last executing test programs: 5.766049848s ago: executing program 3 (id=12865): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4116, 0x1014}], 0x1) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) (async) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) accept$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) write(r5, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) (async) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c010091aa00100013072abd7000fedbdf246401010200000000000000000000000020010000000000000000000000000001000000004e2101020a0000001d00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000200000000000000000000002ebd7000003500000200040050000000000000001c00040003004e244e200000fe80000000000000000000000000002d6000120072"], 0x16c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000000c0)={0x0, 'bridge0\x00', {0x4}, 0x2}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=ANY=[@ANYBLOB="b40000001d0001000000000000000000a100010074677231393240000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8020000e5fa1098c5cd4cba3062d5261277982c1ab534822fc1f4d1fc6ff2f089c614825691875eb8c5e0e80b6fe36e969efeb78fe66f4925aa7aed43f2e9b56b004e29c306571ad243490e6a0c52de6aaf94d88e70f908475a06eb3e000000"], 0xb4}}, 0x0) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a00ac1e0001000000000000000000000000e0000001000000000000000000000000000d9f"], 0x38}}, 0x40000) 5.488216213s ago: executing program 3 (id=12868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000070000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c08000340000000a20800044000000022050002000700000030000180070001006374000024000280080001400000000c05000300010000000800214000000012080002400000000e0900010073797a30"], 0x104}}, 0x0) 5.258319157s ago: executing program 3 (id=12871): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000120001000000000000000000ac141400000000000000000000000000000000000000000014000d002001000000e1ffffffffffffff0000000c0015000000000000000000"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x44085}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x6, 0x1, '\xfc\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4004) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000240)={0x77359400}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00') setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r4, 0x800) accept4(r4, 0x0, 0x0, 0x80000) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r7, 0x0, 0x17, &(0x7f0000000100)=0x3, 0x4) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0) pwritev(r8, &(0x7f0000001240)=[{&(0x7f0000000300)="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", 0x845}], 0x12, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) 4.712267919s ago: executing program 2 (id=12877): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRESHEX=r0], 0x48}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="19002dbd7000fcffffff1b000000180001801400020064756d6d7930"], 0x2c}}, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="02020000002dbd7000fddbdf25000000"], 0x10}}, 0x20000000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000180)={0xf800, "cfb2fd"}, 0x6) recvmsg$can_raw(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1}, 0xf0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000002c0)=0x54, &(0x7f0000000340)=0x4) unshare(0x6a040000) mmap(&(0x7f0000858000/0x400000)=nil, 0x400000, 0xe, 0x10, r1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000640)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="a0006d9f", @ANYRES16=r7, @ANYBLOB="00012bbd7000fbdbdf251e00000008000300", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRES32=r8, @ANYBLOB="0c000600030000000300000070002f80500003801c00038006000300feff00000600010003000000060001000100000005000200010000000c0005006108000000000000080004000600000008000100020000000c0005000300000000000000080001007f00000008000100ff0100000c0002000000000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000044}, 0x4004040) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a500000000e0a01030000000000000000030000033c0004800c00014026000000000000000c00014000000000000000010c000440000000000000089b0800024000000036d50a45491a1cd66deee7e3750d000c0004400000000000000005140000001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da", 0x2}], 0x1}, 0x20000001) recvmmsg(r9, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/193, 0xc1}], 0x1}, 0xffffffff}], 0x1, 0x40010003, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x4, 0x0, [0x4, 0x80, 0x1000, 0x5b, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) 4.097815539s ago: executing program 3 (id=12882): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@rand_addr=' \x01\x00', @in=@private=0xa010102, 0x4e20, 0x8, 0x4e23, 0x3ff, 0xa, 0x20, 0x20, 0x5e}, {0x48, 0x1, 0x2, 0x8, 0x1, 0x7, 0x5, 0x910}, {0xfffffffffffffff8, 0x0, 0x800, 0x3}, 0x6, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@multicast1, 0x4d6, 0x32}, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3505, 0x1, 0x2, 0x7, 0xfffff800, 0x7fff, 0x1}}, 0xe8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x8, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0e8}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) read$nci(0xffffffffffffffff, &(0x7f0000000340)=""/107, 0x6b) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x271d, 0x0, &(0x7f00000000c0)) 2.54550764s ago: executing program 2 (id=12896): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 2.521644625s ago: executing program 3 (id=12897): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pimreg1\x00', 0x0}) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x3) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r4, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r5 = socket$isdn(0x22, 0x3, 0x3) bind$isdn(r5, &(0x7f0000000380)={0x22, 0x3, 0xbd, 0x5, 0x1}, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x3, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffff8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x95) write$cgroup_subtree(r6, &(0x7f00000004c0)={[{0x2d, 'cpuset'}, {0x2d, 'net_prio'}, {0x2b, 'memory'}, {0x2b, 'rdma'}, {0x2d, 'memory'}]}, 0x28) r7 = accept4$unix(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000580)=0x6e, 0x80000) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f00000005c0)={0x4, 0x1, 0x0, 0x8, 0x2, 0x0, [{0xd24, 0x7, 0x0, '\x00', 0x2000}, {0x3, 0x3, 0x8e, '\x00', 0x81}]}) r8 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0)=0x10) sendmmsg$sock(r6, &(0x7f0000001300)=[{{&(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x4, 0x0, 0x3, 0x2, {0xa, 0x4e20, 0xf, @private0={0xfc, 0x0, '\x00', 0xed}, 0x8}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000780)="a26f2adde4e2c98877fa962c", 0xc}, {&(0x7f00000007c0)="c9462eb28fd56c06cad02623e8661c8e34a4b7014267f5e8b17a538fe073d5c81a8482266ea8295d06d771ca7b9ca1dfc879587c7078bf36815a83f63043560c40717c36e6f918693a2f939c779731b95493509632d90a4abad379f1d3", 0x5d}, {&(0x7f0000000840)="f3e8881128605da70e3b9d337b3dfbfe5a7bbf2a181edd15d45332e6940d2e69190fb6b626ab7ada68808aaae917519621888f7e52a20c0866aef79066bc1561600e966d9a03f703507c8835325f9e201a77ab58936248832be0a98f7d8f96bbf572838071fc3a62535131fc0119cd4405509f1a601924c9ab2a94acd66d703557c6dbae8e7c04660dc9255ff67d0ff85eae5e707c362a3d01ff9b24bed0f24e0ea584ee3d983de9e179b299a97b4c65d846de00c8e543d0089389ffb6751c0768456e90e81dba93eddc5f66a7b557012e16b4b2b27db6febc6febeafaab4511d0622e020753ea0088c972350ac4b6cd", 0xf0}, {&(0x7f0000000940)="597adcb4c25e181abd2f0f725628ee32300f6420b23087ae6613d61820a02ab917935cde6c35e39d11f6ad0ed350da6ecfe56565181dbb72a43f115be81923393b8543d528b7f710ab0ebe1e1cd3fa59b4c161084fdc94b4180f1506ef397811c9e05b09e28db58005c258d81dce97bc98a70a477cf6471c51aac51b343098fc499642d3f38b2df3006650636e5f3662419935218b3f05ee", 0x98}, {&(0x7f0000000a00)="d55bdf968d8c52004617362bd2045b6b782da9bf78684930d51302861bd9d8b1e601fdc84c618e9b5ebdf922a5d4c243878ea37a29ee2c04e2179dd2af0176b2623c22933729c59a21b3a867f704075a1315c16329d4d854b11863ae18e2ae248d51b33f8d0be7ea1d7378835f9f848b217f133d43272fe6e37e93853b03244b9da6fae0f07498054dd12d83178fd9e99f33a4235028c0bcbae443a6ae18ae988cd74da957de48a59ce773a0b2a2e7961e9b59965a1f349dad10574a938742407872af", 0xc3}, {&(0x7f0000000b00)="8ecbacc222558688e44806f9d8c18a39293d03171d2ae9fc43bd5633988ec1d4b684201bd0282db15fd92e3443e64e23f4101c3c7315d7dc17b7e785f6eeb4b4e4a63e873a369655a45224356a7603278f49049693be610463f98b93a554180bcb92b301f3ac1599696f6ddc748048be5dc8fdb10f2b1ea7ee8f878cde4395890751ce8e42327e856fe6e8b9", 0x8c}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)="012f7dcec6ed81165272c320d3a50b0292b217ffd2d6b2a0739cf7382dcba424d4feed2a1c081ad0f1fac6f23d0c0c72b7eb121c85f178405306ec6971d89252983bae8ceabf4531eace4959d503a576bb76542f90a8c4f3aa5d3a7bab5e3233a625b0e5d5bc669d632d2cf1f0d4fce9600c287207c397b496a161e254a0f1ae7ddc49d1bb995efd69a72492d81d9608aa38fbba3ce0a95290a70e075ea63a1c9d3dd742cc6dc2bac148587d22d366ca39d33483c0e69b35d4ba8050a27515ecf51a1bef4ea66aab425e", 0xca}, {&(0x7f0000000d00)="e382992c914c13c4245c3b165a2a61edbf16120eaa4810fec05e85a39d7471cade0031bb88de022b85f751fde7c240842fbf28dd0d94301abb494442c84f8f", 0x3f}], 0x9, &(0x7f0000000e00)=[@txtime={{0x18, 0x1, 0x3d, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x48}}, {{&(0x7f0000000e80)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000f00)="2192ffde4ba15f9475efe06a10ef8a55bdc11efba4da7c759924923673b40641a2a690f2195846ac31722eae58578e1f256d113fcd52445d9dc886934950a61ea80f845948881d766a70191fbbdf68f39164752b0e355b90815157eca53e80aa6061619583fe300dca75ba99da50eceedfa9d3ea783629dd5065e5a64cd60310de89e4b404e0561adeb29d577113da901ec80b032613a884de11dd3140c1ae1870a27733ee71a51b1f38b5692185b04abc361007e1b36eaee8eb36a344362dded376c15d998db9e784c394beef", 0xcd}, {&(0x7f0000001000)="9eb5df423ddfd7f4d576f568d5feb017442a85bf0e6e7aac3e52b71addcb8374f6bc54351ae48dea50494754af89e2", 0x2f}, {&(0x7f0000001040)="cc421af67516f1ad02f68464b3f1f84039ed6ed32e3dd80a79e8bbdf7ecc873c478de28d947f73dbea380074e3840f689312096cca09cd051739b1ea0aa61ff843c4df40ee3c95ca932ab71d4e9349", 0x4f}, {&(0x7f00000010c0)="2a3a82e368a87c269173cb7a0f1656ee6c623b47f9f22ae93f3e792f374a21a6c66ecc7a679f79600f95c7411d705297dd22936458fcc418d9f2fbb4f5b4464b52670d820cce879940d11f0302258ba2b8bdb40a6732b1cfdfbe9ef8ea2b3cd6305718c9adf8564b71cbbeac04f816b95a725a7cb5469270c0e17405219fe484185bd51264a797fb8928f1a2b25f9c7a78119a574578ec0a54ca18cc0692d1", 0x9f}, {&(0x7f0000001180)="cc28287e3639b30a5dd088bae0b171303eb84c3d095d66be342b193f0f2ac8bd94ea87bb8b022840ed92f424c5313f6cbaf07e5c39391198ed13fda2f890d12456e30efd6fb224e1ab3ed4e289ec0c4e", 0x50}], 0x5, &(0x7f0000001280)=[@mark={{0x14, 0x1, 0x24, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0xb}}, @mark={{0x14, 0x1, 0x24, 0x30d}}], 0x48}}], 0x2, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f0000003a40)={0xa, &(0x7f0000003900)=[{0x7, 0x1000, &(0x7f0000001380)="289d9d467f1bd5c73d3aff0c1bfdec964ed1b79eb5ecae2faf1fe92280302cdf8f0d688011a4c37a0e8fd36fdd78f326ed4379a8c5b16778519ad8134e365cbe1e570d6069fe5a4bc1bfd46065e23f6891309c5eb99e55d8e38ff08350abe29bedde47c3f1528f0554e8646e76b3c501fe080e63b80f6bbe62c38d2196786823a92dcc03e3886e7dc5bf620f6bec60dde757bf6454190698c2c265e0df27a382e14d94949d07a2da9da9b881a418ad1c7a7a2096708b48d36702101761906773c40e37c2b0313e826106fe4bd19436c5184c7da856a2fa2917a4d19a38b8468daad277fdd0c192a53bbdc2d398a20082250c5edf8be4b05f3611376ec7a7024d31ce6d94e851c682bbf4895d684baf56c4291280ca8f8469da46a7ca16e80204cfffbcc144d4e4f2f48f60d85e16fbc009472bb7145a69dc1938c956524621704c7fb74523d5c7be66bdfc135a482886a75d96868fa0497bf2882da0dbcd82b8c8a1c6639fd70fa870c0b183e8a9a8a6b4c7d14377e707d650a65072f182824d9a3fda2e66bb35f6611b80422bfdaa19f289eb6afbcdb4aa53f6177bd919e5b62959237e1059121c521c35c05c946e36f3a12e0999bea6875eb6048d9408c0441703a2123923ebe44ee014aa6ea708547e19d9508eb6c40f73cc56cb74f9126cffcb57db78de5cdbdb89d5105285f650eb1190ab29ea01a2d0037a56bd205d8c854e4c4b7280087690767ef15f45033b8643675aa8e5f3be138c18df4076491e08e90abebf9f710d55e6940fc75c3f25f2eac73c051dcd87be5211102cde4582ba35e116273aa30c405ac2984e269034fd629b80ce5e03d9b92fa6d4e7c6d4512445a315a2646886b6f295499ec763d18a80407b4f4d07bfc75ae332b4148838b31c47e2e83b62156624152debe5a96f9014e89fdfce338690392ece7887bbc97100ea55685518766a27577d5e198177e7c5b7dd1d6631f5ab42a0856c3f305b153b64205c29c3fb6fc3257b415909be4d26675b22a4e14ea7dc02ab23d6cab2814a1cbcd9fd3389cfd5dcc2b7d5d6fac4bf2fabf47e771f9d4169b437f607d79d80a52db2cbc59f4c88851f6f6b3cd806a5e4bdd7ba547079a18ddf81c7b9c74abe05178ce66855c412d8ea73773c616b86916160bac989b22780cdc80deae9f769e897fd97c309458125aab32c606b8f18156dfbd899d91e77c9893f5073c2036bf784d195e1becd428c0e20971c987a37c66ea526cd42cd5dbcab31a1cc33d0464284503440fb4e27324148b0d4927fdfd45b3c51177b4e2f7b68740d55f5ef47590b74a78c9a448d4c8916a10e6327078679f5b2d00bfe98c7324be0d14a18ad2857b52c0ea2b55dc6882f14e5e422e67fdc0863ff14a1bf3616fec3a6a4fd2754ce17579b4269271e2da8cef0bd3c6db517898ea88780e650b6db9c8cff53e83e4004079ac93cd301c648a62cfb78cc893fec5952235550151a282faf54dca9b81ee0c29ea2508d4cfb868a1b37e0230f93cd50f5dc211bdd4ce386e43b2cc2610a40bd95a5128737d352be5dd5fa88141182ff3a930cc0d8e3ca11b9e5b9db6487ee044e2a509c6928ce428cfa056ac59f6ac553f54be621cd8569b5248185f5850e17342329626c830870c6bf1e978347a21ebcfe4e60385e1f8e338fc761f6fb95df5d57d610c8c98e054153588ac8286a778045c9eb62344feaf233a8cb1d28de5e3887fd93e166faafb25cca592978a5bcebd5fc988f7a9db84c99006ac867186a796539b6ed22fca73337b9e6c6349c4bde2b7b97f697b5649762bd26c21e6da20412afd764aecf5c1473c50bc55ba636fc460cdd596d0579014236ddece568af54c2e77acc577331eefd7a4305dac2c110467e52396fd2513d9c82fde0e89101dac4b2fedd9521ba80a8fb5c6d5688b7dd33e67c3b6fc95a95fb55a0b6c7dd479e861b92df484e07e9bf8b9e993b424274c7cbdd7cebef870ad6b80a825186d31a180723d09544c1cb21ab13e6553fd7a0e64baa303491f25abe28062f80de65270180730aeb8b80f9c2a8ddcff1d42fb97ccf9f9a071a02c745be4f0f99bd4b364d8855fa82cb6c836c6a6e39c24faca106e4ba3f1307c6e282a20cdd79ade5b83afd2edad82b724acc78d4c605b82fe6c795b41f622f519c227f12f13adb28e523b9c8210d38c4c7be69449fb8d03ead02aa7709af8fa1a62c21ed637b87b5d8b2a3d2658882ea5d2428b5b9f44867c4f5821e91ca1a1ad6ec24cf111d325d047a6e9d80e13dc30f790a3714697639895aab03b4b931aebad490399d725d23811906e7428415f5560dc7dfdfa220306bf4d731ac0778fe5bc56944bc79fee1e4c55518d903760bbfebfac79e4fa27baf3c34e570b41b28fdf8e40c1d2612d47cb36d827d82f3efc855473d17b18019f834c15957d5fc4466b29e0c64bdf522590a1838c8684aa6fcccaf84ef795f10418133a9237fec809104f25ff347da83d0cb68513d4783cd86001a2553809869e4069b358dfa665f01122e6ed05ce51587bcd85d7ead6771a4f5ad473a5bb25b6eaf0e1bfc71f82bf76f89866d7e1709c5ab968cdd035e41fd71864a660838738bd44b334d0241cf835e8ff11dd15ec1cdfeac70408d714d518fd2ea03ad6910897f1264343646d525cda0cd56820c7b4b383110b2841545217fe0569444a85a698df65f5547fd17378ceab4c4475274f2526fa388203967fbd5096f1e7f3a0f2762188e87ac54b3a841e8dab02f517c40613a127a926e9bd1f8555263a6deef08632fa9f246dd88ea1ef5fd04f4f91e9f14c6a1a2a5dce604f2513747a7ff69ea25e79524b8f0557db5d732d6754c792948a5043e6741b8a23c18d9b5321f7b691b759886cf39de8cae074aa632e5bf6b647aa521197a6021a9effe5fa58b9f92575b726598b02eb66245bce1f7a6e8a9f605089ec7dd7b9862ddc349bc2ab810a965d59fe4ca41c4a07d63c413eef0ae8803250b78758b9bfc3355f6d501448962b2cbd36fdf0e6fd0a2c324dfd64e33434833726dfb0d948f11408626c0ba7ef6af3ac04125bc72426d43d11cf9800c0d5f5ce8d7325b3c6042a4a80daf176a7570006da33a10531fa51a8c51dd3f8995ff9970c56f642db279fd442769dbd6ec64efcbac4029706232f2c4c1ca5f090e4a722d083c3396b2fdd49f24246412764673a81aa438ac6e360eb14688e42f3f3dc1989ac3b041777d758278f1fcb55d2e16b859903eb0864935ffc7079c2ed79ef31b79be0134d3ec1efc264bdef32cbed17a1e5ee112c0b554bb55c7e5a9aa8f23dbb03facfb66e634364008e869dc9f28888b486e808ac1d10b233ffa8378fba31d23b25042dfc5d1e35c7dd2f749be901f72d7769dca6b04b1dceb890162c030793be183031d18dc1fd63a45fe425e44a46a98f37d1e157ebe9d30866514828d3e1f83222df88dd44c099084545841ac5f29a6b6b9cb52607607ce7d1516e6b18edef08c9f260aa8c8f56167bf9cfa34d0b69b9531cd80cf7f50a3b41308fc1673e1f162a950b9c6366d1b34ecff6e9fb92b2074c08166c11cf29917b78119cf94e281a00eb5dd558dec55af4747cec56ded4d6bf22a522ea5d3f4325df06fa8a827f5613705d8addcddb710ff5e80903af801a92029d0f013f545eaf3bace6077570463d364f7fdfbbbbfb20b9140b3dccc05bc62d298bcaa83ba31310fe1de90c943eaab986377042b9ea916f911817256013eff492a6c04c91be83772efdfaa9ad2f91f8dc8cba93d7b7de05dd526c9296a97e648d9fad4c6bfe43b034bfd0c82e630555be25f3ae9554030cbea2271086048c2ab5c52e73afa3e0c587d4c24d4b542b2ec214835774c58e0c7e1b9216dec605d42ea2f879e4495aa07cf6da1cbc42f24420d06f6400a21abc342bd58989e64a516948be32fed28414c5c5676ec865cd502250fcecb09038d28828672cef2d5c0b3cf6aa66b2bdf4546e03f8bdd517a1e6b2796550eaecb1ec2e03a54e95065c469f89d6ea63dc11e4ad0ae98772b985b1dfe7015385a5861392e777a1c8fb0d10a72a943839feef14852d84d9f7d4734df481a349c7f708f5f2599382008f371f5ce633f0cc7cd81b4ed2dfa30583511eb6826934fa80f15f54369fe087be5b9d5e18420702225287081b1d608d665fecc7d103bddae28c0db2bd38855f167bb172ced837ae4d9b92b6e07452359a328887d40ae640df288cbe89dbffc4a530c1df0d22520014dbba0f85bf402f1ef7e761f0906c2e342d8094c74d73abf414d3ac1cca427c670362e5081dcdcbbcc5d32eae19573b4428082f8bb801da2402827639c179d481e1a73d91165635b92fcca5c976008d2ea7b3f7bb0f6267283489f3ba7e6f8c3c2d31bd9541c464cf9b67d302e0a8ada2ac18de98adab9eceb19c2de1a62af5011da7a08c259fcbc9e65af5f00959933e635c00ec0c59b0b6f71870eedee29cedd61ff07cdc12d8240f94aa2ab41f61cc72c01452725fcd9785fe2dc7c1cd93a9bc9e356bbc1026b4f4ab1d2dc3fdf232db768235d7edcc5393797892793f50fdf37a1b9bb9dcc3f9c001f8e30182223fad3cbace05e466158ec52f5810aca4d456477aa933892f56ae0d5e9990fa09ee1aa90c6c1845e9ad7385870f3cfc5a61f46230658f6be6a149c2f9afcb5f968f63b2050c2893d247d77ba84d21c8fb2c19afecf1d8f355f552c4970981363f629e6fb2dfa7f51c4b8d4e6f9e436a49d7df14bad1c7cba5597c555a532e8f11a6e8516d932edbaabf1104b08135ef8b31c761de360766015c1ee3ed1ade66cb3dd395d017b904cd27c513519056bc078782d16ff999d17162ada991d63fb9df4ed9f413a5cb7129346aaf1e711517eb73b11fdb0de9f519435965d52f2b476319cd5f85ad1d750b33d59bc5a165fdfcd1576094171fdfb23fa187fb2bec312659e3e5c3bf1dca5c0b191ce82ce3de0efa4aec0f8a611b77c7344557988d1b2da623aa8e1a89bb477af3fc159090a32c6c6512c419dca5bc498a4b568abd17ded67fa71f68fade725262cc91d1d7699d32122a92795e5e3e04d06f5fa333729823b8c839b8f1ada886c731d1c95b915b1b1c9de5721fc7041422ef4f0ffa61ae775863dbf85563bfca3d287214959af61509dd697b50ea8860824fb2c9d87123a339e6ed8647d19a13ee951dae84b2f8acd51136e66dfecdece47adcd790d3eaaf4b8a8c7f6bf109a5ec91641045cbe60c809799556a3030b49c3da20f19b2ba878c8fb878a978b3cadf77478b5a204880b17debab3cd94ef19ecb8bdefb092c603d584ca060d086a9481276da0e892efc69d462afc1f5ee5b9fb347ac3c459a71ca6f4e81ea3eb30dc5521d196610c4ea4459164a2ab0703c160129d99e82d5f7d2f7589bf798f94fb2f2edcfba1e05d2509b42d935ced842545bbfa363f9a94a6ecce8a86dc473bcd9ffb7704fe846ee6b23716d4210f4468415cb72b3657f65c41909fdc809647799a9fe7c0c44d392d998d96b643c15099d36c83d743c1a69c70ee9820f23326fec3a9cd482d39d4d5316e8c689add6ecd8859eaee4c415870c97e0dedb8a3a4b3b54091031eabbc9b3f65c543b115a760b46f4829f5762de6dee2ab82104ef51c94ccee7fe94e481e96ac5bfeebad4d2becc9225f2155e1c16818594b00a011404f06be28af280bf319d51e671e2433452e9e8a683edd7f8f08d7a3e20eb2a590abe245cb427c94b91957d2886f3720c639a713850c93a8239ca0623bf35f455c7ebb"}, {0x1, 0x7b, &(0x7f0000002380)="e1eca00e077e9b8245a60a391c9e16f4c78937162f3f4267e5759b3d59ba8022198448b7d8e6a98f94e0b28899bf83299b65c25efd1e4888832d6937442fec2e034bb83db2b5349f8f1d449e68e87d62f08af97017e3c84598847e04d2802df3bddd0472af756059cdfda6422249e1eba4efa303fef2224e20a00a", 0x1}, {0xb, 0x1000, &(0x7f0000002400)="adb979e7d6b9a1d856c6cbbc7598b92b96571917c16976922482e68d6f10d9178ceb377cc7b16d8fab2233d4d77f3837de6f58ee1c80cc67591dc39ce1cbdd77b882fd5b6fa2e7279ea589099e2e46e61afb686bccd4e1f7eaf55cb4a1e26913abe5183bb25db58a949ebf01565430d0e27832153baad8903eb9185a5177f48f25310bd4e982d433fdce1ce2ad42c5681fd69a4a6e8b4e90be4be637500318876d350fa1f4afe655057c2c3af3368bba8b5b1f95c7344eefbd7a4dbd1143a6f9cc405e1a0bfeec999bd8bfe9cd237931228e2d395c27ca9404becf96d01e60c53f9f1f286ac2db89e19627976fa11fb6868b8b3da2d026fbfa5a34b2eefc21a1a57280728f6604865833bad16fb52ddecf478ce66badfd637ef237b955968aed51951ac3e50997b066fab4551ad7aab7865a749166b6feaee71cecb1e2c438dcdc91249880209f7824f55c2862247cf31f19376da398985d5585836bb4213e94db379034594bbe303f098c09109fcd1661d7d1e15d127e0b6c5607d85ba154d0e123c738d4645a019b32d3ed79b99519c26a5fa95f51c0b1b28dd6f4858f51780daf817c8f3acdcb2577653d09d87250a8346fb7b479bb79fd2818cd9d2f29ebffe8dadbbec5ad04329402bea598fe438379bc4006ac0cf417365b048fd75c95d03982f5c2943df9d34726b40b6c5cba7fbfc239adb37ab3708b25bb77222ab8750ab526a3642e231942e3b7e0583465d091a184bd48a3b73c8cd34aefb35496c64ca97d70641e15464638cf3dd39a5d6d7e88d8a0ea7c4625c6538153c019cd00674518800ab9fca10a6a0c52ec2232c2af39cbd8b93ea59967ce5b137ea42aac99010e264570ee242142f8046e4cd5ebf54e519ed0dde3b22697fb19eab75a0299539893cba12a2e9f2bde5893d9323f3911e4b9a0ccb41e5ecfb4b956314e9bbfc6ce4c46795f573c967522cb766b73761a4d517132b8c1822c061f72ec1e35c06f22146a045018bd2a6f21cdff0c6331fe15869755ebbe4bef53359a2724748e4ea5c2dbdf0ac23419084755407b6c6a83f1801124fc45b97e76b824f3c9f08f60b6e893087f309dc619f203dcb514959f7c5af154ec9d6700f5fb865200a62facac82aae13e8ffb75a06e68e57724f48606a43af923d316dd08ee9e98dafd8da7f29a7b735edd4d5ec3237277a0588ba5e8e9a605b457d5bd5909738ec8a44322c831dd3f96d954383e11415d7371387f6cbc24a8efe15bda978f8e5b9e6a06b8345b358043dd667bb2d2c4a13db5762aba4f917988461a510da3916fb5c464d292045818f0aa7b8731d9364a5067d32c6967e5a3cfe5daa74b96616051a304ab74990fa171c24d8b3ca6ed884df506a2cd34927570a720968510769de12f2b6ad27ae098f01e9139680dcab3e98fd338adf7838d919899299f9898cd4d2bede7132b4edd4a74aaf7874e2a749bfd5f471530a40c06a8496a63481cefdc9eee705d4207f587809f25a58df9c9d57a626fb2588f9ef975ea000578cafeb5b0a7e9499ae233cc6bf9cae8754a591899c0c654a6152fe4e90309d6e64d2becaa0eb2484d18ca1ff63a8d9db13dd95e5a46c7df10d5947b23ac9f27f265d724c01ab6efd1db39ee36192a186a29ecc91df3de581ed87ca50a31e8ce73ec91a2a5fb8fabc4098e1b93b027a3fac5c33264fe2fab4b42fdb25778d79bb07e60f6e968e253afd8d3c7f027d3acb9e3374c46f1564a4476f353985a48a5265d488be7499f3698d5bda40fd2ffef18e9a9dd1a400f23734695b74fed46f3bf3e194fa955a284f371e3e4ce2f0e4b6a0e0441c4453b39845d069ecca0b016fa3a48a95c6d815b8034f425c4d2b88c304728530d9c04f6f497f3b4d270f35a3fb51d3e63c808318e379a602d8ff3475ab8466a2034986a5abfde7986e96f830c681449a7fa76aee8ae946081af1cfbdac2033f824a8b0c39a1046786f62f8823033e7f8d06f34a8af1142477984d0d90d7dcfc1847215a29cafe0d04132219b60203e956c4e679d4913659f268f50c41ea8dea2e4ae47852cabde5f0500a3016888e677586c660888bd9d60790b7e8dc0df2d12f68d59e7758c7b423cbbe623a1581a252ff25b17fc4bad1ba140c1b69c89bfe011203eec7125e03be60dfa280889f6e42edd3147b8c363f33d71e2029098f8022d6bf096a9740c8bf767aa5adcb60a7456fb9d44925cfc8ec58dd560482883eb0ff3ab6eef5a49b455a57c902ce29577e776f7ed78d8811450cd80025f29fac129b76ffb51cc932fa562e8cdf280672580847c4b8380953247d71bdad810411a8ee10a752f4b43da9eb126517c99ea12ef3a8cd142f298507ab9cbd82edd9b8e2fdb94bd928eb890f789ec6d88f8d8da30190bb3c5d966906cffb97630f1b9da91d198c8e04751f5dfb3fdb596cd738f8e09331901ce9b41f7dedbb6ef0e6e8ae3c66d7351d07fc83a6b7a94eb331b3ece658a67ab146fdce4ee3288c27de9e963057448afc6ac402a3e27f07fb6a40f990bdc8f8562df1b4e603d96843ba036c72991e57783e8eb80a72cf9e890078e9052a6ee13d5f31ef92223488e517a7999bb9fe4b3c79672335fd04b44d0e6f875035d28bab9ab46d444970b3abac43988e9ae2c46c45d7ff8cff973e3e414802b42069709801976208a2999be369cab79441cc21bed7d6f3d4946bf7f62a617f2a4a90db4719780f617742ac401cac3e32ea9d6407e3fcf5fb06db72a02c3c80eb2f47837389181902bff87e1ffaaec13c6cea7b1bd71d53765308007759c39820cb013b2264f7ce79f7199d5dac598283ecccd395846faa4f0611bfac7074eea186f1c949427e95d1b348802ab04afa0e40817078be4b10f1679a2b901035637ca92cd5c0565d2df8af246995e5998bdd090f93b53b1e41be171a61f6ab308a33d222a9304f451e6ff34edc915b30e1bea4a2c6a9f282fcaef55c4a0a876aa6be4d39c3050d347b2f5066cc504b0f818b3ffde5e9ae58144de6c9f85219ee316ba3156efbab79ae1ead28a1cdbf641fc1be8a01b161c00ddcad5064fb8baf3a71698af2f187c32ed12b98ee7f35db60b9e1398680e35fd3672b7911d6979b23aeb1c12bec192908cefb2cce124c3ed8f7eae4644da6836f478f9f20859152b609002423846efb9ac434008a048902b2a8c71ef6ef5f0de2e0de0fe23cffdb4c2b5001fcfc1b8b1b460d88ff98655372a7ed6019b4d351f633988bd70eb8544c8ac97ddf07e2c51b0c89caaa472dba527d0937304bdfb3586cd3099140cddd791e0e9a2c7c695b9c2e7a850b48df596cf10b083fb12dd3ecd61841020e4448163a651e530da6c1d0dfd7818328a91e9afe03d7362dca10d85eaf5862379144a03f53375312db623f18264f0db3568560ca8afa8ead89648321ed4cb2a146a96a4930a0c861e25153301136357ca2244af470b4c76c58aaf82cd5e0e5fcefbc2b968c6ce4203551a31dd7de25bd192f2abe90762e70c418b608653a6b0f5a4ff3f9615b7d65e5088c12e12a838a5049e6f8d522e2fa5b62d02e302cf7b465082dfc39a36610686f6f5a238b4fffe83e0d36c8b508e0f81186222280282bd5e63ea1ef70d4a3cded54b62c17aad1bc7990b8754498b624353c6e158942030ac6db1e7f445a9542ae2d508571663d9a506166ebe22fb0ec14aba24039327bbdcdfaf3e2d4528130c2a59f1e996cb3583e5657bcd5971259b7b2387a0311945e0c9a442ad9978c8af708878318ed47d01c22aa4ee7ec8f301c2056338845b8e3e0b833ec342adef3a7d3766fcadd0ed228680eebf649bae4deff488c5b40bde648e3982e33bad4a0d4da4993a230310c70476b9371569379499e8ae7d0303eab4b9bcdd4ff71dae97236633007082b747a10b184620cde25f3e53a6246250e398aba4f82c7136abe8a33fbc71eac2c90c6c20e35bf24496f3cd69ad43461e79a0cecbff8f3a1220901df824ff0927569aedd288553be7b273d34e3554d9c3b24728291dc98c906b1befa706f9f8ecc05bc6ea33d7534baa2258f0c5f68ad6618e77bb167e8de4b3c085bb82b3fd298ce2f75e754fc8926d327f63d2bf5a82407a5c820d49bdc79d775c43b02244a3f4fb08aa47c5b24773fe363db911459ba25493b31447b6356eacd4b9adc3ed1241150d2c33c2ce557b1df7eebb872d82157e963cd2d3f04f07cb4bed7ca1084e9db8146e66f646184e4783389a1f5d9c175acaf9ba2e78431f6b862c5d9f48386c30c1625c763adfb3e6d9423b0e3a94fd5dec340524cc4ee307823f67097c2c732847f2b044a346c14b6b608dcad1b9be9bc5c4e7b1adf599a1259ad79f9f27b17c4ca7d352664653ac00945bdba00edc45da73e8303b8a483b34f150dd9d7ec840b6a58b3be92246881ed2a9d6754f3d433b8a747a3859d291280b398af6896a4261d44676fc8d65cc32a7d38546aa87e0cd0645828a0571327dd2254d5c7649d985d3d656c5200af13e4d9c5452854052acf09e8d7f067256d34e94df851f40b86b02613732b506a956f8bd40fb98ef20c44b4988fae151a567f9c852425315fae401fa2c4515ea82eed38dadca5e2f676c671bf07f0eb7bed00b7a28f3caade9856fe828f76b54e170e954d1fac67677c3f0259f141a0a311e404ee8df27b783decaf379b07a8cc30c1b052b055a910151cad5ebe1ed441ee0049aa0dde270c3127f0c0d1ad58a3399c407da9379dc7b2929f7ca6014dd871243a4cc5e67467d50f2ba18fe2de9769eeb15c32e711773f5bed20c72850af9c7db4494994e4ba9641ee676bedf5d900ad54e8fa9602a390e516370891d2d83c457a6dcbc9d4565b3556b817a3c794480a336ff111ebd7202a39d62e7304bfa984537953112e1074ce0c7f1c91938db5799451fb5e6adb8638170ef1be6858c54e9bcaa7a788be67f498b122b5813c1093aa922d482cd628ce14ba7f3e28d36c6aef5d241bf493801a42cce37f30cfdec992cbfb4a61f419ca9b7ae6e561829ab2ead41f44bdb739407b2f3e49f28021fd9c76c6af4965db0a19ee3c8c835d8a078bc1d69a312a57fb8c12bf42034d7478a23f84cf54d4bcccc9d74403a31106fe76340130fba9ddd7590229a23fbb6c95d41df615bb532b156177657d1256bb5f5e491efa1995f76a5f3754333d0765a45a6264e57da017e5bc0846c5880833ae264dda75adc76d0d1b3d9b6dcc92e18102356eb88e32fd9ab85971bb277ae35e170c47de96f74278ddf86953dc86acd421bbcd47e661c91c15af05babba50d681143ba910291f9ca9f87d7c81b2b834387ef354f25948ecc4cc15179c9a81a32e8805992e6c5346534810d7fed3cb7452f358678211f628a0319bd4ba59d03c8168a1def55e8a440dd0fa53650f6f12586fa8dad36cafceed90add546349ffbd83c09bf80ef7a5faadde409a34b24ac3e26866b990a7f0c9ba9402abbef14e2b1a317b2eaded2bbb4f594ef952bb1f9c4c95e0689778e9e0304b43ca45519f7083620f728df940db4dfd7f0d4a43186bb20f9ec70b2fb2a5c91e5628742c08af4f67418cf1aec807a58eb69f69c1a4732bcf85783d5f5a0d8ac13ee9463db61bcec81be21f6341293b483b4f52906894ba4af35855d6522f98a521ba027803611d6b4fb2017da3b883819dfa93bc5362500bdabd3493760f02a718a9a15770fdb152b90aa581cae5856365180d12b34da2d992456906ef6d3b62f4113f97c10bbf8346b48995ed6e0a20ab50d95a17981a11e987cbdb20", 0x1, 0x1}, {0xd5600000, 0xc0, &(0x7f0000003400)="5e9174dda950b109c8cf37c6bab52d1c696da01d3a2006845b4c11c233959e13337b9dbae0f7157bdd23c7b7c635363eaf7cec6d0a706bd99e20d1b8650f6f94364a664f3ce64a1159d7680459c98989036ad54aa42c88a9cff2632a3eb788615a76e9a4aaeed3369561ae7b91dfea925ab070c01ba82d0080221a37b30fb4647ea5b2d28b39c5ddd7354b79a2a1a0c64ea60df0c7ddd9450dee4d40b167ecd85ec1681c5dc38250cd5319625fc0c9472502c66a79af2a818784a2a1914c9d15", 0x1}, {0x8, 0xf6, &(0x7f00000034c0)="1f8d93f070ca5aeab7283cab7fcd66a4b6d097eb6be2c78cca2d1653b1021e0fda67f6e6c229dbd4a3eb18c4a6c0422698e9391359cc7c257dc7abfa6b0a56f0748a07aba6c52aaa43f08e039cfa3bc2ad0aa525e64d6fa77fa57baf9bc54d53eab8d17f65d06a1405d1c6c70894d5db6d8ea66e11f304fe190f691cbf9170ecc3f87f4924d2fd824320517c63b1380a23bdb5b4982d0c93423a77e32ce5d3ba341f4bc415bedc6902e4828c69caeb2ee4e515d00c0cb0889698f80bfb68fe527ea9cf442356ed49376bd07526c7a020ae1091be79a2d77ca1503ca0f20ad0be154c8bca176bc5050e427c1b2008ee7769b1e7a73a96", 0x1, 0x1}, {0x8, 0x9e, &(0x7f00000035c0)="a73c4e012aab7dcc57cb7a45711dfc852b154e430dfe8fdb1872875eb9489b4d894d163ecbaab90b3484bc0a6e2349481234b591d87f8fd4a8685bd03940aa110a1e352f234975dff06ebc08829cbaf9499fbcefacf67d71d85d30d4eca16730a5d0b65b083b691ea5e5f8a3c313e8177fe2539bd1ace6835864a3e9fca4ecfb0221a61484ae27b15f8c314b546c5cf37483064b1257173718de5473915d", 0x1, 0x1}, {0x9, 0xaf, &(0x7f0000003680)="bc05a40cd4584725ac3a539f0129dd60d182db7c788927b66ab1700ad79388c8101e810aa0ffa30ed3d4cff050292318e5dc62a62b804c93b467deaa9231188c362f74053ffc9a6ff0f7ad00f280d11a21a7c2e2c349b6c4d91f92bfdfb8092c0ef57ed86d1926377525206df892c9eb7f0ec362045b5b315a3f4043044ae6202265f9110b9ee492e40d19cbfecbe10d348ec3f83db63d167b202121467e400cbc191e4429297d6bc665f81ee68d49", 0x1, 0x1}, {0x6, 0x14, &(0x7f0000003740)="006bd80d49f7329ae3725bed6c3db5bf609aaad5"}, {0x6, 0x8d, &(0x7f0000003780)="220ffdb877279f6dbf7f1932084f01bb520013221d1ec6f6d916f41172db8c5e19b643205e60b2356a3ee7ff63156e9fbe2f22d60e20da290dedb5cf297a6eb884cee376e07b919990d32943e1f79b8c081134f17e8ce320f48b368608fa74e6d9cd7e096f396dbbc377e04cb164c75064504bee516f41e01dfc5ac2982ed665e6eb2db4736b59e2afd0d58791", 0x1}, {0x8000, 0x8d, &(0x7f0000003840)="a6a35baaf8b19bdfa5ac98d14d4911011a9771eb3ad1be161ae060ad05150743687cc9b56f240c2ee07525f52b4c75acceda63ff5bc15a932b5329e993bcc3992cff6698f7399aa27764e3bc338ebd5fdccd49072596970e71668d2b6621f0f9bf2d83e4f2e846a9e55ebf446afb0f214f36cdcd2108d6ad57c2b6355f0aa1c45883580cf95dc1da0e73ed5787", 0x1, 0x1}]}) accept$unix(r7, &(0x7f0000003a80), &(0x7f0000003b00)=0x6e) write$cgroup_devices(r0, &(0x7f0000003b40)={'c', ' *:* ', 'rwm\x00'}, 0xa) recvfrom$phonet(r9, &(0x7f0000003b80)=""/132, 0x84, 0x2040, &(0x7f0000003c40)={0x23, 0x1, 0x6, 0xc}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000003c80), 0x200000, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r10, 0x80047213, &(0x7f0000003cc0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003d80)={r8, 0x58, &(0x7f0000003d00)}, 0x10) clock_gettime(0x0, &(0x7f0000005d80)={0x0, 0x0}) recvmmsg(r9, &(0x7f0000005c40)=[{{&(0x7f0000003dc0)=@x25={0x9, @remote}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003e40)=""/176, 0xb0}, {&(0x7f0000003f00)=""/66, 0x42}], 0x2, &(0x7f0000003fc0)=""/160, 0xa0}, 0xfffffff7}, {{&(0x7f0000004080), 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/130, 0x82}, {&(0x7f00000041c0)=""/120, 0x78}, {&(0x7f0000004240)=""/86, 0x56}, {&(0x7f00000042c0)=""/79, 0x4f}], 0x4, &(0x7f0000004380)=""/44, 0x2c}, 0x1}, {{&(0x7f00000043c0)=@tipc, 0x80, &(0x7f0000004580)=[{&(0x7f0000004440)=""/79, 0x4f}, {&(0x7f00000044c0)=""/180, 0xb4}], 0x2, &(0x7f00000045c0)}, 0x6}, {{&(0x7f0000004600)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000005800)=[{&(0x7f0000004680)=""/8, 0x8}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/54, 0x36}, {&(0x7f0000005700)=""/242, 0xf2}], 0x4, &(0x7f0000005840)=""/69, 0x45}, 0x3}, {{&(0x7f00000058c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005940)=""/218, 0xda}, {&(0x7f0000005a40)}, {&(0x7f0000005a80)=""/98, 0x62}], 0x3, &(0x7f0000005b40)=""/235, 0xeb}, 0x80}], 0x5, 0x2, &(0x7f0000005dc0)={r11, r12+10000000}) connect(r0, &(0x7f0000005e00)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80) sendmsg$NFT_BATCH(r13, &(0x7f0000008980)={&(0x7f0000005e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000008940)={&(0x7f0000005ec0)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2804, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x27ac, 0x3, 0x0, 0x1, [{0x3e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_DATA={0x2e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "bec17727f73ae3a1967a0d6c0d79ada0b6e82a80bf4dbc1653b051b04c758837a481d136b31906730cf0052cdb381068c65c4ea945f85c5354ac1cd8f1171d2e748dee9f2cef087ea3f7fff260be2651ec2276a361ed8cf3855a7c80309402d24038cf70ffe2da9e60b5ab25ab58dc6728549c6300ee65faaa84f46c8b51315526a2e96948fdd6ae680993388cd7da69bc07a371bf2e53aaa666997be14e7171eab8ecd1fa663648a8b9c54f5a46d99cd902ce00772db5d4dedc69ff74341ae9aa073d4f5ef5a1c504c500deb7e2f3b81438483f7f7b0048ddec3fe21dfaae1ba0e9eb72515a67ba2826d625deb540152664347551e84f5284"}, @NFTA_DATA_VALUE={0x9b, 0x1, "b00087605890581b85517b8df079b33f1983f6ce160413651d01952a05495093546f57486a917afe46e7ab0b57b8d58a0bd515f9231e09fdabc25077f05809ee0b511fda82d8b9b1bf1ca3b61c8d477934adeaea49dd21edb13ec6f47685690324419b23ad4597df8f3e209fafa0eb6fce3552dfba96fcc9d678401c376739ba385a1040019500192883c6b2725dba5f264b8c3336fa61"}, @NFTA_DATA_VALUE={0xf7, 0x1, "830f7bf5bac9d2828c4b2681c005a633bd860ac54e737026c73908a789d155fbdb8aa06017342b0f0eae21056a40c6f6d84502b0d8b68e6016997153d16fe23509a89e7b759c0662d66eb19484cbe9319a5c33bfc1d02aefecee2c2c0f6b4d4f9a0f30d21a4143db9b0f7e7336fa98d9dc24ee3ae9a670d1215fe4d5c3e1cd13762c84caa68a384aef4fea55ce42e28d61ede3134b89e6f91ae415cdcc12c5fd8c96c48579a03ae5df61429120e71c90ece2987d786dc4c6d8abb361d080df80aae84137f62511e183c1c3832b4b3302ef330aba0c6b1ce2fa01ad334090d0eb2529231450068893d49c6fd5c67d6cf76f78a2"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY={0xd0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x41, 0x1, "85d6c7bf584bfd1de47009a2d7685d34f70153b7f1c8b5b4982bfd73a9cb8a5fac5248099b2852c220d75eed48d95d65a86f0ce3125a82180dc5912a19"}, @NFTA_DATA_VALUE={0x83, 0x1, "0bce1d77aea224552236d5e6d4baa79673ac09d4e941bb0951e35c4f9ffa0c0df70d984226f5cec6c324e89ac3c084f56ae59802eec9b7c6f098c8420e25ff870f0884fc37fb3854819e3ef4a238a3b3ccaceaeaae168bcd2fb3c786d7ec47ce84939904d8c5551ef43105dd5e715934ea02c42ec53c16f5e9dec51956507c"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa8b7}]}, {0x23c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x2264, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xae, 0x1, "b16f118bbc2cea03af97be9e83088113b41d26feef4376b5cea2043bddb2cb4fa87dcc7aed26c2378e8d9ddcd87b6cd27850a9796b5e3b0ef04cd9f5b52d2b179b2c913cd10a0da830e7b486f81a381bffc2a609582b7e88d9cd24549a9a11b8acda5da15004518ad11c91e8d56a5e5dc9c0a73ccf963236d4c43dfff84f6a2a564e9d1696d25210a7e64fd0870c683817f6587df9c92d94e55a340951a02678841c932b3fbf5cbbceca"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0x150, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "a094d679ab29bb313eb2aef7fa6b3aba40fa390b42abf88a1e8dc9f53eb040"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "ddd997074ec877fe5e8b1cf6b20bc81b47a088f91eb0e9e2fdf5eaba463cdb2a5ef22bb7ca85abff2674201838db88ee7ac131ce217f3f43f81485e330e2f74ae7811dd175024a90c3184caff67bfbc4309679ee98f8a8b8fe0a15324ae5bd3d59d1a59e0dbecc990b4ffab290f4f25684e58fe4427967387ba15f652010134bcea14536f1f825cce9f656eea82f217e7e3e4f4b901680e5e8915c51ba12"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xb69e05b81227b375}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x50, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x16c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x138, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x400}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2a7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) writev(r2, &(0x7f0000008e00)=[{&(0x7f00000089c0)="b43e0bb7ebd5e6866a2dfebbd74915c7338f", 0x12}, {&(0x7f0000008a00)="d5c8e1a6022f3d4f134e9863100684d31a9ea57698529d270e8db632efcc307387d3bd87044644f371a93bbd325e992d79c7dc873534a642f30e57b5cc40b65760a10f54bb0c3e2b1d71a71ffd1edffc39be82e72fc8d76a5a6b962fb2943a5bacb906c56f7d9c583a0670f4b99db14f5953d63926b9ff8073ec2cd3797abfa44de04f7071d043ed18bb1e36df47aa9cd5341968ffb313de9c57ea9f8234205b8c3b89964662764fe070ee18d76478734264e2dd27ef0a09c26ce5d467238c4bc1fa88bf7ccb7c0ea1660449ead12b7243b4891b8ca5eeb1", 0xd8}, {&(0x7f0000008b00)="147e4e0841acbcaa13f89ca7617ca0af0ca227d935ebb1b9ed548b4462f284d8976be80559f614d82bc2a6d5187685851cddf51fdda08792e63d085518b7bdba6f15d761787b83f9da13b90f44720e08462a9dfb3a7c1803fc980b5fab1532eafbb41142fcc943ff9addcd09c6ae9c61d000", 0x72}, {&(0x7f0000008b80)="606f9cf0c894202e37658cfb97081e3701275eb6d46cf3672ba2a01c234af2ae2607068385b8ee1f1fd72095b35d28ff69afbae960296915c3a3d63ba8d890793283cae6ac525ef27bea08469ae0bc388742754847c0568069b6d734f41fa28091ad0cfa74d2037070da77fbd534664764eca659633f2a7b9436803f82f8269ff9ec34670a44174d368157a3c46528e14c5c68ac18e95c5e0a4cfdeb228b226dd5f5", 0xa2}, {&(0x7f0000008c40)="3519b50fb5b51069dccd38ab54521a81337f619281e343b0f90cac23bd840883c816a7e1507c366cc16666375fc47b799d03baa45f463b2fb9240e1c07a2bf801b8ebc08ad06c88f2abbfc4ea4fe30d41917a5b828e728076bfd18e34fae2d9998a553db75cff1eb2f824d6a42169f2006e3337dd0c89c011cdc38d6a69e", 0x7e}, {&(0x7f0000008cc0)="9302f5e1d590e954bd7a82e38f0bc9caac5fc95b9453f44c8ba1c74537ef1e066c5c241b59a27c5e30f01a42d886f2eb7d7c63230a06657addf5f70929a5111f2bb0eb00e689c92e7a4e3998727c77102a3d76e0cf30988684bf9b3b26cc1363c09d68c009f9b9429c7380485ca5384d312f", 0x72}, {&(0x7f0000008d40)="37ea6e01fd1666c467602cc7f8b6f4ec801f42e7afa95f8ba798f584f926fece8d74e2500f9d8d32790a8c3c41ce77554a673d44cda6ac7c01d4ffd6b80ee69967089733aa1ac07b5021674e0d871774c48937fad1cac71b9b5c287c0a5db8b9a8ef685fa6ad089253bc187c092990bf53110cc4f32dbb7b70d46eb11cd86191ade60b0c22d4fd2853a7761f9bf1373fde73639457bccf80b2b017b60610fe28ff2de48e3a9285e027172975c192b3574864374954e5c6e0", 0xb8}], 0x7) 2.461625988s ago: executing program 4 (id=12898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x28) unshare(0x400) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x10, 0x803, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x43) socket(0x1, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x3a, 0x2, 0x6, {0xe, @tcp_ip4_spec={@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4e23, 0xfd}, {0x0, @remote, 0xe, 0x4, [0x80000007, 0x6]}, @ah_ip4_spec={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) r7 = gettid() sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x205, 0x0, 0x0, {0x1, 0x0, 0x8004}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWRULE={0x13a0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1378, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x38}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x1340, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1330, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x130c, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x81}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x2a, 0x1, "9dfbf9c91f5b5fa1b2849654fd9abf83fab8cdf92b30eaab95ea539dc26f2382c19035977a38"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "c65d3a6f872ca88d79694860481cd58bea820b79c6f5aff1f19d9d68b9a51657a1938a95b18b6c25c3717a10537e847d812303ea85ef783dc4f669abfe083a550d99002568a15073509fcc41f4234484535e657130d61d82df115bc8e0b54f0f4d7ed76010148c4319cfefcd245cca08fadfcc71c0d6487cf8f6367d45221d0e815eb505b66466c14c"}, @NFTA_DATA_VALUE={0xb9, 0x1, "f8e7b857691fc2b03c2637afe49ca0a6183c9d36be7fea0a69fc8829fd636f67998d6a5ee8927ff2dfc83cbeac238c97e9cff991ddc7bf97d173ad7bc80f4c9fd8fc56adcd6f26cdf82c404e795a39f3daac0b0fae8a88620a441c18dd607062bf637b2e912e41d69731cb580f23992ed9056ef0d8ed9ed735a6325ad1e3ee34a55ae7dee121e31b016c2bd4f089ced16b54a2c0818c7514916bb9f453eccca3d2b426ca847f60a6880ae7229c5b210e7b1ae152ef"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "bca8a7a3299499d6ad5b9e24134f09d8635f2c2e298a6fea86885a7415784c730074997720189ab41d23d1cb4e083483764694aee1c51c06591f7cea21d62415d993634daa6ff9b16fe7b2112698cacdae9268bb7f98d745d80becbf8e300c067e6b1780b3cdbaf94b4c75bba1f2ae0cc06ce47459be6463960149df3b450fead59b6b973e3053bb93f2b44e3140eecb20eda0e5849933ec9d145fcd9ac03efec037cfb769716b5446b0f8bd3380e01459143e6e468774a5fdbe7d1f1585c8f60d01ae6720d159b927d25213fd67648087943f0980bd205759a57ac0ae7fbf41a152583bd74b6a0250b9e36ab50ef192f5045309144b003c8f"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1410}}, 0x0) 2.415716828s ago: executing program 2 (id=12899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@bloom_filter={0x1e, 0x8, 0x1, 0x3, 0x1582, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x98, 0x140, 0xfeffffff, 0x0, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0x0, 0xffffff00, 'bridge_slave_0\x00', 'dummy0\x00', {}, {0xff}, 0x6c, 0x0, 0x70}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast2, @broadcast, @icmp_id=0x67, @icmp_id=0x64}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000002000000030000000500000000110000", @ANYRES32, @ANYBLOB="81000000e33700"/20, @ANYRES64=r1, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, '\x00', "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4800000006602"}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f0000000800)="b3dd5b357d9d1c0f5d6281f37dcd01c0b05634bdd03b9ea8fc77c06160a0e095b737c4459aecfbedf6f74c2ec79a882c3c104d7e6178530b10f3eeaa327e6a81e1e50fb690a28827134e5054ed59107e99e1da", 0x53) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.983193097s ago: executing program 4 (id=12903): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3", 0x5}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000500)=[{0x2, 0x2, {0x1, 0x1}, {0x2, 0xf0, 0x3}, 0x0, 0xfe}, {0x1, 0x0, {0x0, 0x0, 0x3}, {0x0, 0xff, 0x3}, 0x2}, {0x5, 0x2, {0x0, 0x1, 0x1}, {0x2, 0x0, 0x3}, 0x2, 0xff}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x2c, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0xfff3, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xac, 0xac}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.862010697s ago: executing program 2 (id=12904): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x20, 0x1}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, &(0x7f0000000a00)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @from_mac=@broadcast, @device_b, {0x7, 0x6}, "", @value={0x7, 0x0, 0x1, 0x0, 0xff}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}]}, &(0x7f0000000140)=0x10) 1.861783256s ago: executing program 1 (id=12905): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x20, 0x1}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, &(0x7f0000000a00)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}]}, &(0x7f0000000140)=0x10) 1.691243398s ago: executing program 0 (id=12906): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x58, r0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x52, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 1.602211549s ago: executing program 4 (id=12907): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff565843ca6fc808060001080006040001007f0000000000000002aaaaaaaaaabbac1414", @ANYRES64], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'gact\x00'}}, {0xffffff5e, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000100}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00'], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.518614438s ago: executing program 0 (id=12908): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 1.518003435s ago: executing program 3 (id=12909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0xf8, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f08}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f2a}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x133000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe77}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffaaaa}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='b\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="7961fdffffff000000007e0000000c0099006c91000014000000"], 0x20}}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x44, r7, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) close(r10) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0xfffffffffffffef1, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080019000700020006a101c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x404c844) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r11) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r12, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028014000300ff0100000000000000000000000000010500090004"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r13, 0xb101, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, 0x0, 0x3}, [@IFLA_MTU={0x8, 0x4, 0xfff1}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)={0x20, r3, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x80) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r14, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) 1.417583445s ago: executing program 4 (id=12910): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}, @ldst={0x2, 0x1, 0x3, 0x5, 0x9, 0x100, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x76, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000340)=[{0x5, 0x1, 0x6}, {0x3, 0x3, 0xb, 0x2}, {0x4, 0x4, 0x7}, {0x3, 0x1, 0xd, 0x5}, {0x0, 0x2, 0xb, 0x4}, {0x0, 0x5, 0x4, 0x6}, {0x1, 0x1, 0x8, 0x2}, {0x5, 0x3, 0x5, 0x2}, {0x3, 0x5, 0xe, 0x6}], 0x10, 0x2}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000580)={0x2, 'tunl0\x00', 0x4}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x13, 0x0, @val=@iter={0x0}}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$cgroup_int(r3, &(0x7f0000000000)=0x3, 0x12) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r3, 0x1000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d2c"], 0xe0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000005800410f9c00f4f90085b3a85c91fddf08", 0x15) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendto$inet6(r5, 0x0, 0x0, 0x1, &(0x7f0000000300)={0xa, 0x4e1f, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40d4) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={[0x8]}, 0x8}) 1.381539101s ago: executing program 0 (id=12911): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) unshare(0x22020600) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r8}, 0x38) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xfffffffffffffe42, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x1054, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0x5, 0xfff4}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x1028, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x7fff}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x7}}, @TCA_U32_POLICE={0x1014, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x26cb, 0x7, 0x2, 0x81, 0x2, 0x9, 0xe8e, 0x0, 0x2, 0x9a7b, 0x8080, 0xf7, 0x1, 0x8, 0x8c9, 0x4, 0xa, 0x1, 0xa, 0xda78, 0x0, 0x6, 0x5, 0x6, 0xd4, 0x8, 0x9, 0x2, 0xe, 0xee0, 0x7, 0xff, 0x6, 0x9, 0x1, 0xffffffff, 0x7, 0xe88, 0x30, 0x4, 0x6, 0x5, 0x2, 0xaf, 0x3, 0x4339, 0x401, 0x401, 0x3, 0x5, 0x6, 0x6b, 0x1, 0x365, 0x6, 0x7, 0xf, 0xe, 0x2, 0xfff, 0x1, 0x4, 0x8000, 0x7, 0x1, 0x3, 0x2, 0x5, 0x100, 0x8, 0x5, 0xff, 0x1, 0xc38, 0x8, 0x3, 0xf2, 0x7, 0x4, 0x7, 0xa3, 0x6, 0x7f, 0x183, 0x37, 0x7fff, 0x1000, 0xeb3, 0x7, 0x7, 0xca, 0xd, 0x7f, 0xffff, 0x7, 0x3, 0x0, 0x3, 0x966, 0x1, 0x4, 0x6, 0x10, 0x4, 0x1ff, 0x8, 0x0, 0x10000, 0x1, 0xb7, 0x1, 0x1, 0x1, 0x2, 0xfffe0000, 0x17, 0x81, 0x0, 0x4, 0x6, 0x69b0, 0xb99, 0x5, 0x9, 0x7c0, 0xa5b4, 0x5, 0x6, 0xf, 0xe1, 0x8b6, 0x80000000, 0x9, 0x393, 0x5, 0xdfc, 0x1000, 0xf564, 0x6, 0x7aa7, 0x2f5, 0x1, 0xfffffffc, 0x40, 0x5, 0xffffff62, 0x7, 0x8000, 0x8000, 0x5, 0x1, 0x5, 0x101, 0x2, 0x100, 0xffff, 0x100, 0x9, 0xffff, 0x2, 0x8, 0x4, 0x3, 0x7, 0x0, 0x3, 0x8, 0x6, 0xfffffffb, 0x2, 0x6, 0x2, 0x0, 0x7, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0xc0000, 0x5, 0x5, 0xfffffcb1, 0x1, 0x176e, 0x0, 0x8, 0x6, 0x8, 0x4, 0xaa, 0x875b, 0x3ff, 0x2, 0x2400, 0xffff7fff, 0x3, 0x1, 0xfff, 0x7, 0x1, 0x10, 0x60, 0x0, 0x3, 0x6, 0x4f, 0xeac, 0x100, 0x8, 0x965, 0x1fd8, 0x7, 0x6, 0x5, 0xffffffff, 0x5d743a87, 0x2, 0x6, 0xf927, 0xa, 0x0, 0x8000, 0x400, 0x4, 0x2, 0x6, 0xf, 0xffff8000, 0x7, 0x6, 0x101, 0xf, 0x2, 0xfffff801, 0x7, 0x1, 0x124, 0x9, 0x1, 0x2, 0x9, 0x6, 0x5, 0x3, 0x5, 0x9, 0x8, 0x7, 0x0, 0xcdc, 0x3, 0x49, 0x8, 0xc6b]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x6, 0x708, 0x1ff, 0x10001, 0x1, 0x5, 0xffffffff, 0xdba7, 0xd20, 0x0, 0xb, 0xfffffffe, 0x7fffffff, 0xfffffffa, 0x1ff, 0xe90f, 0x9, 0x0, 0x4, 0x6, 0x101, 0x3, 0x7, 0x5, 0x7fffffff, 0x0, 0x0, 0xffffffb3, 0x101, 0x8, 0x8a0d, 0x6, 0xb082, 0x1, 0x4a7, 0x789e, 0x10, 0xa35c, 0x400, 0x8000, 0x1, 0x3, 0x10001, 0xf, 0x6, 0x2, 0x81, 0x3, 0x6, 0x51, 0xfffffff0, 0x591, 0xffffffff, 0x3, 0x4, 0x9, 0x6672c602, 0x9, 0x7, 0x7, 0x8d, 0x1000, 0x8001, 0x0, 0x8, 0x0, 0x10e, 0x9, 0x0, 0x100, 0xf, 0x5, 0x8, 0x5, 0x1, 0x401, 0x9, 0x6, 0xe98, 0x0, 0x80, 0x4, 0xffff, 0xd2, 0x81, 0x80000000, 0x8, 0x2, 0x3, 0x10, 0x8, 0x2, 0x4, 0x4, 0x5c2a268c, 0xfffffff8, 0x100, 0x2, 0x9, 0x1030, 0x5, 0xb937, 0x2, 0x6, 0x7, 0x2, 0x6, 0x9, 0x40, 0x9, 0x4f6, 0x414, 0x3, 0xe, 0x691, 0x1, 0x8, 0x1, 0x7, 0xe8, 0x9, 0x18000, 0x8000, 0x7f, 0x0, 0x1, 0x2, 0xd, 0x5, 0x708, 0x7ff, 0xf418, 0x6, 0xa4, 0x1, 0x32, 0x4, 0x3, 0x20000, 0x5, 0x3ff, 0x100, 0xfff, 0x100, 0xfffffffa, 0x7, 0xbc91, 0x9, 0x3, 0x7, 0x7, 0x81, 0x4, 0x0, 0x7, 0x5, 0x3, 0x8001, 0x0, 0x9, 0x3, 0x0, 0x2, 0xdc35, 0x0, 0xe32, 0x400, 0x2, 0xffff72da, 0x7, 0x2, 0x1, 0x73ba, 0x9, 0x1, 0x2, 0xfffffff8, 0x8, 0x3400000, 0x7, 0x3, 0xfffffffa, 0x401, 0x27fb, 0x1, 0xffff, 0xffff0000, 0x2, 0x4, 0x0, 0x4, 0x8, 0x9, 0x400, 0x4, 0x3, 0x0, 0x14, 0x5, 0x1, 0x4, 0x1, 0x400, 0x8000, 0x5, 0x9, 0xfff, 0x7b6c40d8, 0x5, 0x4, 0xffffae79, 0x6097, 0x6, 0x0, 0x1, 0xd84f, 0x4, 0xb6, 0x8, 0xd03f, 0x10, 0xfffffeff, 0x1, 0x2, 0x7, 0x1, 0x1, 0x6ac9, 0x9, 0x1b6, 0x1, 0x9, 0x9, 0x10, 0xdae, 0x6, 0x0, 0x20, 0x0, 0x7fff, 0x8, 0x101, 0x0, 0x0, 0x200, 0x4, 0x4, 0x8, 0x7ff, 0x7a, 0x0, 0x3, 0x1000, 0xed0]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x3, 0xf9b1, 0x2, 0x0, 0x506a, 0x77, 0x3, 0x6, 0xd, 0x9, 0x5fa, 0x7ff, 0xe29, 0x5, 0x3, 0x1, 0x4, 0x0, 0xb72, 0x81, 0x65e, 0x63, 0xd, 0x2, 0x4, 0x8, 0x9, 0x90, 0x0, 0x4, 0x8c, 0x7152, 0x5, 0x1, 0xfffffffc, 0x8, 0x5, 0x5, 0x4, 0xfffffffe, 0x7, 0x1, 0xfffffff7, 0x8001, 0x3, 0x4, 0xbfe9, 0xff, 0x8, 0x6, 0x1000, 0x2, 0x9, 0x1, 0x2, 0x0, 0x3ff, 0x2, 0x5, 0x6, 0x8, 0x8000, 0xa221, 0x2, 0x6, 0x4, 0x9, 0x0, 0x9, 0x6, 0x10000, 0x2, 0xff, 0xff, 0x4, 0xffffffff, 0x3, 0x857, 0xb, 0x95, 0x6, 0xe000, 0x1, 0x7, 0x5, 0x3, 0xa, 0xfffffffe, 0x81, 0x80000001, 0x401, 0x0, 0x6, 0x0, 0x1, 0x6, 0x80, 0x7, 0x8001, 0x2, 0xb, 0x0, 0x5, 0x0, 0x2, 0xf201, 0x16cc9eb0, 0x8, 0x2d8, 0x0, 0x8001, 0x1, 0x7c1a, 0x1, 0xff, 0x2, 0xa4fa, 0x1, 0x5, 0x10, 0xbd, 0x8000, 0x3, 0x0, 0x10, 0x4560, 0x10000, 0x100, 0x7, 0x6, 0x1000, 0x9, 0x80, 0x9, 0x2, 0x6, 0xfffffffe, 0x1, 0x10000, 0xfffffffb, 0x5, 0xb, 0x300, 0x8, 0x2, 0x6, 0x5, 0x97f, 0xe, 0xb, 0xfffffff8, 0x2da, 0xfd2, 0x9, 0x1, 0x80000001, 0x2c, 0xe8f, 0x6, 0x7, 0x7, 0x7, 0x8, 0x9, 0x4, 0xb0, 0x7, 0x3, 0x62220d2f, 0x0, 0x7, 0xffffffff, 0x1000, 0x280cab1, 0x8b, 0x8ab9, 0x4, 0xfffffffd, 0x3, 0x9, 0x4, 0xab, 0x7, 0x1, 0x3, 0x9, 0x9, 0x38000, 0x5, 0xfffffff9, 0x1ff, 0xffffff7f, 0x3, 0x3, 0xe3, 0x400, 0x0, 0xffff91ba, 0x1, 0x1, 0x7, 0x575bc852, 0x9, 0x7fffffff, 0x0, 0x7, 0x4, 0x2, 0x7, 0x6, 0x5, 0x6, 0x3, 0x4, 0x6, 0x7, 0xfffffffe, 0x6, 0x3, 0xfffffffc, 0x9, 0x81, 0x6, 0x8, 0x3, 0x1, 0x7e, 0x62, 0x8, 0x7, 0x9, 0x5, 0x0, 0x0, 0x7, 0x5, 0xd, 0x67a6dd4c, 0x8c, 0xdd, 0x7, 0x4, 0x203, 0x2000, 0x5, 0x1, 0x7ff, 0xffffffff, 0x0, 0x1, 0x9, 0x5, 0x3ff, 0x4e]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x1, 0x7, 0x2, 0x119f428f, 0xcf, 0xffff, 0x0, 0x9, 0x9, 0x6, 0x7, 0x101, 0x93, 0x3, 0x2, 0x7, 0x8, 0x478b, 0x8, 0x7b3, 0xffff5e91, 0x0, 0x5, 0x4, 0x1000, 0x8000, 0x3, 0x5, 0x2, 0x2, 0xcb85, 0x0, 0x5, 0x10001, 0x8, 0x9, 0x740, 0xc3d, 0x2, 0x101, 0x5, 0x7, 0x6, 0x200, 0x44e, 0x5, 0x6, 0x4, 0xf, 0x1, 0x6c, 0x7, 0xfffffff7, 0x1, 0x4, 0x100, 0x3, 0x2, 0x8, 0xe59, 0x0, 0x5, 0x3, 0x57, 0x3ff, 0x4, 0x80000001, 0x9, 0x8, 0x1a13, 0x7, 0x2, 0x2, 0x1c000, 0xdb3f, 0x437ed6be, 0x8000, 0x101, 0x6f56, 0x2, 0x44, 0x1, 0x1, 0xfffff800, 0x9, 0xfffffffc, 0x7, 0x2d, 0x0, 0x1, 0x0, 0x9b1, 0x8, 0x9, 0x0, 0x8001, 0x1, 0x0, 0x1ff, 0x600000, 0x400, 0xfff0000, 0xfffffffb, 0x8, 0x10, 0x0, 0x9, 0x401, 0x400, 0x80000001, 0x8, 0x9, 0xc8a8, 0x80, 0xffff8000, 0x8, 0x1, 0x3, 0x101, 0x80, 0x1d11b836, 0x101, 0x4, 0x7f, 0x3ff, 0x0, 0x80, 0xfff, 0xf759, 0x5, 0x5, 0x8, 0x2, 0xd, 0xffffffff, 0x1, 0x101, 0x4, 0x9, 0x3, 0x8, 0x5, 0x4, 0x80, 0xfffffffd, 0x6, 0x6, 0x845, 0x6, 0x0, 0x3ce6, 0x9, 0xf57d, 0x2, 0x5287, 0x8, 0x3, 0x6, 0x7, 0xa9e9, 0x3, 0x8, 0x8, 0x6, 0x3, 0x9, 0x4, 0x6, 0x0, 0x3ff, 0x4, 0x1000, 0x101, 0x5, 0x7, 0x1, 0x9, 0x8, 0xa69, 0x5, 0x0, 0x3, 0x8000, 0x7fffffff, 0x7, 0x8, 0x902, 0x0, 0x7fff, 0x2097, 0x5, 0x7, 0x1000, 0x8, 0x2, 0x7, 0x68, 0x9, 0x6114, 0xa9, 0x7, 0x7f, 0x6, 0x0, 0x4, 0xf4e, 0x0, 0x5, 0x101, 0x8, 0x0, 0x6b, 0x9, 0xfffffffe, 0x989, 0xff, 0xb7bb, 0x0, 0x7ff, 0x10000, 0x4, 0x80000000, 0x1000, 0x2, 0x8000, 0x7, 0x8, 0x1, 0x7, 0x8, 0x3, 0x6, 0x0, 0x5, 0x81, 0xaa7, 0x81, 0xf0, 0x2, 0x8, 0xfffffff8, 0xffffffe4, 0x6, 0x10000, 0x1, 0x4, 0xa414, 0x3, 0x6, 0x8, 0xbe7, 0x4, 0x9, 0x5]}]}]}}]}, 0x1054}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000fcd19d1fb08a524bb3fa9d740e2b23a47d3542e874fb55a5f0e7d30b000083a51044d38b781457e3", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e65766500001000028004000600060005004e24000008000a00", @ANYRES32=r10, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @multicast2}, @broadcast, 0x8, 0x1}}) 890.25549ms ago: executing program 1 (id=12912): unshare(0x2c020400) socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfdffffff}, 0x0) 765.089438ms ago: executing program 1 (id=12913): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) r1 = socket(0x11, 0x2, 0x10001) unshare(0x24020400) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x59, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) recvfrom(r1, 0x0, 0x0, 0x40010100, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbff, {0x3, 0x0, 0x0, 0x0, 0x4000000}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) (async) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12828000000000010000008681b3093be8217391b9fa6935849e6098ed884e7cb51726b360735f5276e064438f85873048000000000000000000", 0x4a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc43671", 0x96}], 0x3}], 0x1, 0x40801) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001800010000000000fddbdf2502000000000000090000000006001500050000002800168024000100"], 0x4c}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'team0\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x3f1, 0x6}, {0x10007, 0x4}]}}) 676.993113ms ago: executing program 1 (id=12914): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) 585.846876ms ago: executing program 1 (id=12915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 430.997894ms ago: executing program 1 (id=12916): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040001018110000", @ANYRES32=r0, @ANYBLOB="000000000000000000080000000000007b8af8ff000000f8ffffffb703000008e3ffffb60400000000000085000000038000008500000005000000950000000000000000000000000800000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(r3, &(0x7f0000000300)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="ac0d0efe8242bf44c779aff6bca0fb755ff77012a0611a509fe6d775f326d68d508b212061a19964a8fff42658eaa3b1ddda3a157c42382b0cd93a9a9ba4fa2d91e707b2b3793c37e97299b5bfbb8cc50d5f9cdf068d95382bca3618960b13304041887f42c371f636795570ee7b0e771fc7f9abe1e0c9b52aabceb79e8a2ef74e3dcd91f7f48df22482412204e6a122be7341b6eab3adb8bae24578c2d7fb006eb05d269b1cdb903c4640d22dff3ad78a95f03e167f7df6e68705182646d53149557927e2bf5050", 0xc8}, {&(0x7f0000000800)="f8be2203ec7ef1331f2428683e0c5199733c2d638a3e7af9fb52f0c06bdd27e2ae91f5c9153d070bc412ef9b82f6e8512081c3ca22874434caad0455df112f93986581234ba822b5e1d98741695d2cd958c7f1fcdb4dbb9b828f763cad07cc289775112973cc599e73e907d23b5f744865a7a0207ed49a16c1c0d0bf2d8010bb8d16f2a4ba12dd46f8bdf2449ca9f0679bc05f814df9f0ed986b4047fe3656f4cc31f2b03c0535cf21dd5f95b75a43f531c1d6d746053a934a49e5b6ab7e4dc98d227df1986ffd6b5e127e254ff9af0bc31c43103bce64f9f0e94908f8621ba58b25d80ca155df363ebd7c89c993c8a22c08e139592090921a5dd77ff4d922b54c1dedcf3422bdec18658467092b91ddccaa23520e9e9c372fd3dbd6fd7cc2fb46567b7e0d434b79c1520e3afaaf6fe7cadf5ecf08915398fd1d7372e5491880a0932c2a35743596c43e70f176e3d640824f58fc848154fb5dda65de862c03c939a3d2fbb845dfb49dca31b86cee0cecc2a6422f4fbe3c720c361181b80989d9d212a7d3a53cc31dc978ec5168eafd145f1c25bb50c821dbc83a7c370b1558e6243cbbd5e04469038df98591e6e50ecce7f3088000c8265630c376c43db74e6a4e1c6587b42140500f8c8211c284b9e765311caa827f76b01fd74eb60fc19365cb7ea8091e9a6b43ff7d7e8134c298343c9638094de3dd5f78012e73c042e83890a8165959211a3c74fb278caa9fa8da54d74be41e72f04ee30df3768b8c6db3e2b34c451082df5321e2819491e0c23abd1d517becbea17214de2d9e7640ef4115c91935599d8192ae7d9a69596d4e31a7e6685e748aee5d78848fc0aa28a8cffea553457b75b5731f8643a3ebd7c5770667065c39333fdb078e8a9c9693d1bb7eb76f576d56ca0084fbd29478a15aaa5b95dcca5bea718dcacecdcc63987d957ae1407064737d03b5507ce69438efb1ad153996229be0eb9203353398b20ea641f91d7b4d5a669a3f3896b123b200b411ee3de35b4f370110df4bb091d24046fe57d6d7bd60c56f6d111cea5fff292f262afff6020e8803af40c47db78bb665662f47750e82b3ff3cd897e5cd03381afa677f5d5e93b4648559b1d20af76936fcd1c8e3541bde4e60623343703b9730cf26c38714757cd03c6bea79f6ac864d5f962af3d0ccf4df2f9168f6313fe21c49f6027256e9309cef85fc8e437b229b4e95b69d80317707c3fceb99ec3b06747922f862e318ade447fb5c4120add20ccd81e514a085ac002d15c8844b057b9b9adc8777e9c0eec71df86db7dd9022fb3d87c0113e908036cc3bbf44af3ad800e4d2ddc4f2b86fdbdd1a2f0212980228548010f1dc02507db5c3bca221a59fd04c83296c3a89cc72d051b94ebbad8cd3c7b9c2e2201e6c0079fd31b39b8fe69f632313279fde3c8eaaea482700b8e54d6be1ffdf3a6c1115fc35d1ab63c6579e596eb0473d35d9e3c2b29cd59d1c6e86375fee347e9ee4c3f1086a7457c3dfce68197b4b63cacbfd26af18420404a162ae782fe1227fb97c4dbbec1e3c8fe1c2e4989f77d7ae2b6de15d052839197873c4604f5b937125a4981612a72eec5677739979d40f70805b14b773772559efe827c56808e4c36bcfc7c88fed21e2e88f2a1ffdd2d242f7c1de5bb33fc53b479064b312e1156a539d45b761c6252cc2cae1a6e5359c2ceef8ba5bfc696c5709d7a53717583aa72c8e6121be1adad81009905adc49251bde570b40605236f2601d88bbdb96c2048a506ea2e531f01657e769a3831dcc91ac37ce47ca944c19246080a394779b1de2f1df26d1dd60ef699362a578227b1b58a41932686a5e716c989876eafea1a3cf191c5964c0879dd1807574434a83b69ff4a33db8fc46970add263ff139ac293a390f429a77412d33c78dad6e32f0aa8268bc1239a4a9f3f547f22b0eaefa8aae68467843d22c713472da44beadef48d6abfd4ae81d9e972253483c7dcdefedbfe1bd47fae3b2bc89bf0eeb4d7c7e6193a73ab142869aa73047265513ce9ec72127534751e47fa7579087662669cb450742234246a54248c8105f974366671434b1f4a5f5e8a573cc82fa9e9afb71e78c738abe62dec8ace5de8a766f7dcfd11c0c6cd4c5ab58b18dfbfa0f33c457b1cca749dc5ac2c21211956f29b5c2ae4cc779738d8b79ce241909335e6786300af8bf0c0e29e4766318bd1372965424cb980d68d6d48a0ffe41b81cc2e224876e16a06ad5a81f6d1470983937576469f0b619f2d5f1548b2d376e0139669017e8b8e524576a9a30277b9fa88c8ca99e02c07e9e8ebd9c6a01924eb5a2734be4d46e711ae34ee0ef9af86bd2c9793c4bd30cc7b468be3fe07e668a6cc488e198bbeae591d58afee7531f38383ecd6ffb37dde06326d07f157b6a15e0c5ccea7dca350384586f8bfef71b1cf1d6c2badaf0ea9f5935e9759199bf3baad86c52d7e76f4968671c1a42955cf44862a77fbedcb7533c19ab83c1b03c0ffd884842bfc793fa6720148ae69f41f1af0cf0492fab4f115faaa37fee84dcf23c555e52ef9c4582d56ff7f8d1d8fcbf414ab7a22e5c995ae1ca2903bd866ca818efbcbb700323a44ec8280a7d6f1bca74f759a52911bf844350079835c5fbd93cbd5524f616288560bc6a3d6db08eb81195b102aef9da970cf535cb8a99badd4420ae08c4f6a6dab006f81c0ed6992ac4a0a014eeb4ed8aca7fa3d57dc11a6edf1613fcf3ebc8af056d6504d7eb5b8cc95efd340ad3f4fa282b4dcb2c1b1aace6a670bd1a7da099f39cca7a720bc25c41ee73c7742b327b7cc82b9bfd326af561af84b202b09ce8e94252880db3ec087827a65c4096c92d90624bcfd7cc546adf96df25e05183f2057f9f452bf2f862651156e709e1eee642b90593323e30c958d575bb8f36ee7354a650e6c8b6953b8a80bbc566234d3a28ca589d6b9e5af75ddb45288abbcf231843a9f2afa264f71e886c8c8d8c0f9078137381bb0a6b16d9a8bbb057f6b908609d12caaa475b6b03f27f0370bd8f9b13ec36386287b9c117791ce20da6b9e6a635daac2ea257cd50db75d3d45d040eb08591071a508fb6eda7c5288305545860729e11eaee5953a6377a7ceda904bb85f6c1f1320f595dc530ee151dc3b8185292c67df2a7bac33872500ebfdafc3e28b139357b055978ffb43a579be39c4d5ecaa81b35f59e3cbedaecd0850e785150a8823306733e59cc00083f172b7c5a031b603322f6048ca8ad06da5cbd32e719d5feb5c19607d92831fbd3b13ee4733fb144038b4d5b219f1b9050ac79d647a83d1be17f87f23f14f7d393add66cb5a245e49a32c792a359045a0305410e0c3dc3c66aa2ecb2627f66ca2c53208777b08d9d5a20fdfc1a22caf1ea5ca60818b3041d014e863997c061446fa0b63f640b0be408105e46fa0bcf1b4b3ea6009bb0d03897329a4a70bd0d97e5d7f70152d6d98f0e77361a03ae464cef3a428997a8670ad4d7e6c79611fb5b7092152f6577ef332ea1c0c86bf277339c0ff75bc40e875d5117ad84ffe3e77b150566b4ad4420cd470b152f1e199fc9290b886d66cc02a026dc50647e53d1d7dfbc4ebe7ebeb6ad5a1f62ff08b7ca3513120c25a48651e78d4e3da2ea33196a2058fc572583e45071c084f249c79bf870ffe3ba603b6b4d4236f542bcd024cd92014961c089fbc529946c906a66ba53132a7604fd18ed14bb6687327239392a3a558934138bdd09f25c9b4f1773d64ed30d4107c930b620d09950c655f0988581214a195cbf03eae6b8e3c2c4187c27ab93edf0672f63a850a66b55a4d551f7a6060eca19de5ac2e83a979169f82a992572e6887a664a5a4b19e34cf3ab69f7a3e5f34aea35ba31b51b3251cb8891ffcc2e22b14251ae2896b55b81dfe40f594043c9dd01f9e8338bf36f7ad5db59bb4f7209746432d628e8979acc1dc5dec84c2e60e0cdd96a138a1436a40ab5cd4ec489c00943747fa7df6979bfc539a6e052d6ca2477374cceda340800db5d83282afa553a7fd6bc19cc761afdf2fe02f393539b30182ae4868238d4320197bdf553a1799ab2680c2fcc9dd3c55d6b6ef96a3ea6d00718782037b26a14db1f3f1486f787704de98a92cb88647477496faaff12f1b5477a75b9ac1df571667080e832faf891c299dae46a6daa22d6bbeb0fd582ffa392ac13fddb18380fafa93055fce7151a08dca5c465d4edfa10d0c256ec46f95d390704a57a4815fd6fbd9d54534aee0cfdee53bc803c55ca112dcd009f826e87bc4d36b638f4fc558dae005a97e744648ed2328066263ee037e2723f9247735c4b3dc2e4a01eb19e7a6312cd028eb7f88835e43eeb70dcccb506103ee1dab8268133a8ad499f31e4b23d6c43f049318f33fe959de687b908e4c3d8982d91af027fa0a40424e2a6381692c72bff1cc102fd1bca0a62d39c5285d36e9db1a160f7586915664e2e9cdb7d27a0820c76644b575900056e74555547f58a606c834facf3313afb534f7bae3c1341dfa9e3cc52f0b2c8b7f0a260b2428a3e13e97b5cb91bbd5f0478d6fe1589910efe3a4b87fdbc80c1cf63634bab49e9d36aaa851b29a6e5e697210024046de71e96632e4ec38eef28d43fca0f6bed08431e769d644acb00d9397464fe19e28e5478938d72d6b620f6875da44aa12bdea6a661a6b15d42e8941abbfeb7a8d8627b98b179cfeec296980dfd836ba549e45ab6b3f5d9a22e4366995a1dc2a7544606dc6d038bfb77305b3e63a42011c9c196ac86b92733891c32219156018ee33d7f270b3706133555c98c9cbfaec3fef45a14595ffc8edb672f551f9977a7075322322672aba46cd810f5cfc7ee62142308f258d69bdb83a327da3a777430b2cb1db55ac2bece83b04a06716d4c6dac3e07d5334414e57cd4394befc4d46249008091b563160f2127ed2ba14c9c5b80f88b793de11c8f1635a0f881ce7727ca89fd5a6232f669133078b21f86749c4edc911ea955e3953e03a9d4f1343c75db6ef075196e2f26e4a6e443a71e86d5d5cd9e29fb93310583ca1dd2a096b4fa4a5b34a38e76c1b93ae8adf9efa8f8c8789bb868deabd608f5c63c12561381db63e638ad00a102d69181ffe7d6afe8d4d42147a65edb8a4849aee794335ffaaebfca1c2e93cb1eb505bb9d9847d0363970557d116f7f945251f73a6aab4e5d282610c25ca3115785c3c0a61ac5fc652cae1892030cdf982dd714865a9401aca19f8066f83c8a66cfda19410e61f37f58f48b644a4609c43d6f27b56fe918a563ff746906f1f447110147df9c1e8b175a35b89d3133155b6e78378e3b5a3e271983207a97f0a12d73e8163a0f6cd723bf1c54e96addb1dfea9a4d2bcb019b34b1af90bc3a0275a7d44806ba997652e77f001981daf175274ae444aa5d1aa5341066e4ccd8758291ed8544998135ec41fde31ec6df29aa9f679f217fcffa13ad65af97321b962c6f65f81e9a7bdd657e6ee3a605af4a65ebcdd66bbb734bd4c9ca62299ada34d1b140683f3644387e00258d65717dd54528619e99d55897fe780f9beced2e8b3e6d56e8e90537ed17f3a70c80c775527cb486c82a59003888a3ba72b4f4ff0698da105d3253e9feb5127563362dedb264bdefeb0d3ad3646381629573b36f824c1dfa9338b4512f97dba4585a88c366ee822379309cfe3595331fae57eac4a3debac847892c5d0349a03c3d8b13d36e8c7db01710f07587e008d58a3909432c9b80629be5549d384e08e1efb765ef7f165b24a88151aa5e4bb43180", 0x1000}, {&(0x7f00000002c0)="3e07854972d1704ca9b601b408f25e09b99211a822263c1b4fac130c86e17928111f13b29717d39f566fb0fb4240b5db7079c2ad68a1", 0x36}, {&(0x7f0000001800)="1adb5adcd41c1e1e7a8bd074bbae6392d2aa9f980053956e65d6340a8612d6daed784b81c109fff496ff62494c93c5008fc6f1aa5454ccda6247621d25fc5b4a6ff2568e452ec71655534507c7112fb0205c78dcb95a53da91e024bf44c78649f863d23f7f65c0b8d11ac2aa88a682a49b9cf2b8128522ee169e6ff1cda35f9f8dc002b41ab72cd5be7346e3204a62fa9ac1e137405bf7a33c0b92dccde3c15fafea40bda484505dd45b58ca591e5268", 0xb0}, {&(0x7f00000018c0)="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", 0xfc}, {&(0x7f00000019c0)="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", 0x1000}], 0x6, &(0x7f00000029c0)="340c8f31b14a0bf4265e3ee36b647a857d18635f8d8d1cfee1e83b1e3ec9a92ac4e8cd13c16c37a74fadde139fb6850f17d2116ec794f96f5b0b04da9e2025b629c9a83fa2e6b9836df2585839374f2d52f69ca9ded3c97178204290f3cccfb962d65bac01ffac26a3da9bbaabd13a5df638125ca41a277b35aba674a5f431518d8b0a3f595f28e17e4a2a13057006bf1d203269becf5ee5b595605a86fa5fd49f674042327b46c8f312524e226fc4aa2a7cf7a91cde732de1d53a6ee29113d30ba19a6126c41877e1f19b59bf0a1510bc", 0xd1, 0x20040800}, 0x40040800) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) ioctl$IMGETCOUNT(r2, 0x400261f2, &(0x7f0000002b00)) 382.057205ms ago: executing program 4 (id=12917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f38437", 0x7}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000500)=[{0x2, 0x2, {0x1, 0x1}, {0x2, 0xf0, 0x3}, 0x0, 0xfe}, {0x1, 0x0, {0x0, 0x0, 0x3}, {0x0, 0xff, 0x3}, 0x2}, {0x5, 0x2, {0x0, 0x1, 0x1}, {0x2, 0x0, 0x3}, 0x2, 0xff}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x2c, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0xfff3, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xac, 0xac}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 379.138326ms ago: executing program 2 (id=12918): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x80000001}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 259.167134ms ago: executing program 0 (id=12919): r0 = socket(0xa, 0x2, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x18, 0x20000001}, 0x20008000) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x7, 0xf}) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x7, 0xf}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000340)) 255.622257ms ago: executing program 2 (id=12920): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) accept4$tipc(r0, 0x0, 0x0, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000800)=""/4096, &(0x7f0000000080)=0x1000) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'veth0_to_team\x00', 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x1, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x40, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x18, 0x38, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x66, 0x0, 0x1, [@typed={0x9, 0x7e, 0x0, 0x0, @binary="ac66d0741d"}]}]}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 141.85502ms ago: executing program 0 (id=12921): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14003f00000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) 24.563429ms ago: executing program 0 (id=12922): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x20, 0x1}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, 0x0, &(0x7f0000000a00)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000001080)=[@in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}]}, &(0x7f0000000140)=0x10) 0s ago: executing program 4 (id=12923): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x1, 0x5) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000180)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x15, 0x0, @gue={{0x1, 0x0, 0x2, 0x0, 0x0, @void}, "e71108aee6cb56b9db"}}}}}}}, 0x3b) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) kernel console output (not intermixed with test programs): 7][T15680] ? bpf_token_put+0x143/0x160 [ 1375.034201][T15680] ? bpf_btf_load+0x126/0x190 [ 1375.034225][T15680] __sys_bpf+0x4e5/0x950 [ 1375.034258][T15680] ? __pfx___sys_bpf+0x10/0x10 [ 1375.034316][T15680] ? ksys_write+0x242/0x270 [ 1375.034340][T15680] ? __pfx_ksys_write+0x10/0x10 [ 1375.034369][T15680] __x64_sys_bpf+0x7c/0x90 [ 1375.034399][T15680] do_syscall_64+0x14d/0xf80 [ 1375.034430][T15680] ? trace_irq_disable+0x3b/0x150 [ 1375.034459][T15680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.034481][T15680] ? clear_bhb_loop+0x40/0x90 [ 1375.034508][T15680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.034529][T15680] RIP: 0033:0x7f260399c629 [ 1375.034550][T15680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1375.034569][T15680] RSP: 002b:00007f2604931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1375.034592][T15680] RAX: ffffffffffffffda RBX: 00007f2603c15fa0 RCX: 00007f260399c629 [ 1375.034613][T15680] RDX: 000000000000001f RSI: 0000200000000300 RDI: 0000000000000012 [ 1375.034627][T15680] RBP: 00007f2604931090 R08: 0000000000000000 R09: 0000000000000000 [ 1375.034640][T15680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1375.034653][T15680] R13: 00007f2603c16038 R14: 00007f2603c15fa0 R15: 00007ffd9a738e98 [ 1375.034687][T15680] [ 1375.522720][T15684] Cannot find set identified by id 0 to match [ 1375.685360][T15397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.761005][T15397] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.793571][ T6060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.800829][ T6060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.910933][ T6060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.918176][ T6060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.324072][ T6067] IPVS: stop unused estimator thread 0... [ 1376.353078][T15719] netlink: 'syz.1.11555': attribute type 11 has an invalid length. [ 1376.430660][T15712] lo speed is unknown, defaulting to 1000 [ 1376.452880][T15712] lo speed is unknown, defaulting to 1000 [ 1376.612597][T15728] bond0: entered promiscuous mode [ 1376.620840][T15728] bond_slave_0: entered promiscuous mode [ 1376.648355][T15728] bond_slave_1: entered promiscuous mode [ 1376.687444][T15728] gretap0: entered promiscuous mode [ 1376.693965][T15728] debugfs: 'hsr0' already exists in 'hsr' [ 1376.754458][T15728] Cannot create hsr debugfs directory [ 1376.794218][T15728] hsr0: entered promiscuous mode [ 1376.802105][T15737] xt_recent: hitcount (262143) is larger than allowed maximum (65535) [ 1376.896549][T15397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1377.001960][T15742] FAULT_INJECTION: forcing a failure. [ 1377.001960][T15742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.044110][T15397] veth0_vlan: entered promiscuous mode [ 1377.064450][T15742] CPU: 1 UID: 0 PID: 15742 Comm: syz.4.11559 Not tainted syzkaller #0 PREEMPT(full) [ 1377.064479][T15742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1377.064494][T15742] Call Trace: [ 1377.064503][T15742] [ 1377.064513][T15742] dump_stack_lvl+0xe8/0x150 [ 1377.064548][T15742] should_fail_ex+0x412/0x560 [ 1377.064579][T15742] _copy_to_user+0x31/0xb0 [ 1377.064613][T15742] bpf_verifier_vlog+0x5ec/0x8f0 [ 1377.064648][T15742] __btf_verifier_log+0xe2/0x140 [ 1377.064682][T15742] ? __pfx___btf_verifier_log+0x10/0x10 [ 1377.064723][T15742] __btf_verifier_log_type+0x3c6/0x690 [ 1377.064762][T15742] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 1377.064802][T15742] btf_struct_check_meta+0x400/0xcf0 [ 1377.064838][T15742] ? __pfx_sort+0x10/0x10 [ 1377.064865][T15742] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 1377.064889][T15742] btf_parse_type_sec+0x446/0x24f0 [ 1377.064931][T15742] ? __pfx_btf_check_sec_info+0x10/0x10 [ 1377.064957][T15742] ? btf_parse_str_sec+0x212/0x2a0 [ 1377.064993][T15742] btf_new_fd+0x426/0xd10 [ 1377.065024][T15742] ? __pfx_btf_new_fd+0x10/0x10 [ 1377.065046][T15742] ? bpf_token_put+0x143/0x160 [ 1377.065071][T15742] ? bpf_btf_load+0x126/0x190 [ 1377.065094][T15742] __sys_bpf+0x4e5/0x950 [ 1377.065191][T15742] ? __pfx___sys_bpf+0x10/0x10 [ 1377.065239][T15742] ? ksys_write+0x242/0x270 [ 1377.065265][T15742] ? __pfx_ksys_write+0x10/0x10 [ 1377.065295][T15742] __x64_sys_bpf+0x7c/0x90 [ 1377.065325][T15742] do_syscall_64+0x14d/0xf80 [ 1377.065356][T15742] ? trace_irq_disable+0x3b/0x150 [ 1377.065387][T15742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.065409][T15742] ? clear_bhb_loop+0x40/0x90 [ 1377.065435][T15742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.065458][T15742] RIP: 0033:0x7f045ab9c629 [ 1377.065485][T15742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1377.065503][T15742] RSP: 002b:00007f0458df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1377.065527][T15742] RAX: ffffffffffffffda RBX: 00007f045ae15fa0 RCX: 00007f045ab9c629 [ 1377.065544][T15742] RDX: 000000000000001f RSI: 0000200000000300 RDI: 0000000000000012 [ 1377.065558][T15742] RBP: 00007f0458df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.065571][T15742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1377.065584][T15742] R13: 00007f045ae16038 R14: 00007f045ae15fa0 R15: 00007ffcaf01c1d8 [ 1377.065620][T15742] [ 1377.174866][T15397] veth1_vlan: entered promiscuous mode [ 1377.391664][T15724] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1377.400733][T15724] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1377.929747][T15397] veth0_macvtap: entered promiscuous mode [ 1377.974904][T15397] veth1_macvtap: entered promiscuous mode [ 1377.986904][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5220 ms [ 1377.995156][ C0] lec:lec_tx_timeout: lec0 [ 1378.188270][T15397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1378.254254][T15397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1378.339916][ T6063] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.377319][ T6063] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.386124][ T6063] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.487423][ T6063] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.643903][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11565'. [ 1378.854816][ T6067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.884430][ T6067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.076460][ T6074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.096262][ T6074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.719279][T15842] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11580'. [ 1379.776303][T15846] sctp: [Deprecated]: syz.3.11579 (pid 15846) Use of int in maxseg socket option. [ 1379.776303][T15846] Use struct sctp_assoc_value instead [ 1380.110369][T15855] netlink: 'syz.0.11583': attribute type 1 has an invalid length. [ 1380.196811][T15855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1380.257364][T15855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11583'. [ 1380.329586][T15852] bond3: (slave veth5): Enslaving as an active interface with a down link [ 1380.584457][T15873] bond1 (unregistering): Released all slaves [ 1381.221748][T15905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11596'. [ 1381.307953][T15914] xt_socket: unknown flags 0xfc [ 1381.429848][T15909] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1381.471459][T15909] bond0: entered promiscuous mode [ 1381.476573][T15909] syz_tun: entered promiscuous mode [ 1381.485788][T15909] batadv0: entered promiscuous mode [ 1381.522489][T15909] debugfs: 'hsr1' already exists in 'hsr' [ 1381.542888][T15909] Cannot create hsr debugfs directory [ 1381.568452][T15909] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1381.629546][T15909] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1381.687892][T15909] bond0: left promiscuous mode [ 1381.692806][T15909] syz_tun: left promiscuous mode [ 1381.700822][T15940] tls_set_device_offload_rx: netdev not found [ 1381.722391][T15909] batadv0: left promiscuous mode [ 1381.772320][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11602'. [ 1381.842763][T15942] pimreg: entered allmulticast mode [ 1381.951896][T15948] gtp0: entered promiscuous mode [ 1381.960408][T15948] gtp0: entered allmulticast mode [ 1382.482881][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11614'. [ 1382.495632][T15978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11613'. [ 1382.856236][T15991] netlink: 'syz.2.11616': attribute type 2 has an invalid length. [ 1382.868625][T15991] netlink: 'syz.2.11616': attribute type 1 has an invalid length. [ 1383.008982][T16000] FAULT_INJECTION: forcing a failure. [ 1383.008982][T16000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1383.059957][T16000] CPU: 1 UID: 0 PID: 16000 Comm: syz.0.11617 Not tainted syzkaller #0 PREEMPT(full) [ 1383.059987][T16000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1383.060001][T16000] Call Trace: [ 1383.060010][T16000] [ 1383.060019][T16000] dump_stack_lvl+0xe8/0x150 [ 1383.060054][T16000] should_fail_ex+0x412/0x560 [ 1383.060083][T16000] _copy_to_user+0x31/0xb0 [ 1383.060115][T16000] simple_read_from_buffer+0xe1/0x170 [ 1383.060149][T16000] proc_fail_nth_read+0x1bb/0x230 [ 1383.060182][T16000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1383.060215][T16000] ? rw_verify_area+0x2a6/0x4d0 [ 1383.060235][T16000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1383.060265][T16000] vfs_read+0x20c/0xa70 [ 1383.060285][T16000] ? fdget_pos+0x246/0x320 [ 1383.060317][T16000] ? __pfx___mutex_lock+0x10/0x10 [ 1383.060350][T16000] ? __pfx_vfs_read+0x10/0x10 [ 1383.060370][T16000] ? __fget_files+0x2a/0x420 [ 1383.060401][T16000] ? __fget_files+0x3a0/0x420 [ 1383.060427][T16000] ? __fget_files+0x2a/0x420 [ 1383.060463][T16000] ksys_read+0x150/0x270 [ 1383.060486][T16000] ? __pfx_ksys_read+0x10/0x10 [ 1383.060518][T16000] do_syscall_64+0x14d/0xf80 [ 1383.060548][T16000] ? trace_irq_disable+0x3b/0x150 [ 1383.060579][T16000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.060600][T16000] ? clear_bhb_loop+0x40/0x90 [ 1383.060625][T16000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.060646][T16000] RIP: 0033:0x7f260395cece [ 1383.060671][T16000] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1383.060689][T16000] RSP: 002b:00007f260490ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1383.060710][T16000] RAX: ffffffffffffffda RBX: 00007f26049106c0 RCX: 00007f260395cece [ 1383.060725][T16000] RDX: 000000000000000f RSI: 00007f26049100a0 RDI: 0000000000000007 [ 1383.060739][T16000] RBP: 00007f2604910090 R08: 0000000000000000 R09: 0000000000000000 [ 1383.060752][T16000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1383.060790][T16000] R13: 00007f2603c16128 R14: 00007f2603c16090 R15: 00007ffd9a738e98 [ 1383.060824][T16000] [ 1383.302063][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11619'. [ 1383.740600][T16038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11627'. [ 1383.948295][T16056] lo speed is unknown, defaulting to 1000 [ 1383.989274][T16056] lo speed is unknown, defaulting to 1000 [ 1384.121964][T16068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11634'. [ 1384.683846][T16094] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11640'. [ 1384.715133][T16094] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11640'. [ 1384.751393][T16094] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11640'. [ 1384.787070][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1384.926715][T16110] netlink: 'syz.1.11640': attribute type 21 has an invalid length. [ 1384.968593][T16110] netlink: 'syz.1.11640': attribute type 3 has an invalid length. [ 1385.010522][T16110] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11640'. [ 1385.078173][T16114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11645'. [ 1385.534198][T16136] netlink: 'syz.4.11649': attribute type 1 has an invalid length. [ 1385.555084][T16136] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11649'. [ 1385.569904][T16136] netlink: 348 bytes leftover after parsing attributes in process `syz.4.11649'. [ 1385.857195][T16146] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11653'. [ 1386.237551][T16171] netlink: 'syz.2.11656': attribute type 10 has an invalid length. [ 1386.318658][T16174] syzkaller0: refused to change device tx_queue_len [ 1386.491021][T16184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1387.533525][T16243] gretap3: entered promiscuous mode [ 1387.554817][T16243] batman_adv: batadv0: Adding interface: gretap3 [ 1387.605804][T16243] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.648375][T16243] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 1388.398553][T16254] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 1388.872062][T16292] syzkaller0: entered promiscuous mode [ 1388.907223][T16292] syzkaller0: entered allmulticast mode [ 1388.956009][T16301] __nla_validate_parse: 7 callbacks suppressed [ 1388.956031][T16301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11689'. [ 1388.985687][T16292] x_tables: duplicate entry at hook 3 [ 1389.810667][T16345] team0: Device gtp0 is of different type [ 1390.000965][T16349] lo speed is unknown, defaulting to 1000 [ 1390.013273][T16349] lo speed is unknown, defaulting to 1000 [ 1390.576199][T16375] syzkaller0: entered promiscuous mode [ 1390.585381][T16375] syzkaller0: entered allmulticast mode [ 1390.675425][T16384] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11713'. [ 1390.715517][T16375] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1391.171548][T16405] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11719'. [ 1391.229136][T16405] netlink: 35 bytes leftover after parsing attributes in process `syz.1.11719'. [ 1391.239394][T16405] netlink: 'syz.1.11719': attribute type 6 has an invalid length. [ 1391.248515][T16405] netlink: 'syz.1.11719': attribute type 5 has an invalid length. [ 1391.256377][T16405] netlink: 35 bytes leftover after parsing attributes in process `syz.1.11719'. [ 1391.276694][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11718'. [ 1391.342438][T16408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11718'. [ 1391.441095][T16408] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1391.614371][T16403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11718'. [ 1391.669101][T16403] macsec1: entered promiscuous mode [ 1391.674459][T16403] bond4: entered promiscuous mode [ 1391.680275][T16403] macsec1: entered allmulticast mode [ 1391.688309][T16403] bond4: entered allmulticast mode [ 1391.720174][T16403] bond4: left allmulticast mode [ 1391.733023][T16403] bond4: left promiscuous mode [ 1391.955875][T16425] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11723'. [ 1391.976546][T16425] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1392.005937][T16425] lo: Caught tx_queue_len zero misconfig [ 1392.013012][T16425] netlink: 'syz.3.11723': attribute type 9 has an invalid length. [ 1392.105856][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11725'. [ 1392.159160][T16433] sctp: [Deprecated]: syz.1.11725 (pid 16433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1392.159160][T16433] Use struct sctp_sack_info instead [ 1392.179355][T16432] netlink: 'syz.1.11725': attribute type 1 has an invalid length. [ 1392.188448][T16432] netlink: 'syz.1.11725': attribute type 11 has an invalid length. [ 1392.224369][T16433] netlink: 'syz.1.11725': attribute type 1 has an invalid length. [ 1392.248875][T16433] netlink: 'syz.1.11725': attribute type 11 has an invalid length. [ 1392.488626][T16451] netlink: 'syz.0.11729': attribute type 1 has an invalid length. [ 1392.621869][T16451] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1392.875723][T16469] netlink: 'syz.2.11733': attribute type 1 has an invalid length. [ 1392.940351][T16469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1393.352977][T16499] netlink: 'syz.1.11742': attribute type 66 has an invalid length. [ 1393.739969][T16518] bond7: entered promiscuous mode [ 1393.937129][T16529] lo speed is unknown, defaulting to 1000 [ 1393.944867][T16529] lo speed is unknown, defaulting to 1000 [ 1394.463143][T25966] IPVS: starting estimator thread 0... [ 1394.488548][T16545] __nla_validate_parse: 8 callbacks suppressed [ 1394.488569][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11750'. [ 1394.567204][T16543] IPVS: using max 27 ests per chain, 64800 per kthread [ 1394.811497][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11752'. [ 1394.848749][T16555] gretap2: entered promiscuous mode [ 1395.722856][T16600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11761'. [ 1395.789602][T16602] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11762'. [ 1396.072797][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11766'. [ 1396.401206][T16629] netlink: 'syz.2.11769': attribute type 1 has an invalid length. [ 1396.533521][T16639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11769'. [ 1396.786170][T16634] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1396.819711][T16634] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1396.879774][T16639] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 1396.953099][T16644] bond8: option ad_select: invalid value (34) [ 1396.983846][T16655] netlink: 'syz.0.11776': attribute type 21 has an invalid length. [ 1397.007644][T16644] bond8 (unregistering): Released all slaves [ 1397.104882][T16643] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 1397.139644][T16664] netlink: 'syz.0.11776': attribute type 2 has an invalid length. [ 1397.139650][T16649] macvlan2: entered promiscuous mode [ 1397.139683][T16649] macvlan2: entered allmulticast mode [ 1397.161463][T16649] bond2: entered promiscuous mode [ 1397.172546][T16649] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1397.219278][T16649] bond2: left promiscuous mode [ 1397.239975][T16655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11776'. [ 1397.266630][T16655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11776'. [ 1397.305762][T16669] netlink: 'syz.3.11777': attribute type 1 has an invalid length. [ 1397.344773][T16662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11775'. [ 1397.356658][T16669] netlink: 88 bytes leftover after parsing attributes in process `syz.3.11777'. [ 1397.391843][T16664] m1Ie5èÿá: entered promiscuous mode [ 1397.408083][T16669] netlink: 'syz.3.11777': attribute type 1 has an invalid length. [ 1397.487160][ T30] audit: type=1800 audit(1771570602.812:13): pid=16678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11779" name="memory.events" dev="tmpfs" ino=200 res=0 errno=0 [ 1397.761622][T16692] xt_ecn: cannot match TCP bits for non-tcp packets [ 1398.701271][T16751] netlink: 'syz.3.11797': attribute type 21 has an invalid length. [ 1398.721013][T16751] netlink: 'syz.3.11797': attribute type 6 has an invalid length. [ 1400.010826][T16826] lo speed is unknown, defaulting to 1000 [ 1400.032083][T16826] lo speed is unknown, defaulting to 1000 [ 1400.338732][T16842] lo speed is unknown, defaulting to 1000 [ 1400.425312][T16842] lo speed is unknown, defaulting to 1000 [ 1400.639963][T16847] __nla_validate_parse: 6 callbacks suppressed [ 1400.639983][T16847] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11820'. [ 1401.991774][T16767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1402.210450][T16862] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1402.251761][T16862] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1402.419385][T16876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11827'. [ 1402.598689][T16882] tipc: Resetting bearer [ 1402.623635][T16885] xt_nfacct: accounting object `syz0' does not exist [ 1403.518594][T16924] netlink: 'syz.1.11835': attribute type 2 has an invalid length. [ 1403.548461][T16924] netlink: 'syz.1.11835': attribute type 1 has an invalid length. [ 1403.556540][T16924] netlink: 'syz.1.11835': attribute type 1 has an invalid length. [ 1403.707738][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11838'. [ 1404.039151][T16947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11841'. [ 1404.077190][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11840'. [ 1404.518856][T16972] netlink: 'syz.0.11846': attribute type 1 has an invalid length. [ 1404.639136][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11846'. [ 1404.769045][T16972] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1405.220930][T17007] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11852'. [ 1405.242484][T17009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11853'. [ 1405.251463][T17007] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11852'. [ 1405.384738][T17015] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 1405.582433][T17021] ip6gre0: entered promiscuous mode [ 1405.626736][T17019] veth1: entered promiscuous mode [ 1405.639480][T17019] veth1: entered allmulticast mode [ 1405.647590][T17016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11854'. [ 1405.657668][T17019] netlink: 'syz.4.11856': attribute type 2 has an invalid length. [ 1405.808969][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11860'. [ 1405.875864][T17033] lo speed is unknown, defaulting to 1000 [ 1405.928541][T17033] lo speed is unknown, defaulting to 1000 [ 1406.162667][T17052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11861'. [ 1406.608970][T17059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11863'. [ 1407.273176][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11869'. [ 1407.328243][T17092] lo speed is unknown, defaulting to 1000 [ 1407.335885][T17092] lo speed is unknown, defaulting to 1000 [ 1407.824526][T17105] vlan0: entered allmulticast mode [ 1407.877970][T17105] team0: entered allmulticast mode [ 1407.883178][T17105] team_slave_0: entered allmulticast mode [ 1407.961247][T17105] team_slave_1: entered allmulticast mode [ 1408.521758][T17127] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11878'. [ 1409.134410][T17148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11882'. [ 1409.486483][T17160] lo speed is unknown, defaulting to 1000 [ 1409.499136][T17160] lo speed is unknown, defaulting to 1000 [ 1409.845642][T17172] lo speed is unknown, defaulting to 1000 [ 1410.168038][T17172] lo speed is unknown, defaulting to 1000 [ 1410.230975][T17190] tipc: Started in network mode [ 1410.235966][T17190] tipc: Node identity 5e7c5db63f1, cluster identity 4711 [ 1410.243573][T17190] tipc: Enabled bearer , priority 0 [ 1410.395659][T17190] syzkaller0: entered promiscuous mode [ 1410.413129][T17190] syzkaller0: entered allmulticast mode [ 1410.495559][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.507425][T17190] tipc: Resetting bearer [ 1410.562373][T17190] tipc: Disabling bearer [ 1410.845210][T17195] lo speed is unknown, defaulting to 1000 [ 1410.857051][T17195] lo speed is unknown, defaulting to 1000 [ 1411.033812][T17217] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1411.244319][T17219] lo speed is unknown, defaulting to 1000 [ 1411.540637][T17219] lo speed is unknown, defaulting to 1000 [ 1412.026983][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11900'. [ 1412.232111][T17255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1412.576643][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11906'. [ 1413.420712][T17309] netlink: 'syz.3.11909': attribute type 1 has an invalid length. [ 1413.630039][T17317] sock: sock_timestamping_bind_phc: sock not bind to device [ 1413.637944][T17317] sock: sock_timestamping_bind_phc: sock not bind to device [ 1414.044251][T17328] veth0_virt_wifi: entered promiscuous mode [ 1414.057129][T17328] veth0_virt_wifi: left promiscuous mode [ 1414.224289][T17346] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1414.363656][T17360] lo speed is unknown, defaulting to 1000 [ 1414.455617][T17359] bond2 (unregistering): Released all slaves [ 1414.498550][T17369] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11921'. [ 1414.540971][T17360] lo speed is unknown, defaulting to 1000 [ 1414.629396][T17376] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11927'. [ 1414.819562][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11923'. [ 1415.265861][T17354] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1415.308587][T17354] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1416.342604][T17445] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11943'. [ 1416.373224][T17448] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.11942'. [ 1416.407549][T17443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11943'. [ 1416.425840][T17447] No such timeout policy "syz1" [ 1416.628487][T17458] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1416.642288][T17457] lo speed is unknown, defaulting to 1000 [ 1416.708726][T17457] lo speed is unknown, defaulting to 1000 [ 1416.803037][T17456] lo speed is unknown, defaulting to 1000 [ 1416.912492][T17471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11947'. [ 1416.966239][T17473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11949'. [ 1417.178418][T17456] lo speed is unknown, defaulting to 1000 [ 1417.967683][T17498] batman_adv: batadv0: Adding interface: dummy0 [ 1417.991478][T17498] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.047314][T17498] batman_adv: batadv0: Interface activated: dummy0 [ 1418.154410][T17503] batadv0: mtu less than device minimum [ 1418.204974][T17503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1418.216919][T17503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1418.228802][T17503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1418.240688][T17503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1418.252509][T17503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1418.264388][T17503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1418.276260][T17503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1418.288132][T17503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1418.299984][T17503] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1418.461124][T17513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11957'. [ 1418.743970][T17511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11957'. [ 1418.791465][T17518] lo speed is unknown, defaulting to 1000 [ 1418.805201][T17518] lo speed is unknown, defaulting to 1000 [ 1418.823988][T17526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11960'. [ 1419.194914][T17534] syzkaller1: entered promiscuous mode [ 1419.219618][T17534] syzkaller1: entered allmulticast mode [ 1419.353659][T17541] netlink: 'syz.4.11963': attribute type 1 has an invalid length. [ 1419.480400][T17543] netlink: 'syz.2.11964': attribute type 12 has an invalid length. [ 1419.987283][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1420.332719][T17561] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11966'. [ 1420.358076][T17556] netlink: 211720 bytes leftover after parsing attributes in process `syz.1.11965'. [ 1420.390661][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11965'. [ 1420.435594][T17561] netlink: 'syz.2.11966': attribute type 1 has an invalid length. [ 1420.457136][T17561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11966'. [ 1420.510755][T17561] nbd: must specify a size in bytes for the device [ 1420.603289][T17570] syz_tun: entered promiscuous mode [ 1420.627691][T17570] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1420.657733][T17570] syz_tun: left promiscuous mode [ 1420.743255][T17577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11971'. [ 1420.820416][T17580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11971'. [ 1420.999708][T17574] syzkaller0: entered promiscuous mode [ 1421.015476][T17574] syzkaller0: entered allmulticast mode [ 1421.432778][T17612] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1423.190953][ T1298] net_ratelimit: 10 callbacks suppressed [ 1423.190975][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.219684][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1423.226050][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.670693][T17605] tipc: Started in network mode [ 1423.675773][T17605] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 1423.684796][T17605] tipc: Enabled bearer , priority 0 [ 1423.888235][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11988'. [ 1424.297961][T17661] netlink: 'syz.0.11995': attribute type 4 has an invalid length. [ 1424.309871][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11994'. [ 1424.327925][T17661] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.11995'. [ 1424.468871][T17665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11996'. [ 1424.687778][T25966] tipc: Node number set to 10070698 [ 1424.879396][T17695] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12003'. [ 1424.892535][T17695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12003'. [ 1425.680341][T17729] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1425.719118][T17729] bond2 (unregistering): Released all slaves [ 1425.726520][T17742] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.12016'. [ 1426.169983][T17772] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 1426.319754][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12026'. [ 1426.369762][T17781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12026'. [ 1427.111156][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12034'. [ 1429.026862][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5810 ms [ 1429.034956][ C0] lec:lec_tx_timeout: lec0 [ 1429.063201][T17821] lo speed is unknown, defaulting to 1000 [ 1429.100041][T17821] lo speed is unknown, defaulting to 1000 [ 1429.415854][T17854] netlink: 'syz.4.12045': attribute type 3 has an invalid length. [ 1429.469158][T17854] block nbd4: NBD_DISCONNECT [ 1429.565280][T17860] __nla_validate_parse: 1 callbacks suppressed [ 1429.565303][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12045'. [ 1429.638973][T17863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12047'. [ 1429.688661][T17854] siw: device registration error -23 [ 1430.578264][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12054'. [ 1430.637629][T17902] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12054'. [ 1430.677130][T17902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12054'. [ 1430.693737][T17898] bond8: entered promiscuous mode [ 1430.705786][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12054'. [ 1430.785794][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12054'. [ 1431.061359][ T30] audit: type=1107 audit(1771570636.392:14): pid=17922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1431.130906][T17917] netlink: 'syz.0.12057': attribute type 5 has an invalid length. [ 1431.248507][T17917] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.12057'. [ 1431.266714][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12061'. [ 1431.335047][T17931] netlink: 'syz.2.12063': attribute type 1 has an invalid length. [ 1431.366568][T17931] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.12063'. [ 1431.636289][T17947] tipc: Enabled bearer , priority 0 [ 1431.855848][T17947] syzkaller0: entered promiscuous mode [ 1431.877948][T17947] syzkaller0: entered allmulticast mode [ 1431.886540][T17947] tipc: Resetting bearer [ 1431.899058][T17959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.909216][T17959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.920993][T17956] netem: change failed [ 1431.954878][T17959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.982388][T17970] netlink: 'syz.4.12070': attribute type 1 has an invalid length. [ 1432.031972][T17945] tipc: Resetting bearer [ 1432.277111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.288036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.608728][T17957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.028049][T17945] tipc: Disabling bearer [ 1434.052807][T17962] lo speed is unknown, defaulting to 1000 [ 1434.060635][T17970] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1434.086922][T17962] lo speed is unknown, defaulting to 1000 [ 1434.261552][T17992] openvswitch: netlink: Message has 8 unknown bytes. [ 1434.338327][T17994] batadv_slave_0: entered promiscuous mode [ 1434.362404][T17994] batman_adv: batadv0: Adding interface: macsec1 [ 1434.392192][T17994] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.445435][T18000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1434.482753][T17994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.510880][T17994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.541867][T17994] batman_adv: batadv0: Interface activated: macsec1 [ 1434.558469][T18003] can: request_module (can-proto-3) failed. [ 1434.579083][T17994] batadv0: mtu less than device minimum [ 1434.593454][T17994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1434.865719][T18018] __nla_validate_parse: 5 callbacks suppressed [ 1434.865740][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12079'. [ 1434.885569][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12079'. [ 1434.900529][T18021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1434.924781][T18021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1434.942659][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12079'. [ 1434.953815][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12079'. [ 1434.968144][T18021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1435.054338][T18021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1435.094877][T18021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1435.136523][T18021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1435.175961][T18021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1435.197034][T18021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1435.244676][T18021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1435.318685][T18021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1435.884097][T18052] vlan2: entered allmulticast mode [ 1435.929736][T18052] team0: entered allmulticast mode [ 1435.989915][T18056] netlink: 'syz.0.12088': attribute type 16 has an invalid length. [ 1436.092786][T18056] netlink: 'syz.0.12088': attribute type 17 has an invalid length. [ 1436.216411][T18075] netlink: 'syz.1.12090': attribute type 11 has an invalid length. [ 1436.255080][T18077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12091'. [ 1436.301671][T18056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.373273][T18056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.454308][T18086] rdma_rxe: rxe_newlink: failed to add lo [ 1436.620136][T18951] lec:lec_start_xmit: lec0:No lecd attached [ 1436.679035][T18094] netlink: 'syz.3.12095': attribute type 1 has an invalid length. [ 1436.712728][T18094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12095'. [ 1437.312646][T18116] netlink: 'syz.4.12101': attribute type 3 has an invalid length. [ 1437.459108][T18122] geneve4: entered promiscuous mode [ 1437.556260][T18128] syzkaller1: entered promiscuous mode [ 1437.571234][T18128] syzkaller1: entered allmulticast mode [ 1437.664738][T18137] netlink: 'syz.3.12106': attribute type 1 has an invalid length. [ 1437.727958][T18137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12106'. [ 1437.931884][T18147] wg1: entered promiscuous mode [ 1437.940707][T18147] wg1: entered allmulticast mode [ 1437.978169][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12111'. [ 1438.049639][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12111'. [ 1438.309456][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12113'. [ 1438.401862][T18179] block nbd2: reconnected socket [ 1438.751389][ T2178] block nbd2: Receive control failed (result -32) [ 1438.908040][T18204] netlink: 'syz.4.12116': attribute type 10 has an invalid length. [ 1438.997972][T18204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.067915][T18204] bond0: (slave team0): Enslaving as an active interface with an up link [ 1439.364152][T18222] lo speed is unknown, defaulting to 1000 [ 1439.420534][T18222] lo speed is unknown, defaulting to 1000 [ 1439.983602][T18262] __nla_validate_parse: 4 callbacks suppressed [ 1439.983642][T18262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12132'. [ 1440.005189][T18262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12132'. [ 1440.079930][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12134'. [ 1440.103767][T18267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12134'. [ 1440.127280][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12134'. [ 1440.248869][T18272] sctp: [Deprecated]: syz.4.12133 (pid 18272) Use of int in maxseg socket option. [ 1440.248869][T18272] Use struct sctp_assoc_value instead [ 1440.563226][T18288] netlink: 209868 bytes leftover after parsing attributes in process `syz.2.12141'. [ 1440.630856][T18288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12141'. [ 1440.905292][T18296] xt_hashlimit: max too large, truncated to 1048576 [ 1441.371887][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12148'. [ 1441.552585][T18319] lo speed is unknown, defaulting to 1000 [ 1441.621867][T18324] lo speed is unknown, defaulting to 1000 [ 1441.633324][T18319] lo speed is unknown, defaulting to 1000 [ 1441.986982][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5370 ms [ 1441.995123][ C0] lec:lec_tx_timeout: lec0 [ 1442.310632][T18353] netlink: 'syz.1.12155': attribute type 5 has an invalid length. [ 1442.567840][T18363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1442.651978][T18324] lo speed is unknown, defaulting to 1000 [ 1442.929028][T18388] netlink: 'syz.1.12163': attribute type 1 has an invalid length. [ 1443.128253][T18388] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1443.575385][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12169'. [ 1443.864585][T18425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12171'. [ 1444.082332][T18424] bond7: Removing last arp target with arp_interval on [ 1444.110718][T18429] bridge_slave_1: left allmulticast mode [ 1444.116494][T18429] bridge_slave_1: left promiscuous mode [ 1444.127527][T18429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.140144][T18429] bridge_slave_0: left allmulticast mode [ 1444.146072][T18429] bridge_slave_0: left promiscuous mode [ 1444.153135][T18429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.179742][T18429] bridge0 (unregistering): left allmulticast mode [ 1444.348745][T18435] bridge7: entered promiscuous mode [ 1444.369737][T18435] bridge7: entered allmulticast mode [ 1444.390774][T18435] team0: Port device bridge7 added [ 1444.817936][T18464] netlink: 'syz.0.12178': attribute type 1 has an invalid length. [ 1445.446000][T18501] __nla_validate_parse: 2 callbacks suppressed [ 1445.446021][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12190'. [ 1445.494958][T18500] bond9: option min_links: invalid value (18446744073709551612) [ 1445.504034][T18500] bond9: option min_links: allowed values 0 - 2147483647 [ 1445.549061][T18500] bond9 (unregistering): Released all slaves [ 1445.575433][T18501] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12190'. [ 1445.586410][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12185'. [ 1445.668998][T18501] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.700923][T18501] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.776398][T18507] tipc: Enabling of bearer rejected, failed to enable media [ 1445.863796][T18501] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.885135][T18501] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.014447][T18501] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1446.025785][T18501] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.118355][T18501] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1446.129932][T18501] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.281988][T18534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12198'. [ 1446.314202][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12194'. [ 1446.327171][T18534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12198'. [ 1446.347862][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12194'. [ 1446.370163][T18534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12198'. [ 1446.414142][ T6067] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.426508][T18540] netlink: 'syz.1.12198': attribute type 4 has an invalid length. [ 1446.445411][ T6067] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.554580][ T95] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.575158][ T95] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.688115][ T6070] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.711402][ T5141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1446.741341][ T6070] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.757839][ T5141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1446.771753][ T5141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1446.774699][ T6070] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.788893][ T5141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1446.805080][ T5141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1446.891829][ T6070] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.917375][ T2178] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1446.931619][ T2178] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1446.941126][ T2178] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1446.959515][ T2178] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1446.974292][ T2178] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1447.280125][ T5165] bond0: (slave syz_tun): Releasing backup interface [ 1447.309712][ T5165] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1447.499767][T18569] netlink: 'syz.1.12202': attribute type 1 has an invalid length. [ 1447.559809][T18569] net_ratelimit: 19 callbacks suppressed [ 1447.559831][T18569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1447.576777][T18552] lo speed is unknown, defaulting to 1000 [ 1447.595904][T18552] lo speed is unknown, defaulting to 1000 [ 1447.682098][T18571] syzkaller0: entered promiscuous mode [ 1447.719657][T18571] syzkaller0: entered allmulticast mode [ 1447.762472][T18593] Unsupported ieee802154 address type: 0 [ 1448.591303][T18625] netlink: 'syz.2.12211': attribute type 1 has an invalid length. [ 1448.610209][T18625] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12211'. [ 1448.630888][T18625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.640428][T18625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.700791][T18552] chnl_net:caif_netlink_parms(): no params data found [ 1448.897571][T18637] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12213'. [ 1448.933862][T18552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.942443][T18552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.950993][T18552] bridge_slave_0: entered allmulticast mode [ 1448.959813][T18552] bridge_slave_0: entered promiscuous mode [ 1448.971085][T18552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.979033][T18552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.986369][T18552] bridge_slave_1: entered allmulticast mode [ 1448.994681][T18552] bridge_slave_1: entered promiscuous mode [ 1449.027693][ T2178] Bluetooth: hci0: command tx timeout [ 1449.038731][T18552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.071087][T18552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1449.117690][T18642] IPv6: Can't replace route, no match found [ 1449.228022][T18552] team0: Port device team_slave_0 added [ 1449.252375][T18552] team0: Port device team_slave_1 added [ 1449.285147][T18604] lo speed is unknown, defaulting to 1000 [ 1449.341736][T18552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.357083][T18552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.398020][T18552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.410094][T18604] lo speed is unknown, defaulting to 1000 [ 1449.443599][T18552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.457195][T18552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.484025][T18552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.528826][T18655] netlink: 'syz.0.12216': attribute type 1 has an invalid length. [ 1449.658497][T18552] hsr_slave_0: entered promiscuous mode [ 1449.665704][T18552] hsr_slave_1: entered promiscuous mode [ 1449.672874][T18552] debugfs: 'hsr0' already exists in 'hsr' [ 1449.678981][T18552] Cannot create hsr debugfs directory [ 1449.685869][T18659] syzkaller0: entered promiscuous mode [ 1449.691898][T18659] syzkaller0: entered allmulticast mode [ 1449.725541][T18659] tipc: Enabled bearer , priority 0 [ 1449.785841][T18659] tipc: Resetting bearer [ 1449.805507][T18658] tipc: Resetting bearer [ 1449.828642][T18658] tipc: Disabling bearer [ 1450.132937][T18552] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.337165][T18671] bond3: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1450.364170][T18671] bond3 (unregistering): Released all slaves [ 1450.423614][T18552] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.507128][T18552] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.625524][T18552] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.678405][T18691] xt_cgroup: xt_cgroup: no path or classid specified [ 1450.960992][T18552] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1450.983752][T18702] sctp: [Deprecated]: syz.2.12227 (pid 18702) Use of int in maxseg socket option. [ 1450.983752][T18702] Use struct sctp_assoc_value instead [ 1451.002568][T18552] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1451.074911][T18552] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1451.107104][ T2178] Bluetooth: hci0: command tx timeout [ 1451.118404][T18552] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1451.335565][T18702] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1451.388820][T18702] team0 (unregistering): Port device team_slave_0 removed [ 1451.447150][T18702] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1451.456695][T18702] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1451.478580][T18702] team0 (unregistering): Port device team_slave_1 removed [ 1451.581583][T18731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1451.599707][T18738] __nla_validate_parse: 2 callbacks suppressed [ 1451.599728][T18738] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12233'. [ 1451.645722][T18736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12232'. [ 1451.686588][T18740] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12232'. [ 1451.885211][T18745] lo speed is unknown, defaulting to 1000 [ 1451.903131][T18748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12235'. [ 1451.960679][T18745] lo speed is unknown, defaulting to 1000 [ 1451.980170][T18552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.044394][T18552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.077446][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.084857][ T6062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.141105][ T8104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.148387][ T8104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.189671][T18756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12237'. [ 1452.519527][T18773] netlink: 'syz.0.12241': attribute type 1 has an invalid length. [ 1452.585445][T18768] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.618362][T18775] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.12241'. [ 1452.657352][T18775] netlink: ct family unspecified [ 1452.768545][T18773] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1452.813799][T18765] lo speed is unknown, defaulting to 1000 [ 1452.909677][T18768] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.968996][T18765] lo speed is unknown, defaulting to 1000 [ 1453.112706][T18787] x_tables: duplicate entry at hook 2 [ 1453.190166][T18768] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.199300][ T2178] Bluetooth: hci0: command tx timeout [ 1453.444011][T18768] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.515734][T18552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.529689][T18795] netlink: 'syz.3.12245': attribute type 10 has an invalid length. [ 1453.560019][T18795] syz_tun: entered promiscuous mode [ 1453.882306][ T8104] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1453.933290][ T8104] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.966981][ T8104] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1453.992785][ T8104] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.036555][ T8104] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1454.054517][ T8104] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.084224][ T8104] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1454.103016][ T8104] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.141469][T18811] x_tables: duplicate underflow at hook 1 [ 1454.358151][T18816] bridge5: entered promiscuous mode [ 1454.363489][T18816] bridge5: entered allmulticast mode [ 1454.390436][ T8104] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.417939][ T8104] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.554782][ T6061] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.681162][ T8104] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.847417][T18552] veth0_vlan: entered promiscuous mode [ 1454.862649][T18845] netlink: 'syz.1.12254': attribute type 1 has an invalid length. [ 1454.900323][T18552] veth1_vlan: entered promiscuous mode [ 1454.981157][T18851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12254'. [ 1455.009436][T18851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12254'. [ 1455.060446][T18845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1455.094382][T18849] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1455.104979][T18849] team0: Port device macvlan0 added [ 1455.169268][T18851] geneve5: entered promiscuous mode [ 1455.184208][T18851] geneve5: entered allmulticast mode [ 1455.268756][ T2178] Bluetooth: hci0: command tx timeout [ 1455.335862][T18552] veth0_macvtap: entered promiscuous mode [ 1455.374267][T18552] veth1_macvtap: entered promiscuous mode [ 1455.435656][T18860] lo speed is unknown, defaulting to 1000 [ 1455.461418][T18860] lo speed is unknown, defaulting to 1000 [ 1455.482720][T18552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.506008][T18552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1455.582763][ T95] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.650455][ T95] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.668178][ T95] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.708616][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12263'. [ 1455.710814][ T95] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.744402][T18876] FAULT_INJECTION: forcing a failure. [ 1455.744402][T18876] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.799981][T18876] CPU: 1 UID: 0 PID: 18876 Comm: syz.3.12262 Not tainted syzkaller #0 PREEMPT(full) [ 1455.800013][T18876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1455.800026][T18876] Call Trace: [ 1455.800034][T18876] [ 1455.800044][T18876] dump_stack_lvl+0xe8/0x150 [ 1455.800079][T18876] should_fail_ex+0x412/0x560 [ 1455.800109][T18876] should_failslab+0xa8/0x100 [ 1455.800135][T18876] __kmalloc_noprof+0xe8/0x760 [ 1455.800157][T18876] ? kernfs_fop_write_iter+0x158/0x540 [ 1455.800184][T18876] kernfs_fop_write_iter+0x158/0x540 [ 1455.800212][T18876] vfs_write+0x61d/0xb90 [ 1455.800241][T18876] ? __pfx_vfs_write+0x10/0x10 [ 1455.800282][T18876] ? __fget_files+0x2a/0x420 [ 1455.800321][T18876] ksys_write+0x150/0x270 [ 1455.800345][T18876] ? __pfx_ksys_write+0x10/0x10 [ 1455.800380][T18876] do_syscall_64+0x14d/0xf80 [ 1455.800410][T18876] ? trace_irq_disable+0x3b/0x150 [ 1455.800440][T18876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.800462][T18876] ? clear_bhb_loop+0x40/0x90 [ 1455.800489][T18876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.800510][T18876] RIP: 0033:0x7f802719c629 [ 1455.800531][T18876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.800550][T18876] RSP: 002b:00007f8028031028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1455.800572][T18876] RAX: ffffffffffffffda RBX: 00007f8027415fa0 RCX: 00007f802719c629 [ 1455.800588][T18876] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000006 [ 1455.800600][T18876] RBP: 00007f8028031090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.800613][T18876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.800625][T18876] R13: 00007f8027416038 R14: 00007f8027415fa0 R15: 00007ffc5d4bccd8 [ 1455.800658][T18876] [ 1456.322166][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12266'. [ 1456.380895][T18901] sctp: [Deprecated]: syz.1.12266 (pid 18901) Use of int in maxseg socket option. [ 1456.380895][T18901] Use struct sctp_assoc_value instead [ 1456.400935][ T8104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.429872][ T8104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.581261][ T6061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.609417][ T6061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.378383][T18928] netlink: 'syz.4.12270': attribute type 2 has an invalid length. [ 1457.440383][T18934] __nla_validate_parse: 1 callbacks suppressed [ 1457.440403][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12273'. [ 1457.512496][T18936] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.12273'. [ 1457.579358][T18936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12273'. [ 1457.609820][T18936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12273'. [ 1457.648419][ T5141] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1457.659609][ T5141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1457.672714][T18936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12273'. [ 1457.695893][ T5141] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1457.704902][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1457.713393][T18936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12273'. [ 1457.723793][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1457.840937][T18945] FAULT_INJECTION: forcing a failure. [ 1457.840937][T18945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1457.905647][T18940] lo speed is unknown, defaulting to 1000 [ 1457.935413][T18940] lo speed is unknown, defaulting to 1000 [ 1457.940685][T18945] CPU: 0 UID: 0 PID: 18945 Comm: syz.4.12275 Not tainted syzkaller #0 PREEMPT(full) [ 1457.940767][T18945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1457.940801][T18945] Call Trace: [ 1457.940823][T18945] [ 1457.940846][T18945] dump_stack_lvl+0xe8/0x150 [ 1457.940942][T18945] should_fail_ex+0x412/0x560 [ 1457.941019][T18945] _copy_from_iter+0x1d3/0x1670 [ 1457.941125][T18945] ? __pfx__copy_from_iter+0x10/0x10 [ 1457.941203][T18945] ? trace_kmalloc+0x2a/0x110 [ 1457.941226][T18945] ? __kmalloc_noprof+0x37d/0x760 [ 1457.941247][T18945] ? kernfs_fop_write_iter+0x158/0x540 [ 1457.941267][T18945] ? __kmalloc_noprof+0x1b8/0x760 [ 1457.941290][T18945] kernfs_fop_write_iter+0x19b/0x540 [ 1457.941320][T18945] vfs_write+0x61d/0xb90 [ 1457.941349][T18945] ? __pfx_vfs_write+0x10/0x10 [ 1457.941381][T18945] ? __fget_files+0x2a/0x420 [ 1457.941437][T18945] ksys_write+0x150/0x270 [ 1457.941530][T18945] ? __pfx_ksys_write+0x10/0x10 [ 1457.941623][T18945] do_syscall_64+0x14d/0xf80 [ 1457.941706][T18945] ? trace_irq_disable+0x3b/0x150 [ 1457.941788][T18945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.941845][T18945] ? clear_bhb_loop+0x40/0x90 [ 1457.941918][T18945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.941971][T18945] RIP: 0033:0x7feec179c629 [ 1457.942024][T18945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1457.942085][T18945] RSP: 002b:00007feec26f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1457.942153][T18945] RAX: ffffffffffffffda RBX: 00007feec1a15fa0 RCX: 00007feec179c629 [ 1457.942195][T18945] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000006 [ 1457.942228][T18945] RBP: 00007feec26f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.942262][T18945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.942302][T18945] R13: 00007feec1a16038 R14: 00007feec1a15fa0 R15: 00007ffe72c045b8 [ 1457.942383][T18945] [ 1458.329339][ T6061] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.366150][ T6061] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.396916][ T6061] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1458.495958][T18963] IPv6: sit2: Disabled Multicast RS [ 1458.519661][T18971] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12282'. [ 1458.567525][ T6061] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.597273][ T6061] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.617002][ T6061] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1458.716489][ T6061] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.733987][ T6061] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.818947][ T6061] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1458.994272][T18988] syzkaller0: entered promiscuous mode [ 1459.008093][T18988] syzkaller0: entered allmulticast mode [ 1459.050192][ T6061] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.068875][ T6061] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.098250][ T6061] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1459.332398][T19019] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 1459.541908][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12294'. [ 1459.663371][T19030] netlink: 'syz.3.12294': attribute type 6 has an invalid length. [ 1459.686033][T19030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12294'. [ 1459.829542][ T5141] Bluetooth: hci2: command tx timeout [ 1461.602527][ T6070] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.676370][ T95] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.739587][ T95] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.780602][ T95] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.908558][ T5141] Bluetooth: hci2: command tx timeout [ 1462.169818][T19065] netlink: 'syz.2.12303': attribute type 7 has an invalid length. [ 1462.178971][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12303'. [ 1462.450805][T19070] netlink: 100 bytes leftover after parsing attributes in process `syz.2.12303'. [ 1462.642860][ T6061] team0: Port device bridge7 removed [ 1462.703462][ T6061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.717991][ T6061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.730754][ T6061] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1462.740877][ T6061] bond0 (unregistering): Released all slaves [ 1462.752957][ T6061] bond1 (unregistering): Released all slaves [ 1462.772269][ T6061] team0: Port device macvlan0 removed [ 1462.782882][ T6061] bond2 (unregistering): Released all slaves [ 1462.849669][T19058] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12301'. [ 1462.875353][T19058] netlink: 7 bytes leftover after parsing attributes in process `syz.0.12301'. [ 1462.912177][T19066] bridge0: entered allmulticast mode [ 1462.947664][T19066] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1463.147893][ T6061] tipc: Left network mode [ 1463.176089][T19084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12305'. [ 1463.232853][T19084] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12305'. [ 1463.268007][T19089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12307'. [ 1463.468064][T18940] chnl_net:caif_netlink_parms(): no params data found [ 1463.533600][T19094] netlink: 'syz.2.12308': attribute type 1 has an invalid length. [ 1463.860628][T19076] netlink: 'syz.4.12306': attribute type 16 has an invalid length. [ 1463.886974][T19076] netlink: 'syz.4.12306': attribute type 17 has an invalid length. [ 1463.988578][ T5141] Bluetooth: hci2: command tx timeout [ 1464.050442][T19076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1464.351382][T18940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.367539][T18940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.374996][T18940] bridge_slave_0: entered allmulticast mode [ 1464.393587][T18940] bridge_slave_0: entered promiscuous mode [ 1464.426304][T18940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.469040][T18940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.476410][T18940] bridge_slave_1: entered allmulticast mode [ 1464.505595][T18940] bridge_slave_1: entered promiscuous mode [ 1464.521014][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12318'. [ 1464.561345][T19147] netlink: 'syz.4.12319': attribute type 2 has an invalid length. [ 1464.597915][T19147] netlink: 1696 bytes leftover after parsing attributes in process `syz.4.12319'. [ 1464.891627][T18940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1465.070296][T18940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1465.160915][T19165] tipc: Failed to obtain node identity [ 1465.174278][T19165] tipc: Enabling of bearer rejected, failed to enable media [ 1465.184236][T19169] syz_tun: entered allmulticast mode [ 1465.196236][T19179] netlink: 'syz.0.12324': attribute type 2 has an invalid length. [ 1465.213201][T19179] !: entered promiscuous mode [ 1465.221459][T18940] team0: Port device team_slave_0 added [ 1465.247730][T18940] team0: Port device team_slave_1 added [ 1465.312571][ T6061] hsr_slave_0: left promiscuous mode [ 1465.320973][ T6061] hsr_slave_1: left promiscuous mode [ 1465.328264][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.335886][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.360809][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.368553][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.377884][T19186] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12325'. [ 1465.408163][ T6061] veth1_macvtap: left promiscuous mode [ 1465.413730][ T6061] veth0_macvtap: left promiscuous mode [ 1465.730225][ T6061] team0 (unregistering): Port device team_slave_1 removed [ 1465.746268][ T6061] team0 (unregistering): Port device team_slave_0 removed [ 1465.903472][T19163] syz_tun: left allmulticast mode [ 1465.919948][T19190] IPv6: sit1: Disabled Multicast RS [ 1466.023610][T19192] lo speed is unknown, defaulting to 1000 [ 1466.031654][T18940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.058277][T18940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.090507][ T5141] Bluetooth: hci2: command tx timeout [ 1466.118757][T19207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12331'. [ 1466.140620][T18940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.174199][T19192] lo speed is unknown, defaulting to 1000 [ 1466.189629][T18940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.207972][T18940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.256102][T19211] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1466.307762][T18940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1466.375065][T19209] lo speed is unknown, defaulting to 1000 [ 1466.629262][T18940] hsr_slave_0: entered promiscuous mode [ 1466.636227][T18940] hsr_slave_1: entered promiscuous mode [ 1466.653033][T18940] debugfs: 'hsr0' already exists in 'hsr' [ 1466.674603][T18940] Cannot create hsr debugfs directory [ 1466.742857][T19215] lo speed is unknown, defaulting to 1000 [ 1467.040590][T19209] lo speed is unknown, defaulting to 1000 [ 1467.147675][T19236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1467.191470][ T6061] IPVS: stop unused estimator thread 0... [ 1467.314128][T18940] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.413596][T18940] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.446644][T19215] lo speed is unknown, defaulting to 1000 [ 1467.552651][T18940] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.644179][T18940] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.031068][T18940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1468.054332][T18940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1468.163683][T18940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1468.186699][T18940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1468.532747][T19258] netlink: 'syz.0.12337': attribute type 1 has an invalid length. [ 1468.715304][T18940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1468.799313][T18940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1468.875476][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.882924][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.004728][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.012065][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1469.228352][T19284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12343'. [ 1469.794291][T18940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.986011][T18940] veth0_vlan: entered promiscuous mode [ 1470.019938][T18940] veth1_vlan: entered promiscuous mode [ 1470.096266][T19314] lo speed is unknown, defaulting to 1000 [ 1470.114341][T19314] lo speed is unknown, defaulting to 1000 [ 1470.124906][T18940] veth0_macvtap: entered promiscuous mode [ 1470.149731][T18940] veth1_macvtap: entered promiscuous mode [ 1470.221617][T19326] syzkaller1: entered promiscuous mode [ 1470.244036][T19326] syzkaller1: entered allmulticast mode [ 1470.272850][T18940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1470.328243][T18940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1470.377303][ T6062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.470825][ T6062] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.504905][ T6062] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.556209][ T6062] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.921142][ T6061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.954177][ T6061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.161328][ T6061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.202923][ T6061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.348930][T19350] delete_channel: no stack [ 1471.456003][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12360'. [ 1471.852196][T19370] syzkaller0: entered promiscuous mode [ 1471.859989][T19370] syzkaller0: entered allmulticast mode [ 1472.032360][T19395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12367'. [ 1472.129783][T19395] syzkaller0: entered promiscuous mode [ 1472.141465][T19395] syzkaller0: entered allmulticast mode [ 1472.271241][T19407] sctp: [Deprecated]: syz.0.12369 (pid 19407) Use of int in maxseg socket option. [ 1472.271241][T19407] Use struct sctp_assoc_value instead [ 1472.509112][T19414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12373'. [ 1472.655189][T19417] openvswitch: netlink: Multiple metadata blocks provided [ 1472.724599][ T2178] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1472.736564][ T2178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1472.745684][ T2178] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1472.759906][ T2178] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1472.768116][ T2178] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1472.939882][T19420] lo speed is unknown, defaulting to 1000 [ 1472.973025][T19420] lo speed is unknown, defaulting to 1000 [ 1473.229706][T19431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12378'. [ 1473.334372][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12379'. [ 1473.378330][T19435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12379'. [ 1473.586346][T19431] ip6gretap1: entered promiscuous mode [ 1473.593619][T19431] ip6gretap1: entered allmulticast mode [ 1473.750613][T19446] netlink: 'syz.1.12381': attribute type 1 has an invalid length. [ 1473.777841][T19446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12381'. [ 1473.794268][T19446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.802130][T19446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.058065][T19420] chnl_net:caif_netlink_parms(): no params data found [ 1474.159359][T19470] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12386'. [ 1474.248747][T19470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12386'. [ 1474.261462][T19463] netlink: 192 bytes leftover after parsing attributes in process `syz.0.12384'. [ 1474.429378][T19472] lo speed is unknown, defaulting to 1000 [ 1474.512860][T19472] lo speed is unknown, defaulting to 1000 [ 1474.593662][T19420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.649165][T19420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.673252][T19495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12391'. [ 1474.687191][T19420] bridge_slave_0: entered allmulticast mode [ 1474.710275][T19420] bridge_slave_0: entered promiscuous mode [ 1474.738141][T19420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.752428][T19498] netlink: 'syz.2.12390': attribute type 1 has an invalid length. [ 1474.767682][T19420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.803368][T19420] bridge_slave_1: entered allmulticast mode [ 1474.866101][T19420] bridge_slave_1: entered promiscuous mode [ 1474.884814][ T5141] Bluetooth: hci5: command tx timeout [ 1475.019157][T19420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1475.050694][T19506] netlink: 'syz.4.12393': attribute type 1 has an invalid length. [ 1475.070949][T19420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1475.202003][T19420] team0: Port device team_slave_0 added [ 1475.253931][T19509] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1475.328366][T19509] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 1475.350951][T19506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12393'. [ 1475.367297][T19509] bond1: (slave vxcan3): making interface the new active one [ 1475.419799][T19509] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 1475.462004][T19420] team0: Port device team_slave_1 added [ 1475.533740][T19506] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 1475.554486][T19506] bond1 (unregistering): Released all slaves [ 1475.633581][T19420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.692492][T19420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.771504][T19420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.860603][T19420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.878301][T19420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.935526][T19420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1475.947948][T19541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12402'. [ 1476.187951][T19420] hsr_slave_0: entered promiscuous mode [ 1476.195857][T19420] hsr_slave_1: entered promiscuous mode [ 1476.210835][T19420] debugfs: 'hsr0' already exists in 'hsr' [ 1476.218990][T19420] Cannot create hsr debugfs directory [ 1476.226281][T19551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12404'. [ 1476.242646][T19551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12404'. [ 1476.252151][T19551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12404'. [ 1476.262903][T19551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12404'. [ 1476.272965][T19551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12404'. [ 1476.947180][ T5141] Bluetooth: hci5: command tx timeout [ 1477.016159][ T9545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.052930][T19577] lo speed is unknown, defaulting to 1000 [ 1477.214052][T19573] bridge0: left allmulticast mode [ 1477.234127][T19573] batman_adv: batadv0: Interface deactivated: dummy0 [ 1477.335634][T19573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1477.358862][T19598] netlink: 'syz.1.12414': attribute type 1 has an invalid length. [ 1477.388940][T19573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1477.449199][T19573] tipc: Resetting bearer [ 1477.538019][T19573] batman_adv: batadv0: Interface deactivated: macsec1 [ 1477.571597][T19573] ip6gretap1: left promiscuous mode [ 1477.577270][T19573] ip6gretap1: left allmulticast mode [ 1477.600480][T19577] lo speed is unknown, defaulting to 1000 [ 1477.616440][T19581] geneve2: entered promiscuous mode [ 1477.644174][T19581] geneve2: entered allmulticast mode [ 1478.060493][T19420] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1478.105336][T19420] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1478.168549][T19420] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1478.218861][T19420] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1478.593862][T19420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.652224][T19420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.688068][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.695261][ T6074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1478.742525][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.749784][ T6074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1478.831004][T19650] netlink: 'syz.0.12423': attribute type 2 has an invalid length. [ 1478.864983][T19650] netlink: 'syz.0.12423': attribute type 2 has an invalid length. [ 1479.028823][ T5141] Bluetooth: hci5: command tx timeout [ 1479.503172][T19420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1479.644047][T19420] veth0_vlan: entered promiscuous mode [ 1479.675159][T19420] veth1_vlan: entered promiscuous mode [ 1479.750500][T19420] veth0_macvtap: entered promiscuous mode [ 1479.781811][T19420] veth1_macvtap: entered promiscuous mode [ 1479.865086][T19420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1479.924853][T19691] »»»»»»: renamed from vlan1 (while UP) [ 1479.971564][T19420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1480.047473][T19696] ip6tnl1: entered allmulticast mode [ 1480.100111][T19701] __nla_validate_parse: 6 callbacks suppressed [ 1480.100135][T19701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12432'. [ 1480.138595][ T95] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.298876][ T95] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.326300][ T95] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.534197][ T95] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.773389][ T6062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.816848][ T6062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.886983][ T6067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.918493][ T6067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1481.108820][ T5141] Bluetooth: hci5: command tx timeout [ 1481.186455][T19726] lo speed is unknown, defaulting to 1000 [ 1481.198647][T19726] lo speed is unknown, defaulting to 1000 [ 1481.292968][T19735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12371'. [ 1481.984960][ T2178] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1482.000282][ T2178] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1482.010524][ T2178] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1482.035709][ T2178] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1482.051379][ T2178] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1482.205550][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12445'. [ 1482.226593][T19763] xt_bpf: check failed: parse error [ 1482.377629][T19772] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1482.456520][T19755] lo speed is unknown, defaulting to 1000 [ 1482.519606][T19755] lo speed is unknown, defaulting to 1000 [ 1482.538539][T19775] Bluetooth: MGMT ver 1.23 [ 1482.559790][T19775] syzkaller0: refused to change device tx_queue_len [ 1482.832191][T19783] geneve2: left promiscuous mode [ 1482.851910][T19783] geneve2: left allmulticast mode [ 1482.870210][ T6062] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.884881][ T6070] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.903883][ T6070] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.914560][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12451'. [ 1482.924537][ T6070] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.938258][T19788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12451'. [ 1482.974341][T19788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12451'. [ 1483.490046][T19807] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12457'. [ 1483.811607][T19815] lo speed is unknown, defaulting to 1000 [ 1483.892050][T19755] chnl_net:caif_netlink_parms(): no params data found [ 1483.935712][T19815] lo speed is unknown, defaulting to 1000 [ 1483.951294][T19827] netlink: 'syz.2.12460': attribute type 1 has an invalid length. [ 1484.151069][ T5141] Bluetooth: hci1: command tx timeout [ 1484.363890][T19755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.386969][T19755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.394518][T19755] bridge_slave_0: entered allmulticast mode [ 1484.430366][T19755] bridge_slave_0: entered promiscuous mode [ 1484.457737][T19755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.470104][T19755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.477662][T19755] bridge_slave_1: entered allmulticast mode [ 1484.487979][T19755] bridge_slave_1: entered promiscuous mode [ 1484.596216][T19855] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.12464'. [ 1484.631850][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.643584][ T1298] aoe: packet could not be sent on rose31. consider increasing tx_queue_len [ 1484.652975][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1484.662869][ T1298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.680480][T19755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.749274][T19755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.853186][T19755] team0: Port device team_slave_0 added [ 1484.892271][T19755] team0: Port device team_slave_1 added [ 1484.992264][T19755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.027275][T19755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.090934][T19755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.147744][T19755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.154773][T19755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.203205][T19868] netlink: 'syz.4.12468': attribute type 10 has an invalid length. [ 1485.235402][T19868] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12468'. [ 1485.269630][T19755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.346652][T19868] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 1485.364354][T19868] team0: Failed to send options change via netlink (err -105) [ 1485.380519][T19868] team0: Port device geneve0 added [ 1485.422404][T19873] pimreg: entered allmulticast mode [ 1485.687392][ T6033] IPVS: starting estimator thread 0... [ 1485.711444][T19888] vlan0: entered promiscuous mode [ 1485.806953][T19900] IPVS: using max 28 ests per chain, 67200 per kthread [ 1485.841739][T19903] netlink: 'syz.1.12474': attribute type 1 has an invalid length. [ 1485.896986][T19755] hsr_slave_0: entered promiscuous mode [ 1485.925285][T19755] hsr_slave_1: entered promiscuous mode [ 1485.943410][T19755] debugfs: 'hsr0' already exists in 'hsr' [ 1485.969276][T19755] Cannot create hsr debugfs directory [ 1486.088698][T19903] bond1: entered promiscuous mode [ 1486.095879][T19903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1486.142768][T19908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1486.154584][T19908] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 1486.165584][T19908] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1486.179863][T19908] bond1: (slave vti0): making interface the new active one [ 1486.187756][T19908] vti0: entered promiscuous mode [ 1486.195164][T19908] bond1: (slave vti0): Enslaving as an active interface with an up link [ 1486.231069][ T5141] Bluetooth: hci1: command tx timeout [ 1486.823864][T19931] lo speed is unknown, defaulting to 1000 [ 1486.856707][T19931] lo speed is unknown, defaulting to 1000 [ 1487.164687][T19940] lo speed is unknown, defaulting to 1000 [ 1487.576740][T19940] lo speed is unknown, defaulting to 1000 [ 1487.666571][T19960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12483'. [ 1487.821913][T19964] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 1488.144430][T19755] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1488.201486][T19755] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1488.209822][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12488'. [ 1488.226368][T19755] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1488.249746][T19755] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1488.287613][T19977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12488'. [ 1488.320850][ T5141] Bluetooth: hci1: command tx timeout [ 1488.881171][T19755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1488.981419][T19755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1489.036234][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.043484][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1489.106829][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.114024][ T6067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1489.470185][T20029] netlink: 190968 bytes leftover after parsing attributes in process `syz.3.12502'. [ 1489.549417][T20033] netlink: 'syz.2.12503': attribute type 1 has an invalid length. [ 1489.592181][T20033] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1489.711233][T20043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.756983][T20043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.950824][T20043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.981349][T20043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.996922][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 1490.005032][ C0] lec:lec_tx_timeout: lec0 [ 1490.024812][T20062] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12507'. [ 1490.044192][T20062] netlink: 11 bytes leftover after parsing attributes in process `syz.2.12507'. [ 1490.133694][T20068] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 1490.393346][ T5141] Bluetooth: hci1: command tx timeout [ 1491.522155][T19755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.705976][T20075] FAULT_INJECTION: forcing a failure. [ 1491.705976][T20075] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.750406][T20075] CPU: 1 UID: 0 PID: 20075 Comm: syz.3.12510 Not tainted syzkaller #0 PREEMPT(full) [ 1491.750436][T20075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1491.750451][T20075] Call Trace: [ 1491.750460][T20075] [ 1491.750470][T20075] dump_stack_lvl+0xe8/0x150 [ 1491.750506][T20075] should_fail_ex+0x412/0x560 [ 1491.750532][T20075] should_failslab+0xa8/0x100 [ 1491.750556][T20075] __kmalloc_noprof+0xe8/0x760 [ 1491.750574][T20075] ? udp_init_sock+0x198/0x3b0 [ 1491.750597][T20075] udp_init_sock+0x198/0x3b0 [ 1491.750617][T20075] ? sock_init_data_uid+0x6e4/0x980 [ 1491.750644][T20075] inet_create+0xd03/0x1000 [ 1491.750665][T20075] ? inet_create+0x9c/0x1000 [ 1491.750690][T20075] __sock_create+0x4b2/0x9d0 [ 1491.750724][T20075] udp_sock_create4+0xca/0x480 [ 1491.750758][T20075] ? __pfx_udp_sock_create4+0x10/0x10 [ 1491.750802][T20075] rxrpc_lookup_local+0xd1e/0x1500 [ 1491.750843][T20075] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1491.750889][T20075] ? rxrpc_sendmsg+0x136/0x710 [ 1491.750919][T20075] ? __local_bh_enable_ip+0xd0/0x130 [ 1491.750952][T20075] rxrpc_sendmsg+0x399/0x710 [ 1491.750986][T20075] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 1491.751011][T20075] ____sys_sendmsg+0xa68/0xad0 [ 1491.751052][T20075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1491.751091][T20075] ? import_iovec+0x73/0xa0 [ 1491.751125][T20075] ___sys_sendmsg+0x2a5/0x360 [ 1491.751162][T20075] ? __pfx____sys_sendmsg+0x10/0x10 [ 1491.751230][T20075] ? __fget_files+0x2a/0x420 [ 1491.751259][T20075] ? __fget_files+0x3a0/0x420 [ 1491.751300][T20075] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1491.751334][T20075] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1491.751375][T20075] ? __pfx_ksys_write+0x10/0x10 [ 1491.751419][T20075] do_syscall_64+0x14d/0xf80 [ 1491.751450][T20075] ? trace_irq_disable+0x3b/0x150 [ 1491.751481][T20075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.751503][T20075] ? clear_bhb_loop+0x40/0x90 [ 1491.751530][T20075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.751552][T20075] RIP: 0033:0x7fc796f9c629 [ 1491.751574][T20075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1491.751593][T20075] RSP: 002b:00007fc797f2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1491.751616][T20075] RAX: ffffffffffffffda RBX: 00007fc797215fa0 RCX: 00007fc796f9c629 [ 1491.751632][T20075] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1491.751646][T20075] RBP: 00007fc797f2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1491.751676][T20075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.751689][T20075] R13: 00007fc797216038 R14: 00007fc797215fa0 R15: 00007ffd6190e748 [ 1491.751723][T20075] [ 1491.783598][T19755] veth0_vlan: entered promiscuous mode [ 1492.115962][T19755] veth1_vlan: entered promiscuous mode [ 1492.199702][T19755] veth0_macvtap: entered promiscuous mode [ 1492.260806][T19755] veth1_macvtap: entered promiscuous mode [ 1492.382340][T19755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1492.433327][T19755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1492.522632][ T8108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.566586][ T8108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.613328][ T8108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.630055][T20102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12517'. [ 1492.651672][ T8108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1492.975524][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1492.984832][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.137509][ T6060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.145396][ T6060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.194067][T20116] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1493.388630][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12522'. [ 1493.492576][T20131] veth0: entered promiscuous mode [ 1493.623293][T20119] veth0: left promiscuous mode [ 1493.644620][T20137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.145329][T20162] netlink: 'syz.0.12536': attribute type 1 has an invalid length. [ 1494.416618][T20176] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1494.719820][T20195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12544'. [ 1494.771277][T20195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12544'. [ 1494.824085][T20195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12544'. [ 1494.860197][T20195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12544'. [ 1494.907220][T20195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12544'. [ 1494.926944][T20195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12544'. [ 1494.960553][T20195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12544'. [ 1494.987536][T20195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12544'. [ 1495.089473][T20211] FAULT_INJECTION: forcing a failure. [ 1495.089473][T20211] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.157604][T20211] CPU: 0 UID: 0 PID: 20211 Comm: syz.2.12548 Not tainted syzkaller #0 PREEMPT(full) [ 1495.157636][T20211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1495.157649][T20211] Call Trace: [ 1495.157658][T20211] [ 1495.157667][T20211] dump_stack_lvl+0xe8/0x150 [ 1495.157703][T20211] should_fail_ex+0x412/0x560 [ 1495.157734][T20211] should_failslab+0xa8/0x100 [ 1495.157762][T20211] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1495.157788][T20211] ? __kthread_create_on_node+0x1cf/0x3f0 [ 1495.157826][T20211] kvasprintf+0xeb/0x1a0 [ 1495.157860][T20211] ? __pfx_kvasprintf+0x10/0x10 [ 1495.157902][T20211] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1495.157925][T20211] ? __kthread_create_on_node+0x115/0x3f0 [ 1495.157953][T20211] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1495.157980][T20211] __kthread_create_on_node+0x1cf/0x3f0 [ 1495.158015][T20211] ? __pfx___kthread_create_on_node+0x10/0x10 [ 1495.158060][T20211] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1495.158090][T20211] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1495.158120][T20211] kthread_create_on_node+0xeb/0x140 [ 1495.158154][T20211] ? __pfx_kthread_create_on_node+0x10/0x10 [ 1495.158191][T20211] ? do_raw_spin_unlock+0xf5/0x210 [ 1495.158217][T20211] rxrpc_lookup_local+0xf1c/0x1500 [ 1495.158258][T20211] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1495.158287][T20211] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 1495.158313][T20211] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 1495.158357][T20211] ? rxrpc_sendmsg+0x136/0x710 [ 1495.158387][T20211] ? __local_bh_enable_ip+0xd0/0x130 [ 1495.158420][T20211] rxrpc_sendmsg+0x399/0x710 [ 1495.158455][T20211] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 1495.158480][T20211] ____sys_sendmsg+0xa68/0xad0 [ 1495.158522][T20211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1495.158563][T20211] ? import_iovec+0x73/0xa0 [ 1495.158596][T20211] ___sys_sendmsg+0x2a5/0x360 [ 1495.158633][T20211] ? __pfx____sys_sendmsg+0x10/0x10 [ 1495.158702][T20211] ? __fget_files+0x2a/0x420 [ 1495.158732][T20211] ? __fget_files+0x3a0/0x420 [ 1495.158772][T20211] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1495.158807][T20211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1495.158848][T20211] ? __pfx_ksys_write+0x10/0x10 [ 1495.158883][T20211] do_syscall_64+0x14d/0xf80 [ 1495.158922][T20211] ? trace_irq_disable+0x3b/0x150 [ 1495.158951][T20211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.158973][T20211] ? clear_bhb_loop+0x40/0x90 [ 1495.159000][T20211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.159021][T20211] RIP: 0033:0x7f5891f9c629 [ 1495.159043][T20211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.159061][T20211] RSP: 002b:00007f5892dbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1495.159084][T20211] RAX: ffffffffffffffda RBX: 00007f5892215fa0 RCX: 00007f5891f9c629 [ 1495.159099][T20211] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1495.159113][T20211] RBP: 00007f5892dbb090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.159126][T20211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1495.159138][T20211] R13: 00007f5892216038 R14: 00007f5892215fa0 R15: 00007ffea1fc0cb8 [ 1495.159174][T20211] [ 1495.685537][T20218] lo speed is unknown, defaulting to 1000 [ 1495.782681][T20218] lo speed is unknown, defaulting to 1000 [ 1497.491981][T20278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1497.525779][T20276] syzkaller0: entered promiscuous mode [ 1497.563384][T20276] syzkaller0: entered allmulticast mode [ 1497.844327][T20292] netlink: 'syz.4.12570': attribute type 1 has an invalid length. [ 1497.889461][T20292] __nla_validate_parse: 63 callbacks suppressed [ 1497.889484][T20292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12570'. [ 1497.932310][T20292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.940039][T20292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.979009][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12571'. [ 1498.084264][T20308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12571'. [ 1498.464810][T20324] bond2: Unable to set down delay as MII monitoring is disabled [ 1498.488488][T20324] bond2 (unregistering): Released all slaves [ 1498.880202][T20342] vlan0: entered promiscuous mode [ 1499.140227][T20358] netlink: 'syz.1.12584': attribute type 1 has an invalid length. [ 1499.170755][T20358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12584'. [ 1499.573012][T20382] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12591'. [ 1499.628004][T20381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12592'. [ 1499.741860][T20395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12592'. [ 1499.984909][T20406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12597'. [ 1500.118887][T20411] netlink: 'syz.4.12598': attribute type 1 has an invalid length. [ 1500.149418][T20411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12598'. [ 1500.280439][T20419] netlink: 'syz.0.12601': attribute type 2 has an invalid length. [ 1500.321121][T20423] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12602'. [ 1500.342568][T20424] netlink: 'syz.0.12601': attribute type 2 has an invalid length. [ 1500.363044][T20413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.407865][T20413] bridge_slave_1: left allmulticast mode [ 1500.426936][T20413] bridge_slave_1: left promiscuous mode [ 1500.457205][T20413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.548672][T20413] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1500.605184][T20419] : entered promiscuous mode [ 1500.619846][T20424] : left promiscuous mode [ 1501.000434][T20446] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1501.052494][T20445] xt_NFQUEUE: number of total queues is 0 [ 1501.134023][T20452] netlink: 'syz.4.12612': attribute type 1 has an invalid length. [ 1501.483495][T20470] batadv0: entered promiscuous mode [ 1501.490800][T20470] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1502.028491][T20504] netlink: 'syz.3.12626': attribute type 1 has an invalid length. [ 1502.085464][ T6033] IPVS: starting estimator thread 0... [ 1502.187189][T20507] IPVS: using max 29 ests per chain, 69600 per kthread [ 1502.521833][T18951] lec:lec_start_xmit: lec0:No lecd attached [ 1502.935368][T20539] __nla_validate_parse: 6 callbacks suppressed [ 1502.935390][T20539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12636'. [ 1503.136530][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12638'. [ 1503.166027][T20554] netlink: 'syz.1.12639': attribute type 1 has an invalid length. [ 1503.174683][T20554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12639'. [ 1503.370538][T20557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12638'. [ 1503.605197][T20562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12642'. [ 1503.619365][T20573] openvswitch: netlink: Flow actions attr not present in new flow. [ 1503.700332][T20566] lo speed is unknown, defaulting to 1000 [ 1503.708787][T20566] lo speed is unknown, defaulting to 1000 [ 1503.711557][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12646'. [ 1503.735074][ T6060] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1503.781716][ T6060] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1503.800817][ T6060] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1503.814406][ T6060] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1504.113552][T20588] netlink: 'syz.3.12650': attribute type 4 has an invalid length. [ 1505.601024][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12660'. [ 1505.625225][T20644] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1505.765817][T20652] xt_TCPMSS: Only works on TCP SYN packets [ 1505.854995][T20655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12660'. [ 1505.870952][T20657] xt_l2tp: unknown flags: 51 [ 1506.179863][T20667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12664'. [ 1506.204790][T20667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12664'. [ 1506.546599][T20679] netlink: 'syz.0.12667': attribute type 10 has an invalid length. [ 1506.611925][T20686] netlink: 'syz.0.12667': attribute type 10 has an invalid length. [ 1506.689397][T20679] team0: Failed to send options change via netlink (err -105) [ 1506.731192][T20679] team0: Port device dummy0 added [ 1506.762111][T20686] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1506.823162][T20686] team0: Failed to send options change via netlink (err -105) [ 1506.847188][T20686] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1506.864123][T20686] team0: Port device dummy0 removed [ 1506.920745][T20686] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1506.975180][T20696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1507.079723][T20696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1507.174174][T20710] bond0: (slave gre0): Error: Device type is different from other slaves [ 1507.462501][T20731] lo speed is unknown, defaulting to 1000 [ 1507.471137][T20731] lo speed is unknown, defaulting to 1000 [ 1507.987241][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 1507.995378][ C0] lec:lec_tx_timeout: lec0 [ 1508.394115][T20761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.795916][T20774] lo speed is unknown, defaulting to 1000 [ 1508.803742][T20774] lo speed is unknown, defaulting to 1000 [ 1508.850425][T20782] __nla_validate_parse: 6 callbacks suppressed [ 1508.850455][T20782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12692'. [ 1509.950317][T20804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12696'. [ 1509.987325][T20804] netlink: 'syz.4.12696': attribute type 12 has an invalid length. [ 1510.083978][T20804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12696'. [ 1510.094064][ T95] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1510.120239][ T95] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1510.138713][T20804] netlink: 'syz.4.12696': attribute type 12 has an invalid length. [ 1510.185526][ T95] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1510.229962][ T95] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1510.504859][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12699'. [ 1510.798218][T20830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12699'. [ 1510.814701][T20835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12702'. [ 1510.874310][T20838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12703'. [ 1510.883782][T20839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12703'. [ 1510.953123][T20838] openvswitch: netlink: Flow key attr not present in new flow. [ 1510.962063][T20839] openvswitch: netlink: Flow key attr not present in new flow. [ 1511.254199][T20861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1511.644811][T20876] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12711'. [ 1511.711294][T20876] netlink: 'syz.3.12711': attribute type 1 has an invalid length. [ 1511.767271][T20876] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12711'. [ 1512.048794][T20902] xt_connbytes: Forcing CT accounting to be enabled [ 1512.604285][T20914] batadv_slave_0: entered promiscuous mode [ 1512.653512][T20912] batadv_slave_0: left promiscuous mode [ 1513.349911][T20943] sctp: [Deprecated]: syz.3.12724 (pid 20943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1513.349911][T20943] Use struct sctp_sack_info instead [ 1514.022500][T20977] __nla_validate_parse: 3 callbacks suppressed [ 1514.022520][T20977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12734'. [ 1514.053349][T20987] netlink: 240 bytes leftover after parsing attributes in process `syz.4.12732'. [ 1514.159218][ T30] audit: type=1804 audit(1771570719.482:15): pid=20973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.12732" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=556 res=1 errno=0 [ 1514.236958][ T30] audit: type=1800 audit(1771570719.512:16): pid=20973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12732" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=556 res=0 errno=0 [ 1514.368918][T20977] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12734'. [ 1514.434963][T21001] bridge1: entered promiscuous mode [ 1514.480044][T21001] bridge1: entered allmulticast mode [ 1514.490645][T21001] team0: Port device bridge1 added [ 1514.505040][T21001] bridge0: port 3(team0) entered blocking state [ 1514.524923][T21001] bridge0: port 3(team0) entered disabled state [ 1514.544569][T21001] team0: entered allmulticast mode [ 1514.562470][T21001] team_slave_0: entered allmulticast mode [ 1514.587493][T21001] team_slave_1: entered allmulticast mode [ 1514.601675][T21001] geneve0: entered allmulticast mode [ 1514.648689][T21001] team0: entered promiscuous mode [ 1514.653885][T21001] team_slave_0: entered promiscuous mode [ 1514.717086][T21001] team_slave_1: entered promiscuous mode [ 1514.722988][T21001] geneve0: entered promiscuous mode [ 1514.963947][T21019] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12741'. [ 1515.172059][T21033] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12744'. [ 1515.270719][T21036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12744'. [ 1515.927449][T21058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12752'. [ 1516.219240][T21071] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12753'. [ 1516.331595][T21058] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12752'. [ 1517.190081][T21090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12756'. [ 1517.608769][T21105] xt_connbytes: Forcing CT accounting to be enabled [ 1517.661471][T21105] Cannot find set identified by id 65470 to match [ 1518.281328][T21134] FAULT_INJECTION: forcing a failure. [ 1518.281328][T21134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1518.353752][T21134] CPU: 0 UID: 0 PID: 21134 Comm: syz.3.12766 Not tainted syzkaller #0 PREEMPT(full) [ 1518.353789][T21134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1518.353802][T21134] Call Trace: [ 1518.353811][T21134] [ 1518.353822][T21134] dump_stack_lvl+0xe8/0x150 [ 1518.353859][T21134] should_fail_ex+0x412/0x560 [ 1518.353891][T21134] _copy_to_user+0x31/0xb0 [ 1518.353924][T21134] simple_read_from_buffer+0xe1/0x170 [ 1518.353959][T21134] proc_fail_nth_read+0x1bb/0x230 [ 1518.353992][T21134] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1518.354026][T21134] ? rw_verify_area+0x2a6/0x4d0 [ 1518.354047][T21134] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1518.354078][T21134] vfs_read+0x20c/0xa70 [ 1518.354098][T21134] ? fdget_pos+0x246/0x320 [ 1518.354133][T21134] ? __pfx___mutex_lock+0x10/0x10 [ 1518.354177][T21134] ? __pfx_vfs_read+0x10/0x10 [ 1518.354199][T21134] ? __fget_files+0x2a/0x420 [ 1518.354232][T21134] ? __fget_files+0x3a0/0x420 [ 1518.354260][T21134] ? __fget_files+0x2a/0x420 [ 1518.354296][T21134] ksys_read+0x150/0x270 [ 1518.354320][T21134] ? __pfx_ksys_read+0x10/0x10 [ 1518.354353][T21134] do_syscall_64+0x14d/0xf80 [ 1518.354383][T21134] ? trace_irq_disable+0x3b/0x150 [ 1518.354413][T21134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.354435][T21134] ? clear_bhb_loop+0x40/0x90 [ 1518.354462][T21134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.354483][T21134] RIP: 0033:0x7fc796f5cece [ 1518.354502][T21134] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1518.354521][T21134] RSP: 002b:00007fc797f2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1518.354544][T21134] RAX: ffffffffffffffda RBX: 00007fc797f2d6c0 RCX: 00007fc796f5cece [ 1518.354560][T21134] RDX: 000000000000000f RSI: 00007fc797f2d0a0 RDI: 0000000000000003 [ 1518.354573][T21134] RBP: 00007fc797f2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1518.354586][T21134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.354598][T21134] R13: 00007fc797216038 R14: 00007fc797215fa0 R15: 00007ffd6190e748 [ 1518.354631][T21134] [ 1518.640489][T21136] syzkaller0: entered promiscuous mode [ 1518.646041][T21136] syzkaller0: entered allmulticast mode [ 1518.960995][T21152] netlink: 'syz.1.12770': attribute type 4 has an invalid length. [ 1519.242726][T21164] netlink: 'syz.3.12776': attribute type 5 has an invalid length. [ 1519.326584][T21169] netlink: 'syz.1.12777': attribute type 1 has an invalid length. [ 1519.410941][T21169] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1519.454744][T21169] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1519.501042][T21173] __nla_validate_parse: 3 callbacks suppressed [ 1519.501062][T21173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12777'. [ 1519.885779][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12781'. [ 1519.916613][T21183] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12781'. [ 1519.982469][T21183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12781'. [ 1520.018811][T21183] openvswitch: netlink: Flow key attr not present in new flow. [ 1520.031472][T21190] syzkaller1: entered promiscuous mode [ 1520.079904][T21190] syzkaller1: entered allmulticast mode [ 1520.534679][T21208] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1520.601633][T21206] bridge1: entered promiscuous mode [ 1520.631711][T21206] bridge1: entered allmulticast mode [ 1521.509612][T21049] Set syz1 is full, maxelem 65536 reached [ 1521.801455][T21243] lo speed is unknown, defaulting to 1000 [ 1521.816105][T21243] lo speed is unknown, defaulting to 1000 [ 1522.050475][T21254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12795'. [ 1522.266217][T21258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12796'. [ 1522.918238][T21187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1523.262542][T21282] lo speed is unknown, defaulting to 1000 [ 1523.313124][T21286] IPv6: addrconf: prefix option has invalid lifetime [ 1523.323342][T21282] lo speed is unknown, defaulting to 1000 [ 1523.378561][T21291] lo speed is unknown, defaulting to 1000 [ 1523.391373][T21289] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12806'. [ 1523.422310][T21289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.429798][T21289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.784983][T21306] netlink: 'syz.3.12809': attribute type 1 has an invalid length. [ 1523.836474][T21307] netlink: 'syz.3.12809': attribute type 21 has an invalid length. [ 1523.863183][T21307] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12809'. [ 1523.946274][T21291] lo speed is unknown, defaulting to 1000 [ 1524.182452][T21311] bond1: (slave bridge2): making interface the new active one [ 1524.227269][T21311] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1524.436496][T21329] lo speed is unknown, defaulting to 1000 [ 1524.701614][T21329] lo speed is unknown, defaulting to 1000 [ 1525.644741][T21369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12823'. [ 1525.811271][T21378] lo speed is unknown, defaulting to 1000 [ 1525.819625][T21378] lo speed is unknown, defaulting to 1000 [ 1526.582813][T21395] IPv6: sit1: Disabled Multicast RS [ 1527.249022][T21412] netlink: 'syz.2.12830': attribute type 1 has an invalid length. [ 1527.264944][T21412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12830'. [ 1527.275645][T21383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12825'. [ 1527.520596][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12832'. [ 1527.567980][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12832'. [ 1528.162569][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12841'. [ 1528.200186][T21460] netlink: 'syz.4.12842': attribute type 1 has an invalid length. [ 1528.268828][T21460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12842'. [ 1528.865886][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12851'. [ 1529.130681][T21513] netlink: 'syz.0.12855': attribute type 1 has an invalid length. [ 1529.158705][T21513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12855'. [ 1529.457122][T21521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1529.520631][T21523] netlink: 'syz.2.12858': attribute type 4 has an invalid length. [ 1529.549095][T21523] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12858'. [ 1529.586592][T21526] syzkaller0: entered promiscuous mode [ 1529.632658][T21526] syzkaller0: entered allmulticast mode [ 1530.109693][T21545] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1530.158792][T21545] bond3 (unregistering): Released all slaves [ 1530.488278][T21569] netlink: 'syz.1.12869': attribute type 13 has an invalid length. [ 1530.717361][T21578] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1530.749865][T21578] syzkaller0: entered promiscuous mode [ 1530.755868][T21578] syzkaller0: entered allmulticast mode [ 1530.957095][T21595] __nla_validate_parse: 3 callbacks suppressed [ 1530.957117][T21595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12875'. [ 1530.963695][T13140] IPVS: starting estimator thread 0... [ 1530.988815][T21590] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1530.997783][T21600] netlink: 'syz.0.12874': attribute type 1 has an invalid length. [ 1531.054287][T21586] gretap1: entered promiscuous mode [ 1531.116621][T21603] IPVS: using max 25 ests per chain, 60000 per kthread [ 1531.314896][T21619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12879'. [ 1531.326235][T21611] lo speed is unknown, defaulting to 1000 [ 1531.378272][T21611] lo speed is unknown, defaulting to 1000 [ 1531.572304][T21626] netlink: 'syz.1.12880': attribute type 4 has an invalid length. [ 1531.585289][T21626] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.12880'. [ 1531.906400][T21641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1531.987818][T21639] tipc: Started in network mode [ 1531.992764][T21639] tipc: Node identity 025ec21d3595, cluster identity 4711 [ 1532.028952][T21639] tipc: Enabled bearer , priority 0 [ 1532.083282][T21645] syzkaller0: entered promiscuous mode [ 1532.124916][T21645] syzkaller0: entered allmulticast mode [ 1532.307022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.447442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.475602][T21664] netlink: 'syz.1.12890': attribute type 3 has an invalid length. [ 1532.496470][T21665] netlink: 65173 bytes leftover after parsing attributes in process `syz.1.12890'. [ 1532.587038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.630450][T21672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12891'. [ 1532.737430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1532.876891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.016959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.061021][T21633] tipc: Resetting bearer [ 1533.088776][T21633] tipc: Disabling bearer [ 1533.129322][T21678] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1533.485545][T21702] xt_TCPMSS: Only works on TCP SYN packets [ 1533.610997][T21702] syzkaller0: entered promiscuous mode [ 1533.637630][T21702] syzkaller0: entered allmulticast mode [ 1533.654535][T21708] netlink: 'syz.0.12901': attribute type 3 has an invalid length. [ 1533.672791][T21708] syz_tun: entered allmulticast mode [ 1533.730585][T21707] syz_tun: left allmulticast mode [ 1534.004881][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12903'. [ 1534.110187][T21727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.303129][T21732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12907'. [ 1534.343603][T21732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12907'. [ 1534.500439][T21736] bond2: entered promiscuous mode [ 1534.528412][T21736] netlink: 'syz.3.12909': attribute type 25 has an invalid length. [ 1534.537217][T21736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12909'. [ 1534.610366][T21745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12911'. [ 1534.748193][T21751] netlink: 'syz.0.12911': attribute type 1 has an invalid length. [ 1535.186540][T21736] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1535.197947][T21736] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1535.329589][T21736] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1535.354988][T21736] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1535.578809][T21736] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1535.584814][T21736] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1535.635235][T21783] lo speed is unknown, defaulting to 1000 [ 1535.734672][T21783] lo speed is unknown, defaulting to 1000 [ 1535.801724][T21736] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1535.822222][T21736] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1535.876057][T21797] netlink: 'syz.2.12920': attribute type 1 has an invalid length. [ 1535.908583][ C0] ================================================================== [ 1535.916714][ C0] BUG: KASAN: slab-use-after-free in ax25_heartbeat_expiry+0x115/0x140 [ 1535.925008][ C0] Read of size 4 at addr ffff88803f886660 by task dhcpcd-run-hook/21795 [ 1535.933375][ C0] [ 1535.935754][ C0] CPU: 0 UID: 0 PID: 21795 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 1535.935779][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1535.935793][ C0] Call Trace: [ 1535.935801][ C0] [ 1535.935810][ C0] dump_stack_lvl+0xe8/0x150 [ 1535.935842][ C0] print_report+0xba/0x230 [ 1535.935868][ C0] ? ax25_heartbeat_expiry+0x115/0x140 [ 1535.935896][ C0] kasan_report+0x117/0x150 [ 1535.935921][ C0] ? ax25_heartbeat_expiry+0x115/0x140 [ 1535.935953][ C0] ax25_heartbeat_expiry+0x115/0x140 [ 1535.935984][ C0] call_timer_fn+0x192/0x640 [ 1535.936011][ C0] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 1535.936037][ C0] ? call_timer_fn+0xd4/0x640 [ 1535.936060][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1535.936092][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1535.936120][ C0] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 1535.936150][ C0] __run_timer_base+0x652/0x8b0 [ 1535.936174][ C0] ? ktime_get+0x45/0x200 [ 1535.936198][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1535.936224][ C0] ? sched_clock_cpu+0x74/0x440 [ 1535.936255][ C0] run_timer_softirq+0xb7/0x170 [ 1535.936279][ C0] handle_softirqs+0x22a/0x870 [ 1535.936307][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1535.936337][ C0] __irq_exit_rcu+0x5f/0x150 [ 1535.936363][ C0] irq_exit_rcu+0x9/0x30 [ 1535.936397][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1535.936430][ C0] [ 1535.936437][ C0] [ 1535.936445][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1535.936469][ C0] RIP: 0010:rcu_is_watching+0x2e/0xb0 [ 1535.936500][ C0] Code: 41 57 41 56 53 65 ff 05 a0 fa 70 11 e8 0b 87 02 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 97 1a 8e <4c> 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 bc 0f 85 00 [ 1535.936518][ C0] RSP: 0018:ffffc9000d7bf330 EFLAGS: 00000293 [ 1535.936537][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080000001 [ 1535.936550][ C0] RDX: ffff88807a855ac0 RSI: ffffffff8c27a460 RDI: ffffffff8c27a420 [ 1535.936567][ C0] RBP: 0000000000000001 R08: ffffffff81d53046 R09: ffffffff8e7602e0 [ 1535.936582][ C0] R10: ffffc9000d7bf438 R11: ffffffff81b0b130 R12: 0000000000002c3e [ 1535.936597][ C0] R13: dffffc0000000000 R14: ffffffff8e1a9790 R15: dffffc0000000000 [ 1535.936617][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1535.936640][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1535.936665][ C0] is_bpf_text_address+0x207/0x2b0 [ 1535.936684][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1535.936705][ C0] kernel_text_address+0xa5/0xe0 [ 1535.936727][ C0] __kernel_text_address+0xd/0x30 [ 1535.936748][ C0] unwind_get_return_address+0x4d/0x90 [ 1535.936779][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1535.936799][ C0] arch_stack_walk+0xfb/0x150 [ 1535.936834][ C0] stack_trace_save+0xa9/0x100 [ 1535.936853][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1535.936872][ C0] ? proc_reg_open+0x1f4/0x540 [ 1535.936901][ C0] ? stack_trace_save+0xa9/0x100 [ 1535.936920][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1535.936940][ C0] ? proc_reg_open+0x1f4/0x540 [ 1535.936968][ C0] kasan_save_track+0x3e/0x80 [ 1535.936987][ C0] ? kasan_save_track+0x3e/0x80 [ 1535.937004][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1535.937024][ C0] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1535.937045][ C0] ? single_open+0x5a/0x240 [ 1535.937068][ C0] ? proc_reg_open+0x247/0x540 [ 1535.937095][ C0] ? do_dentry_open+0x785/0x14e0 [ 1535.937121][ C0] ? vfs_open+0x3b/0x340 [ 1535.937144][ C0] ? path_openat+0x2e08/0x3860 [ 1535.937183][ C0] ? do_file_open+0x23e/0x4a0 [ 1535.937202][ C0] ? do_sys_openat2+0x113/0x200 [ 1535.937228][ C0] ? __x64_sys_openat+0x138/0x170 [ 1535.937254][ C0] ? do_syscall_64+0x14d/0xf80 [ 1535.937283][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.937327][ C0] __kasan_kmalloc+0x93/0xb0 [ 1535.937349][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 1535.937371][ C0] ? single_open+0x5a/0x240 [ 1535.937400][ C0] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1535.937421][ C0] ? __pfx_filesystems_proc_show+0x10/0x10 [ 1535.937441][ C0] single_open+0x5a/0x240 [ 1535.937464][ C0] proc_reg_open+0x247/0x540 [ 1535.937495][ C0] ? __pfx_proc_reg_open+0x10/0x10 [ 1535.937523][ C0] do_dentry_open+0x785/0x14e0 [ 1535.937557][ C0] vfs_open+0x3b/0x340 [ 1535.937581][ C0] ? path_openat+0x2df0/0x3860 [ 1535.937603][ C0] path_openat+0x2e08/0x3860 [ 1535.937633][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1535.937656][ C0] ? stack_depot_save_flags+0x33/0x810 [ 1535.937685][ C0] ? __pfx_path_openat+0x10/0x10 [ 1535.937705][ C0] ? __x64_sys_openat+0x138/0x170 [ 1535.937731][ C0] ? do_syscall_64+0x14d/0xf80 [ 1535.937760][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.937786][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1535.937815][ C0] do_file_open+0x23e/0x4a0 [ 1535.937839][ C0] ? __pfx_do_file_open+0x10/0x10 [ 1535.937871][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1535.937897][ C0] ? alloc_fd+0x64b/0x6c0 [ 1535.937928][ C0] do_sys_openat2+0x113/0x200 [ 1535.937954][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1535.937979][ C0] ? exc_page_fault+0x6a/0xc0 [ 1535.938006][ C0] ? do_user_addr_fault+0xc6f/0x1340 [ 1535.938031][ C0] __x64_sys_openat+0x138/0x170 [ 1535.938056][ C0] do_syscall_64+0x14d/0xf80 [ 1535.938080][ C0] ? trace_irq_disable+0x3b/0x150 [ 1535.938104][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.938121][ C0] ? clear_bhb_loop+0x40/0x90 [ 1535.938139][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.938158][ C0] RIP: 0033:0x7f4d165f6407 [ 1535.938178][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1535.938196][ C0] RSP: 002b:00007ffc90de8d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1535.938219][ C0] RAX: ffffffffffffffda RBX: 00007f4d164a6c80 RCX: 00007f4d165f6407 [ 1535.938234][ C0] RDX: 0000000000080000 RSI: 00007f4d1653b2e2 RDI: ffffffffffffff9c [ 1535.938247][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1535.938259][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f4d1653b3ae [ 1535.938273][ C0] R13: 00007f4d1653b3ae R14: 0000000000000001 R15: 0000000000000000 [ 1535.938295][ C0] [ 1535.938303][ C0] [ 1536.545217][ C0] Allocated by task 18939: [ 1536.549643][ C0] kasan_save_track+0x3e/0x80 [ 1536.554337][ C0] __kasan_kmalloc+0x93/0xb0 [ 1536.558947][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 1536.564330][ C0] ax25_dev_device_up+0x54/0x5f0 [ 1536.569291][ C0] ax25_device_event+0x127/0x8a0 [ 1536.574287][ C0] notifier_call_chain+0x1be/0x400 [ 1536.579426][ C0] __dev_notify_flags+0x1a9/0x310 [ 1536.584500][ C0] netif_change_flags+0xe8/0x1a0 [ 1536.589467][ C0] dev_change_flags+0x130/0x260 [ 1536.594467][ C0] dev_ioctl+0x7b4/0x1150 [ 1536.598824][ C0] sock_do_ioctl+0x23e/0x320 [ 1536.603441][ C0] sock_ioctl+0x5c6/0x7f0 [ 1536.607788][ C0] __se_sys_ioctl+0xfc/0x170 [ 1536.612397][ C0] do_syscall_64+0x14d/0xf80 [ 1536.617023][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.622949][ C0] [ 1536.625286][ C0] Freed by task 15: [ 1536.629101][ C0] kasan_save_track+0x3e/0x80 [ 1536.633849][ C0] kasan_save_free_info+0x46/0x50 [ 1536.638902][ C0] __kasan_slab_free+0x5c/0x80 [ 1536.643687][ C0] __rcu_free_sheaf_prepare+0x129/0x290 [ 1536.649340][ C0] rcu_free_sheaf+0x31/0x200 [ 1536.653947][ C0] rcu_core+0x7cd/0x1070 [ 1536.658210][ C0] handle_softirqs+0x22a/0x870 [ 1536.663002][ C0] run_ksoftirqd+0x36/0x60 [ 1536.667443][ C0] smpboot_thread_fn+0x541/0xa50 [ 1536.672406][ C0] kthread+0x388/0x470 [ 1536.676486][ C0] ret_from_fork+0x51e/0xb90 [ 1536.681108][ C0] ret_from_fork_asm+0x1a/0x30 [ 1536.685908][ C0] [ 1536.688268][ C0] The buggy address belongs to the object at ffff88803f886600 [ 1536.688268][ C0] which belongs to the cache kmalloc-256 of size 256 [ 1536.702340][ C0] The buggy address is located 96 bytes inside of [ 1536.702340][ C0] freed 256-byte region [ffff88803f886600, ffff88803f886700) [ 1536.716068][ C0] [ 1536.718408][ C0] The buggy address belongs to the physical page: [ 1536.724828][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803f887200 pfn:0x3f886 [ 1536.734911][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1536.743425][ C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1536.751946][ C0] page_type: f5(slab) [ 1536.755954][ C0] raw: 00fff00000000240 ffff88813fea8b40 ffffea00016f9910 ffffea000120d610 [ 1536.764555][ C0] raw: ffff88803f887200 000000000010000c 00000000f5000000 0000000000000000 [ 1536.773194][ C0] head: 00fff00000000240 ffff88813fea8b40 ffffea00016f9910 ffffea000120d610 [ 1536.781926][ C0] head: ffff88803f887200 000000000010000c 00000000f5000000 0000000000000000 [ 1536.790614][ C0] head: 00fff00000000001 ffffea0000fe2181 00000000ffffffff 00000000ffffffff [ 1536.799297][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1536.807985][ C0] page dumped because: kasan: bad access detected [ 1536.814422][ C0] page_owner tracks the page as allocated [ 1536.820260][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 31659, tgid 31658 (syz.1.7815), ts 926608537265, free_ts 758919470692 [ 1536.840172][ C0] post_alloc_hook+0x231/0x280 [ 1536.844972][ C0] get_page_from_freelist+0x24dc/0x2580 [ 1536.850542][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1536.856372][ C0] alloc_pages_mpol+0x232/0x4a0 [ 1536.861242][ C0] allocate_slab+0x83/0x660 [ 1536.865762][ C0] ___slab_alloc+0x150/0x6b0 [ 1536.870370][ C0] __kmalloc_noprof+0x18a/0x760 [ 1536.875250][ C0] hash_ip4_resize+0xa70/0x1a20 [ 1536.880121][ C0] call_ad+0x463/0xb60 [ 1536.884236][ C0] ip_set_ad+0x824/0x9d0 [ 1536.888501][ C0] nfnetlink_rcv_msg+0xc00/0x12c0 [ 1536.893542][ C0] netlink_rcv_skb+0x232/0x4b0 [ 1536.898360][ C0] nfnetlink_rcv+0x2c0/0x27b0 [ 1536.903061][ C0] netlink_unicast+0x80f/0x9b0 [ 1536.907852][ C0] netlink_sendmsg+0x813/0xb40 [ 1536.912651][ C0] ____sys_sendmsg+0xa68/0xad0 [ 1536.917447][ C0] page last free pid 13377 tgid 13377 stack trace: [ 1536.923969][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 1536.929102][ C0] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 1536.934854][ C0] __apply_to_page_range+0xbdc/0x1420 [ 1536.940248][ C0] __kasan_release_vmalloc+0xa2/0xd0 [ 1536.945655][ C0] purge_vmap_node+0x220/0x960 [ 1536.950474][ C0] __purge_vmap_area_lazy+0x779/0xb70 [ 1536.955865][ C0] drain_vmap_area_work+0x27/0x40 [ 1536.960902][ C0] process_scheduled_works+0xb02/0x1830 [ 1536.966470][ C0] worker_thread+0xa50/0xfc0 [ 1536.971083][ C0] kthread+0x388/0x470 [ 1536.975259][ C0] ret_from_fork+0x51e/0xb90 [ 1536.979877][ C0] ret_from_fork_asm+0x1a/0x30 [ 1536.984665][ C0] [ 1536.986998][ C0] Memory state around the buggy address: [ 1536.992636][ C0] ffff88803f886500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1537.000707][ C0] ffff88803f886580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1537.008788][ C0] >ffff88803f886600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1537.016857][ C0] ^ [ 1537.024062][ C0] ffff88803f886680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1537.032137][ C0] ffff88803f886700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1537.040214][ C0] ================================================================== [ 1537.048475][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1537.055708][ C0] CPU: 0 UID: 0 PID: 21795 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 1537.065546][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1537.075639][ C0] Call Trace: [ 1537.078956][ C0] [ 1537.081834][ C0] vpanic+0x56c/0xa60 [ 1537.085867][ C0] ? __pfx_vpanic+0x10/0x10 [ 1537.090414][ C0] ? irqentry_exit+0x59e/0x620 [ 1537.095233][ C0] panic+0xc5/0xd0 [ 1537.098996][ C0] ? __pfx_panic+0x10/0x10 [ 1537.103451][ C0] ? ax25_heartbeat_expiry+0x115/0x140 [ 1537.108958][ C0] ? ax25_heartbeat_expiry+0x115/0x140 [ 1537.114458][ C0] check_panic_on_warn+0x89/0xb0 [ 1537.119427][ C0] ? ax25_heartbeat_expiry+0x115/0x140 [ 1537.124929][ C0] end_report+0x73/0x180 [ 1537.129215][ C0] ? ax25_heartbeat_expiry+0x115/0x140 [ 1537.134721][ C0] kasan_report+0x128/0x150 [ 1537.139269][ C0] ? ax25_heartbeat_expiry+0x115/0x140 [ 1537.144771][ C0] ax25_heartbeat_expiry+0x115/0x140 [ 1537.150104][ C0] call_timer_fn+0x192/0x640 [ 1537.154736][ C0] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 1537.160586][ C0] ? call_timer_fn+0xd4/0x640 [ 1537.165302][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1537.170458][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1537.175696][ C0] ? __pfx_ax25_heartbeat_expiry+0x10/0x10 [ 1537.181545][ C0] __run_timer_base+0x652/0x8b0 [ 1537.186439][ C0] ? ktime_get+0x45/0x200 [ 1537.190802][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1537.196220][ C0] ? sched_clock_cpu+0x74/0x440 [ 1537.201124][ C0] run_timer_softirq+0xb7/0x170 [ 1537.206017][ C0] handle_softirqs+0x22a/0x870 [ 1537.210831][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1537.215641][ C0] __irq_exit_rcu+0x5f/0x150 [ 1537.220284][ C0] irq_exit_rcu+0x9/0x30 [ 1537.224563][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1537.230243][ C0] [ 1537.233208][ C0] [ 1537.236169][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1537.242180][ C0] RIP: 0010:rcu_is_watching+0x2e/0xb0 [ 1537.247600][ C0] Code: 41 57 41 56 53 65 ff 05 a0 fa 70 11 e8 0b 87 02 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 97 1a 8e <4c> 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 bc 0f 85 00 [ 1537.267502][ C0] RSP: 0018:ffffc9000d7bf330 EFLAGS: 00000293 [ 1537.273608][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000080000001 [ 1537.281611][ C0] RDX: ffff88807a855ac0 RSI: ffffffff8c27a460 RDI: ffffffff8c27a420 [ 1537.289705][ C0] RBP: 0000000000000001 R08: ffffffff81d53046 R09: ffffffff8e7602e0 [ 1537.297706][ C0] R10: ffffc9000d7bf438 R11: ffffffff81b0b130 R12: 0000000000002c3e [ 1537.305711][ C0] R13: dffffc0000000000 R14: ffffffff8e1a9790 R15: dffffc0000000000 [ 1537.313719][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1537.320012][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1537.325255][ C0] is_bpf_text_address+0x207/0x2b0 [ 1537.330396][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1537.335628][ C0] kernel_text_address+0xa5/0xe0 [ 1537.340616][ C0] __kernel_text_address+0xd/0x30 [ 1537.345672][ C0] unwind_get_return_address+0x4d/0x90 [ 1537.351172][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1537.357401][ C0] arch_stack_walk+0xfb/0x150 [ 1537.362134][ C0] stack_trace_save+0xa9/0x100 [ 1537.366936][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1537.372340][ C0] ? proc_reg_open+0x1f4/0x540 [ 1537.377147][ C0] ? stack_trace_save+0xa9/0x100 [ 1537.382149][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1537.387553][ C0] ? proc_reg_open+0x1f4/0x540 [ 1537.392358][ C0] kasan_save_track+0x3e/0x80 [ 1537.397132][ C0] ? kasan_save_track+0x3e/0x80 [ 1537.402019][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1537.406812][ C0] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1537.412385][ C0] ? single_open+0x5a/0x240 [ 1537.416963][ C0] ? proc_reg_open+0x247/0x540 [ 1537.421780][ C0] ? do_dentry_open+0x785/0x14e0 [ 1537.426750][ C0] ? vfs_open+0x3b/0x340 [ 1537.431115][ C0] ? path_openat+0x2e08/0x3860 [ 1537.435913][ C0] ? do_file_open+0x23e/0x4a0 [ 1537.440789][ C0] ? do_sys_openat2+0x113/0x200 [ 1537.445672][ C0] ? __x64_sys_openat+0x138/0x170 [ 1537.450727][ C0] ? do_syscall_64+0x14d/0xf80 [ 1537.455538][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.461665][ C0] __kasan_kmalloc+0x93/0xb0 [ 1537.466297][ C0] __kmalloc_cache_noprof+0x31c/0x660 [ 1537.471703][ C0] ? single_open+0x5a/0x240 [ 1537.476263][ C0] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1537.481861][ C0] ? __pfx_filesystems_proc_show+0x10/0x10 [ 1537.487790][ C0] single_open+0x5a/0x240 [ 1537.492162][ C0] proc_reg_open+0x247/0x540 [ 1537.496804][ C0] ? __pfx_proc_reg_open+0x10/0x10 [ 1537.501954][ C0] do_dentry_open+0x785/0x14e0 [ 1537.506765][ C0] vfs_open+0x3b/0x340 [ 1537.510858][ C0] ? path_openat+0x2df0/0x3860 [ 1537.515653][ C0] path_openat+0x2e08/0x3860 [ 1537.520298][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1537.525701][ C0] ? stack_depot_save_flags+0x33/0x810 [ 1537.531198][ C0] ? __pfx_path_openat+0x10/0x10 [ 1537.536177][ C0] ? __x64_sys_openat+0x138/0x170 [ 1537.541246][ C0] ? do_syscall_64+0x14d/0xf80 [ 1537.546051][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.552152][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1537.557138][ C0] do_file_open+0x23e/0x4a0 [ 1537.561674][ C0] ? __pfx_do_file_open+0x10/0x10 [ 1537.566745][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1537.571640][ C0] ? alloc_fd+0x64b/0x6c0 [ 1537.576095][ C0] do_sys_openat2+0x113/0x200 [ 1537.580809][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1537.586054][ C0] ? exc_page_fault+0x6a/0xc0 [ 1537.590768][ C0] ? do_user_addr_fault+0xc6f/0x1340 [ 1537.596100][ C0] __x64_sys_openat+0x138/0x170 [ 1537.601000][ C0] do_syscall_64+0x14d/0xf80 [ 1537.605631][ C0] ? trace_irq_disable+0x3b/0x150 [ 1537.610694][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.616799][ C0] ? clear_bhb_loop+0x40/0x90 [ 1537.621512][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.627433][ C0] RIP: 0033:0x7f4d165f6407 [ 1537.631872][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1537.651621][ C0] RSP: 002b:00007ffc90de8d10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1537.660096][ C0] RAX: ffffffffffffffda RBX: 00007f4d164a6c80 RCX: 00007f4d165f6407 [ 1537.668129][ C0] RDX: 0000000000080000 RSI: 00007f4d1653b2e2 RDI: ffffffffffffff9c [ 1537.676142][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1537.684275][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f4d1653b3ae [ 1537.692282][ C0] R13: 00007f4d1653b3ae R14: 0000000000000001 R15: 0000000000000000 [ 1537.700296][ C0] [ 1537.704004][ C0] Kernel Offset: disabled [ 1537.708348][ C0] Rebooting in 86400 seconds..