1567.481849][T19969] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 1567.488346][T19969] _ieee80211_link_use_channel+0x28c/0x860 [ 1567.494141][T19969] ? __pfx___ieee80211_link_release_channel+0x10/0x10 [ 1567.500893][T19969] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 1567.507224][T19969] ieee80211_set_monitor_channel+0x6fd/0xa10 [ 1567.513189][T19969] ? __pfx_ieee80211_set_monitor_channel+0x10/0x10 [ 1567.519694][T19969] cfg80211_set_monitor_channel+0x22d/0x5f0 [ 1567.525577][T19969] cfg80211_wext_siwfreq+0x717/0x850 [ 1567.530850][T19969] ? __mutex_lock+0x608/0x1550 [ 1567.535599][T19969] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 1567.541398][T19969] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 1567.547185][T19969] ioctl_standard_call+0xcb/0x1b0 [ 1567.552198][T19969] ? __pfx_cfg80211_wext_siwfreq+0x10/0x10 [ 1567.557983][T19969] wext_ioctl_dispatch+0xee/0x410 [ 1567.562992][T19969] ? __pfx_ioctl_standard_call+0x10/0x10 [ 1567.568611][T19969] wext_handle_ioctl+0x10f/0x1d0 [ 1567.573535][T19969] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1567.578980][T19969] ? do_futex+0x333/0x420 [ 1567.583308][T19969] ? file_init_path+0x434/0x590 [ 1567.588176][T19969] sock_ioctl+0x159/0x7f0 [ 1567.592509][T19969] ? __pfx_sock_ioctl+0x10/0x10 [ 1567.597364][T19969] ? __fget_files+0x2a/0x420 [ 1567.601944][T19969] ? __fget_files+0x3a0/0x420 [ 1567.606606][T19969] ? __fget_files+0x2a/0x420 [ 1567.611184][T19969] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1567.616113][T19969] ? __pfx_sock_ioctl+0x10/0x10 [ 1567.620950][T19969] __se_sys_ioctl+0xfc/0x170 [ 1567.625528][T19969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.631578][T19969] do_syscall_64+0x15f/0xf80 [ 1567.636159][T19969] ? trace_irq_disable+0x3b/0x140 [ 1567.641179][T19969] ? clear_bhb_loop+0x40/0x90 [ 1567.645841][T19969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.651734][T19969] RIP: 0033:0x7ff285d9ce59 [ 1567.656155][T19969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1567.675750][T19969] RSP: 002b:00007ff286ba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1567.684164][T19969] RAX: ffffffffffffffda RBX: 00007ff286015fa0 RCX: 00007ff285d9ce59 [ 1567.692121][T19969] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000003 [ 1567.700084][T19969] RBP: 00007ff285e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1567.708051][T19969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1567.716017][T19969] R13: 00007ff286016038 R14: 00007ff286015fa0 R15: 00007ffe43a3c7a8 [ 1567.724000][T19969] [ 1567.727602][T19969] Kernel Offset: disabled [ 1567.731920][T19969] Rebooting in 86400 seconds..