last executing test programs: 3.849443161s ago: executing program 3 (id=3856): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRES8=r0, @ANYBLOB="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"], 0x184}}, 0x48000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1802e4ff00"/20], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], 0x5c}}, 0x4008041) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = epoll_create(0x7) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0xd5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) close(0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x20040940, &(0x7f0000000400)={0x2, 0x4e24, @multicast1}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000406010100000000000000000000000005000100070000008be14b81c0cc913070dfb47835cb850e6f60adc2505da1ccae3d1abb743ffdad19c0a9953c72e7d84fea192708710900000000000000036f90bc444852fb48d57f6e83e15642171c941c33eabe58f8f367c5a0deaa024b205b8cfccc8444ffabf7f23174ef98b18ff440e190d6ec0e96bb89261cb20081"], 0x1c}, 0x1, 0xfff0}, 0x4048000) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'lo\x00'}) 3.448063496s ago: executing program 3 (id=3861): socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(0xffffffffffffffff) r0 = socket(0x14, 0x2, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000001cc0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0x5d, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.226979736s ago: executing program 0 (id=3863): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000e8"], 0x50) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth0_to_hsr\x00', 0x1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7254a7cf4ffcb0d077fac8e3a8f04000000000000850000ed783f7cc1168b53136526c814d6a94b1a45b6f33f2ef59e22ce15446c3609b9e0ddf1fe05576b0b9ea520301c62039d4a8a66a4203f08a2"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000280)={0x0, 0x0, 0x45, 0x6, @vifc_lcl_ifindex, @remote}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x12) ioctl$int_in(r6, 0x5452, &(0x7f0000000340)=0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r1}, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0xb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001200578300"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000004"], 0x24}}, 0x0) 2.66509299s ago: executing program 0 (id=3867): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000480)={0x0, 0x0, 0x7, 0x2b, @vifc_lcl_addr=@local, @broadcast}, 0x10) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e657269"], 0xe0}}, 0x0) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882cae"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r7, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020d0000100000000000000000def34aa81911000000000000000000000000001000320003000000000000000000000010006c00000000000000000000000000fc020000000000000000000000000000030005000000000002200000ac1400000000000000100000030006000000000002000000000000000000000000000000c9e18a562584e2cbbd7c8d264f1a1c0d8c3664021147472105a2e4994b"], 0x80}}, 0x0) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000540)="480000001400190d09004b87000000000000006080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000001895a9eab28438823aba7f9b2dc4274390ccf715f256a710e20fe9c4a026e9c7b304238b7f73829772c86f85480cb58e78186648f9f583", 0xab}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) 2.539639355s ago: executing program 4 (id=3869): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x30) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="340000000d06050000000000000000000000000005000500010000000d0003006c6973743a736574000000000500010007000000ac2ec205156dd028dfbf32f8dfe9f24f1e748d6afe76314e102702c726ef1c9de1e86eead0b43ad28752e82c904c6a4afd6fce36745b578d91ea93870bc54a44c776c9a543707eaedfdf68b568f684217c"], 0x34}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634e2", 0xd}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000008000000ef340000000000000200000000000000080000000000000002000000000000000000000000000000000000000000000000000000000000000900000007000000010400000000000008000000000000000500000000000000cf16000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"/823]) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001e000000a700"/21], 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x4080) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000640), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 2.260605656s ago: executing program 4 (id=3871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) 2.108025004s ago: executing program 3 (id=3874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 32) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x2, @rand_addr=0x64010101, 0x4e22, 0x0, 'wrr\x00', 0x0, 0x0, 0x7fffff}, 0x2c) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.99166847s ago: executing program 1 (id=3875): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) (async) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in=@local, 0x421f, 0x0, 0x0, 0x4, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x401, 0x2, 0x200000003, 0x800}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) r3 = socket(0x10, 0x803, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x20000000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="00000000d62ade515df75786ba139118c99082fd4946199a00fe9c911f92e39e2f4c15863c650a4aa092eb8ac2c6b1a4159bee2ff37ac434a269f4ea5bd1fa09515675f9e36f73da995ac14210f84980a7c69615a7de40e6f44e37524cf0bcd29d3eebd09952762c0834453b2d3ca810d7be", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fddbdf250f00000005002d00000000000500350003000000050037000100000008003b000100000005002d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8889c) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000002640)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r11}, 0xc) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 1.973715431s ago: executing program 4 (id=3876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x74, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1}, [@NFQA_VLAN={0x4c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6}]}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40810}, 0x8080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000002c00128009000100626f6e64000000001c000280050001000600000005000c000200000008000b00", @ANYBLOB="1102"], 0x4c}}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.675882047s ago: executing program 1 (id=3877): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000080)={0x4, 0x40}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8020, 0x11000}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe}}, 0x5, 0x2404}, 0x90) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r1, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0x800ac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4094, 0xffe}, {&(0x7f0000001680)=""/97, 0x61}, {&(0x7f0000000400)=""/84, 0x54}, {&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000000640)=""/128, 0x80}], 0x6}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}, {{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000740)=""/221, 0xdd}, {&(0x7f0000000340)=""/142, 0x8e}, {&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000940)=""/221, 0xdd}, {&(0x7f0000000a40)=""/105, 0x69}, {&(0x7f0000000ac0)=""/129, 0x81}, {&(0x7f0000000b80)=""/140, 0x8c}], 0x8, &(0x7f0000002900)=""/4096, 0x1000}, 0xc40}], 0xa, 0x40002000, 0x0) 1.635444649s ago: executing program 4 (id=3879): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/217, 0xd9}, 0x40010002) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x13, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x94) 1.563903736s ago: executing program 3 (id=3880): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@deltaction={0x88, 0x31, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4c4}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x88}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x9, 0xb, 0xd}}) 1.476410931s ago: executing program 2 (id=3881): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000c40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000740)={0x268, 0x1, 0x5, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x0, 0xd9bf}, 0xdd, 0x7, 0x6, 0x5, 0x16, 'syz1\x00', "4155593f120d4efd4705c27556c92faf346e90025a31f89de57a46c6b84fa192", "226b0ec6132d650323e8ebd396a665730007666b0e8ecc740663b965dc1d53e9", [{0xffff, 0x9, {0x2, 0xc6c}}, {0x9, 0x4, {0x3, 0x1}}, {0x3, 0x4, {0x3, 0x458f}}, {0xfffa, 0x3, {0x2, 0x7}}, {0x4, 0xffff, {0x3, 0x6}}, {0x5, 0xe, {0x0, 0x1b2}}, {0x9, 0xfffb, {0x3, 0x9}}, {0x600, 0x99e0, {0x3, 0x4}}, {0x5, 0x8, {0x3, 0xf}}, {0x7, 0x3, {0x1, 0xfffffff2}}, {0x1, 0xfffb, {0x0, 0xbbc3}}, {0x7, 0xfff8}, {0x7, 0xe9, {0x0, 0x1}}, {0x7f, 0x40, {0x2, 0x8}}, {0x9, 0xffff, {0x6, 0xe2f}}, {0x1, 0x8000, {0x0, 0x7}}, {0x9, 0xb, {0x2, 0x6}}, {0x7, 0xfd80, {0x3, 0xffffffff}}, {0x5, 0xc9d6, {0x1, 0x1d3}}, {0xfff8, 0x3, {0x3, 0x7}}, {0xbf, 0x81, {0x1, 0x1}}, {0x2, 0x7de, {0x2, 0x3ff}}, {0x9, 0x9, {0x2, 0x9a5c}}, {0x1, 0x80, {0x0, 0x4}}, {0xa152, 0x6, {0x2, 0x5}}, {0x16, 0x7, {0x1, 0x7}}, {0x4, 0xb683, {0x2, 0x9}}, {0x3ff, 0xff, {0x2, 0x7f}}, {0x8, 0x9, {0x0, 0x5}}, {0x677, 0x626, {0x1, 0x5}}, {0x880, 0x401, {0x2, 0x3ff}}, {0x6e, 0x2, {0x1, 0xfd8}}, {0x0, 0x80, {0x1, 0x2189}}, {0x1, 0x2, {0x0, 0x7}}, {0x7f, 0xfff, {0x2, 0x1}}, {0xd864, 0x9, {0x0, 0x9}}, {0x6, 0x5, {0x3, 0x6}}, {0x9, 0x9, {0x0, 0x1}}, {0x6, 0x3, {0x3, 0xc}}, {0x1, 0x3, {0x62e85c64fde4bda4, 0x2a6}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x90}, 0x8000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x2, 0x5, 0x508, 0x368, 0x220, 0xffffffff, 0xf0, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0xff0000ff]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @port=0x4e21, @gre_key=0xa2}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x9, 0xe], 0x3166, 0x1e, 0x1}}, @common=@unspec=@cgroup0={{0x28}, {0xff}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$inet(0x2, 0xa, 0x4) (async) socket$kcm(0x2, 0xa, 0x73) (async) close(0x3) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffffffffffe2b}]}}}]}, 0x9c}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) (async, rerun: 64) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) (rerun: 64) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1e, 0x8, 0x6, 0x1, 0x10009, 0x1, 0x1000, '\x00', r4, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000080)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r12, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x38dd53c4}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xd9, &(0x7f0000000f80)=""/217, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r4, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) (async, rerun: 32) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r14, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x17, 0x18, &(0x7f0000000100)=@raw=[@tail_call, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @alu={0x3, 0x1, 0x5, 0x1, 0xa, 0x8, 0x19}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1cc8}, @exit, @exit, @alu={0x4, 0x0, 0x0, 0xb, 0x1, 0xfffffffffffffffe, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0xe9, &(0x7f0000000200)=""/233, 0x41100, 0x20, '\x00', r4, @fallback=0xf40664224eaa3d81, r7, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xb, 0x4a07, 0x5f6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=[r8, r9, r10, r11, r12, r1, r13, r14], 0x0, 0x10, 0x5}, 0x94) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 1.397148317s ago: executing program 4 (id=3882): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') preadv(r1, 0x0, 0x0, 0x3, 0xffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003140)=ANY=[@ANYBLOB="8401000010000100feffffff00010000fe8800000000009cca78000000000000000001d9010000000000000000000000000001000107144e230005000000003a00000055cc6b9c626962d6fd596d12affab6a4745f6b64b2ddd2d0bdc117387551349d6809a3749591655c5569d78250", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) accept$alg(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff00000000010400c34393e4fb5532408cb800009a0600", @ANYRES8=r1, @ANYRESOCT=r2, @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000a00)=[@in6={0xa, 0x4e21, 0x8000, @mcast2, 0xfffffffc}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000580)={r8, 0x7}, &(0x7f0000000600)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[], 0x38}}, 0x2000a080) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) sendmmsg$sock(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="1120f7b2ae29", 0x6}, {&(0x7f0000000240)="bf2b1a0f9783a2c6106cf54a52bda43f26bbc3cb89dbe53bac78b69cdb7f1d0782b08e43e24e4c56585887e790f569f0d4951511b63a16a131972f2c2558c33f5121632ec5a854b658a7a029c61112615aa487162e261734e547f6b71f9f947a7b6ebefe3a44efeaa4bd1da23db4a5204fb4d8d5f7c7c84fd8d3eeff88bb28043c951c4908b51c4089b06751", 0x8c}, {&(0x7f00000003c0)="cffd3002b024e2bfb90f5924d96e5c7281f37bef1e0a682f555d045f77fe2c82578c449be01044c7be28587bfcefd52983f829850f739993405e5beae9e3b76ed2c75d334de2dc803b76e5c8e0ee12ac9711124028d94fe85734fecd30a9222127", 0x61}, {&(0x7f0000000440)="b73ed60b0007fbb9be6238fcd0766112148e1e1aa7b35399bac06c1333a8498de5dd1e4334573b1b034ae444d59fe5fcabcf78093d90173ff7138d7c8b547fe0ac4da73e9d6a67010b0286cc4f9ac8e02f24ae875644884d9a554fd81d548f57400ff73f0b59fa3a9ca9d8b524627dc421e6d5150fa99448dbf0b58a1bb9a13af39c3a7f2635e1b8e281934b49f8e551222e0ebe975a1a589de31cbb098a4712e2059299c274f91f0b5e799f895d1cd9da476dbb3bbb025e69ad4a0cc0f9e2d642d1d9dea56dbb", 0xc7}, {&(0x7f0000000540)="96a43044e0c0661a3c5ac4cc9bbd093b117914", 0x13}], 0x5}}, {{&(0x7f0000000600)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80000000}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000680)="6689ce7099dae03719cc7400a748db070fc4176fc8e72e055c704621cce49100024a4e0fbdb9cc0c0e5452ced7167943c7a4ba63792fbf3823875fc72a92c9502970033e898a7ba8fc2f9724ea19fffc5de57c837efb8da563a79c5423958d42b2127fbe8f3d5e46f0f72198322c482bb92abfa84ef637766fd8dc98496e9eeec4b2bd4f774f448c5a4e18dce025484dfccc11c2875f30235a0ebd0ccb48e41c42e991d87ebcc848d7ea8320de0ef7085d45aff02f89467df5a75b0c2aed75d78a5a49f16a1423e51c71dbfa2ee43307005ea1a082b2ba7e0842c5882eb8e11187c1c483628b5e4756b8b6f4e51db5b82de28b3398ba9b45c5", 0xf9}, {&(0x7f00000007c0)="a93497109f4d60b5e9a47b34643363b0fc6c1cc4dc2643ddcabeb34f938b4d687c9667e66f3f1a7573285f2d32dec8d26667c4a245ca09766738b6bbe137d84af75c26ecdd5be518bf6418a3ef925a26255edfac2caaac7a24516a6abaa8c7a8362b41d84c463db1814b2c37c785ce3477eb4ccc18bd1286b949fcc17fecc797f94441d649d4d273fbe8b1f7e2820b84e2d6547c0d07e6158b93528f709f23b7c2ddd018c6060aa2dac75743b1d79a118cacf431c4", 0xb5}, {&(0x7f0000000880)="4080c7cbcfa43a1ee8bf3d1bb6e59bf4787c249ccdcdc5af9b822d85ceca65a3eca4b1cdbed2963d77f20519dd166e4b34ca8dab33935d7f2969ac7e4c07e8f9651a6de0daa202afda3740e4c6ec7ae54df1577f61806ca0fcbc169da3390fd5af09afdaae04bdc0cdd64663329761fee028276199a04c474b52d938c04ee487317ec972c4d70f0cb326cddfdea08ed5122542f1cd5b4cef98ff46570c099522420b49eb37a25dc492c5574635fa1a4554048884362fa96ef01133519d64b50698b05188a80ea69a1809eb4f1666cdd04086550b15d1bb9fae7388087b03384ba3bb20d57f424a3616ab277eed10456f9f073c4fbf07c30ed0c2da", 0xfb}, {&(0x7f0000000980)="89889d686cbaeb4e2bbea719eea744433f16399fc6b8c2f03c6c4b31eaf746768eeaeaaff39374a9650f1e3a71f1378b1addf231310c1bd6af7762bf3f02e5efd8f6", 0x42}, {&(0x7f0000000b40)="e8b9f1a029c70e85ee68dddf67b62e6345cb5ec2e1bed13f9d2975dcaa6f946f4d26bd8d978e7293a1f7ec2a79ead2eecb4b89feeba500de46c2d337e3b09aa630a35f287bff2c6460fa84d1471290c51f2b7accf52968defbc26ad32790ad6b0855e410f6243010e5a46dbf7fc6bd3fae1e9a535a30ae8a346d78d8e40308541b0f8398250457f8a391b8d9292ef8dd836770e10c02ddab31191fdd3509f6423742ed1bb2fbd45f6564611cf7afbb5e1067d9696f94f6575428998a6ac00a71f7f786b0f93a129b26743bf30bd4c99f343fb982a3a9f4e5076557c9f95f366045a48a8836b18c0733cc18e98ad2", 0xee}, {&(0x7f0000000c40)="16802e47e572b67ef91ea1a67145c0a2ab3f8d715432d70509f091b2bd01a8a0bf54022cd5bc3f496feed920e77df933ea057daba1fcedf683c56a552793303c1aec6c291abcf7626c5d8f171e9c9fad9ee2c675ddab19bb5c301f6cae3e45dac300de52e4acaab067e27e36628070a0c12d2aa62c6a4ca5e73d4f2118e82ccc89c2850cb23acdb31eb4436f887597eeb2dc5b20307712bccbce77b80c2b69eebc5bcbe478de90b8f2763f0ba7f86ba15b777c9433d0bc8ad1a8f5ef5a4be810928fddb4b2422b6b6ff9835e03f8a796b2c59dfb35ec", 0xd6}], 0x6, &(0x7f0000000dc0)=[@timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xd60}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xc0}}, {{&(0x7f0000000e80)=@l2tp6={0xa, 0x0, 0x9, @local, 0x9, 0x3}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000f00)="4d5e342e60d54893792e1b29bc93eeea12aa46c463848dae0413bfad36bb242672c8dc8cf3336c12af55051a27a5e680fb8a648bae2fee863b82484fa8bb834d5928351dadffaa3526cad09d26ffcb642aa560699a128e47493465c6c53cff840fe8786c08761ac4e7beb687355389", 0x6f}], 0x1, &(0x7f0000000fc0)=[@mark={{0x14, 0x1, 0x24, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x48}}, {{&(0x7f0000001040)=@can={0x1d, r5}, 0x80, &(0x7f0000001400)=[{&(0x7f00000010c0)="8a3cc4bd529b6d17961c276ca6fc12cb7ef4a5cf869cc5543df5a28501e5c227d0d92e78491c43a7c630061fceaabf20aa052726e3e7c3659e2bbfc6f9f8", 0x3e}, {&(0x7f0000001100)="f16453708599aab9b823f2577758c55d1c4b673000c2ec84633212250b099ff9e454fc1248a503d80081d04a3a4a61183d1aa94e4b1fa48c055a688771cf54d4113b9e4df8ba5dfc4d718ebb9e2bcbc8db57a863491ff3da46ad5d2354e3bfc04b569c82f1acf03d2514c8e1fd1b09a74d8f2cacc808f154fa11bfae5b0c22b7ef3ce8e4cb793de553ce90ff61a0b30901676730b25ef9af417c2fb0e465638b3b85190e52e7c45040f64074d176a8492230614dcae124dfc63d25a6ab3aca1b06b06f6066988e1f0e2b37bb77bb8da66dbbfb20d20c0dd9c447ce991149b7b2bb44c6e76ec992dd007aaf373cb27546841c9d00bf", 0xf5}, {&(0x7f0000001200)="a28c265045bd7ceb787ddf330e51b121faf7a33fd789bb036b306ffa68f03a053035b7262734e39705113ac27ce9d27e1341e7c46736740ef267b3000bf03bb69e9d7d053678d8b05b1cfa1997dac8cb2df9fb74f5d508dffd", 0x59}, {&(0x7f0000001280)="734a029fe2a20c3a50e1283afa036128188b950a3a6fe4075cea66f7c5aee3e27562d2099edb59bbeeedbe99e6dbd0da5a5d879bc34770f3dcbbe26b4a686b030d880c2cd06578d7c4c52540b8067a26dee81a1ed6b3440b3c", 0x59}, {&(0x7f0000001300)="9deada1e29798caad03b81a4ff7fa697cf5db2a99c729da82d1f665ac3593a75502d7a3ffe8c975a8338d1982411ce1bedb6f060e698480c5dd330470519c0d277a3027c6fa31d1cf35a8f2e7e19771590b24adf780197a8096a8c475e03930dee2ba532e76a5eff06d1c2b41c1614f8c729820b678086572d9cdcb438f2b2d83cd597d787d027c7219843cc868e064e3d6ab1cf44b2b66cbcbd6c28c55722ded78100e1dcfd79f38bf4f3f37806caf94351c34df21d04bac2d4f98393153e4486623462ea040ff93d4d94ef10fbe34b", 0xd0}], 0x5, &(0x7f0000001480)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xcd54}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x848e}}, @mark={{0x14, 0x1, 0x24, 0x20}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffc}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001580)="bf0927f426fb0a7bb18ec797b9eccec167e6102ab1381146b83b72ea2914383339d71bd08255e7a2bee0488a888c8315ac68a4fb5790b1556433f35e1234ce60a426629945f1ff14c19ce05de62f103781291e99bd5d8b0bcb75896d2b3e8c396fa9bc81b4c3495417755a4b9ffb36edfdefa56e1c02bd06a119ae2742d1", 0x7e}], 0x1, &(0x7f0000001640)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x48}}, {{&(0x7f00000016c0)=@isdn={0x22, 0x0, 0xad, 0xf0, 0x4}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001740)="fb20b876ac4456c024b14bbc83233a2512fb268509d5b2ffc2cc1cc32fd97008745d0cde006218ada9c2f7c2cb1787f1a1c5b6cb108d466f412aaec10a66fba99970f82bca8804f889834edbdcfed0af3b338356f45d920a1ce32e9d23558d18540b6c7ea20ecff7d565d8392a8bdf29e0aa7d4a515a931c3c1e", 0x7a}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="727acbd5b8ea528935e9b084c2effe2d79944114103f667c0b46d38b24888a91d7f2ee5bba2a30d02cc319d086e1d3b3386853e1f0d8e500591d03dc338ed3a5c036a2201a5f0c5c606c8ab4a723d4fcfa3ab794518ae336f0f15e60", 0x5c}, {&(0x7f0000002840)="805b84f4e40a07bf280f27cfc036dbfee87335410d2f94ecf0ef5239f969897381841fbd6652bf795cb36d44349abc6cee24152faeaaf89c09817715ce928715e24c2bf6027556ab0429d76b0df3a434790ba65471ec241886c84f8aa7bb8d3f9e803cf3ee0e40aea19bef6ef21bf7bc3f4aaf6424ff27", 0x77}, {&(0x7f00000028c0)='[tb', 0x3}, {&(0x7f0000002900)="52de32369dfe8a63da03cbd2764531dbbea8afa3f6fb247dd052a9f43a0250c78d8385fb74ab245cb35ee4c956046c0b162c981c447a73089fd9b082beb9a18536cae70a6625224fc109e459f0ddc13d9017fb7483761e8d88a570a95b88655b78230ed431ed0a7e6f527abaca81165ece167bbb6d8a7732a1bac40598dcf26a3f49f1f18c9bddaeb5b7e6b2b0420a85a9117711cd730e3c79f3eb", 0x9b}, {&(0x7f00000029c0)="035f856e660c1831727ed7807f97ab0b82c26b6a4d92585119a58bbb7dfa6d126da82f5d1f13a173e691ced1b55cd97dba386b4997d559580dac8d32d39f5679ff85c0b979beffb9efa546b7f930dcaa1a337009c791e5e8abe6214e682973e76c800e0c9538486b3fc8a3dcec38b136892d01cd228fcd0e6824280b874b2495d838ecc70b6ea09017a1db8eb18be98561e6ca0303ad51b4f1dc47dd088e7955868808ddecf0ebb6be69d7ca3739a15a4fee8eb88ed0c2ba2430b1a738c313e78664e2105e57e9335b88da3ee0d8f66a8ccd35d85dce8e3f6860991caf42e2167e73d048e2517458dd01678a6a48c788da20", 0xf2}], 0x7, &(0x7f0000002b40)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x18}}, {{&(0x7f0000002b80)=@llc={0x1a, 0x311, 0x4, 0xb0, 0x80, 0x9, @remote}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002c00)="de2883a20d6dadb85d7505f74531a290e769a36a14b4642c571d82bf2f1602e5f43a93f03d7cdf601736bbb50193d53278e7f9f6fb86ee93a6", 0x39}, {&(0x7f0000002c40)="f1f299651d9cb88fc72de4a56108998e939cc32f535ba4233c44e2410748491bf1bbcb384c6c792cc4250423ba6c4e0076943ec9c95243921c7d5ac4a99d692b18584776c4006606f6f1bc91629278364bfba97011c6d3b74210ef12fa1d6d333f9a6ee2f6a2ccc0ef2bce4d1dff337c7aae0945c2450d91b355520eb12cda84331bda47321a50bad4d179b39c1cbf7ee506464e2295a069", 0x98}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)="db180d2902690d11eacbddf12b241bc3639f557b4f98765db458108249eb852c84d9e76843f08b3edba6c2f434076f86c452af4fdde298ad3ffe5d7bf824eafe2fcafddd0e95fa26b3945ba05042db0dd56972e0580d6b9e4b0a020befee9c912aa6b95186d891fd565f0214b860127e6013309cfe1c28890605221f", 0x7c}], 0x4, &(0x7f0000002e00)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x48}}, {{&(0x7f0000002e80)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, &(0x7f0000002f00)}}], 0x8, 0x8040) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1.331295843s ago: executing program 2 (id=3883): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.17133982s ago: executing program 0 (id=3884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xfff1}, {0xffff, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x98}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.104556992s ago: executing program 3 (id=3885): r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000002c0)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r5, 0x9}, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000002c0)=0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$netlink(0x10, 0x3, 0x4) (async) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r5, 0x9}, 0x8) (async) 1.031233149s ago: executing program 4 (id=3886): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xfffffffffffffdaa, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000ffdbdf25070000000c00060003000000030000000800050000000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r11, 0xfffffdc8, &(0x7f0000000340)}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 888.832503ms ago: executing program 2 (id=3887): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0xffff}, {0xfff1}}}, 0x24}}, 0x1040) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000007b280000000c000180080001", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 780.013881ms ago: executing program 0 (id=3888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0xffff, 0x20, 0x3}, 0x2f) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0xb209, 0xfffffff9}, 0xc) (async) pselect6(0x40, &(0x7f00000000c0)={0x2, 0x3, 0x8, 0x3, 0x2, 0x40, 0x8, 0x1ff}, &(0x7f0000000100)={0x6, 0x5, 0x0, 0x6, 0x0, 0x1ff, 0x100, 0x508}, &(0x7f0000000140)={0x2b, 0x401, 0x4, 0x40000000, 0x4, 0x1, 0x1, 0xffffffff}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x2]}, 0x8}) write$tun(r0, &(0x7f0000001980)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@generic={{0x7, 0x4, 0x1, 0x31, 0xfc0, 0x65, 0x0, 0x2, 0x29, 0x0, @private=0xa010102, @broadcast, {[@generic={0x7, 0x5, "7ee226"}]}}, "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"}}}, 0xfce) 685.176974ms ago: executing program 2 (id=3889): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4016, 0x1, 0x3, 0x6, {{0x23, 0x4, 0x1, 0x2e, 0x8c, 0x65, 0x0, 0xc, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, {[@end, @lsrr={0x83, 0xb, 0x6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}]}, @ssrr={0x89, 0x7, 0x78, [@remote]}, @timestamp_prespec={0x44, 0x24, 0xa, 0x3, 0x6, [{@empty, 0x1}, {@local, 0x10}, {@empty, 0x7}, {@broadcast, 0xffff0001}]}, @generic={0x94, 0xe, "f5239be44e4ce006b874bcb3"}, @timestamp_prespec={0x44, 0x24, 0xcf, 0x3, 0x5, [{@rand_addr=0x64010101, 0x7fff}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0xb7a9}]}, @rr={0x7, 0xf, 0xa2, [@multicast1, @dev={0xac, 0x14, 0x14, 0x22}, @local]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@dellinkprop={0x38, 0x6d, 0x4, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x41001, 0x4b904}, [@IFLA_PROP_LIST={0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000014}, 0x4004) 677.620999ms ago: executing program 1 (id=3890): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003e7dfffff08300008a00000000000000010000000000000049060000000000000400000000000000000000000000000000000000000000000000000000000000b5ca000000ffffff070000000000000000000000000000000700000000000000ff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001700"/320]) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r0}, 0x20) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlinkprop={0x40, 0x10, 0x30c, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x850) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f97, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)=r9}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)="aa", 0x1}, {&(0x7f00000008c0)="dd1a708d08c875a6b528aab1fdaf226a8a4e2babb95bf40e552d60c35e3635a6ba774a3d0aab38a2205a6eaa1b0c64ca02755c45a741641d22c3e88b714988085de9f80ff708d9177b47e71b2bdffd8380c02f72f800dde0a895b0433ac0b1ad497737bee5fbf55ebd81fd28416a68ef2b51c9a042eac57e55407b01df7bb5ff7a148853e12b86533898", 0x8a}, {&(0x7f0000000980)="136a3f29dc016ec1232b682978df0988d86ed36b98ac643f78e3104a56216ff80c0ac63b05e371d41ef28c", 0x2b}], 0x3, &(0x7f0000000180)=[@cred={{0x1c}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}], 0x2, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x4e20, 0xc76c, 0x3, 0x4, 0x2, 0x80}, {0x0, 0x2, 0x80, 0x4, 0x0, 0x8, 0x4, 0x600000000}, {0x2, 0x0, 0x200, 0x1}, 0x5, 0x6e6bbe, 0x2, 0x0, 0x2}, {{@in6=@empty, 0x4d2, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x34ff, 0x4, 0x0, 0xf8, 0x4, 0x5, 0x7}}, 0xe8) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r5, 0x11a, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x10, 0x3, "39a9b579752b825ba5422a57"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x840) 451.821569ms ago: executing program 2 (id=3891): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000040)={'batadv_slave_1\x00', 0x7}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39}, 0x48) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, 0x3, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) 436.020567ms ago: executing program 1 (id=3892): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000350901000d0000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98000000000000560800000000000085000000057fff00b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 281.641306ms ago: executing program 1 (id=3893): unshare(0x2c020400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000200), 0x4) 240.658788ms ago: executing program 0 (id=3894): unshare(0x20400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2f}, [@alu={0x4, 0x0, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x8000004, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5, 0x8ca}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_LINK_NETNSID={0x8}]}, 0x48}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) 212.347595ms ago: executing program 2 (id=3895): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x1, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x108) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r1, &(0x7f0000000fc0)=[{{&(0x7f00000003c0)=@generic, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/207}, {&(0x7f0000000540)=""/162}, {&(0x7f0000000600)=""/77}], 0x0, &(0x7f0000000680)=""/224}, 0x6}, {{&(0x7f0000000780)=@isdn, 0x0, &(0x7f0000000800)=[{&(0x7f0000001240)=""/4096}, {&(0x7f0000000240)=""/64}], 0x0, &(0x7f0000000ac0)=""/174}}, {{&(0x7f0000000b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)=""/224}, {&(0x7f0000000c00)=""/87}, {&(0x7f0000000dc0)=""/209}], 0x0, &(0x7f0000000ec0)=""/195}, 0x81}], 0x101f2043b8267e, 0x10120, 0x0) 109.613885ms ago: executing program 3 (id=3896): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r4, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r6, 0x4, r2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random='\x00\x00\x00\"\x00'}) shutdown(r0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000001d00)={{r5, &(0x7f0000000180)='*\x00', 0x20000, &(0x7f0000000200)={@align=0x7, {0x1, 0x1, 0x2, 0x7}}, 0x2, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000004c0)=0x4}, 0x8, &(0x7f0000001c00)=[{0x2, 0x8, &(0x7f0000000540)='($&\x00', &(0x7f00000005c0)="0d7cec474ccd71c58dd6dd6dcec6cc807ef780c58ec3c7984d62d81d3c", 0x1d, 0x20}, {0x2, 0x12, &(0x7f0000000600)='\x00', &(0x7f0000000640)="0123a270af05e2a5c9037391770e5cb7b208e779c76d1c0404ad43a26c4bf496bc858a00b5402d8aa207a108fe46350b9ba450aebcc23df0ad4b5f93848f54", 0x3f}, {0x1, 0x9, &(0x7f00000006c0)='\x01\x01\x01\x01\x01\x01', &(0x7f0000000700)="e46fc0365e15fceba6d08a56260cfccc9077c03b9e877b38e9adb9c274dbc8f9c0d8eef3ba69d7c8af7f8c98dfd86f13a0c7362720c161104366eb7dc2c50b9d4c1c73ba8951089e8723c85801427cd5bdae0f429997a6dfa2d5d1b6eb59d61057f380ef4bce039e15272f6d57bd1d61abd356bf85755e03234f0bef2f6bc8f0fc830a744587b5ec3b87111828754b0fb2a28deaf81392ab3127abbf82a29cd6", 0xa0, 0x2}, {0x3, 0x7aaa6210, &(0x7f00000007c0)='\x00', &(0x7f0000000800)="0cb4d1e6b904fa1e75f085913be12ffc9554c45ee3442c13492651dd7cd0fa7f6350cf9b7f00da82", 0x28, 0x10}, {0x2, 0x1, &(0x7f0000000880)='\x00', &(0x7f00000008c0)="69f340362613f86a1d81290f5b869364c8fbfabd7fcb845499a34715b65fb158f2efb66f2bd195fe3b2d022fef6853f092dba065f7d33fd0c528c254f1f551fc8e32ac7b6e1b2b72efa6609bd7332c825877524d8c974797e2bdb2479e16f4d8f8c9c8263d63b938ddbbb24e82f179c8b82099b33c0aa2ada0bb24eb09902c9089", 0x81}, {0x3, 0x4e, &(0x7f0000000980)=',\'(\x00', &(0x7f00000009c0)="dbfecffe26390cd33575eb18d350ae919f804cb6f9fdd71e8c31e1e3906f99087a3de3c4af96d4a13052dca75dd7df265fc17a9155059f8e157b5c92b042f88ebfc461b8a995e80b4e0d5172d2dbcf8c78e1baebdeb3593ec84630d04e93ffc568454ee8dc3df1863a37e70bf6b193b6d17e947a838cf3ba45d9f43426eda4869e499b87b607", 0x86}, {0x3, 0x4, &(0x7f0000000a80)='\xba*\x00', &(0x7f0000000ac0)="4242de9a4e238624d97b9290e19382754771cd27088afd91f64c3cef6eb85ec876d2832aefefdc8284ac3a65442953df10f110ed522c0ed62b370ec6b4cd0eee105ee9b87edefab2b466409cd19ce9c365217b841eace17f1f4bf30fd2e66191d2bf36f8ef04ff35cad4bc93479e1fe35e45057924271a43b8af8a1571bd98b471d5922b665d2f5bf893957efd2e07b39a7cc87019d13164b3fa64d83f45790c14b594fc880a94d051db7bfe9138cb6781dfaec07fbc486c2dee1d9ef78994628afa501b9c2b8348d6d7c7ece9fa6ddb90d0359c9cb3", 0xd6, 0x8}, {0x2, 0xff, &(0x7f0000000bc0)='!^+)\x00', &(0x7f0000000c00)="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", 0x1000, 0x18}]}) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000001d80)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r11, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000080)=0x6, 0x4) sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r9, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r12, @in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x80000000, 0x1f4, 0x0, 0x0, 0xce024d}, 0x9c) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="800000000802110000010802110000000000000000ddc298fa0006020202020202010882848b960c121824"], 0x36) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x0, 0x10, 0x3, 0x80001000, {{0x7, 0x4, 0x0, 0x3c, 0x1c, 0xfffe, 0x0, 0xfb, 0x89, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1b}, {[@cipso={0x86, 0x6, 0x3}]}}}}}) socket$inet(0x2, 0x5, 0x0) unshare(0x8040480) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 62.283284ms ago: executing program 0 (id=3897): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000015c0), 0x50000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001600)={{0x0, 0x9, 0x8, 0x101, 0x8000000000000001, 0xfffffffffffff800, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x3, 0x3, 0x4, 0x3000000000000000}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x5, 0x8, 0xc97, 0xdd43, 0x4, 0x3c, 0xfffffffffffffffd, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000001c0)={r1, &(0x7f0000000000)='\x00', 0x2801, &(0x7f00000000c0)={@align=0x7f, {0x40, 0xa800, 0x5a4, 0x2}}, 0x80000001, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x2}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001540)={&(0x7f00000002c0)={0x127c, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x194, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x16c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '\\@+#\\.\\&+}@)@!**&{[\'%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ce0}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ad}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf6dd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x333}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8d06}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '%,$-{@/\\)&&/{\x82&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd9c}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "cfec5952b8208781ede6d60164e8"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1024, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x78, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x67, 0x4, "524d476d6d986faf1ef808b30b24e720aac42d740abe7bc6f4c1a5ff31c95fc0f768c137056bbb88a1510c6fa44764a5ff9207c6d4333d848ce2e2d6dc90b4b4fd7385f2cf03853ec40ab91c656224f17a9a8de412f7e5321fdcf0d3d9d32238f0d76e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x127c}, 0x1, 0x0, 0x0, 0x91}, 0x80a0) 0s ago: executing program 1 (id=3898): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'virt_wifi0\x00', {0x1}, 0x800}) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "3e125f73a68f3f578a9eda4bedb53e26"}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3e}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x40, 0x50}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10000, 0x7c}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x70}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf2f8, 0x6f}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x48000}, 0x20000010) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f0000000240)='\x00', 0x80080, &(0x7f0000000280)={@align=0x5, {0x10, 0x3, 0xeb, 0x2}}, 0x1, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0xfffffffc}) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x9e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9300}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6003}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa01}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x31}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xec}, 0x1, 0x0, 0x0, 0x20040840}, 0x40040) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x88, 0x8, 0xa, 0x302, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x74269f1b25d0674a}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9000}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x26}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}, 0x1, 0x0, 0x0, 0xf7e8325987a2e83a}, 0x20000000) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r0) (rerun: 32) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x18c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa784}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4e1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x48a}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe0000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdcf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x17df}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000045}, 0x4008800) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8098}, 0x40000) (async) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, r1, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4804) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), r0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x15}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000f40), r2) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040080}, 0x0) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xd8, r9, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x3}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe74}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f0000001240)=0x1, 0x4) (async) syz_emit_ethernet(0x1019, &(0x7f0000001280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @random="e6f262b1b980", @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x0, 0x0, 0x3}}, {@llc_tr={0x11, {@llc={0xd4, 0x7e, "98", "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"}}}}}, &(0x7f00000022c0)={0x1, 0x1, [0x33d, 0xd44, 0x4a0, 0xed0]}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002300)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000024c0)={0x18, 0x5, &(0x7f0000002340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfff}, [@map_fd={0x18, 0x5, 0x1, 0x0, r10}]}, &(0x7f0000002380)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000023c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002400)={0x5, 0x3, 0x2, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002440)=[r2], &(0x7f0000002480), 0x10, 0x7fffffff}, 0x94) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) kernel console output (not intermixed with test programs): 3.959727][T17171] netlink: zone id is out of range [ 353.971437][T17171] netlink: zone id is out of range [ 353.980666][ T6005] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 44165 - 0 [ 353.988946][T17171] netlink: zone id is out of range [ 353.991814][T17171] netlink: zone id is out of range [ 354.010913][ T6005] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 354.116332][T17189] netlink: 'syz.3.3054': attribute type 22 has an invalid length. [ 354.124532][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'. [ 354.154278][T17189] netlink: 'syz.3.3054': attribute type 22 has an invalid length. [ 354.164313][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'. [ 354.193539][T16762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.257656][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3055'. [ 354.267219][T16762] veth0_vlan: entered promiscuous mode [ 354.284455][T16762] veth1_vlan: entered promiscuous mode [ 354.324388][T16762] veth0_macvtap: entered promiscuous mode [ 354.345237][T16762] veth1_macvtap: entered promiscuous mode [ 354.355231][T17199] FAULT_INJECTION: forcing a failure. [ 354.355231][T17199] name failslab, interval 1, probability 0, space 0, times 0 [ 354.370140][T17199] CPU: 1 UID: 0 PID: 17199 Comm: syz.3.3056 Not tainted syzkaller #0 PREEMPT(full) [ 354.370165][T17199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 354.370176][T17199] Call Trace: [ 354.370183][T17199] [ 354.370191][T17199] dump_stack_lvl+0xe8/0x150 [ 354.370218][T17199] should_fail_ex+0x412/0x560 [ 354.370244][T17199] should_failslab+0xa8/0x100 [ 354.370271][T17199] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 354.370294][T17199] ? __alloc_skb+0x186/0x7d0 [ 354.370313][T17199] ? __alloc_skb+0x1d0/0x7d0 [ 354.370329][T17199] ? __local_bh_enable_ip+0xd0/0x130 [ 354.370351][T17199] __alloc_skb+0x1d0/0x7d0 [ 354.370371][T17199] ? netlink_ack_tlv_len+0x6c/0x210 [ 354.370395][T17199] netlink_ack+0x146/0xa50 [ 354.370415][T17199] ? sock_diag_lock_handler+0x19/0x290 [ 354.370435][T17199] ? sock_diag_lock_handler+0x19/0x290 [ 354.370459][T17199] ? sock_diag_rcv_msg+0x4ed/0x600 [ 354.370482][T17199] netlink_rcv_skb+0x2b6/0x4b0 [ 354.370503][T17199] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 354.370523][T17199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.370553][T17199] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.370574][T17199] ? netlink_deliver_tap+0x2e/0x1b0 [ 354.370600][T17199] netlink_unicast+0x75c/0x8e0 [ 354.370627][T17199] netlink_sendmsg+0x813/0xb40 [ 354.370656][T17199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.370680][T17199] ? aa_sock_msg_perm+0xf1/0x1b0 [ 354.370702][T17199] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.370728][T17199] ____sys_sendmsg+0x972/0x9f0 [ 354.370749][T17199] ? __might_fault+0xaf/0x130 [ 354.370776][T17199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.370807][T17199] ? import_iovec+0x73/0xa0 [ 354.370833][T17199] ___sys_sendmsg+0x2a5/0x360 [ 354.370854][T17199] ? __lock_acquire+0x6b5/0x2cf0 [ 354.370875][T17199] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.370938][T17199] ? __fget_files+0x2a/0x420 [ 354.370957][T17199] ? __fget_files+0x3a0/0x420 [ 354.370986][T17199] __x64_sys_sendmsg+0x1bd/0x2a0 [ 354.371008][T17199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.371037][T17199] ? __pfx_ksys_write+0x10/0x10 [ 354.371067][T17199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.371085][T17199] do_syscall_64+0x15f/0xf80 [ 354.371104][T17199] ? trace_irq_disable+0x3b/0x140 [ 354.371127][T17199] ? clear_bhb_loop+0x40/0x90 [ 354.371146][T17199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.371162][T17199] RIP: 0033:0x7f009a59cdd9 [ 354.371179][T17199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.371193][T17199] RSP: 002b:00007f009b41a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.371211][T17199] RAX: ffffffffffffffda RBX: 00007f009a815fa0 RCX: 00007f009a59cdd9 [ 354.371224][T17199] RDX: 0000000020000800 RSI: 0000200000000140 RDI: 0000000000000006 [ 354.371234][T17199] RBP: 00007f009b41a090 R08: 0000000000000000 R09: 0000000000000000 [ 354.371245][T17199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.371254][T17199] R13: 00007f009a816038 R14: 00007f009a815fa0 R15: 00007ffed5282e68 [ 354.371281][T17199] [ 354.383261][T16762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.691216][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3057'. [ 354.713010][T16762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.735848][ T5996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.745033][ T5996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.759580][ T5996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.768667][ T5996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.577083][T17169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.740231][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.774512][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.839584][T17213] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3060'. [ 356.856373][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.869429][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.524648][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.537265][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.549192][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.563467][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.574158][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.678620][T17254] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3069'. [ 357.776208][T17262] netlink: 'syz.1.3073': attribute type 1 has an invalid length. [ 357.793225][T17263] netlink: 'syz.3.3071': attribute type 163 has an invalid length. [ 357.951877][T17262] bond5: entered promiscuous mode [ 357.957419][T17262] 8021q: adding VLAN 0 to HW filter on device bond5 [ 358.162897][T17262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3073'. [ 358.267710][T17262] bond5: entered allmulticast mode [ 358.327184][T17267] bond5: (slave bridge6): making interface the new active one [ 358.350341][T17262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3073'. [ 358.362218][T17267] bridge6: entered promiscuous mode [ 358.367685][T17267] bridge6: entered allmulticast mode [ 358.385927][T17267] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 358.564568][T17287] IPVS: set_ctl: invalid protocol: 94 172.30.1.3:20002 [ 358.620988][T17247] lo speed is unknown, defaulting to 1000 [ 358.836868][T17301] tap0: tun_chr_ioctl cmd 1074025692 [ 358.995815][T17303] ipip1: entered promiscuous mode [ 359.051646][T17307] gretap1: entered promiscuous mode [ 359.058884][T17307] gretap1: entered allmulticast mode [ 359.280298][T17319] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3087'. [ 359.296917][T17322] x_tables: unsorted entry at hook 3 [ 359.304507][T17318] netlink: 'syz.3.3088': attribute type 9 has an invalid length. [ 359.315726][T17318] netlink: 'syz.3.3088': attribute type 7 has an invalid length. [ 359.324761][T17322] netlink: 540 bytes leftover after parsing attributes in process `syz.1.3089'. [ 359.343048][T17318] netlink: 'syz.3.3088': attribute type 8 has an invalid length. [ 359.352463][T17322] netlink: 540 bytes leftover after parsing attributes in process `syz.1.3089'. [ 359.502160][T17337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3094'. [ 359.680045][ T5643] Bluetooth: hci1: command tx timeout [ 359.793923][T17247] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.807561][T17247] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.818243][T17247] bridge_slave_0: entered allmulticast mode [ 359.831498][T17247] bridge_slave_0: entered promiscuous mode [ 359.849276][T17247] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.876906][T17247] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.898313][T17247] bridge_slave_1: entered allmulticast mode [ 359.920492][T17247] bridge_slave_1: entered promiscuous mode [ 360.025031][T17247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.061843][T17247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.212298][T17247] team0: Port device team_slave_0 added [ 360.220486][T17360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 360.245227][T17247] team0: Port device team_slave_1 added [ 360.416090][T17247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.433357][T17247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.500567][T17247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.546712][T17247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.570212][T17247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.663915][T17247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.664439][T17382] netlink: 'syz.1.3107': attribute type 39 has an invalid length. [ 360.712887][T17384] FAULT_INJECTION: forcing a failure. [ 360.712887][T17384] name failslab, interval 1, probability 0, space 0, times 0 [ 360.725581][T17384] CPU: 1 UID: 0 PID: 17384 Comm: syz.3.3108 Not tainted syzkaller #0 PREEMPT(full) [ 360.725605][T17384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 360.725617][T17384] Call Trace: [ 360.725625][T17384] [ 360.725632][T17384] dump_stack_lvl+0xe8/0x150 [ 360.725660][T17384] should_fail_ex+0x412/0x560 [ 360.725689][T17384] should_failslab+0xa8/0x100 [ 360.725715][T17384] ? skb_clone+0x212/0x3a0 [ 360.725738][T17384] kmem_cache_alloc_noprof+0x87/0x650 [ 360.725762][T17384] ? __bpf_redirect+0x9b4/0x12a0 [ 360.725787][T17384] skb_clone+0x212/0x3a0 [ 360.725813][T17384] bpf_clone_redirect+0x16a/0x4b0 [ 360.725842][T17384] ? bpf_test_run+0x1d1/0x830 [ 360.725864][T17384] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 360.725887][T17384] ? arch_stack_walk+0xfb/0x150 [ 360.725917][T17384] ? __pfx___schedule+0x10/0x10 [ 360.725935][T17384] ? ktime_get+0x45/0x220 [ 360.725971][T17384] ? preempt_schedule_thunk+0x16/0x30 [ 360.725998][T17384] ? preempt_schedule_common+0x82/0xd0 [ 360.726017][T17384] ? bpf_test_run+0x1d1/0x830 [ 360.726040][T17384] ? bpf_test_timer_continue+0x10c/0x320 [ 360.726067][T17384] bpf_test_run+0x354/0x830 [ 360.726108][T17384] ? __pfx_bpf_test_run+0x10/0x10 [ 360.726147][T17384] ? eth_type_trans+0x348/0x7e0 [ 360.726188][T17384] ? skb_dst_set+0x72/0x140 [ 360.726212][T17384] bpf_prog_test_run_skb+0xe2c/0x2260 [ 360.726253][T17384] ? __fget_files+0x3a0/0x420 [ 360.726274][T17384] ? __fget_files+0x2a/0x420 [ 360.726299][T17384] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 360.726321][T17384] bpf_prog_test_run+0x2c7/0x340 [ 360.726342][T17384] __sys_bpf+0x643/0x950 [ 360.726370][T17384] ? __pfx___sys_bpf+0x10/0x10 [ 360.726410][T17384] ? ksys_write+0x242/0x270 [ 360.726436][T17384] ? __pfx_ksys_write+0x10/0x10 [ 360.726464][T17384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.726484][T17384] __x64_sys_bpf+0x7c/0x90 [ 360.726516][T17384] do_syscall_64+0x15f/0xf80 [ 360.726537][T17384] ? trace_irq_disable+0x3b/0x140 [ 360.726561][T17384] ? clear_bhb_loop+0x40/0x90 [ 360.726584][T17384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.726601][T17384] RIP: 0033:0x7f009a59cdd9 [ 360.726618][T17384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.726633][T17384] RSP: 002b:00007f009b41a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.726660][T17384] RAX: ffffffffffffffda RBX: 00007f009a815fa0 RCX: 00007f009a59cdd9 [ 360.726673][T17384] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 360.726684][T17384] RBP: 00007f009b41a090 R08: 0000000000000000 R09: 0000000000000000 [ 360.726695][T17384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.726706][T17384] R13: 00007f009a816038 R14: 00007f009a815fa0 R15: 00007ffed5282e68 [ 360.726737][T17384] [ 361.035283][T17375] lo speed is unknown, defaulting to 1000 [ 361.042779][T17247] hsr_slave_0: entered promiscuous mode [ 361.049950][T17247] hsr_slave_1: entered promiscuous mode [ 361.056028][T17247] debugfs: 'hsr0' already exists in 'hsr' [ 361.062721][T17247] Cannot create hsr debugfs directory [ 361.099742][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 361.536732][T17247] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 44165 - 0 [ 361.548833][T17247] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 361.552319][ T5996] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 361.594720][T17414] lo speed is unknown, defaulting to 1000 [ 361.619986][T17247] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 44165 - 0 [ 361.631600][T17247] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 361.673439][T17419] geneve4: entered promiscuous mode [ 361.710974][T17247] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 44165 - 0 [ 361.721107][T17247] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 361.772404][ T5643] Bluetooth: hci1: command tx timeout [ 361.784605][T17247] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 44165 - 0 [ 361.794678][T17247] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 362.157029][T17432] __nla_validate_parse: 6 callbacks suppressed [ 362.157046][T17432] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3119'. [ 363.839117][ T5643] Bluetooth: hci1: command tx timeout [ 364.424627][T17405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.471087][T17247] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.542980][T17247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.581296][T17247] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.632010][T17247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.655581][T17247] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.676736][T17247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.742273][T17247] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 364.791466][T17247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.859517][T17473] netlink: 'syz.0.3131': attribute type 3 has an invalid length. [ 364.868606][T17458] lo speed is unknown, defaulting to 1000 [ 364.876328][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3131'. [ 365.014963][T17484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3133'. [ 365.032938][T17484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3133'. [ 365.078266][T17473] tipc: Bearer : already 2 bearers with priority 10 [ 365.089233][T17473] tipc: Bearer : trying with adjusted priority [ 365.096591][T17473] tipc: Enabling of bearer rejected, failed to enable media [ 365.123993][ T11] block nbd1: Possible stuck request ffff8880274fe000: control (read@0,1024B). Runtime 60 seconds [ 365.134918][ T11] block nbd1: Possible stuck request ffff8880274fe1c0: control (read@1024,1024B). Runtime 60 seconds [ 365.146310][ T11] block nbd1: Possible stuck request ffff8880274fe380: control (read@2048,1024B). Runtime 60 seconds [ 365.157700][ T11] block nbd1: Possible stuck request ffff8880274fe540: control (read@3072,1024B). Runtime 60 seconds [ 365.285584][T17247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.320795][T17458] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3129'. [ 365.343311][T17247] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.362771][T17499] tunl0: Caught tx_queue_len zero misconfig [ 365.370285][T17499] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 365.381451][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3135'. [ 365.394195][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.401427][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.463444][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.470697][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.923968][ T5643] Bluetooth: hci1: command tx timeout [ 367.000455][T17546] net_ratelimit: 2 callbacks suppressed [ 367.000473][T17546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.038549][T17546] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.3148'. [ 367.271847][T17247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.759896][T17247] veth0_vlan: entered promiscuous mode [ 367.854963][T17247] veth1_vlan: entered promiscuous mode [ 367.990003][T17247] veth0_macvtap: entered promiscuous mode [ 368.020742][T17247] veth1_macvtap: entered promiscuous mode [ 368.083128][T17247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.144826][T17247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.206968][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.233115][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.265679][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.278761][T17593] FAULT_INJECTION: forcing a failure. [ 368.278761][T17593] name failslab, interval 1, probability 0, space 0, times 0 [ 368.293455][T17593] CPU: 1 UID: 0 PID: 17593 Comm: syz.2.3162 Not tainted syzkaller #0 PREEMPT(full) [ 368.293479][T17593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 368.293490][T17593] Call Trace: [ 368.293497][T17593] [ 368.293505][T17593] dump_stack_lvl+0xe8/0x150 [ 368.293532][T17593] should_fail_ex+0x412/0x560 [ 368.293561][T17593] should_failslab+0xa8/0x100 [ 368.293594][T17593] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 368.293620][T17593] ? __alloc_skb+0x1d0/0x7d0 [ 368.293639][T17593] ? __local_bh_enable_ip+0xd0/0x130 [ 368.293663][T17593] __alloc_skb+0x1d0/0x7d0 [ 368.293689][T17593] ip_frag_next+0xd1/0xa60 [ 368.293713][T17593] ? ip_finish_output2+0x3c2/0x1070 [ 368.293745][T17593] ? ip_finish_output2+0x3c2/0x1070 [ 368.293779][T17593] ip_do_fragment+0x76d/0x1770 [ 368.293811][T17593] ? ip_skb_dst_mtu+0x109/0xa50 [ 368.293837][T17593] ? __pfx_ip_finish_output2+0x10/0x10 [ 368.293862][T17593] ? ip_skb_dst_mtu+0x80b/0xa50 [ 368.293883][T17593] ? ip_skb_dst_mtu+0x109/0xa50 [ 368.293917][T17593] iptunnel_xmit+0x621/0xd10 [ 368.293960][T17593] ip_tunnel_xmit+0x193a/0x1f20 [ 368.294006][T17593] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 368.294037][T17593] ? __pfx_gre_build_header+0x10/0x10 [ 368.294057][T17593] ? skb_network_protocol+0x23d/0x400 [ 368.294080][T17593] ? iptunnel_handle_offloads+0x2fd/0x630 [ 368.294115][T17593] ipgre_xmit+0x8e6/0xc70 [ 368.294146][T17593] ? __pfx_ipgre_xmit+0x10/0x10 [ 368.294178][T17593] dev_hard_start_xmit+0x2cd/0x830 [ 368.294219][T17593] __dev_queue_xmit+0x14d9/0x3950 [ 368.294242][T17593] ? bpf_test_run+0x354/0x830 [ 368.294265][T17593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.294287][T17593] ? __dev_queue_xmit+0x2b6/0x3950 [ 368.294324][T17593] ? __pfx___dev_queue_xmit+0x10/0x10 [ 368.294380][T17593] __bpf_redirect+0x9a6/0x12a0 [ 368.294410][T17593] bpf_clone_redirect+0x313/0x4b0 [ 368.294436][T17593] ? bpf_test_run+0x1d1/0x830 [ 368.294454][T17593] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 368.294475][T17593] ? arch_stack_walk+0xfb/0x150 [ 368.294503][T17593] ? __pfx___schedule+0x10/0x10 [ 368.294520][T17593] ? ktime_get+0x45/0x220 [ 368.294556][T17593] ? preempt_schedule_thunk+0x16/0x30 [ 368.294580][T17593] ? preempt_schedule_common+0x82/0xd0 [ 368.294598][T17593] ? bpf_test_run+0x1d1/0x830 [ 368.294621][T17593] ? bpf_test_timer_continue+0x10c/0x320 [ 368.294648][T17593] bpf_test_run+0x354/0x830 [ 368.294688][T17593] ? __pfx_bpf_test_run+0x10/0x10 [ 368.294734][T17593] ? eth_type_trans+0x348/0x7e0 [ 368.294762][T17593] ? skb_dst_set+0x72/0x140 [ 368.294785][T17593] bpf_prog_test_run_skb+0xe2c/0x2260 [ 368.294826][T17593] ? __fget_files+0x3a0/0x420 [ 368.294845][T17593] ? __fget_files+0x2a/0x420 [ 368.294867][T17593] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 368.294890][T17593] bpf_prog_test_run+0x2c7/0x340 [ 368.294911][T17593] __sys_bpf+0x643/0x950 [ 368.294940][T17593] ? __pfx___sys_bpf+0x10/0x10 [ 368.294980][T17593] ? ksys_write+0x242/0x270 [ 368.295005][T17593] ? __pfx_ksys_write+0x10/0x10 [ 368.295033][T17593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.295052][T17593] __x64_sys_bpf+0x7c/0x90 [ 368.295077][T17593] do_syscall_64+0x15f/0xf80 [ 368.295097][T17593] ? trace_irq_disable+0x3b/0x140 [ 368.295126][T17593] ? clear_bhb_loop+0x40/0x90 [ 368.295148][T17593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.295165][T17593] RIP: 0033:0x7f3577b9cdd9 [ 368.295182][T17593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.295197][T17593] RSP: 002b:00007f3578a2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.295217][T17593] RAX: ffffffffffffffda RBX: 00007f3577e15fa0 RCX: 00007f3577b9cdd9 [ 368.295229][T17593] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 368.295240][T17593] RBP: 00007f3578a2a090 R08: 0000000000000000 R09: 0000000000000000 [ 368.295251][T17593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.295262][T17593] R13: 00007f3577e16038 R14: 00007f3577e15fa0 R15: 00007ffdf97d4448 [ 368.295292][T17593] [ 368.296306][ T5999] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.716132][T17594] syzkaller1: entered promiscuous mode [ 368.735280][T17594] syzkaller1: entered allmulticast mode [ 369.420485][ T6005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.460596][ T6005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.594389][ T6005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.639510][ T6005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.099338][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3172'. [ 370.120348][T17640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3172'. [ 370.132939][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.150928][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.161389][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.164633][T17640] netlink: 'syz.0.3172': attribute type 18 has an invalid length. [ 370.184055][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.193350][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.011794][T17667] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3176'. [ 371.434450][T17687] tipc: Enabling of bearer rejected, failed to enable media [ 371.451124][T17691] sctp: [Deprecated]: syz.3.3182 (pid 17691) Use of int in maxseg socket option. [ 371.451124][T17691] Use struct sctp_assoc_value instead [ 371.451412][T17638] lo speed is unknown, defaulting to 1000 [ 371.813240][T17712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3186'. [ 371.855920][T17713] netlink: 'syz.0.3187': attribute type 1 has an invalid length. [ 371.927986][T17718] FAULT_INJECTION: forcing a failure. [ 371.927986][T17718] name failslab, interval 1, probability 0, space 0, times 0 [ 371.940720][T17718] CPU: 1 UID: 0 PID: 17718 Comm: syz.3.3189 Not tainted syzkaller #0 PREEMPT(full) [ 371.940745][T17718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 371.940755][T17718] Call Trace: [ 371.940762][T17718] [ 371.940769][T17718] dump_stack_lvl+0xe8/0x150 [ 371.940794][T17718] should_fail_ex+0x412/0x560 [ 371.940821][T17718] should_failslab+0xa8/0x100 [ 371.940847][T17718] ? skb_clone+0x212/0x3a0 [ 371.940868][T17718] kmem_cache_alloc_noprof+0x87/0x650 [ 371.940891][T17718] ? __bpf_redirect+0x9b4/0x12a0 [ 371.940914][T17718] skb_clone+0x212/0x3a0 [ 371.940939][T17718] bpf_clone_redirect+0x16a/0x4b0 [ 371.940968][T17718] ? bpf_test_run+0x1d1/0x830 [ 371.940989][T17718] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 371.941011][T17718] ? arch_stack_walk+0xfb/0x150 [ 371.941042][T17718] ? __pfx___schedule+0x10/0x10 [ 371.941060][T17718] ? ktime_get+0x45/0x220 [ 371.941096][T17718] ? preempt_schedule_thunk+0x16/0x30 [ 371.941123][T17718] ? preempt_schedule_common+0x82/0xd0 [ 371.941141][T17718] ? bpf_test_run+0x1d1/0x830 [ 371.941165][T17718] ? bpf_test_timer_continue+0x10c/0x320 [ 371.941190][T17718] bpf_test_run+0x354/0x830 [ 371.941234][T17718] ? __pfx_bpf_test_run+0x10/0x10 [ 371.941272][T17718] ? eth_type_trans+0x348/0x7e0 [ 371.941302][T17718] ? skb_dst_set+0x72/0x140 [ 371.941333][T17718] bpf_prog_test_run_skb+0xe2c/0x2260 [ 371.941374][T17718] ? __fget_files+0x3a0/0x420 [ 371.941395][T17718] ? __fget_files+0x2a/0x420 [ 371.941420][T17718] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 371.941443][T17718] bpf_prog_test_run+0x2c7/0x340 [ 371.941465][T17718] __sys_bpf+0x643/0x950 [ 371.941493][T17718] ? __pfx___sys_bpf+0x10/0x10 [ 371.941533][T17718] ? ksys_write+0x242/0x270 [ 371.941558][T17718] ? __pfx_ksys_write+0x10/0x10 [ 371.941587][T17718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.941605][T17718] __x64_sys_bpf+0x7c/0x90 [ 371.941629][T17718] do_syscall_64+0x15f/0xf80 [ 371.941648][T17718] ? trace_irq_disable+0x3b/0x140 [ 371.941671][T17718] ? clear_bhb_loop+0x40/0x90 [ 371.941692][T17718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.941709][T17718] RIP: 0033:0x7f009a59cdd9 [ 371.941725][T17718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.941739][T17718] RSP: 002b:00007f009b41a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 371.941758][T17718] RAX: ffffffffffffffda RBX: 00007f009a815fa0 RCX: 00007f009a59cdd9 [ 371.941772][T17718] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 371.941783][T17718] RBP: 00007f009b41a090 R08: 0000000000000000 R09: 0000000000000000 [ 371.941794][T17718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.941804][T17718] R13: 00007f009a816038 R14: 00007f009a815fa0 R15: 00007ffed5282e68 [ 371.941829][T17718] [ 372.238950][ T5625] Bluetooth: hci2: command tx timeout [ 372.347998][T17709] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.490497][T17713] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.584846][T17709] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.653710][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 372.691536][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 372.916934][T17709] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.940215][T17746] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3196'. [ 372.965223][T17746] netlink: 'syz.0.3196': attribute type 1 has an invalid length. [ 372.982905][T17746] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3196'. [ 373.063161][T17755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3196'. [ 373.104057][T17709] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.128550][T17749] syzkaller0: entered promiscuous mode [ 373.134267][T17749] syzkaller0: entered allmulticast mode [ 373.536705][T17638] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.558017][T17638] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.576378][T17638] bridge_slave_0: entered allmulticast mode [ 373.587742][T17638] bridge_slave_0: entered promiscuous mode [ 373.606482][T17638] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.618631][T17773] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.3203'. [ 373.655525][T17638] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.667160][T17638] bridge_slave_1: entered allmulticast mode [ 373.679953][T17638] bridge_slave_1: entered promiscuous mode [ 373.830508][T17638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.858558][T17638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.945635][T17792] lo: Caught tx_queue_len zero misconfig [ 373.977113][T17792] netlink: 'syz.0.3211': attribute type 14 has an invalid length. [ 374.092327][T17638] team0: Port device team_slave_0 added [ 374.136230][T17638] team0: Port device team_slave_1 added [ 374.168275][T17823] netlink: 'syz.0.3216': attribute type 64 has an invalid length. [ 374.186081][T17638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.193391][T17638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.237279][T17638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.295759][T17819] vlan2: entered allmulticast mode [ 374.301332][T17819] macvtap0: entered allmulticast mode [ 374.306760][T17819] veth0_macvtap: entered allmulticast mode [ 374.320314][ T5625] Bluetooth: hci2: command tx timeout [ 374.332559][T17638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.348637][T17638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.394082][T17638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.562327][T17835] Cannot find add_set index 2 as target [ 374.572320][T17823] syzkaller0: entered promiscuous mode [ 374.581369][T17823] syzkaller0: entered allmulticast mode [ 374.587674][T17839] FAULT_INJECTION: forcing a failure. [ 374.587674][T17839] name failslab, interval 1, probability 0, space 0, times 0 [ 374.600351][T17839] CPU: 0 UID: 0 PID: 17839 Comm: syz.3.3221 Not tainted syzkaller #0 PREEMPT(full) [ 374.600372][T17839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.600380][T17839] Call Trace: [ 374.600386][T17839] [ 374.600392][T17839] dump_stack_lvl+0xe8/0x150 [ 374.600414][T17839] should_fail_ex+0x412/0x560 [ 374.600436][T17839] should_failslab+0xa8/0x100 [ 374.600456][T17839] ? dst_alloc+0x105/0x170 [ 374.600474][T17839] kmem_cache_alloc_noprof+0x87/0x650 [ 374.600498][T17839] dst_alloc+0x105/0x170 [ 374.600515][T17839] ? ip_check_mc_rcu+0x443/0x680 [ 374.600532][T17839] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 374.600559][T17839] ? ip_route_output_key_hash+0xd8/0x2a0 [ 374.600579][T17839] ip_route_output_key_hash+0x18d/0x2a0 [ 374.600600][T17839] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 374.600616][T17839] ? __vlan_get_protocol_offset+0x339/0x3d0 [ 374.600641][T17839] ? __asan_memset+0x22/0x50 [ 374.600660][T17839] ip_route_output_flow+0x2a/0x150 [ 374.600680][T17839] ip_tunnel_xmit+0x75d/0x1f20 [ 374.600702][T17839] ? ip_tunnel_xmit+0xf0/0x1f20 [ 374.600736][T17839] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 374.600757][T17839] ? __pfx_gre_build_header+0x10/0x10 [ 374.600771][T17839] ? skb_network_protocol+0x23d/0x400 [ 374.600788][T17839] ? iptunnel_handle_offloads+0x2fd/0x630 [ 374.600813][T17839] ipgre_xmit+0x8e6/0xc70 [ 374.600836][T17839] ? __pfx_ipgre_xmit+0x10/0x10 [ 374.600860][T17839] dev_hard_start_xmit+0x2cd/0x830 [ 374.600889][T17839] __dev_queue_xmit+0x14d9/0x3950 [ 374.600906][T17839] ? bpf_test_run+0x354/0x830 [ 374.600924][T17839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.600939][T17839] ? __dev_queue_xmit+0x2b6/0x3950 [ 374.600969][T17839] ? __pfx___dev_queue_xmit+0x10/0x10 [ 374.601018][T17839] __bpf_redirect+0x9a6/0x12a0 [ 374.601042][T17839] bpf_clone_redirect+0x313/0x4b0 [ 374.601064][T17839] ? bpf_test_run+0x1d1/0x830 [ 374.601080][T17839] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 374.601097][T17839] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 374.601116][T17839] ? arch_stack_walk+0xfb/0x150 [ 374.601140][T17839] ? ktime_get+0x45/0x220 [ 374.601164][T17839] ? ktime_get+0x45/0x220 [ 374.601184][T17839] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 374.601203][T17839] ? lockdep_hardirqs_on+0x7a/0x110 [ 374.601220][T17839] ? ktime_get+0x45/0x220 [ 374.601236][T17839] ? seqcount_lockdep_reader_access+0xea/0x100 [ 374.601255][T17839] ? bpf_test_run+0x1d1/0x830 [ 374.601275][T17839] ? bpf_test_timer_continue+0x10c/0x320 [ 374.601298][T17839] bpf_test_run+0x354/0x830 [ 374.601335][T17839] ? __pfx_bpf_test_run+0x10/0x10 [ 374.601375][T17839] ? eth_type_trans+0x348/0x7e0 [ 374.601406][T17839] ? skb_dst_set+0x72/0x140 [ 374.601431][T17839] bpf_prog_test_run_skb+0xe2c/0x2260 [ 374.601475][T17839] ? __fget_files+0x3a0/0x420 [ 374.601492][T17839] ? __fget_files+0x2a/0x420 [ 374.601512][T17839] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 374.601531][T17839] bpf_prog_test_run+0x2c7/0x340 [ 374.601550][T17839] __sys_bpf+0x643/0x950 [ 374.601573][T17839] ? __pfx___sys_bpf+0x10/0x10 [ 374.601610][T17839] ? ksys_write+0x242/0x270 [ 374.601634][T17839] ? __pfx_ksys_write+0x10/0x10 [ 374.601660][T17839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.601680][T17839] __x64_sys_bpf+0x7c/0x90 [ 374.601703][T17839] do_syscall_64+0x15f/0xf80 [ 374.601732][T17839] ? trace_irq_disable+0x3b/0x140 [ 374.601754][T17839] ? clear_bhb_loop+0x40/0x90 [ 374.601777][T17839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.601792][T17839] RIP: 0033:0x7f009a59cdd9 [ 374.601809][T17839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.601822][T17839] RSP: 002b:00007f009b41a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.601838][T17839] RAX: ffffffffffffffda RBX: 00007f009a815fa0 RCX: 00007f009a59cdd9 [ 374.601850][T17839] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 374.601861][T17839] RBP: 00007f009b41a090 R08: 0000000000000000 R09: 0000000000000000 [ 374.601870][T17839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.601880][T17839] R13: 00007f009a816038 R14: 00007f009a815fa0 R15: 00007ffed5282e68 [ 374.601909][T17839] [ 374.615370][T17638] hsr_slave_0: entered promiscuous mode [ 375.085399][T17638] hsr_slave_1: entered promiscuous mode [ 375.112498][T17638] debugfs: 'hsr0' already exists in 'hsr' [ 375.126633][T17638] Cannot create hsr debugfs directory [ 375.433147][T14304] IPVS: starting estimator thread 0... [ 375.462381][T17869] tipc: Bearer : already 2 bearers with priority 10 [ 375.487680][T17869] tipc: Bearer : trying with adjusted priority [ 375.520995][T17869] tipc: Enabling of bearer rejected, failed to enable media [ 375.532325][T17871] IPVS: using max 27 ests per chain, 64800 per kthread [ 375.546881][T17878] __nla_validate_parse: 3 callbacks suppressed [ 375.546898][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'. [ 375.596525][T17878] ?: entered promiscuous mode [ 375.692251][T17884] netlink: 'syz.0.3230': attribute type 1 has an invalid length. [ 375.799936][T17894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3231'. [ 375.869574][T17893] tipc: Started in network mode [ 375.879088][T17893] tipc: Node identity 620000000000000001, cluster identity 4711 [ 375.930327][T17900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3233'. [ 376.088419][T17638] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.152062][T17903] tipc: Enabled bearer , priority 10 [ 376.171375][T17887] syzkaller0: entered promiscuous mode [ 376.183750][T17887] syzkaller0: entered allmulticast mode [ 376.220905][T17638] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.328493][T17638] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.401412][T17638] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.401592][ T5625] Bluetooth: hci2: command tx timeout [ 376.494947][T17915] bridge_slave_0: left allmulticast mode [ 376.500955][T17915] bridge_slave_0: left promiscuous mode [ 376.506745][T17915] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.523632][T17915] bridge_slave_1: left allmulticast mode [ 376.534236][T17915] bridge_slave_1: left promiscuous mode [ 376.541493][T17915] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.557686][T17915] bond0: (slave bond_slave_0): Releasing backup interface [ 376.572054][T17915] bond0: (slave bond_slave_1): Releasing backup interface [ 376.595585][T17915] team0: Port device team_slave_0 removed [ 376.607708][T17915] team0: Port device team_slave_1 removed [ 376.616245][T17915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.624878][T17915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.636773][T17915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.648186][T17915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.658376][T17915] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.815264][T17921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3239'. [ 376.824097][T17923] netlink: 'syz.2.3240': attribute type 4 has an invalid length. [ 377.077710][T17933] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3241'. [ 377.123973][T17933] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3241'. [ 377.148376][T17935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3242'. [ 377.162215][T17638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 377.196384][T17638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.225522][T17638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 377.242910][T17638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.253163][ T994] tipc: Node number set to 1660944384 [ 377.288645][T17940] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3244'. [ 377.357816][T17638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.389270][T17638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.412408][T17638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 377.454996][T17638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.465798][T17936] nlmon0: Caught tx_queue_len zero misconfig [ 377.661948][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3248'. [ 377.676690][T17638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.700664][T17961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3248'. [ 377.724224][T17638] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.766126][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.773394][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.796822][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.804143][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.482404][ T5625] Bluetooth: hci2: command tx timeout [ 378.571400][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.379359][T17980] veth0_macvtap: left allmulticast mode [ 379.550149][T17998] geneve0: Caught tx_queue_len zero misconfig [ 379.585530][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.596926][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.614042][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.735982][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.894869][T18008] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 379.905475][T18008] batman_adv: batadv0: Interface activated: macvtap1 [ 379.924369][T18008] 8021q: adding VLAN 0 to HW filter on device bond7 [ 379.956203][T18008] 8021q: adding VLAN 0 to HW filter on device bond8 [ 379.986708][T18008] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 380.026528][T18008] 8021q: adding VLAN 0 to HW filter on device bond9 [ 380.056496][T18008] 8021q: adding VLAN 0 to HW filter on device bond10 [ 380.096902][T18008] 8021q: adding VLAN 0 to HW filter on device eth0 [ 380.113653][T18008] 8021q: adding VLAN 0 to HW filter on device eth1 [ 380.126045][T18008] 8021q: adding VLAN 0 to HW filter on device eth2 [ 380.154499][T18008] 8021q: adding VLAN 0 to HW filter on device eth3 [ 380.205348][T18018] tipc: Enabled bearer , priority 0 [ 380.253308][T18006] tipc: Disabling bearer [ 380.286270][T18009] lo speed is unknown, defaulting to 1000 [ 380.305314][ T5999] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 380.738456][T18053] __nla_validate_parse: 156 callbacks suppressed [ 380.738476][T18053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3269'. [ 380.800290][T18052] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 36928 - 0 [ 380.811126][T18052] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 380.850676][T18055] netlink: 'syz.2.3270': attribute type 1 has an invalid length. [ 380.877075][T18055] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3270'. [ 380.887500][T18055] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3270'. [ 380.899165][T18055] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3270'. [ 380.900609][T18042] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.918658][T18042] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.930298][T18042] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 48243 - 0 [ 380.951894][T18056] tc_dump_action: action bad kind [ 380.966218][T18052] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 36928 - 0 [ 380.976724][T18052] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.027612][T17638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.104159][T18042] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.114492][T18042] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.127574][T18042] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 48243 - 0 [ 381.166996][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3272'. [ 381.184599][T18052] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 36928 - 0 [ 381.195204][T18052] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.273246][T18069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3274'. [ 381.315014][T18042] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.325954][T18042] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.335925][T18042] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 48243 - 0 [ 381.341595][T18066] netlink: 'syz.2.3272': attribute type 1 has an invalid length. [ 381.366596][T18066] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3272'. [ 381.401491][T18066] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3272'. [ 381.442625][T18066] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3272'. [ 381.469259][T18052] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 36928 - 0 [ 381.480419][T18052] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.495867][T18072] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3274'. [ 381.536622][T18042] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.547201][T18042] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.565595][T18042] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 48243 - 0 [ 381.641502][T17638] veth0_vlan: entered promiscuous mode [ 381.685583][T17638] veth1_vlan: entered promiscuous mode [ 381.743082][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 36928 - 0 [ 381.754709][ T35] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 381.781304][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 36928 - 0 [ 381.794961][ T35] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 381.875095][ T35] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.895049][ T35] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.905114][ T35] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 48243 - 0 [ 381.914070][ T35] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.924377][ T35] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.933505][ T35] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 48243 - 0 [ 382.000928][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 36928 - 0 [ 382.014668][ T35] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 382.023460][ T35] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.032172][ T35] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.041233][ T35] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 48243 - 0 [ 382.056775][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 36928 - 0 [ 382.065409][ T35] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 382.082004][T17638] veth0_macvtap: entered promiscuous mode [ 382.112126][T18042] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.134332][T18042] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.145375][T18042] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 48243 - 0 [ 382.176376][T17638] veth1_macvtap: entered promiscuous mode [ 382.224806][T18042] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.235592][T18042] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.248185][T18042] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 48243 - 0 [ 382.269673][T18087] lo speed is unknown, defaulting to 1000 [ 382.313026][T17638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.355800][T18042] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.367795][T18042] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.378116][T18042] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 48243 - 0 [ 382.414346][T17638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.522794][ T5996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.543179][ T5996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.746897][ T5996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.766067][ T5996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.029434][T18116] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.036952][T18116] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.100349][T18116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.118534][T18116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.184274][T18116] tipc: Resetting bearer [ 383.270074][T18123] 8021q: VLANs not supported on gre0 [ 383.332207][T18125] 8021q: adding VLAN 0 to HW filter on device bond5 [ 383.369268][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.377355][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.434675][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.463263][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.159485][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 384.222056][T18144] syzkaller0: entered promiscuous mode [ 384.234843][T18144] syzkaller0: entered allmulticast mode [ 384.528372][ T5643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 384.546493][ T5643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 384.555572][ T5643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 384.567934][ T5643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 384.580129][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.645530][ T5625] Bluetooth: hci4: command tx timeout [ 387.729745][ T5635] bridge0: port 1(syz_tun) entered disabled state [ 387.780285][ T5635] syz_tun (unregistering): left allmulticast mode [ 387.810003][ T5635] syz_tun (unregistering): left promiscuous mode [ 387.825362][ T5635] bridge0: port 1(syz_tun) entered disabled state [ 388.035122][T18189] sctp: [Deprecated]: syz.4.3298 (pid 18189) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.035122][T18189] Use struct sctp_sack_info instead [ 388.317221][T18206] __nla_validate_parse: 2 callbacks suppressed [ 388.317241][T18206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3304'. [ 388.401601][T18156] lo speed is unknown, defaulting to 1000 [ 388.477916][T18208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.637126][T18215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3307'. [ 388.720907][ T5625] Bluetooth: hci4: command tx timeout [ 388.797660][T18225] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3308'. [ 389.315772][ T6005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.339138][ T6005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.364648][T18241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3313'. [ 389.495336][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3316'. [ 389.524361][T18251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3316'. [ 389.545362][T18156] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.549021][T18251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3316'. [ 389.553467][T18156] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.568902][T18156] bridge_slave_0: entered allmulticast mode [ 389.576710][T18156] bridge_slave_0: entered promiscuous mode [ 389.595661][T18246] syzkaller0: entered promiscuous mode [ 389.605659][T18246] syzkaller0: entered allmulticast mode [ 389.633754][T18156] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.639175][ T29] audit: type=1804 audit(1777779333.625:11): pid=18259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3318" name="/newroot/675/cgroup.controllers" dev="tmpfs" ino=3449 res=1 errno=0 [ 389.650232][T18156] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.673728][ T29] audit: type=1800 audit(1777779333.625:12): pid=18259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3318" name="cgroup.controllers" dev="tmpfs" ino=3449 res=0 errno=0 [ 389.702203][T18156] bridge_slave_1: entered allmulticast mode [ 389.724584][ T29] audit: type=1804 audit(1777779333.695:13): pid=18259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3318" name="/newroot/675/cgroup.controllers" dev="tmpfs" ino=3449 res=1 errno=0 [ 389.734059][T18156] bridge_slave_1: entered promiscuous mode [ 389.814295][T18263] netlink: 'syz.3.3320': attribute type 1 has an invalid length. [ 389.865397][T18156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.879718][T18156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.940925][T18156] team0: Port device team_slave_0 added [ 389.961064][T18156] team0: Port device team_slave_1 added [ 390.004166][T18156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.017100][T18156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.051094][T18156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.095453][T18156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.103102][T18156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.163179][T18156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.187848][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3321'. [ 390.196770][T18271] lo speed is unknown, defaulting to 1000 [ 390.296473][T18281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3324'. [ 390.314623][T18156] hsr_slave_0: entered promiscuous mode [ 390.322109][T18156] hsr_slave_1: entered promiscuous mode [ 390.328868][T18156] debugfs: 'hsr0' already exists in 'hsr' [ 390.334925][T18156] Cannot create hsr debugfs directory [ 390.530371][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 390.747389][T18296] xt_hashlimit: size too large, truncated to 1048576 [ 390.790124][T18156] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 36928 - 0 [ 390.800651][ T5625] Bluetooth: hci4: command tx timeout [ 390.850864][T18156] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 390.930000][T18300] netlink: 'syz.4.3330': attribute type 1 has an invalid length. [ 391.105154][T18300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.158449][T18304] vlan2: entered allmulticast mode [ 391.163863][T18304] bond1: entered allmulticast mode [ 391.245139][T18306] bond1: (slave geneve2): making interface the new active one [ 391.259224][T18306] geneve2: entered allmulticast mode [ 391.275957][T18306] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 391.307718][T18156] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 36928 - 0 [ 391.320057][T18156] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 391.436920][T18156] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 36928 - 0 [ 391.448117][T18156] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 391.482228][T18328] netlink: 'syz.1.3338': attribute type 1 has an invalid length. [ 391.497249][T18328] netlink: 'syz.1.3338': attribute type 1 has an invalid length. [ 391.519081][T18156] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 36928 - 0 [ 391.531063][T18156] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 392.508270][T18352] lo speed is unknown, defaulting to 1000 [ 392.633015][T18358] openvswitch: netlink: Message has 496 unknown bytes. [ 392.642362][T18358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.650302][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 392.761500][T18360] netlink: 'syz.4.3345': attribute type 9 has an invalid length. [ 392.879641][ T5625] Bluetooth: hci4: command tx timeout [ 394.251520][T18314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.290749][T18156] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 394.392022][T18156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.406718][T18156] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 394.449705][T18156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.493720][T18369] __nla_validate_parse: 6 callbacks suppressed [ 394.493736][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3347'. [ 394.516255][T18362] netlink: 'syz.1.3346': attribute type 1 has an invalid length. [ 394.530059][T18156] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.554091][T18156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.604967][T18156] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 394.618182][T18156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 394.665892][T18362] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3346'. [ 394.709246][T18369] lo speed is unknown, defaulting to 1000 [ 394.976097][T18156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.034947][T18156] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.102877][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.110222][ T5991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.202760][ T11] block nbd1: Possible stuck request ffff8880274fe000: control (read@0,1024B). Runtime 90 seconds [ 395.213713][ T11] block nbd1: Possible stuck request ffff8880274fe1c0: control (read@1024,1024B). Runtime 90 seconds [ 395.229437][ T11] block nbd1: Possible stuck request ffff8880274fe380: control (read@2048,1024B). Runtime 90 seconds [ 395.243764][ T11] block nbd1: Possible stuck request ffff8880274fe540: control (read@3072,1024B). Runtime 90 seconds [ 395.324788][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.332059][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.460883][T18409] sctp: [Deprecated]: syz.3.3358 (pid 18409) Use of int in max_burst socket option. [ 395.460883][T18409] Use struct sctp_assoc_value instead [ 395.548247][T18413] openvswitch: netlink: Flow key attr not present in new flow. [ 396.329407][T18447] lo speed is unknown, defaulting to 1000 [ 396.359375][T18455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3367'. [ 396.363155][T18456] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3369'. [ 396.387955][T18456] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 396.591070][ T5734] hsr0: entered promiscuous mode [ 396.613106][T18464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3370'. [ 396.695640][T18156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.112900][T18156] veth0_vlan: entered promiscuous mode [ 397.145801][T18156] veth1_vlan: entered promiscuous mode [ 397.201710][T18156] veth0_macvtap: entered promiscuous mode [ 397.210803][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3377'. [ 397.239207][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3377'. [ 397.243109][T18485] tipc: Enabled bearer , priority 0 [ 397.265582][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3377'. [ 397.290775][T18156] veth1_macvtap: entered promiscuous mode [ 397.307593][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3377'. [ 397.321844][T18485] syzkaller0: entered promiscuous mode [ 397.330624][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3377'. [ 397.333511][T18485] syzkaller0: entered allmulticast mode [ 397.354705][T18493] xt_hashlimit: max too large, truncated to 1048576 [ 397.399408][T18156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.444152][T18156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.484653][T18494] tipc: Resetting bearer [ 397.535894][ T135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.553823][ T135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.575625][ T135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.603774][ T135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.640820][T18503] syzkaller1: entered promiscuous mode [ 397.671744][T18503] syzkaller1: entered allmulticast mode [ 397.822569][T18484] tipc: Resetting bearer [ 397.871604][T18484] tipc: Disabling bearer [ 398.100802][ T5991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.127465][ T5991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.219872][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.237901][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.614569][T18550] openvswitch: netlink: Actions may not be safe on all matching packets [ 398.655034][T18547] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 399.308892][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 399.326127][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 399.334756][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 399.342927][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 399.350684][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 399.395077][T18586] netlink: 'syz.1.3406': attribute type 8 has an invalid length. [ 400.032654][T18616] __nla_validate_parse: 16 callbacks suppressed [ 400.032674][T18616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3411'. [ 400.173289][T18633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3410'. [ 400.637231][T18632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3411'. [ 400.948550][T18579] lo speed is unknown, defaulting to 1000 [ 401.048576][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3414'. [ 401.338282][T18670] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3419'. [ 401.390364][T18670] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 401.440201][ T5643] Bluetooth: hci3: command tx timeout [ 401.781470][T18691] netlink: 'syz.4.3427': attribute type 8 has an invalid length. [ 401.940856][T18579] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.957669][T18708] netlink: 'syz.0.3430': attribute type 1 has an invalid length. [ 401.965865][T18708] netlink: 'syz.0.3430': attribute type 3 has an invalid length. [ 401.968028][T18579] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.974062][T18708] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3430'. [ 402.027850][T18579] bridge_slave_0: entered allmulticast mode [ 402.039925][T18579] bridge_slave_0: entered promiscuous mode [ 402.062173][T18579] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.085000][T18579] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.102839][T18579] bridge_slave_1: entered allmulticast mode [ 402.112561][T18579] bridge_slave_1: entered promiscuous mode [ 402.269913][T18579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.327556][T18579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.334855][T18720] netlink: 'syz.4.3434': attribute type 1 has an invalid length. [ 402.350092][T18718] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3433'. [ 402.354500][T18717] netlink: 'syz.4.3434': attribute type 1 has an invalid length. [ 402.373218][T18718] FAULT_INJECTION: forcing a failure. [ 402.373218][T18718] name failslab, interval 1, probability 0, space 0, times 0 [ 402.398639][T18719] macsec1: entered promiscuous mode [ 402.417474][T18718] CPU: 1 UID: 0 PID: 18718 Comm: syz.0.3433 Not tainted syzkaller #0 PREEMPT(full) [ 402.417499][T18718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 402.417510][T18718] Call Trace: [ 402.417517][T18718] [ 402.417525][T18718] dump_stack_lvl+0xe8/0x150 [ 402.417551][T18718] should_fail_ex+0x412/0x560 [ 402.417577][T18718] should_failslab+0xa8/0x100 [ 402.417605][T18718] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 402.417628][T18718] ? kmem_cache_alloc_noprof+0x307/0x650 [ 402.417647][T18718] ? ovs_flow_alloc+0x24/0x1f0 [ 402.417669][T18718] ? ovs_flow_alloc+0x103/0x1f0 [ 402.417693][T18718] ovs_flow_alloc+0x103/0x1f0 [ 402.417714][T18718] ovs_packet_cmd_execute+0x585/0xea0 [ 402.417748][T18718] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 402.417776][T18718] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 402.417801][T18718] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 402.417842][T18718] genl_family_rcv_msg_doit+0x22a/0x330 [ 402.417875][T18718] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 402.417918][T18718] ? bpf_lsm_capable+0x9/0x20 [ 402.417937][T18718] ? security_capable+0x7e/0x2c0 [ 402.417962][T18718] genl_rcv_msg+0x61c/0x7a0 [ 402.417993][T18718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.418016][T18718] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 402.418042][T18718] ? __pfx_ref_tracker_free+0x10/0x10 [ 402.418074][T18718] netlink_rcv_skb+0x232/0x4b0 [ 402.418095][T18718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.418126][T18718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.418161][T18718] ? down_read+0x270/0x2e0 [ 402.418181][T18718] ? genl_rcv+0xd/0x40 [ 402.418204][T18718] genl_rcv+0x28/0x40 [ 402.418225][T18718] netlink_unicast+0x75c/0x8e0 [ 402.418255][T18718] netlink_sendmsg+0x813/0xb40 [ 402.418285][T18718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.418310][T18718] ? aa_sock_msg_perm+0xf1/0x1b0 [ 402.418333][T18718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 402.418359][T18718] ____sys_sendmsg+0x972/0x9f0 [ 402.418381][T18718] ? __might_fault+0xaf/0x130 [ 402.418409][T18718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.418437][T18718] ? import_iovec+0x73/0xa0 [ 402.418462][T18718] ___sys_sendmsg+0x2a5/0x360 [ 402.418482][T18718] ? __lock_acquire+0x6b5/0x2cf0 [ 402.418505][T18718] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.418564][T18718] ? __fget_files+0x2a/0x420 [ 402.418583][T18718] ? __fget_files+0x3a0/0x420 [ 402.418612][T18718] __x64_sys_sendmsg+0x1bd/0x2a0 [ 402.418637][T18718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.418666][T18718] ? __pfx_ksys_write+0x10/0x10 [ 402.418696][T18718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.418714][T18718] do_syscall_64+0x15f/0xf80 [ 402.418732][T18718] ? trace_irq_disable+0x3b/0x140 [ 402.418756][T18718] ? clear_bhb_loop+0x40/0x90 [ 402.418779][T18718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.418796][T18718] RIP: 0033:0x7fa5f399cdd9 [ 402.418813][T18718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.418828][T18718] RSP: 002b:00007fa5f48e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.418855][T18718] RAX: ffffffffffffffda RBX: 00007fa5f3c15fa0 RCX: 00007fa5f399cdd9 [ 402.418868][T18718] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 402.418879][T18718] RBP: 00007fa5f48e2090 R08: 0000000000000000 R09: 0000000000000000 [ 402.418890][T18718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.418900][T18718] R13: 00007fa5f3c16038 R14: 00007fa5f3c15fa0 R15: 00007fffeac9f958 [ 402.418930][T18718] [ 402.439635][T18579] team0: Port device team_slave_0 added [ 402.860425][T18720] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 402.863468][T18579] team0: Port device team_slave_1 added [ 402.996625][T18717] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 403.087814][T18579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.124042][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.163089][T18579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.244800][T18735] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.252552][T18735] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.456217][T18747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3441'. [ 403.458600][T18735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.479263][T18747] netlink: 'syz.4.3441': attribute type 3 has an invalid length. [ 403.486331][T18735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.519032][ T5643] Bluetooth: hci3: command tx timeout [ 403.777821][T18579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.788498][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.814816][T18579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.831087][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3444'. [ 403.842431][ T6005] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.854087][ T6005] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.929005][T18758] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 403.975084][T18758] bond2 (unregistering): Released all slaves [ 404.070411][ T6005] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.081926][ T6005] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.152421][T18770] bond2: Unable to set up delay as MII monitoring is disabled [ 404.211273][T18770] bond2 (unregistering): Released all slaves [ 404.232206][T18776] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:0 [ 404.279687][T18780] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3449'. [ 404.336198][T18579] hsr_slave_0: entered promiscuous mode [ 404.343601][T18579] hsr_slave_1: entered promiscuous mode [ 404.361503][T18579] debugfs: 'hsr0' already exists in 'hsr' [ 404.372952][T18579] Cannot create hsr debugfs directory [ 404.732465][T18796] netlink: 'syz.4.3455': attribute type 1 has an invalid length. [ 404.807056][T18802] netlink: 'syz.2.3453': attribute type 1 has an invalid length. [ 404.863701][T18802] bond2: entered promiscuous mode [ 404.869638][T18802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.917503][T18796] veth5: entered allmulticast mode [ 404.935655][T18796] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 404.996322][T18797] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.027359][T18797] bond2: (slave bond3): making interface the new active one [ 405.037215][T18797] bond3: entered promiscuous mode [ 405.044789][T18797] bond2: (slave bond3): Enslaving as an active interface with an up link [ 405.069568][T18814] __nla_validate_parse: 9 callbacks suppressed [ 405.069586][T18814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3457'. [ 405.324078][T18579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 405.362230][T18579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.370818][T18579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 405.399292][T18579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.421142][T18579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 405.457026][T18579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.487173][T18579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 405.558639][T18579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.584156][T18830] netem: unknown loss type 0 [ 405.600418][ T5643] Bluetooth: hci3: command tx timeout [ 405.606702][ T5757] IPVS: starting estimator thread 0... [ 405.615821][T18830] netem: change failed [ 405.700060][T18837] IPVS: using max 32 ests per chain, 76800 per kthread [ 405.701207][T18825] lo speed is unknown, defaulting to 1000 [ 406.085536][T18854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3467'. [ 406.154744][T18579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.181650][T18579] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.196442][T18854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3467'. [ 406.197133][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.212795][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.255199][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.262462][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.310799][T18867] netlink: 'syz.4.3470': attribute type 13 has an invalid length. [ 406.362126][T18868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.411163][T18868] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3470'. [ 407.326961][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3481'. [ 407.355921][T18921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3483'. [ 407.363766][T18918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3481'. [ 407.393279][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3483'. [ 407.402271][T18918] 8021q: VLANs not supported on ip_vti0 [ 407.416224][T18921] netlink: 'syz.1.3483': attribute type 15 has an invalid length. [ 407.503984][T18924] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3484'. [ 407.679515][ T5643] Bluetooth: hci3: command tx timeout [ 407.731617][T18940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3486'. [ 407.908104][T18579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.192017][T18579] veth0_vlan: entered promiscuous mode [ 408.244346][T18579] veth1_vlan: entered promiscuous mode [ 408.379637][T18579] veth0_macvtap: entered promiscuous mode [ 408.423362][T18579] veth1_macvtap: entered promiscuous mode [ 408.455033][T18967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.493213][T18967] team0: Port device batadv0 added [ 408.521622][T18968] bridge0: port 1(team0) entered blocking state [ 408.541918][T18968] bridge0: port 1(team0) entered disabled state [ 408.579130][T18968] team0: entered allmulticast mode [ 408.592158][T18968] batadv0: entered allmulticast mode [ 408.612037][T18968] team0: entered promiscuous mode [ 408.631556][T18968] batadv0: entered promiscuous mode [ 408.708637][T18579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.720881][ T6005] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 408.730968][ T6005] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 408.775278][T18579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.840394][ T5996] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.880435][ T1121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.942177][ T1121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.964902][ T1121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.281005][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 409.330490][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.355781][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.440327][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.469622][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.638014][T19011] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 409.648557][T19011] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 409.659073][T19011] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 409.706614][T19013] netlink: 'syz.3.3399': attribute type 15 has an invalid length. [ 409.730688][T19013] netlink: 'syz.3.3399': attribute type 15 has an invalid length. [ 409.751549][T19013] netlink: 'syz.3.3399': attribute type 15 has an invalid length. [ 409.760831][T19013] netlink: 'syz.3.3399': attribute type 15 has an invalid length. [ 409.769575][T19013] netlink: 'syz.3.3399': attribute type 15 has an invalid length. [ 409.777639][T19013] netlink: 'syz.3.3399': attribute type 15 has an invalid length. [ 409.799277][T19013] netlink: 'syz.3.3399': attribute type 15 has an invalid length. [ 409.814836][T19013] netlink: 'syz.3.3399': attribute type 15 has an invalid length. [ 409.823457][T19013] netlink: 'syz.3.3399': attribute type 15 has an invalid length. [ 409.832980][T19013] netlink: 'syz.3.3399': attribute type 15 has an invalid length. [ 409.841940][T19013] netlink: 'syz.3.3399': attribute type 15 has an invalid length. [ 409.850363][T19013] netlink: 'syz.3.3399': attribute type 15 has an invalid length. [ 410.094295][T19023] __nla_validate_parse: 65 callbacks suppressed [ 410.094309][T19023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3503'. [ 410.218431][T19023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3503'. [ 410.238084][T19023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3503'. [ 410.571237][T19035] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3506'. [ 411.133313][T19034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3507'. [ 411.519467][T19084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.537401][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3520'. [ 412.003424][T19119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3528'. [ 412.575846][T19147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.628571][T19151] geneve2: entered promiscuous mode [ 412.646770][T19150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3537'. [ 412.659947][ T1053] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 48489 - 0 [ 412.669368][ T1053] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 48489 - 0 [ 412.684001][ T1053] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 48489 - 0 [ 412.731668][T19147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.742777][T19147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 48489 - 0 [ 412.845513][T19147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.856383][T19147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 48489 - 0 [ 413.060941][T19147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.073408][T19147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 48489 - 0 [ 413.117087][T19170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3542'. [ 413.283569][T19178] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3544'. [ 413.581688][ T70] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 48489 - 0 [ 413.597795][ T70] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 413.627450][ T70] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 48489 - 0 [ 413.646756][ T70] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 413.766229][ T1053] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 48489 - 0 [ 413.795949][ T1053] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 413.983617][ T70] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 48489 - 0 [ 413.992441][ T70] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 414.757188][T19237] x_tables: ip_tables: ah match: only valid for protocol 51 [ 414.806563][T19244] bond1 (unregistering): Released all slaves [ 415.266367][T19270] vxlan0: entered promiscuous mode [ 415.271877][T19270] vxlan0: entered allmulticast mode [ 415.301349][T19273] __nla_validate_parse: 1 callbacks suppressed [ 415.301365][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3568'. [ 415.316855][T19271] vxlan0: entered promiscuous mode [ 415.325344][T19271] vxlan0: entered allmulticast mode [ 415.336493][T19273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3568'. [ 415.347068][T19273] validate_nla: 54 callbacks suppressed [ 415.347084][T19273] netlink: 'syz.2.3568': attribute type 18 has an invalid length. [ 415.956535][T19307] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.964259][T19307] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.148360][T19318] netlink: 'syz.0.3577': attribute type 27 has an invalid length. [ 416.165609][T19307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.199787][T19307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.534307][T19336] netlink: 'syz.1.3579': attribute type 2 has an invalid length. [ 416.550924][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3579'. [ 416.697024][ T12] tipc: Subscription rejected, illegal request [ 416.813674][T19318] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.821372][T19318] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.997596][T19318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.037779][T19318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.282425][T19321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.290398][T19321] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.302652][T19321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.334031][T19321] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.341272][T19321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.356696][T19321] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.363944][T19321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.382304][T19321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.391847][T19321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.408633][T19321] veth1_vlan: left promiscuous mode [ 417.414842][T19321] veth0_vlan: left promiscuous mode [ 417.421658][T19321] veth0_vlan: entered promiscuous mode [ 417.430946][T19321] veth1_vlan: entered promiscuous mode [ 417.442074][T19321] veth1_macvtap: left promiscuous mode [ 417.449183][T19321] veth0_macvtap: left promiscuous mode [ 417.456673][T19321] veth0_macvtap: entered promiscuous mode [ 417.464632][T19321] veth1_macvtap: entered promiscuous mode [ 417.477642][T19321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.485960][T19321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.494242][T19321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.502630][T19321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.512709][T19321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.520318][ T5996] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 48489 - 0 [ 417.530882][ T5996] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 417.543619][ T5996] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 48489 - 0 [ 417.552629][ T5996] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 417.561165][ T5996] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 48489 - 0 [ 417.569974][ T5996] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 417.581849][ T5996] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 48489 - 0 [ 417.590856][ T5996] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 418.618240][T19396] tipc: Failed to remove unknown binding: 66,1,1/0:384225372/384225374 [ 418.633097][T19392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3596'. [ 418.653663][T19396] tipc: Failed to remove unknown binding: 66,1,1/0:384225372/384225374 [ 418.662784][T19396] tipc: Failed to remove unknown binding: 66,1,1/0:384225372/384225374 [ 418.918885][T19402] netlink: 'syz.1.3598': attribute type 9 has an invalid length. [ 418.931041][T19407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3599'. [ 419.244295][T19418] syzkaller0: entered promiscuous mode [ 419.260045][T19418] syzkaller0: entered allmulticast mode [ 419.376375][T19422] netlink: 'syz.3.3604': attribute type 1 has an invalid length. [ 419.402572][T19422] netdevsim netdevsim3 eth0: entered promiscuous mode [ 419.425455][T19422] netdevsim netdevsim3 eth0: entered allmulticast mode [ 419.489453][T19422] 8021q: adding VLAN 0 to HW filter on device eth0 [ 419.877864][T19429] syzkaller0: create flow: hash 1538909710 index 1 [ 420.465125][T19448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3610'. [ 420.479033][T19448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3610'. [ 420.669226][T19451] netlink: 'syz.3.3612': attribute type 10 has an invalid length. [ 420.776042][T19427] syzkaller0: delete flow: hash 1538909710 index 1 [ 421.897581][T19469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3616'. [ 421.908044][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3616'. [ 423.608379][T19451] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.621608][T19451] bond0: (slave team0): Enslaving as an active interface with an up link [ 423.805461][T19478] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3619'. [ 423.927232][T19478] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3619'. [ 423.974247][T19485] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3621'. [ 423.998046][T19488] netem: invalid attributes len -1 [ 424.017055][T19487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3618'. [ 424.034444][T19488] netem: change failed [ 424.050834][T19487] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3618'. [ 424.074061][T19495] syzkaller0: entered promiscuous mode [ 424.084195][T19497] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3622'. [ 424.102671][T19495] syzkaller0: entered allmulticast mode [ 424.217433][T19483] lo speed is unknown, defaulting to 1000 [ 424.293413][T17813] IPVS: starting estimator thread 0... [ 424.346187][T19506] Cannot find del_set index 0 as target [ 424.401491][T19508] IPVS: using max 35 ests per chain, 84000 per kthread [ 424.586771][T19517] netlink: 'syz.1.3627': attribute type 11 has an invalid length. [ 425.279870][ T11] block nbd1: Possible stuck request ffff8880274fe000: control (read@0,1024B). Runtime 120 seconds [ 425.292582][ T11] block nbd1: Possible stuck request ffff8880274fe1c0: control (read@1024,1024B). Runtime 120 seconds [ 425.304131][ T11] block nbd1: Possible stuck request ffff8880274fe380: control (read@2048,1024B). Runtime 120 seconds [ 425.315570][ T11] block nbd1: Possible stuck request ffff8880274fe540: control (read@3072,1024B). Runtime 120 seconds [ 425.545855][T19566] netlink: 'syz.1.3642': attribute type 1 has an invalid length. [ 425.554737][T19561] lo speed is unknown, defaulting to 1000 [ 426.070401][T19595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.102057][T19598] __nla_validate_parse: 6 callbacks suppressed [ 426.102076][T19598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3652'. [ 426.135245][T19596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.753787][T19613] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.784706][T19630] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3661'. [ 426.970887][T19616] geneve2: entered promiscuous mode [ 427.029301][T19615] bond3: option mode: invalid value (254) [ 427.046688][T19615] bond3 (unregistering): Released all slaves [ 427.080031][ T1121] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 50781 - 0 [ 427.092030][ T1121] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 50781 - 0 [ 427.106257][ T1121] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 50781 - 0 [ 427.196951][T19641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3663'. [ 427.225779][T19613] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.236466][T19613] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50781 - 0 [ 427.396703][T19613] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.413264][T19613] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50781 - 0 [ 427.630731][T19659] netlink: 'syz.1.3669': attribute type 1 has an invalid length. [ 427.660316][T19613] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.679223][T19613] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 50781 - 0 [ 427.731267][T19660] IPv6: Can't replace route, no match found [ 427.739709][T19660] IPv6: Can't replace route, no match found [ 427.747181][T19651] xfrm1: entered allmulticast mode [ 427.791472][T19659] bond1: entered promiscuous mode [ 427.797048][T19659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.962222][T19667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.108990][ T6005] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 50781 - 0 [ 428.127901][ T6005] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.159803][ T6005] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 50781 - 0 [ 428.179596][ T6005] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.198638][T19679] netlink: 'syz.4.3676': attribute type 3 has an invalid length. [ 428.239614][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 50781 - 0 [ 428.251741][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.262883][T19679] block nbd4: NBD_DISCONNECT [ 428.291092][T19684] netlink: 'syz.2.3678': attribute type 1 has an invalid length. [ 428.303830][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 50781 - 0 [ 428.333725][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 428.397702][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'. [ 428.409189][T19684] bond4: entered promiscuous mode [ 428.416717][T19684] bond4: entered allmulticast mode [ 428.422721][T19691] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3680'. [ 428.435107][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3678'. [ 428.444610][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3680'. [ 428.454067][T19684] 8021q: adding VLAN 0 to HW filter on device bond4 [ 428.476796][T19679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3676'. [ 428.529802][T19688] erspan2: entered allmulticast mode [ 428.562846][T19688] bond4: (slave erspan2): making interface the new active one [ 428.599645][T19688] erspan2: entered promiscuous mode [ 428.628789][T19688] bond4: (slave erspan2): Enslaving as an active interface with an up link [ 428.940783][T19711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3683'. [ 429.029098][T19711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3683'. [ 429.051786][T13128] block nbd64: NBD_DISCONNECT [ 429.383565][T13128] udevd[13128]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 429.507674][T19710] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 429.554353][T19710] netlink: 'syz.4.3684': attribute type 1 has an invalid length. [ 429.604634][T19710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 429.759239][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 429.821012][T19710] bond3: (slave veth7): Enslaving as an active interface with a down link [ 429.945039][T19725] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 430.000567][T19742] tipc: Started in network mode [ 430.030635][T19742] tipc: Node identity c69c47c73368, cluster identity 4711 [ 430.126135][T19742] tipc: Enabled bearer , priority 0 [ 430.272198][T19752] geneve2: entered promiscuous mode [ 430.281822][T19746] syzkaller0: entered promiscuous mode [ 430.291113][T19746] syzkaller0: entered allmulticast mode [ 430.415303][T19742] tipc: Resetting bearer [ 430.436950][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 55018 - 0 [ 430.452343][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 55018 - 0 [ 430.477971][T19775] wg1 speed is unknown, defaulting to 1000 [ 430.506426][T19733] tipc: Resetting bearer [ 430.562161][T19733] tipc: Disabling bearer [ 430.602357][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 55018 - 0 [ 430.620398][T19775] wg1 speed is unknown, defaulting to 1000 [ 430.626331][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 55018 - 0 [ 430.648478][T19775] wg1 speed is unknown, defaulting to 1000 [ 430.662841][T19775] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 430.687954][T19775] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 430.721695][T19775] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 430.775142][T19775] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 430.830318][T19775] wg1 speed is unknown, defaulting to 1000 [ 430.837223][T19775] wg1 speed is unknown, defaulting to 1000 [ 430.860739][T19775] wg1 speed is unknown, defaulting to 1000 [ 430.870811][T19775] wg1 speed is unknown, defaulting to 1000 [ 430.886888][T19775] wg1 speed is unknown, defaulting to 1000 [ 430.898012][T19775] wg1 speed is unknown, defaulting to 1000 [ 430.904190][T19793] sctp: [Deprecated]: syz.3.3698 (pid 19793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.904190][T19793] Use struct sctp_sack_info instead [ 430.921907][T19775] wg1 speed is unknown, defaulting to 1000 [ 430.929086][T19775] wg1 speed is unknown, defaulting to 1000 [ 430.944293][T19775] wg1 speed is unknown, defaulting to 1000 [ 430.997810][T19790] netlink: 'syz.3.3698': attribute type 1 has an invalid length. [ 431.291686][T19811] FAULT_INJECTION: forcing a failure. [ 431.291686][T19811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.306081][T19811] CPU: 1 UID: 0 PID: 19811 Comm: syz.1.3704 Not tainted syzkaller #0 PREEMPT(full) [ 431.306107][T19811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.306122][T19811] Call Trace: [ 431.306133][T19811] [ 431.306141][T19811] dump_stack_lvl+0xe8/0x150 [ 431.306167][T19811] should_fail_ex+0x412/0x560 [ 431.306196][T19811] _copy_from_user+0x2d/0xb0 [ 431.306222][T19811] ___sys_sendmsg+0x1c6/0x360 [ 431.306245][T19811] ? __lock_acquire+0x6b5/0x2cf0 [ 431.306269][T19811] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.306327][T19811] ? __fget_files+0x2a/0x420 [ 431.306347][T19811] ? __fget_files+0x3a0/0x420 [ 431.306378][T19811] __x64_sys_sendmsg+0x1bd/0x2a0 [ 431.306431][T19811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 431.306464][T19811] ? __pfx_ksys_write+0x10/0x10 [ 431.306497][T19811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.306518][T19811] do_syscall_64+0x15f/0xf80 [ 431.306538][T19811] ? trace_irq_disable+0x3b/0x140 [ 431.306564][T19811] ? clear_bhb_loop+0x40/0x90 [ 431.306587][T19811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.306605][T19811] RIP: 0033:0x7f4bee79cdd9 [ 431.306622][T19811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.306638][T19811] RSP: 002b:00007f4bef640028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.306657][T19811] RAX: ffffffffffffffda RBX: 00007f4beea15fa0 RCX: 00007f4bee79cdd9 [ 431.306671][T19811] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 431.306686][T19811] RBP: 00007f4bef640090 R08: 0000000000000000 R09: 0000000000000000 [ 431.306698][T19811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.306709][T19811] R13: 00007f4beea16038 R14: 00007f4beea15fa0 R15: 00007ffe0ad85698 [ 431.306740][T19811] [ 431.952747][T19829] siw: device registration error -23 [ 432.031627][T19824] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 55018 - 0 [ 432.286462][T19845] syzkaller1: entered promiscuous mode [ 432.307844][T19845] syzkaller1: entered allmulticast mode [ 432.443150][T19824] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 55018 - 0 [ 432.523688][T19856] __nla_validate_parse: 4 callbacks suppressed [ 432.523708][T19856] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3711'. [ 432.691044][T19824] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 55018 - 0 [ 432.715790][T19865] FAULT_INJECTION: forcing a failure. [ 432.715790][T19865] name failslab, interval 1, probability 0, space 0, times 0 [ 432.731084][T19865] CPU: 1 UID: 0 PID: 19865 Comm: syz.3.3715 Not tainted syzkaller #0 PREEMPT(full) [ 432.731109][T19865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 432.731121][T19865] Call Trace: [ 432.731128][T19865] [ 432.731137][T19865] dump_stack_lvl+0xe8/0x150 [ 432.731164][T19865] should_fail_ex+0x412/0x560 [ 432.731192][T19865] should_failslab+0xa8/0x100 [ 432.731221][T19865] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 432.731245][T19865] ? __alloc_skb+0x186/0x7d0 [ 432.731266][T19865] ? __alloc_skb+0x1d0/0x7d0 [ 432.731284][T19865] ? __local_bh_enable_ip+0xd0/0x130 [ 432.731309][T19865] __alloc_skb+0x1d0/0x7d0 [ 432.731334][T19865] netlink_sendmsg+0x5d4/0xb40 [ 432.731367][T19865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.731393][T19865] ? aa_sock_msg_perm+0xf1/0x1b0 [ 432.731418][T19865] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.731445][T19865] ____sys_sendmsg+0x972/0x9f0 [ 432.731468][T19865] ? __might_fault+0xaf/0x130 [ 432.731497][T19865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.731528][T19865] ? import_iovec+0x73/0xa0 [ 432.731556][T19865] ___sys_sendmsg+0x2a5/0x360 [ 432.731577][T19865] ? __lock_acquire+0x6b5/0x2cf0 [ 432.731600][T19865] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.731663][T19865] ? __fget_files+0x2a/0x420 [ 432.731683][T19865] ? __fget_files+0x3a0/0x420 [ 432.731712][T19865] __x64_sys_sendmsg+0x1bd/0x2a0 [ 432.731737][T19865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.731770][T19865] ? __pfx_ksys_write+0x10/0x10 [ 432.731803][T19865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.731823][T19865] do_syscall_64+0x15f/0xf80 [ 432.731844][T19865] ? trace_irq_disable+0x3b/0x140 [ 432.731869][T19865] ? clear_bhb_loop+0x40/0x90 [ 432.731892][T19865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.731914][T19865] RIP: 0033:0x7f396ed9cdd9 [ 432.731932][T19865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.731947][T19865] RSP: 002b:00007f396cfee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.731967][T19865] RAX: ffffffffffffffda RBX: 00007f396f015fa0 RCX: 00007f396ed9cdd9 [ 432.731980][T19865] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 432.731992][T19865] RBP: 00007f396cfee090 R08: 0000000000000000 R09: 0000000000000000 [ 432.732004][T19865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.732016][T19865] R13: 00007f396f016038 R14: 00007f396f015fa0 R15: 00007fff39002c88 [ 432.732046][T19865] [ 433.011321][T19864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3714'. [ 433.030559][T19864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.267306][T19824] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 55018 - 0 [ 433.438993][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3720'. [ 433.804053][T19888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3722'. [ 433.856765][T19891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3722'. [ 433.934008][T19898] x_tables: duplicate underflow at hook 2 [ 434.043803][ T5996] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 55018 - 0 [ 434.065398][T19903] syzkaller0: entered promiscuous mode [ 434.078778][T19903] syzkaller0: entered allmulticast mode [ 434.195664][T19910] FAULT_INJECTION: forcing a failure. [ 434.195664][T19910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.211337][T19910] CPU: 0 UID: 0 PID: 19910 Comm: syz.2.3727 Not tainted syzkaller #0 PREEMPT(full) [ 434.211381][T19910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.211391][T19910] Call Trace: [ 434.211399][T19910] [ 434.211408][T19910] dump_stack_lvl+0xe8/0x150 [ 434.211434][T19910] should_fail_ex+0x412/0x560 [ 434.211462][T19910] _copy_from_iter+0x1d3/0x1670 [ 434.211488][T19910] ? rcu_is_watching+0x15/0xb0 [ 434.211516][T19910] ? __pfx__copy_from_iter+0x10/0x10 [ 434.211547][T19910] ? netlink_sendmsg+0x650/0xb40 [ 434.211569][T19910] ? skb_put+0x11b/0x210 [ 434.211594][T19910] netlink_sendmsg+0x6c0/0xb40 [ 434.211626][T19910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.211651][T19910] ? aa_sock_msg_perm+0xf1/0x1b0 [ 434.211676][T19910] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 434.211704][T19910] ____sys_sendmsg+0x972/0x9f0 [ 434.211727][T19910] ? __might_fault+0xaf/0x130 [ 434.211763][T19910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.211795][T19910] ? import_iovec+0x73/0xa0 [ 434.211823][T19910] ___sys_sendmsg+0x2a5/0x360 [ 434.211845][T19910] ? __lock_acquire+0x6b5/0x2cf0 [ 434.211870][T19910] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.211927][T19910] ? __fget_files+0x2a/0x420 [ 434.211948][T19910] ? __fget_files+0x3a0/0x420 [ 434.211979][T19910] __x64_sys_sendmsg+0x1bd/0x2a0 [ 434.212005][T19910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.212036][T19910] ? __pfx_ksys_write+0x10/0x10 [ 434.212069][T19910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.212089][T19910] do_syscall_64+0x15f/0xf80 [ 434.212110][T19910] ? trace_irq_disable+0x3b/0x140 [ 434.212137][T19910] ? clear_bhb_loop+0x40/0x90 [ 434.212160][T19910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.212182][T19910] RIP: 0033:0x7f3577b9cdd9 [ 434.212200][T19910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.212216][T19910] RSP: 002b:00007f3578a2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.212236][T19910] RAX: ffffffffffffffda RBX: 00007f3577e15fa0 RCX: 00007f3577b9cdd9 [ 434.212249][T19910] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 434.212261][T19910] RBP: 00007f3578a2a090 R08: 0000000000000000 R09: 0000000000000000 [ 434.212273][T19910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.212285][T19910] R13: 00007f3577e16038 R14: 00007f3577e15fa0 R15: 00007ffdf97d4448 [ 434.212315][T19910] [ 434.503947][T19910] geneve2: entered promiscuous mode [ 434.511967][ T1053] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 55018 - 0 [ 434.520365][ T1053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 37214 - 0 [ 434.529341][ T1053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 37214 - 0 [ 434.584347][ T1053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 37214 - 0 [ 434.696393][ T1053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 37214 - 0 [ 434.705317][ T1053] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 55018 - 0 [ 434.720753][ T1053] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 55018 - 0 [ 434.818124][T19924] tipc: Enabled bearer , priority 0 [ 435.093233][T19941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3737'. [ 435.102825][T19941] netlink: 'syz.3.3737': attribute type 15 has an invalid length. [ 435.112420][T19941] netlink: 'syz.3.3737': attribute type 25 has an invalid length. [ 435.135687][T19941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3737'. [ 435.321680][T19923] tipc: Disabling bearer [ 435.429199][T19945] FAULT_INJECTION: forcing a failure. [ 435.429199][T19945] name failslab, interval 1, probability 0, space 0, times 0 [ 435.446478][T19945] CPU: 1 UID: 0 PID: 19945 Comm: syz.3.3739 Not tainted syzkaller #0 PREEMPT(full) [ 435.446504][T19945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.446515][T19945] Call Trace: [ 435.446523][T19945] [ 435.446531][T19945] dump_stack_lvl+0xe8/0x150 [ 435.446558][T19945] should_fail_ex+0x412/0x560 [ 435.446596][T19945] should_failslab+0xa8/0x100 [ 435.446623][T19945] __kmalloc_noprof+0xe8/0x760 [ 435.446649][T19945] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 435.446684][T19945] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 435.446714][T19945] ? kernel_text_address+0xa5/0xe0 [ 435.446745][T19945] genl_family_rcv_msg_doit+0xd9/0x330 [ 435.446773][T19945] ? __asan_memcpy+0x40/0x70 [ 435.446798][T19945] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 435.446834][T19945] ? apparmor_capable+0x126/0x170 [ 435.446863][T19945] ? bpf_lsm_capable+0x9/0x20 [ 435.446881][T19945] ? security_capable+0x7e/0x2c0 [ 435.446910][T19945] genl_rcv_msg+0x61c/0x7a0 [ 435.446943][T19945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.446967][T19945] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 435.446988][T19945] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 435.447008][T19945] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 435.447044][T19945] netlink_rcv_skb+0x232/0x4b0 [ 435.447068][T19945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.447097][T19945] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 435.447136][T19945] ? down_read+0x270/0x2e0 [ 435.447158][T19945] ? genl_rcv+0xd/0x40 [ 435.447185][T19945] genl_rcv+0x28/0x40 [ 435.447209][T19945] netlink_unicast+0x75c/0x8e0 [ 435.447241][T19945] netlink_sendmsg+0x813/0xb40 [ 435.447273][T19945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.447299][T19945] ? aa_sock_msg_perm+0xf1/0x1b0 [ 435.447323][T19945] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.447354][T19945] ____sys_sendmsg+0x972/0x9f0 [ 435.447378][T19945] ? __might_fault+0xaf/0x130 [ 435.447408][T19945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.447441][T19945] ? import_iovec+0x73/0xa0 [ 435.447470][T19945] ___sys_sendmsg+0x2a5/0x360 [ 435.447492][T19945] ? __lock_acquire+0x6b5/0x2cf0 [ 435.447517][T19945] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.447583][T19945] ? __fget_files+0x2a/0x420 [ 435.447604][T19945] ? __fget_files+0x3a0/0x420 [ 435.447636][T19945] __x64_sys_sendmsg+0x1bd/0x2a0 [ 435.447663][T19945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.447697][T19945] ? __pfx_ksys_write+0x10/0x10 [ 435.447732][T19945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.447753][T19945] do_syscall_64+0x15f/0xf80 [ 435.447775][T19945] ? trace_irq_disable+0x3b/0x140 [ 435.447801][T19945] ? clear_bhb_loop+0x40/0x90 [ 435.447826][T19945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.447845][T19945] RIP: 0033:0x7f396ed9cdd9 [ 435.447864][T19945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.447880][T19945] RSP: 002b:00007f396cfee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.447901][T19945] RAX: ffffffffffffffda RBX: 00007f396f015fa0 RCX: 00007f396ed9cdd9 [ 435.447915][T19945] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 435.447927][T19945] RBP: 00007f396cfee090 R08: 0000000000000000 R09: 0000000000000000 [ 435.447938][T19945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.447949][T19945] R13: 00007f396f016038 R14: 00007f396f015fa0 R15: 00007fff39002c88 [ 435.447981][T19945] [ 435.967797][T19952] macvtap1: entered promiscuous mode [ 435.973501][T19952] macvtap1: entered allmulticast mode [ 435.979332][T19952] veth1_vlan: entered allmulticast mode [ 435.981455][T19955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3742'. [ 436.017179][T19952] macvtap2: entered promiscuous mode [ 436.023071][T19952] macvtap2: entered allmulticast mode [ 436.028449][T19956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3742'. [ 436.312496][T19973] syzkaller0: entered promiscuous mode [ 436.323033][T19973] syzkaller0: entered allmulticast mode [ 436.371147][T19984] xt_policy: output policy not valid in PREROUTING and INPUT [ 436.490547][T19986] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 37214 - 0 [ 436.521446][T19984] netlink: 'syz.4.3751': attribute type 66 has an invalid length. [ 436.610731][T19991] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3754'. [ 436.643835][T19986] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 37214 - 0 [ 436.818552][T19986] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 37214 - 0 [ 436.851859][T19997] tipc: New replicast peer: 255.255.255.255 [ 436.861351][T19997] tipc: Enabled bearer , priority 10 [ 437.035728][T19986] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 37214 - 0 [ 437.182840][T19998] syzkaller0: entered promiscuous mode [ 437.206077][T19998] syzkaller0: entered allmulticast mode [ 437.435759][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 37214 - 0 [ 437.535480][ T35] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 37214 - 0 [ 437.553144][T20016] __nla_validate_parse: 2 callbacks suppressed [ 437.553163][T20016] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3759'. [ 437.713233][T20022] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3761'. [ 440.004044][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.639361][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 440.951715][ T4994] udevd[4994]: worker [5629] /devices/virtual/block/nbd1 is taking a long time [ 440.978215][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 37214 - 0 [ 441.086629][ T35] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 37214 - 0 [ 441.100693][T20065] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3765'. [ 441.146535][T20070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3767'. [ 441.164746][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3767'. [ 441.236543][T20070] bond0: Unable to set down delay as MII monitoring is disabled [ 441.321206][T17808] IPVS: starting estimator thread 0... [ 441.427807][T20081] IPVS: using max 32 ests per chain, 76800 per kthread [ 441.603215][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3772'. [ 441.635247][T20091] netlink: 'syz.1.3772': attribute type 13 has an invalid length. [ 441.645610][T20091] netlink: 'syz.1.3772': attribute type 17 has an invalid length. [ 441.745857][T20098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3772'. [ 441.792554][T20091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.802627][T20091] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.815584][T20091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.828886][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3776'. [ 441.853716][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3776'. [ 441.910344][T20091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.924215][T20091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.950107][T20091] veth1_vlan: left promiscuous mode [ 441.957569][T20091] veth0_vlan: left promiscuous mode [ 441.964282][T20091] veth0_vlan: entered promiscuous mode [ 441.979022][T20091] veth1_vlan: entered promiscuous mode [ 441.989662][T20091] veth1_macvtap: left promiscuous mode [ 441.996489][T20091] veth0_macvtap: left promiscuous mode [ 442.004246][T20091] veth0_macvtap: entered promiscuous mode [ 442.022891][T20091] veth1_macvtap: entered promiscuous mode [ 442.040943][T20091] veth0_to_team: entered promiscuous mode [ 442.047733][T20091] bond1: left promiscuous mode [ 442.053697][T20091] geneve2: left promiscuous mode [ 442.061338][T20091] 8021q: adding VLAN 0 to HW filter on device eth0 [ 442.075801][T20091] 8021q: adding VLAN 0 to HW filter on device eth1 [ 442.103579][T20091] 8021q: adding VLAN 0 to HW filter on device eth2 [ 442.120609][T20091] 8021q: adding VLAN 0 to HW filter on device eth3 [ 442.173323][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.180579][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.222837][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.230097][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.412469][ T5734] wg1 speed is unknown, defaulting to 1000 [ 442.414341][ T1121] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.438613][ T5734] syz0: Port: 1 Link ACTIVE [ 442.444337][ T1121] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 442.470623][ T1121] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.491989][ T1121] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 442.545034][T20134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3780'. [ 442.622419][ T1121] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.645689][ T1121] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 442.657262][ T1121] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.685645][ T1121] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 443.044222][T20158] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3788'. [ 443.117860][T20160] netlink: 'syz.3.3790': attribute type 21 has an invalid length. [ 443.145721][T20160] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3790'. [ 443.191733][T20160] netlink: 'syz.3.3790': attribute type 5 has an invalid length. [ 443.236799][T20160] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3790'. [ 443.416442][T20171] lo speed is unknown, defaulting to 1000 [ 443.425074][T20171] wg1 speed is unknown, defaulting to 1000 [ 443.570030][T20190] FAULT_INJECTION: forcing a failure. [ 443.570030][T20190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.599787][T20190] CPU: 0 UID: 0 PID: 20190 Comm: syz.2.3798 Not tainted syzkaller #0 PREEMPT(full) [ 443.599809][T20190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.599818][T20190] Call Trace: [ 443.599824][T20190] [ 443.599830][T20190] dump_stack_lvl+0xe8/0x150 [ 443.599851][T20190] should_fail_ex+0x412/0x560 [ 443.599872][T20190] _copy_from_iter+0x1d3/0x1670 [ 443.599893][T20190] ? rcu_is_watching+0x15/0xb0 [ 443.599914][T20190] ? __pfx__copy_from_iter+0x10/0x10 [ 443.599937][T20190] ? netlink_sendmsg+0x650/0xb40 [ 443.599952][T20190] ? skb_put+0x11b/0x210 [ 443.599971][T20190] netlink_sendmsg+0x6c0/0xb40 [ 443.599994][T20190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.600013][T20190] ? aa_sock_msg_perm+0xf1/0x1b0 [ 443.600031][T20190] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 443.600052][T20190] ____sys_sendmsg+0x972/0x9f0 [ 443.600069][T20190] ? __might_fault+0xaf/0x130 [ 443.600091][T20190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.600115][T20190] ? import_iovec+0x73/0xa0 [ 443.600135][T20190] ___sys_sendmsg+0x2a5/0x360 [ 443.600151][T20190] ? __lock_acquire+0x6b5/0x2cf0 [ 443.600169][T20190] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.600211][T20190] ? __fget_files+0x2a/0x420 [ 443.600226][T20190] ? __fget_files+0x3a0/0x420 [ 443.600248][T20190] __x64_sys_sendmsg+0x1bd/0x2a0 [ 443.600268][T20190] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.600292][T20190] ? __pfx_ksys_write+0x10/0x10 [ 443.600317][T20190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.600332][T20190] do_syscall_64+0x15f/0xf80 [ 443.600349][T20190] ? trace_irq_disable+0x3b/0x140 [ 443.600372][T20190] ? clear_bhb_loop+0x40/0x90 [ 443.600389][T20190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.600403][T20190] RIP: 0033:0x7f3577b9cdd9 [ 443.600417][T20190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.600429][T20190] RSP: 002b:00007f3578a2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.600444][T20190] RAX: ffffffffffffffda RBX: 00007f3577e15fa0 RCX: 00007f3577b9cdd9 [ 443.600462][T20190] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 443.600470][T20190] RBP: 00007f3578a2a090 R08: 0000000000000000 R09: 0000000000000000 [ 443.600478][T20190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.600486][T20190] R13: 00007f3577e16038 R14: 00007f3577e15fa0 R15: 00007ffdf97d4448 [ 443.600508][T20190] [ 444.068967][T20201] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 444.181717][T20202] tipc: Invalid UDP bearer configuration [ 444.181797][T20202] tipc: Enabling of bearer rejected, failed to enable media [ 444.468619][T20208] syzkaller0: entered promiscuous mode [ 444.496757][T20208] syzkaller0: entered allmulticast mode [ 444.595474][T20226] netlink: 'syz.0.3808': attribute type 29 has an invalid length. [ 444.616744][T20229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3807'. [ 444.802586][T20229] bond1: entered promiscuous mode [ 444.822711][T20229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.903942][T20204] tipc: Started in network mode [ 444.909310][T20204] tipc: Node identity ac14140f, cluster identity 4711 [ 444.920181][T20204] tipc: New replicast peer: 255.255.255.255 [ 444.937859][T20204] tipc: Enabled bearer , priority 10 [ 444.960989][T20240] bridge_slave_0: left allmulticast mode [ 444.998154][T20240] bridge_slave_0: left promiscuous mode [ 445.025732][T20240] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.080072][T20240] bridge_slave_1: left allmulticast mode [ 445.114065][T20240] bridge_slave_1: left promiscuous mode [ 445.147901][T20240] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.222021][T20240] bond0: (slave bond_slave_0): Releasing backup interface [ 445.292511][T20240] bond0: (slave bond_slave_1): Releasing backup interface [ 445.351619][T20240] team0: Port device team_slave_0 removed [ 445.365600][T20240] team0: Port device team_slave_1 removed [ 445.379413][T20240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.392886][T20240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.410075][T20240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 445.445975][T20248] macsec1: entered promiscuous mode [ 445.655216][T20260] netlink: 'syz.4.3815': attribute type 7 has an invalid length. [ 445.722183][T20257] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3816'. [ 445.772302][T20262] 8021q: adding VLAN 0 to HW filter on device eth0 [ 445.787136][T20262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 445.819868][T20262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 445.839872][T20262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 445.936754][T20260] veth1_vlan (unregistering): left allmulticast mode [ 445.991447][T20260] tipc: Disabling bearer [ 446.095364][ T5757] tipc: Node number set to 2886997007 [ 446.345614][T20282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3822'. [ 446.532595][T20291] vlan3: entered promiscuous mode [ 446.556726][T20291] bridge0: entered promiscuous mode [ 446.622561][T20295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3827'. [ 446.657140][T20295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3827'. [ 446.667756][T20295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3827'. [ 446.687052][T20295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3827'. [ 446.973396][T20316] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 447.010560][T20316] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 447.454127][T20325] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 37214 - 0 [ 447.525911][T20328] lo speed is unknown, defaulting to 1000 [ 447.542881][T20328] wg1 speed is unknown, defaulting to 1000 [ 447.569805][T20334] siw: device registration error -23 [ 447.624780][T20325] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 37214 - 0 [ 447.739993][T20337] ±ÿ: renamed from lo [ 447.801801][T20325] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 37214 - 0 [ 447.953270][T20325] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 37214 - 0 [ 448.064091][T20347] netlink: 'syz.3.3842': attribute type 58 has an invalid length. [ 448.203151][ T70] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 37214 - 0 [ 448.214282][T20350] __nla_validate_parse: 8 callbacks suppressed [ 448.214302][T20350] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3843'. [ 448.508575][ T1121] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 37214 - 0 [ 448.578588][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 37214 - 0 [ 448.705914][ T70] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 37214 - 0 [ 448.835642][T20372] lo speed is unknown, defaulting to 1000 [ 448.906289][T20372] wg1 speed is unknown, defaulting to 1000 [ 449.701208][T20410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3855'. [ 449.759906][T20414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3856'. [ 449.826753][T20422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3856'. [ 450.453246][T20449] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 450.584023][T20457] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3863'. [ 450.891821][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3865'. [ 451.048965][T20470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3867'. [ 451.171371][ T5643] block nbd4: Receive control failed (result -1) [ 451.542270][T20495] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20002 [ 451.630798][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3873'. [ 451.686805][T20501] bond5: entered promiscuous mode [ 451.751601][T20508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3876'. [ 451.771863][T20501] 8021q: adding VLAN 0 to HW filter on device bond5 [ 451.800473][T20509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3876'. [ 451.976060][T20514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.246116][T20532] netlink: 'syz.4.3882': attribute type 1 has an invalid length. [ 452.298998][T20532] 8021q: adding VLAN 0 to HW filter on device bond6 [ 453.558807][ T5734] [ 453.561202][ T5734] ====================================================== [ 453.568226][ T5734] WARNING: possible circular locking dependency detected [ 453.575262][ T5734] syzkaller #0 Not tainted [ 453.579678][ T5734] ------------------------------------------------------ [ 453.586697][ T5734] kworker/0:5/5734 is trying to acquire lock: [ 453.592780][ T5734] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 453.602648][ T5734] [ 453.602648][ T5734] but task is already holding lock: [ 453.610018][ T5734] ffffffff901727e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 453.620570][ T5734] [ 453.620570][ T5734] which lock already depends on the new lock. [ 453.620570][ T5734] [ 453.630987][ T5734] [ 453.630987][ T5734] the existing dependency chain (in reverse order) is: [ 453.639992][ T5734] [ 453.639992][ T5734] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 453.647803][ T5734] __mutex_lock+0x1a3/0x1550 [ 453.652907][ T5734] kobject_uevent_net_broadcast+0x27e/0x560 [ 453.659325][ T5734] kobject_uevent_env+0x55c/0x9e0 [ 453.664867][ T5734] device_add+0x557/0xbb0 [ 453.669883][ T5734] device_create+0x269/0x300 [ 453.674982][ T5734] msr_device_create+0x33/0x50 [ 453.680258][ T5734] cpuhp_invoke_callback+0x445/0x860 [ 453.686062][ T5734] cpuhp_thread_fun+0x36b/0x780 [ 453.691426][ T5734] smpboot_thread_fn+0x541/0xa50 [ 453.696875][ T5734] kthread+0x388/0x470 [ 453.701487][ T5734] ret_from_fork+0x514/0xb70 [ 453.706587][ T5734] ret_from_fork_asm+0x1a/0x30 [ 453.711863][ T5734] [ 453.711863][ T5734] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 453.719446][ T5734] cpuhp_thread_fun+0x127/0x780 [ 453.724808][ T5734] smpboot_thread_fn+0x541/0xa50 [ 453.730256][ T5734] kthread+0x388/0x470 [ 453.734836][ T5734] ret_from_fork+0x514/0xb70 [ 453.739933][ T5734] ret_from_fork_asm+0x1a/0x30 [ 453.745218][ T5734] [ 453.745218][ T5734] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 453.752953][ T5734] cpus_read_lock+0x42/0x160 [ 453.758089][ T5734] static_key_slow_inc+0x12/0x30 [ 453.763545][ T5734] tcp_md5_do_add+0x1d4/0x390 [ 453.768742][ T5734] tcp_v6_parse_md5_keys+0x562/0x680 [ 453.774545][ T5734] do_tcp_setsockopt+0x12ec/0x2060 [ 453.780172][ T5734] do_sock_setsockopt+0x17c/0x1b0 [ 453.785708][ T5734] __x64_sys_setsockopt+0x13d/0x1b0 [ 453.791417][ T5734] do_syscall_64+0x15f/0xf80 [ 453.796525][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.802934][ T5734] [ 453.802934][ T5734] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 453.810663][ T5734] lock_sock_nested+0x41/0x100 [ 453.815936][ T5734] inet_shutdown+0x6a/0x390 [ 453.820950][ T5734] nbd_mark_nsock_dead+0x2e9/0x560 [ 453.826595][ T5734] recv_work+0x1c2e/0x1d40 [ 453.831523][ T5734] process_scheduled_works+0xb5d/0x1860 [ 453.837582][ T5734] worker_thread+0xa53/0xfc0 [ 453.842686][ T5734] kthread+0x388/0x470 [ 453.847266][ T5734] ret_from_fork+0x514/0xb70 [ 453.852367][ T5734] ret_from_fork_asm+0x1a/0x30 [ 453.857735][ T5734] [ 453.857735][ T5734] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 453.865373][ T5734] __mutex_lock+0x1a3/0x1550 [ 453.870478][ T5734] nbd_queue_rq+0x37b/0x1100 [ 453.875577][ T5734] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 453.881635][ T5734] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 453.888477][ T5734] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 453.894981][ T5734] blk_mq_run_hw_queue+0x348/0x4f0 [ 453.900626][ T5734] blk_mq_dispatch_list+0xd16/0xe10 [ 453.906364][ T5734] blk_mq_flush_plug_list+0x48d/0x570 [ 453.912260][ T5734] __blk_flush_plug+0x3ed/0x4d0 [ 453.917628][ T5734] __submit_bio+0x28d/0x580 [ 453.922653][ T5734] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 453.928809][ T5734] block_read_full_folio+0x599/0x830 [ 453.934605][ T5734] filemap_read_folio+0x137/0x3b0 [ 453.940143][ T5734] do_read_cache_folio+0x358/0x590 [ 453.945766][ T5734] read_part_sector+0xb6/0x2b0 [ 453.951043][ T5734] adfspart_check_ICS+0xb1/0x960 [ 453.956499][ T5734] bdev_disk_changed+0x817/0x1770 [ 453.962035][ T5734] blkdev_get_whole+0x380/0x510 [ 453.967404][ T5734] bdev_open+0x31e/0xd30 [ 453.972160][ T5734] blkdev_open+0x470/0x610 [ 453.977084][ T5734] do_dentry_open+0x785/0x14e0 [ 453.982354][ T5734] vfs_open+0x3b/0x340 [ 453.986939][ T5734] path_openat+0x2e08/0x3860 [ 453.992041][ T5734] do_file_open+0x23e/0x4a0 [ 453.997055][ T5734] do_sys_openat2+0x113/0x200 [ 454.002243][ T5734] __x64_sys_openat+0x138/0x170 [ 454.007610][ T5734] do_syscall_64+0x15f/0xf80 [ 454.012711][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.019111][ T5734] [ 454.019111][ T5734] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 454.026320][ T5734] __mutex_lock+0x1a3/0x1550 [ 454.031436][ T5734] nbd_queue_rq+0xc6/0x1100 [ 454.036446][ T5734] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 454.042596][ T5734] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 454.049440][ T5734] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 454.055939][ T5734] blk_mq_run_hw_queue+0x348/0x4f0 [ 454.061579][ T5734] blk_mq_dispatch_list+0xd16/0xe10 [ 454.067293][ T5734] blk_mq_flush_plug_list+0x48d/0x570 [ 454.073183][ T5734] __blk_flush_plug+0x3ed/0x4d0 [ 454.078549][ T5734] __submit_bio+0x28d/0x580 [ 454.083571][ T5734] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 454.089846][ T5734] block_read_full_folio+0x599/0x830 [ 454.095644][ T5734] filemap_read_folio+0x137/0x3b0 [ 454.101184][ T5734] do_read_cache_folio+0x358/0x590 [ 454.106810][ T5734] read_part_sector+0xb6/0x2b0 [ 454.112089][ T5734] adfspart_check_ICS+0xb1/0x960 [ 454.117540][ T5734] bdev_disk_changed+0x817/0x1770 [ 454.123166][ T5734] blkdev_get_whole+0x380/0x510 [ 454.128532][ T5734] bdev_open+0x31e/0xd30 [ 454.133287][ T5734] blkdev_open+0x470/0x610 [ 454.138208][ T5734] do_dentry_open+0x785/0x14e0 [ 454.143480][ T5734] vfs_open+0x3b/0x340 [ 454.148058][ T5734] path_openat+0x2e08/0x3860 [ 454.153159][ T5734] do_file_open+0x23e/0x4a0 [ 454.158173][ T5734] do_sys_openat2+0x113/0x200 [ 454.163358][ T5734] __x64_sys_openat+0x138/0x170 [ 454.168729][ T5734] do_syscall_64+0x15f/0xf80 [ 454.173833][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.180241][ T5734] [ 454.180241][ T5734] -> #3 (set->srcu){.+.+}-{0:0}: [ 454.187350][ T5734] __synchronize_srcu+0xca/0x300 [ 454.192798][ T5734] elevator_switch+0x1e8/0x7a0 [ 454.198077][ T5734] elevator_change+0x2cc/0x450 [ 454.203350][ T5734] elevator_set_default+0x36c/0x430 [ 454.209066][ T5734] blk_register_queue+0x3e9/0x4e0 [ 454.214608][ T5734] __add_disk+0x677/0xd50 [ 454.219446][ T5734] add_disk_fwnode+0xfb/0x480 [ 454.224628][ T5734] nbd_dev_add+0x72c/0xb50 [ 454.229552][ T5734] nbd_init+0x168/0x1f0 [ 454.234220][ T5734] do_one_initcall+0x250/0x870 [ 454.239490][ T5734] do_initcall_level+0x104/0x190 [ 454.244940][ T5734] do_initcalls+0x59/0xa0 [ 454.249784][ T5734] kernel_init_freeable+0x2a6/0x3e0 [ 454.255497][ T5734] kernel_init+0x1d/0x1d0 [ 454.260339][ T5734] ret_from_fork+0x514/0xb70 [ 454.265442][ T5734] ret_from_fork_asm+0x1a/0x30 [ 454.270715][ T5734] [ 454.270715][ T5734] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 454.278525][ T5734] __mutex_lock+0x1a3/0x1550 [ 454.283626][ T5734] elevator_change+0x1b3/0x450 [ 454.288902][ T5734] elevator_set_none+0xb5/0x140 [ 454.294267][ T5734] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 454.300580][ T5734] nbd_start_device+0x17f/0xb10 [ 454.305936][ T5734] nbd_genl_connect+0x165b/0x1cf0 [ 454.311465][ T5734] genl_family_rcv_msg_doit+0x22a/0x330 [ 454.317526][ T5734] genl_rcv_msg+0x61c/0x7a0 [ 454.322544][ T5734] netlink_rcv_skb+0x232/0x4b0 [ 454.327821][ T5734] genl_rcv+0x28/0x40 [ 454.332324][ T5734] netlink_unicast+0x75c/0x8e0 [ 454.337624][ T5734] netlink_sendmsg+0x813/0xb40 [ 454.342898][ T5734] ____sys_sendmsg+0x972/0x9f0 [ 454.348172][ T5734] ___sys_sendmsg+0x2a5/0x360 [ 454.353362][ T5734] __x64_sys_sendmsg+0x1bd/0x2a0 [ 454.358831][ T5734] do_syscall_64+0x15f/0xf80 [ 454.363937][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.370345][ T5734] [ 454.370345][ T5734] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 454.378938][ T5734] blk_alloc_queue+0x546/0x680 [ 454.384218][ T5734] __blk_mq_alloc_disk+0x197/0x390 [ 454.389845][ T5734] nbd_dev_add+0x499/0xb50 [ 454.394775][ T5734] nbd_init+0x168/0x1f0 [ 454.399452][ T5734] do_one_initcall+0x250/0x870 [ 454.404729][ T5734] do_initcall_level+0x104/0x190 [ 454.410189][ T5734] do_initcalls+0x59/0xa0 [ 454.415029][ T5734] kernel_init_freeable+0x2a6/0x3e0 [ 454.420739][ T5734] kernel_init+0x1d/0x1d0 [ 454.425582][ T5734] ret_from_fork+0x514/0xb70 [ 454.430681][ T5734] ret_from_fork_asm+0x1a/0x30 [ 454.435965][ T5734] [ 454.435965][ T5734] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 454.443178][ T5734] __lock_acquire+0x15a5/0x2cf0 [ 454.448552][ T5734] lock_acquire+0x106/0x350 [ 454.453567][ T5734] fs_reclaim_acquire+0x71/0x100 [ 454.459019][ T5734] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 454.465336][ T5734] __alloc_skb+0x27d/0x7d0 [ 454.470261][ T5734] alloc_uevent_skb+0x7d/0x230 [ 454.475549][ T5734] kobject_uevent_net_broadcast+0x2fa/0x560 [ 454.481952][ T5734] kobject_uevent_env+0x55c/0x9e0 [ 454.487498][ T5734] rfkill_uevent_work+0x64/0x190 [ 454.492948][ T5734] process_scheduled_works+0xb5d/0x1860 [ 454.499006][ T5734] worker_thread+0xa53/0xfc0 [ 454.504103][ T5734] kthread+0x388/0x470 [ 454.508683][ T5734] ret_from_fork+0x514/0xb70 [ 454.513785][ T5734] ret_from_fork_asm+0x1a/0x30 [ 454.519061][ T5734] [ 454.519061][ T5734] other info that might help us debug this: [ 454.519061][ T5734] [ 454.529274][ T5734] Chain exists of: [ 454.529274][ T5734] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 454.529274][ T5734] [ 454.541953][ T5734] Possible unsafe locking scenario: [ 454.541953][ T5734] [ 454.549392][ T5734] CPU0 CPU1 [ 454.554741][ T5734] ---- ---- [ 454.560090][ T5734] lock(uevent_sock_mutex); [ 454.564687][ T5734] lock(cpuhp_state-up); [ 454.571537][ T5734] lock(uevent_sock_mutex); [ 454.578641][ T5734] lock(fs_reclaim); [ 454.582637][ T5734] [ 454.582637][ T5734] *** DEADLOCK *** [ 454.582637][ T5734] [ 454.590768][ T5734] 4 locks held by kworker/0:5/5734: [ 454.595950][ T5734] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 454.606948][ T5734] #1: ffffc90004e37c40 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 454.619463][ T5734] #2: ffffffff900dbbe0 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_uevent_work+0x2e/0x190 [ 454.629646][ T5734] #3: ffffffff901727e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 454.640625][ T5734] [ 454.640625][ T5734] stack backtrace: [ 454.646515][ T5734] CPU: 0 UID: 0 PID: 5734 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 454.646532][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 454.646543][ T5734] Workqueue: events rfkill_uevent_work [ 454.646564][ T5734] Call Trace: [ 454.646571][ T5734] [ 454.646577][ T5734] dump_stack_lvl+0xe8/0x150 [ 454.646595][ T5734] print_circular_bug+0x2e1/0x300 [ 454.646623][ T5734] check_noncircular+0x12e/0x150 [ 454.646644][ T5734] __lock_acquire+0x15a5/0x2cf0 [ 454.646659][ T5734] ? ret_from_fork_asm+0x1a/0x30 [ 454.646683][ T5734] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 454.646702][ T5734] lock_acquire+0x106/0x350 [ 454.646716][ T5734] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 454.646739][ T5734] fs_reclaim_acquire+0x71/0x100 [ 454.646759][ T5734] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 454.646777][ T5734] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 454.646796][ T5734] ? __alloc_skb+0x27d/0x7d0 [ 454.646812][ T5734] ? __alloc_skb+0x186/0x7d0 [ 454.646828][ T5734] __alloc_skb+0x27d/0x7d0 [ 454.646845][ T5734] alloc_uevent_skb+0x7d/0x230 [ 454.646867][ T5734] kobject_uevent_net_broadcast+0x2fa/0x560 [ 454.646889][ T5734] kobject_uevent_env+0x55c/0x9e0 [ 454.646911][ T5734] rfkill_uevent_work+0x64/0x190 [ 454.646927][ T5734] ? process_scheduled_works+0xa70/0x1860 [ 454.646943][ T5734] process_scheduled_works+0xb5d/0x1860 [ 454.646968][ T5734] ? __pfx_process_scheduled_works+0x10/0x10 [ 454.646985][ T5734] ? assign_work+0x3d5/0x5e0 [ 454.647000][ T5734] worker_thread+0xa53/0xfc0 [ 454.647024][ T5734] kthread+0x388/0x470 [ 454.647042][ T5734] ? __pfx_worker_thread+0x10/0x10 [ 454.647056][ T5734] ? __pfx_kthread+0x10/0x10 [ 454.647073][ T5734] ret_from_fork+0x514/0xb70 [ 454.647090][ T5734] ? __pfx_ret_from_fork+0x10/0x10 [ 454.647104][ T5734] ? __switch_to+0xc79/0x1410 [ 454.647125][ T5734] ? __pfx_kthread+0x10/0x10 [ 454.647142][ T5734] ret_from_fork_asm+0x1a/0x30 [ 454.647164][ T5734] [ 454.864725][T20599] netlink: 'syz.3.3896': attribute type 1 has an invalid length. [ 454.867563][T20610] __nla_validate_parse: 8 callbacks suppressed [ 454.867582][T20610] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3899'. [ 454.923658][T20612] veth3: entered promiscuous mode [ 455.362106][ T11] block nbd1: Possible stuck request ffff8880274fe000: control (read@0,1024B). Runtime 150 seconds [ 455.372937][ T11] block nbd1: Possible stuck request ffff8880274fe1c0: control (read@1024,1024B). Runtime 150 seconds [ 455.384552][ T11] block nbd1: Possible stuck request ffff8880274fe380: control (read@2048,1024B). Runtime 150 seconds [ 455.397782][ T11] block nbd1: Possible stuck request ffff8880274fe540: control (read@3072,1024B). Runtime 150 seconds