last executing test programs: 4.586483362s ago: executing program 0 (id=3464): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}}, 0x4000010) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}}, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000340)=@raw=[@jmp={0x5, 0x0, 0x3, 0x2, 0x1, 0x30, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x657}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000000)='GPL\x00', 0x5, 0xfec, &(0x7f00000004c0)=""/4076, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r0, &(0x7f0000004d80)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000001740)=[{&(0x7f00000003c0)="46f0836dac7973f4c01db6ebf30a938ea8b285c0db3aed4907b1490bfbf3db2997cd1ede2d5a7a7c074cdade158a77b6159c2468dfe47b4e7cf1", 0x3a}, {&(0x7f0000000400)="0da116ed65fef960305ba640f5b4de2d5b9f24243051fd1bc2c8", 0x1a}, {&(0x7f0000000440)="b04705889ac4da35cf2bb6b3ce1cbf7a9420064c587f4ab016f4a3f73d3e9c0ea7b446a37597466be627891a6a3ef896a123ee47", 0x34}, {&(0x7f00000014c0)="300ffcce0a81ba5a098ae32695502ab9ab648d0756c3de1f2e55f10cf6a55a3f2dc38bfa136e35a689e09abbd0f0dcaf231a3268d79b585db57fff37484827c2d6f34e165f92b871e3f0e251f841a8eab2d19c1b35eeef7ef3a3032f9f11ead61a20f2b3d44fbd0255a5effeda40790614f69a31baae855271ba8d5a590af476c4bcf65a", 0x84}, {&(0x7f0000001580)="2663e9578b8afcd35c73671b15a27bf8f3f87f475307509cf986639c1984b2ccbe3edd0645e49deebba77a40568ca97a5802e3c053d277efb1dbd79936b73e6cd974fd7d43380580085e24f1e43e9fdbfd5b9675f001246b23e9314ef0f4bc547e033d32b7d3f90eccff8ada7f41294d71bdea840b94727b60a40a", 0x7b}, {&(0x7f0000001600)="90cc32557ceed15f19ff091348", 0xd}, {&(0x7f0000001640)="a72fa16f9a57a3857c3ab2b51329d8a094e4e72feb3dfd616ede0bf2c2c51ed4a50d4e00fab4c00a020a", 0x2a}, {&(0x7f0000001680)="f474d401beb0a2ae261c7dafff9ee432e03c8f5480b9b6cfca63b90fe068461320a278cb73cc6b4287948ac07fab11ce60aa7b3e04974e4419d33db85e655724df5ac1dab95f611651488d8e47a7900c13b8e75f64acd58702ae9c5241a32c08250eb47d0fbbf89565c9c8367ec6c5cdfc788747839ee2c1185001e2e1cbfefce0945f964547bea22116320dbde035488412aaacfe8a8f60f088d7c7ad338d1eff", 0xa1}], 0x8, &(0x7f00000017c0)=[{0x48, 0x110, 0x0, "42c75fa86a71c4a159e252bd2e8a0fabf06869bffb8fa63f09360491adab60e05f9e6bb105b3d1c2e734aa4970843e305a106404f1419964"}, {0xf0, 0x10d, 0x5, "a7bd535f7b4ff18a56e0b98e22e766bd5b13411cf5b5405736a248760c322b0edf13fa5452c69d6da4253330aee001eabe4aaf8a449af660b4e4c88bccd41a776656eaa1215d4e7d39e400ad6e9cc97418b1e48d78e8ffeac41967817f8a8db6f51a386edf604e9990b4511e9bdf23734b9fd1479db8d9faef443cf475c8235afca4fb035ffbc505dab20d99e7b881d1c8454ad944d1c0f3917be9f5c2992e9b42e4e8b6014bfc7a202783829c2ba3c60425d26173e6ec7a84ab24219aa833a2a6cb7b9f0c8eba99b96723429bdee1e35a372f037f6027365b1c45b7"}, {0xe0, 0x1, 0x0, "89d7099c5c3bb8f8d422ef718d45bf6477e24ff18c9c544cf5a2a3cc3ff4fac8a7a104a96c40a1d0d1bd99fc3c579cae07c58464adb819fc66a7e6a884ff077ac1d5cab102ed808ddc399fac464fd14098fd87a42e4679f0092b92eeec1e249b3e7bdcef977d9ef6adbb0b4a3e1a8d5f5ab0ec18eff36f33bb9e1926ffe4882ca90aecce3f732373fe62b7b4cbdb1d057dcc48905335507c1cb3c7cc598717681c920acfac8307956b9b2570706746e6904fc65a5d1e684763fd0fccdd981e5ea5fdabefe0401aa1f3ef"}, {0x78, 0x10d, 0x1, "ce148eb0e48a2669d2a8e9759588cdc64e5029c0b7e71fb6877335725882cf382ee9109857682bded611c498b029193ce844b306c51e8baebda64b44e1bce4c77c91843c0a7fceedfb1da6b0ed4faafd241aba5477c82a4a59875b8d3172cbc0e1ae0801783c2f5e"}, {0xb0, 0x1, 0x4, "2182bb62378ce78e350c0c6e802b92628beb3ee1ec706e2e847b8a0881c5d48957ddf4fa6d2b533ed5c47b7cc5335f195e68d354795fa9ba6a7fe9b091a5a711dad5f016b15a43f59ac884dfad34454ca54e82de76b2091da1ba7322f17bc102165266dafd77569d220dc8d077d25b7957220dd1f2101292c49564ca34c607ccbb31bc7caef35a55801e486916127160caa758e909af6a23ab1beb253f"}, {0xc0, 0x10b, 0x1, "6f60c27084cc09bbc4194c1ab48b1bbae66ffa783334dcd116a291691fae76b81ae3848b41a40232aadde1a208037464bff148be01e3684919bd27030fa4a04f6f04922b71facf1fbfc2eef71e94a6e965151526eadaef037d8de9e4d3745f621df66225c752954b35cee07825d81f350a59bfe4150add664a5a600e2d537ab62d92fc5edafa0d6229d64d7f97c7ac204e077c657f25327401e930266d50b5b7456871446d153e5ec00e417dd7bf3659"}, {0xf0, 0x111, 0x2, "8287218abc02db5d39b7fbc620c23af21f7df9c9ea967a386189a4bf0e50fa7004de191c302b9ff11f4550e223ba77ff76cfd5a3add8e2822a283438568595d3c90a109dd58a872928e734b6938fd7e60f65ebfc837fc7d77c557a54798cc35984e84024fc8200cdff493e8d92fb395e058e78eb8b0ed6798981363185434c4cd0d1180447be311286d3c76ab27cd8c9a1b22978764838e5991af838491f487f7ad517d51b191ed76e97f62209d81315e45210b24a7026b5a68b3e043bd9fe3c93ff04d395c6804f3a7bc8dc876feb8765dfdc1b4f975dde80"}, {0x1010, 0x10d, 0x5, "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"}], 0x1500}}, {{&(0x7f0000002cc0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x2, 0x1, 0x3, {0xa, 0x4e23, 0xff, @private2, 0x4}}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002d40)="cabba1849ab0e3293f82458407eef04e548b5782ca3ee011f416b53d8c755f9c290ce20ab4e74a09c2ad2d5d24460551dec053f1181cb7905fd853f92d00332ad5104990ab4b9afb25cd1acbb4c17475473e24ad950773d02e757b9bef62c171273b0ceffb75d5b483d6cdc441b282b31b74e0f127df4feaf2192c1a0409e03eff107370736a80899f852f082491105fc48373d039dcb5c0ff", 0x99}, {&(0x7f0000002e00)="c7a6e04345771fb49fe0c889b6c9874c8736d775e0d683184574", 0x1a}, {&(0x7f0000002e40)="38663202caa4c13772ee78cf8f440a0e84d437ac75854607e955c0c649bb9951cfee1a31b9739035e41afbe1ba7c8e7936e81cbaf5e3a7f62d006603ffa5655fe784be808f7e0bb02aa449fa5d4f88c302f81e841cf36b842a2da3cc6a466364c768e1eec787207c55ed5f4c82eb0996168b3b073a6a473d5024bb83a8c1dc76a3f7c115f80b3381f67bdae4c08b98e9ea9f6180b46be3343337d46ebac41594c5515b9be23a20957d2b14f25d9c1e7c7ac593b6f33a9aeb7e286844df1f447efa21a04cec23ff6b435ba463", 0xcc}, {&(0x7f0000002f40)="18fd1b9e6b27e394c201e1fb00e5a3ef8126e8ac15319fe61bcf42b4cb1eac3b36cd58ff683f6d1f668e174cefa01b9d7c4bdd6423d7d05c2ccd6f123f4ff2af3da7bcd8bbae5ed39b64b9f7ca7f07899685c554da5dccc97f5679acdc7beb5095d4fbdd3d4c9803892e84f433e18711f23f06db0f0fa638", 0x78}], 0x4, &(0x7f0000003000)=[{0x20, 0x113, 0x9, "5ec0b35b03cacf10cef8c32d6e6378aa"}], 0x20}}, {{&(0x7f0000003040)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000003540)=[{&(0x7f00000030c0)="96c8166abe42d6ca5a6f26f4a82ef9f87a7a51b4b044b1580bb9a76e006d202dfa9503108432207b9883371c4d359fd5b8d18451e40397d94a58498c308eabec00f552d26e903531b85108159063a6cd88dd508fe9e2f2ab5746e6513d02c0bf3574c01b28e1516cf648", 0x6a}, {&(0x7f0000003140)="b8a40b928c469ae0c8bc9bf19d6d89a7e7243f7dd8bc3fefdab1b16948622ab1945a727d12c1c5549f7349101f16a58becd10dbf96f18e3ae5c969c2c1e19cec5de30ed52c624a09a60ec68deae5eabc914d", 0x52}, {&(0x7f00000031c0)="88913beb402fefc3841e8fde7ba9e223d5fb6a3dda798c8e12e685870ecf6e1e18dd3ed85f3c69d144bf82bd824d3882ea47d5de94a32f6fa3f3a97f9416b23248f8b9fa2f609274bb1a650445c866788292f83779bee71464099b9e5cf95f7d79f719102c36178b492679b097c477f5f35298483419991c9f2b87d260cc79843ccbb548cb00bb3820d0adade4994b4c783edc05a7c06dbf8b725dcdb4cb880b85126c5f85e96d6d3ef285bff93b9919344cb3", 0xb3}, {&(0x7f0000003280)="cd76fd0a8286ecdce000460aaf748e0df78d7fa7aa3c654f546f35585e6b557745203c9cc49c1283dbc2f2e109d39a95e95c0c3aa5f7302cb2232e730752e2e4072de9c431af5ec409d512053a8accf772a31c85d0d7608fa8f2d135cd72b9992e5803f13df56c92f5d2c3f199e689b8ddaf66e343b1547ee1ae6e0a8d7b801c15257fa2921d223c440201f1d16c645af709cc6fbd29d50ec28ead33494ecf2b3ed0c0531def32c9bd9a5909a4ea767f9af7240b42e8f4349dedc2851df047fbaf314ccf36d8714a207abfc3626740f746077f17d648c3cccbb6a4e42b27bf0e01610def315b187b6162b63681b2cf02", 0xf0}, {&(0x7f0000003380)="33a157c62e45dac036561eb790a315dc3f5fa5edf3d09d29b97ed38d647304934b3f215ba4ad64522b0e474ed866401ab03655296545a641a3e8939c0dc84d35cc006b6a9b602b52dbc3fb7ff1dbd0ae493c65b765a0723e575459bed82da6cc3b7dd5baf0515070f2cef626be94e02dc36cf517de686431c0107e2322e29082b4859867eaa5b79718910d3099d8f455f2cf15bf1415d33da8ef57e443ddf6c26c00762cf769a64d0b98df32f244ddf389000a1c", 0xb4}, {&(0x7f0000003440)="20e91e8a7dbeeec2ee4f31999815ec9395c4467e64030eacdea99251b76253b5ca005e7d2cb1ccf3f1cf8cb925aacc0ac295a1f70a6f67eafb29976a5e75ff14af5ddf5a885282bd7b72", 0x4a}, {&(0x7f00000034c0)="7ef3e3f4af6dfa71b716949c50d2fd5026acbed1d9478254cf1cec3b56eff76964e8c3", 0x23}, {&(0x7f0000003500)="b2", 0x1}], 0x8, &(0x7f00000035c0)=[{0x40, 0x1, 0x2, "0773da4709108711c75d1bef75b2bde51ea8905409cd54c0939ab536f3a7e63dbe3a48e5ed5f1ac2330935a0517fd4be"}, {0xd8, 0x10d, 0x3, "6ab29af1985b20675c041d4b1388d7ffd1456b4d9dbc8f2c65f568421e2d4751981b42ac9798a1eb2ba21af5e42ffae9ff417137444745fad13bec71c6bbf31b5f3b35cd7bac879664d6a5956063c461619ac4ee9280ed5bd724ac17f2b42b449e2b8ee7b0852fabcf3742b2748f225be7cf9911c1c0587bde9941d74c9683ecaff56aaccefc9301065102793459b8526d782104ad47f8acae85c72242109961263fe0184dec9899e47a0bae3ba0df38c632ee136f43efc98f7e030169bb722e60"}, {0x1010, 0x10b, 0xfffffffd, "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"}, {0x18, 0x103, 0x7ff, "b952e960ba266d"}, {0x60, 0x108, 0x4, "c544867691d0bf10c033d63733e2e7ddc5bf56c697696556982f31fc4e61836bad721490013e427e73fc0d6d8bfa1661fea3fea10ced93b6081c9477e05b2198523dd3858ba4bc5be2b89a60"}, {0x100, 0x103, 0x1, "76d5009ae80c772c09f4bf57157a1d28230a4247140b4586deb808ab3f61d0b100f4739c9f746cbb9c19860722e582bf9fb7a969ee709c78a339111c716b165a8d37cb7c14819f6ee90a0509498d1984977599a36ab03bbd3db72625bd6a6f9d3bbbfe5be51032412eaaced904debb3bb73e3edd7c7b411634a10fa42158acc0cf5f9d35653eb04eeca21c504bf80ba43b4d4f02c5b2d9c8a86b8f85219c6546534107a666c9995781648b2f70c04c5f80511e424ec43ef2cce8915002fc3da850f6baec7d3b15078704b2bd0d3ede79db20a5e84bd460d51d661e2f9b81d82e6a9f82581209cbd25a"}, {0x88, 0x112, 0x7d, "f1056a7c5d280067b2c6ed567aa0e13b522df98008087ca57bf5d2247df6eebc1292d8a527de03b393ae1949db97b35bc4f0672edfba0c116eb17b2772484f3575629a3cb909de883a2639363eff3f9ba5d1af0260cbd31cf485a9db0e8f692242c09347795a71caef7398a119365af8468602d0"}, {0x18, 0x108, 0x3, "6933d6"}, {0x30, 0x109, 0x9, "1efc614bd8f595de753b8a398b8c24c3d50cd35abab813fd206666"}], 0x1370}}, {{&(0x7f0000004940)=@hci={0x1f, 0x1}, 0x80, &(0x7f0000004b80)=[{&(0x7f00000049c0)="1054fc5922f4e5f1be1a213e0c77cbb44f9eda2fb962bf02a6a96f1ff7908ba76a6956f22c86b57b29238031c1c0d6d406943e576bdc1790978582dd26013ededddeb14a5afcd28cac01805daaee19e62598a48ce73baeb742a1af77f98285fd17ae77186e3514d645c85f433ce55b28bcac27eb0a7315445399f394b4d2f098bdd8a521e7bf07c82c82b8ad1d5b45312f8fdcc616d083338ef6dd6313dee29519f7999fb055cd77849994b7b9ddfb7fdba87875996eca8706d16febe71796a2e3614a663ecc64bbd92a1a12af3726174a3ba3dd9f928b05", 0xd8}, {&(0x7f0000004ac0)="2a0a38109f30850d6cfdc37b2ea7fbe7a6a09319c4ef3f", 0x17}, {&(0x7f0000004b00)="c9a4c3190769f37f63adb3c2ad01a17f03d070963118e39cde1c77d76c3a0c8b64238fbf971efff9472f0af32d1a5671d09761114bcbc8cbb860ea449fce94a27b7358977a6e793c66fb2323095af1303385831f1da61e436c557fe583447ae3b17e3717dc7141aa096f6b0468e769cbd907", 0x72}], 0x3, &(0x7f0000004bc0)=[{0xc8, 0x29, 0x1, "2d75bc198803d59d21b6c07ccea4f7fc4bdf917b628335746ce33c901a15eaaeecb9191ee8cf063a4299486bedc504cdcb804de05b8f5d8f2a00355d36fa32ecccaad6d680013e0fad8c017975c9648a087114f1660a8503990160723a96bc0f57a5fa4375e53c88c42a5e995f9970183f3ace450e60995250446e4f9e6f21b23eadc6dcfa7a17db2b4a6e285459612d4f06101e1d8ad258661804c6e91da6482782d44f4b47109e09bfb5bb7a409f11fb7760"}, {0x38, 0x10a, 0x3, "ef8e662f666575d64cd6045458dd23c05173294f5b8f7079fde04e8e7a8f05bb144ea084eaa391de"}, {0x80, 0x103, 0xff, "c8a33d51381b7db875bebe0adf97a1cb8bdcae40b8b29b3c40493ee50ef65839e3f1e63d0934975df78ac7100dfc63d8626f2901e4615c76aac21a6ecb5f44abbf46c61f682db0285c7f6d049252eb097a3890820a075612affe4d0bad13a121e1801c9edf447bf508b5be259cb46f"}, {0x40, 0xc, 0x922, "935ae40a5b8d283b6086e9c36d5d3bebc4ad3033d98746380fd2070b254a758e32d0b927c94ad0cccffa9b198e"}], 0x1c0}}], 0x4, 0x8000) 4.425025869s ago: executing program 1 (id=3466): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 4.420538919s ago: executing program 0 (id=3467): r0 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000bb001d7c20adcdc3ac3b"], 0x4c}}, 0x0) r1 = socket(0x1e, 0x4, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r4, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000100), 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x62, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf88100400086dd6a7abd6a00282901fe8000000000000000000000000000aaff0200000000000000650000000000012b000000000000000401090000000000b2000488680000007300000000000000010000a6caed11d75d47be9f7f7cfa40bd6382297c0c43"], 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r13) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r15], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0080}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r8, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048015}, 0x8001) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="581300004100070127bd7000fefdffff047c000008004280040008000c000180060006"], 0x1358}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) 4.330128126s ago: executing program 3 (id=3468): syz_emit_ethernet(0x500, &(0x7f00000004c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, "0eee85", 0x4ca, 0x21, 0x1, @empty, @remote, {[@hopopts={0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}, @fragment={0x2f, 0x0, 0x80, 0x0, 0x0, 0x5, 0x65}, @dstopts={0x71, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x82}, @ra={0x5, 0x2, 0x8000}, @calipso={0x7, 0x67, {0x1, 0x4, 0x8, 0x8000, [0x6, 0x1000]}}]}, @fragment={0x62, 0x0, 0x0, 0x0, 0x0, 0xc, 0x65}, @hopopts={0x3a, 0x23, '\x00', [@jumbo={0xc2, 0x4, 0xf4}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x1}, @jumbo, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x71, 0xf7, "9670176c84fa5ff4b12966887fcda2f72ae1bbdf9c841357f791885a12518408a3ae66a53f4eb5696c579a331a4ec9fc0d5dd86c174f52cb5a2d9db9c79a529bb799cc50afdc1650e2db1fa3ab165b7f15ef3591ef42cd576b720dddde980581f999344177178cfee8253c3ffc29693337e09ec1aae19dc1fd9d77cf2d779eb38b1adac606d3beef534329b107a72de794ccc5fdc942b2e7c870ac62e884d928cbdd2d8aa31f9602b1e9dcff62046f2ee7c18ac93862a7cf7406c79d921a4076a9342b8654fa567abdcf7b64342d42c759d95b5b516b93fccfeb311c87877eef10628a69f170bb38273ef61639d9f2a795a4577275d3f6"}, @pad1]}, @dstopts={0x67, 0x1d, '\x00', [@generic={0x3, 0x67, "805d93dbb9e5e4c39c9d6d1a96d7485844b94a14150279397a7d605e26e420573f270d834d68110eeff16daa0f961d83bf76ef310ff6b116f6e7ba4f28946684fffde6756ef1f8d46c68225661470ece1f91773578ecc2c632bc0f62f5bce99163c88a8e19d027"}, @hao={0xc9, 0x10, @remote}, @generic={0xf1, 0x4d, "85853bf9cb634c57cdfd257ce9a006c57e25fbb5ae06fd09032b5b77b42a1f25126e380546779f2fb3ef7a2a4f45cb71d60a1e0a73cc91be54ea693b27cecd29f9cc7a27ad217f0214d6a70b54"}, @calipso={0x7, 0x20, {0x2, 0x6, 0x4, 0x8, [0x5, 0x200, 0x3]}}]}, @dstopts={0x84, 0x1e, '\x00', [@generic={0x4, 0xee, "6ee1b3275cfb45208a0859af88aef479d79bd0e6aaaae51efbd2b72162a7580357797214b2540607b08e46075c50f97bb28a48769b7f1e2ece83395025eda77d71c7d577492169d16d764f3d216cf31d2f2abb148d09e697689ca547e9dcf0b3a4b7cc582532d620e88e4483d5a651c13cbff88519f7021be4eca7ed9bace60914e123ec239de09dd8ca8dc6a8475d3fc37c6f1b1ee0a616819298d2387b9ba99857521aa267a01819dc9581feb5d920540d379757d636819283273ad766e1fc0b5aed382c2463765803b83fb443a94b52d38f7767cbf6932d045ac66fcb619fd5d4448223837d47b171b8eed6ea"}, @enc_lim={0x4, 0x1, 0x5}]}, @hopopts={0x5c, 0x1c, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x9b, 0x1, [0x2, 0x7fffffffffffffff, 0x8, 0x1000, 0x8, 0x96, 0x6, 0x100000000]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0x9, [0x2, 0xd7f6, 0xfffffffffffffffc]}}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x100}, @generic={0xfa, 0x70, "e9f2fcd343111b1b24156034de17bbe4852cb29e6c7e99198078429a2ffa7b545e69084bc29107615309306f7105f1abc7bcfa70b7de7ac282f25e4c2dd7572d777953226110022e9754398f105999ec8644b7d860fce7ee739fafcccfc2f947c43f379dcd23ca8e6e2377c646f48b54"}]}], {{0x4e21, 0x4e22, 0x4, 0x1, 0xa, 0x0, 0x0, 0x5, 0x7, "beece0", 0x5, '`\ts'}, "85a4b95e9479a9b34c7eca8b30bdb1fc0b5cbbc3b0185c2c47995d51b8cc2f7620eb637bd6e84355a0f79d2c3babc3a9b4ea17a49872d6e19e374ba9542da9243c7fe9df50f155ca38e6a84bebd44e19589ed11605cb446ac062"}}}}}}, 0x0) 4.102603403s ago: executing program 1 (id=3471): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@multicast2}, {@in6=@local, 0x1, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@dev}]}, 0x104}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x1b0, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_ACT={0x180, 0x1, [@m_skbmod={0x17c, 0x18, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x1, 0x0, 0xab6d}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="addd8ec7b991"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="c42d89d0476d"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6e2, 0x6, 0x3, 0x7fa80, 0x7}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0xd9, 0x6, "0c5720b707e41992f7d3e03eb0a83101ab1330a7c10ee2be34aa729f8f7f65d3fd4b0a3be1976c3538da2fa427f5a41285ad8376e443f0471df1a6abb6bf6be48dac58dd2b082bacfab3bcd53757683c1c0d212191fa3f0ec2d327fed0b2eab4bc9a2c74b4134ca0c5a9c1d5271da9a31296bde60257f2440d5e2a30e4e80d2148172961982fa14afb0c1e46c90998b87dcb9fe848ca94cccb28a2548a07b4f6c66706c6972ec9af1e162134eaa471dae8349e2457250eb954363e269d1ff96cfe0d1ff0455bc96168072b0c7f2371622ccdc3d34c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000000300)=0xb0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.910666799s ago: executing program 3 (id=3473): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000180) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040040) socket$kcm(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @multicast}, 0x4a, {0x2, 0x1, @loopback}, 'lo\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0x3) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3.877337s ago: executing program 1 (id=3474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008041}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x30, r7, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x639, 0x80000070}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600c045}, 0x24044814) 3.841667981s ago: executing program 3 (id=3475): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x63c, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x13c, 0x2, [@TCA_BPF_ACT={0x138, 0x1, [@m_simple={0x134, 0x1, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x6, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '#%@:/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0xffffffffffffffff, 0x8, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x91, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aaece271e1d165a896011eaa09"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4c4, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x1fc, 0x2, [@m_connmark={0x1f8, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800, 0x7fff}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x20000000, 0x2, 0x800}, 0x38}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x71c, 0x6, 0x6, 0x41, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x3, 0x9, 0x9}, 0x7}}]}, {0xe5, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065e102fca2803e8455bbe375423a5083d857379e566a6b55eaa2a53c32659a3eed4669754e022d685f3904836ee46af5a86c45f1a6ba4ad03ce912f0b3be3d485456cdbcd0db56ba63218491a6c93c649f1201f2dcdfb54f743ff852af6a7de13cd0d2252b2d6743c0774446a19f08b9f2c77f986ea287dabf7581d911194d13e1f29884a2081bbf43fce2a1a2b767905dd62ad427703c4290d86deb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0x29c, 0x2, [@m_csum={0x188, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400000, 0x47, 0x3, 0x80000000, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7ff, 0x0, 0x3, 0x2}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xfffffffffffffffc, 0x8, 0x3}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x530e, 0x9, 0x20000000, 0x7, 0xffffffff}, 0x1}}]}, {0xe9, 0x6, "8e742964a8bbfb3154844346644898de0354ee45597bbff6c1b4802726b2ca8b75ce550388c84cc686666dc0fd3ccd01f955cd351f6e0aee4e337b55bb5388a3b58420edfc59ade1349d7cc503101571895e677b64e3bfb9a5173fb1e737612ff18132f5bd2bc66d3b55ecbba2b5457b250035617dcdbdaec682f131f66bed12f8c9f14ba127f64337200b93d2baa76f2745a3aef055faebdf58456bed30345b2e556053be34feea35f858cc9db91981b08dd47caadf768a0b6974308b6864e3b32b95e11458f632c8a4b3de3d407dd970adc90d26a46a602356397bad1f3b4f5cae0b262f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x110, 0x15, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000, 0x40, 0x6, 0x2, 0xf}, 0x1}}]}, {0xc6, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf117d1645a88f80bd0099ddaaf047e8176c59ee4ad3dd6c16189178332362837467598d104a879c0c3e38990b7dbb96fafdf130365f21370f37f1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x63c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000014000d00000000000000ffff0a3f0900", @ANYRES32=r2, @ANYBLOB="14000200fe800000"], 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)=@newqdisc={0x238, 0x24, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0x5}, {0xc, 0xfffa}, {0x1, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x4, 0xef2b, 0x8, 0x1, 0xffffcb72, 0x6, 0x5}}, {0xe, 0x2, [0x3, 0x2, 0x6, 0x0, 0x5]}}, {{0x1c, 0x1, {0x5, 0x8, 0x6, 0x1, 0x1, 0x400, 0x10001, 0x4}}, {0xc, 0x2, [0x200, 0x5, 0x8, 0x8001]}}, {{0x1c, 0x1, {0x7f, 0x5, 0x5, 0xa3d, 0x0, 0x0, 0xc, 0x1}}, {0x6, 0x2, [0xf]}}, {{0x1c, 0x1, {0x3, 0x5, 0x0, 0x9, 0x1, 0x8554, 0x2, 0x3}}, {0xa, 0x2, [0x7, 0x0, 0x6]}}]}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x17, 0x6, 0xfff, 0xa02, 0x2, 0xb, 0x4, 0x1}}, {0x6, 0x2, [0x100]}}, {{0x1c, 0x1, {0xc, 0xbc, 0x1, 0x80, 0x2, 0x0, 0x5b7, 0x1}}, {0x6, 0x2, [0x37]}}, {{0x1c, 0x1, {0xd1, 0xfe, 0x5, 0x5, 0x2, 0x2, 0x80000000, 0x4}}, {0xc, 0x2, [0x21, 0x3, 0x7ff, 0x7]}}, {{0x1c, 0x1, {0x8f, 0xc, 0xc000, 0x7fff, 0x1, 0x2, 0x2, 0x4}}, {0xc, 0x2, [0x1, 0x3, 0xb66, 0xfc92]}}, {{0x1c, 0x1, {0x4, 0xf2, 0x6, 0x200, 0x0, 0x840, 0xfff, 0x4}}, {0xc, 0x2, [0x416, 0x7fff, 0x9, 0x6]}}, {{0x1c, 0x1, {0xe6, 0x4a, 0x3, 0x1000, 0x0, 0xc03, 0x7fff, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x90, 0xaf, 0x3, 0x8, 0x0, 0x3, 0x10000, 0x2}}, {0x8, 0x2, [0x3, 0xf]}}, {{0x1c, 0x1, {0x5, 0x0, 0x2, 0x749, 0x0, 0x8, 0x2, 0x2}}, {0x8, 0x2, [0x76d, 0x9]}}, {{0x1c, 0x1, {0x80, 0xa, 0x8, 0x200, 0x2, 0x1, 0x9, 0x5}}, {0xe, 0x2, [0x3, 0x7e, 0x7, 0x1, 0x3]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa}]}, 0x238}, 0x1, 0x0, 0x0, 0xc0}, 0x4000800) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r4, 0x852dd6c070cd7e4d, 0xfffffffc, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x30}, 0x4, 0x700000000000000}, 0x0) (async) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) (async) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000000c0)={'veth0_to_hsr\x00', {0x2, 0x0, @initdev}}) sendmsg$nl_route_sched(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b40)=@newtfilter={0x50, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "54c56911865797bec18298086cd93ad8"}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8005}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.414210649s ago: executing program 2 (id=3476): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000000006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000830000008500000006000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2], 0x60}}, 0x0) 3.40316847s ago: executing program 2 (id=3477): r0 = socket(0x10, 0x80000, 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[], 0x6f4}, 0x1, 0x0, 0x0, 0x94}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000001640)=ANY=[@ANYBLOB="1800000018000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="000000008f8c0000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000008500000000000000000000950000000000000000f11f0b19a01ba9303ae9e5c027aae91636b7531bed9450a0d4e4bdb98936791469185cd108d0f14924ac18c180459bcba954ee791075542a2de8ca4cc19cd356c4f5369bb9e11018ae2deb01bbb9d25823e8bea16482e932a36351c8100c48cc1dad69006f6d2e0024a3b4e070da004dc7f212a47bc63c8af991c71d36cb363422f55bc3cb4dd42f5e3d79ac1ea5102d77f68f52513b7422243660041ab0258181b349b0fb0bff53"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r5}, 0x94) socket$kcm(0x11, 0x3, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x1, 0x2, 0x3, {0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}}, 0x32) sendmsg$kcm(r6, &(0x7f0000000300)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c00f40e1400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab971573", 0x32}, {&(0x7f0000001a80)="7cdb015fbb1990080000006a2615837b6487d32d2fb46cbd152314980741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b03d0369ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe9216c8b8ba00820c3de3c53bdba305901d7103513c9c2b71ea428a38f832416f3cafeccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68d54e854db809b155cc566b08f25c90861e29ab717f760ad57bbfd48e867a91d63c1ac78aafe22fc56f053ed1cc606f09b", 0xdd}, {&(0x7f0000000800)="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", 0xe3c}], 0x3}, 0x24000008) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) 3.08603094s ago: executing program 4 (id=3479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "853c1c9341b05be66feefda4e4b7"}}]}, 0x30}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000003000000000000000000000004000000000a0060803b000000bda4fcccba81d67e1bee3db86620db82d3a730d8aa9a19406a4c9c79205fe0ca20f29f678279fac0e649b19ed8d5f675729416182bff27d27f67cc84449b4e1795e23182832258a270f6eb2957e484e4502050d023f966bd7b9be43ad4836b7e", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000700000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000006000000c06b6e000001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r4, &(0x7f0000000080)="5b20bc9cc46a", 0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="772894752e66"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket(0x1d, 0x2, 0x6) r9 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)) close(r8) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0xffffffffffffff3f, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x44) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9b90000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x6, 0xac, 0x5}, 0x4}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}]}, {0x3}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 1.247367174s ago: executing program 3 (id=3480): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/3, 0x211000, 0x1800, 0x8, 0x2}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1a, 0x4, 0x4, 0x100, 0x8500, 0x0, 0x1, '\x00', 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000100), &(0x7f0000000400)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x100, 0x0, r5, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r8, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0x10000008ebc, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x11, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000008000000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095f2ff0000000000186200000a0000000000000001000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000d57731f2e8df85fe231cf457f3a29e802049292993effed3e2a23a21830b9a921e31fe914f71a09b43ec79a9d3b511fa3052324c15191fa0e097c1166c400d0b55250c03"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0xe1, &(0x7f0000000340)=""/225, 0x41100, 0x4, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0xffffffffffffffff, r5, r7, r1, r8, r9, r10, r12, r13], &(0x7f00000005c0)=[{0x3, 0x2, 0xa, 0x9}], 0x10, 0x5}, 0x94) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 1.228447349s ago: executing program 4 (id=3481): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 1.150290878s ago: executing program 2 (id=3482): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x1081, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, 0x0) r4 = socket(0x9, 0x80001, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x164, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x40}, 0xc80bbc307c635ae3) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x1, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3e0, 0x0, 0xfffc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched_retired(r4, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x19c, 0x24, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff2, 0xffe2}, {0x7, 0x5}, {0x9, 0x8}}, [@q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe25}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xb6862b4654a469f0}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x1}, 0x40) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff00000000030000000000000000000000030000000000000000d88dd4c83bdd567e5ded77ec54c8f3f600000000000002000000000000000000000006020000000000"], 0x0, 0x56, 0x0, 0x2}, 0x28) 1.114214062s ago: executing program 1 (id=3483): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x5, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x5f, 0x4f, 0x0, 0x2e, 0x0, 0x5f, 0x5e]}}, &(0x7f0000000400)=""/231, 0x2d, 0xe7, 0x0, 0x7}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7, '\x00', 0x0, r1, 0x3, 0x5, 0x2}, 0x50) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x6, @random="2368e36c4831"}, 0x10, {0x2, 0x4e22, @local}, 'syzkaller0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x800, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_PRIORITY={0x8, 0x6, 0x800}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb61, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x6, 0xe, 0xd, 0x1ff, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', r4, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0x10, 0x85, 0x7}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000540)=[{0x2, 0x3, 0x0, 0xf}, {0x0, 0x4, 0x10, 0x8}, {0x2, 0x5, 0x1, 0xb}], 0x10, 0x6}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 1.09179139s ago: executing program 0 (id=3484): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0xa042, &(0x7f00000000c0)={@_ha_fsid={[0x9, 0x8]}, {0x5c, 0x8, 0x6a16, 0x1}}, 0x0, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x8}, {[0x6, 0xfffffff3, 0x2, 0x4]}, 0xfffffff9, 0x0, &(0x7f0000000180)}) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000240), &(0x7f0000000300)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 1.014399357s ago: executing program 3 (id=3485): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000180) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040040) socket$kcm(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0x3) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.011654699s ago: executing program 2 (id=3486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000280)={{r0}, "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"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a0020000000000a0100000000000000000002000a000900010073797a300000000060000000120a0100000000000000000002000a000900010073797a30000000000900020073797a30000000000800030000000009280004800500020006000000060003001f900000080004"], 0xbc}}, 0x0) 862.347944ms ago: executing program 4 (id=3487): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000000006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000830000008500000006000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2], 0x60}}, 0x0) 846.11755ms ago: executing program 2 (id=3488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (fail_nth: 14) 759.290912ms ago: executing program 1 (id=3489): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 758.779221ms ago: executing program 0 (id=3490): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x14, 0x18, 0x107, 0x70bd25, 0x25dfdbff, {0x1e, 0x7c, 0x3f}}, 0x14}, 0x1, 0x0, 0x0, 0x4040895}, 0x4) 757.516085ms ago: executing program 4 (id=3491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2dc, @mcast1, 0x9}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r2, 0x9) accept$inet6(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)}, 0x20) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001340)={r4, 0x0, "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", "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"}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {0x0, 0xfff1}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x9, 0xbf1, 0x2}, {0x7f, 0x2, 0x7, 0x81, 0x81, 0xffffffff}, 0x62, 0x9a8f, 0x219c}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x3, 0x4, 0x9, 0x9, 0x1, 0x6, 0x3, 0xe, 0x0, 0x0, 0xe, 0xfffffffe, 0x9, 0xffffff32, 0x5, 0x400f, 0x2, 0x3, 0x7, 0x80000000, 0x80, 0x8000, 0x1000, 0x7, 0x200, 0xae, 0xffff, 0x5, 0x4f67, 0x4, 0x8, 0xcd, 0xffffffff, 0x8, 0x4, 0x2, 0x9, 0x7ff, 0x0, 0x10000, 0xe385, 0xff, 0x3ff, 0x9107, 0x2, 0x9, 0x81, 0x6, 0x4, 0x9, 0xfffffffa, 0x8, 0x100, 0x4, 0xd, 0x5, 0x6, 0xffffdaac, 0xf, 0x3, 0x9, 0x8000, 0xffffffff, 0x0, 0x0, 0xfc, 0x7, 0x9, 0x1, 0x0, 0x401, 0xc6cb1260, 0x8001, 0x3, 0x5, 0x480e, 0x8000, 0xb, 0x7, 0x5, 0x0, 0xfffffff9, 0x4, 0xe, 0x1, 0x9, 0x3, 0x1, 0x8, 0x1, 0x4, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x8001, 0x101, 0x515f, 0x377, 0x4, 0x2, 0x4, 0x6b, 0x1aa13142, 0x1, 0x7, 0x0, 0x5, 0x91e, 0xfffffff7, 0x2, 0x9, 0x6, 0x8e3, 0xd7c9, 0x2, 0x2, 0xfffffffa, 0x81, 0xa4bf, 0x1, 0x3, 0x400, 0x8, 0x1ff, 0x4, 0x3, 0x4, 0x5256, 0xe3, 0x8, 0xa, 0x538, 0x37c1, 0x7, 0x9, 0x1000, 0x9, 0x631d, 0x1c, 0xa, 0x3, 0x100, 0x7, 0x81, 0x8, 0xfffffff6, 0x45, 0x1, 0x6, 0x8, 0x484, 0x7, 0x9, 0x17, 0x1, 0x5, 0xa, 0x2, 0x10001, 0x7ff, 0x2fb, 0x4, 0xfffffff8, 0x8, 0x29, 0x0, 0x1, 0x4, 0xffffd481, 0x4, 0xc7, 0x5, 0x800, 0x3, 0x1, 0xcf03, 0x7, 0xdd2, 0x2, 0xcda, 0x1, 0x2, 0x7fffffff, 0x5, 0x6, 0x9, 0xf30, 0x10006, 0xb84, 0x80, 0x6f0ab25b, 0x10, 0xfffffbff, 0x0, 0x1, 0x4, 0xff000000, 0x4, 0x4, 0x0, 0x2, 0xfffffffd, 0xfffffffe, 0xa1b, 0x1, 0x5, 0x203, 0xb, 0x1, 0x9, 0x2, 0x2, 0x4, 0xfffffff3, 0x2, 0x2793, 0x5, 0xfffff23c, 0x8, 0xffff7fff, 0x3, 0x4fa, 0x401, 0x3, 0x2, 0xba4, 0x7146, 0x0, 0x4, 0xc, 0x9, 0x2, 0x4, 0x6, 0x6, 0x7fffffff, 0x2eb, 0x28b0afbf, 0x15181a07, 0x54, 0x8, 0x7, 0x0, 0x9, 0x4, 0x7, 0x0, 0x43, 0x7f, 0x5, 0xf700000, 0x8000004]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf2509000000080001000100000005000800000000000500070000000800010002"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) close(r8) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x8, 0x5, 0xb866, 0x804, r3, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x5}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r11}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8e) 671.814845ms ago: executing program 3 (id=3492): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f62617461647600140035000165"], 0xe8}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c000000000000050019"], 0xc8}}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r2, &(0x7f0000000080), &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r3, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x40}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$kcm(0x11, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400004000fcffffff000003e4", @ANYRES32=r3, @ANYBLOB="0000000002000000200012800800010073697400140002800800140001"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 570.390981ms ago: executing program 4 (id=3493): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x20048814) sendmsg$802154_raw(r0, &(0x7f0000000480)={&(0x7f0000000280), 0x14, &(0x7f0000000440)={&(0x7f0000000340)="3124340c95c277773935f2a984f5c0131fcceec1cf235d60c5d4b2c75b9a7deaf5048e72722774cf91b351e5c2a464d699b05e2c65fce48a81c8614e129e623a23114da15dd76e82101f9eb0e5b4a36333a36f93cc7d61c7653df5adf2d10fcc705f569adbb8c0d8b7cde77d9551ed0b874cfc1d6a3a48891f0554f680e7b0c3f891bd56a565b2c61c728799dacfcec7b9acd0043b6bff9299b42eac6beb4a536d1ce78e2823c8faf044e2cc0b6e0d80b95e6ae2384d7709c0eb3b5571c7b51d3b74d277cda8547b1cb5ebf652c694fc33fd", 0xd2}, 0x1, 0x0, 0x0, 0x8884}, 0x24000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x26, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=0x1, 0x4) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080004007f003bf36b62b3b3f5b90001"], 0x30}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0xb4, r6, 0x1, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1a55}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x76e}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd9f9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x28}]}]}, 0xb4}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x14, 0x0, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000004000000140001800d0001007564703a7379b390b3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r8, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) 527.53758ms ago: executing program 1 (id=3494): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xe2cf}]}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000f904001a"], 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400080004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) 413.433196ms ago: executing program 2 (id=3495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x82020008}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x68, 0x1, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x10f4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0xc0) socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4dff0000100001040200"/20, @ANYRES32=r5, @ANYBLOB="8a450200000000001c00128009000100626f6e64000000000c00028005000d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x10c, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x0, 0x800, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20, 0x800000, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in=@broadcast, 0x4, 0x3, 0x0, 0x0, 0xfffffc01, 0x5001, 0x6}}, 0xe8) listen(r8, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r10, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40041}, 0x885) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000e"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d280c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 206.124816ms ago: executing program 0 (id=3496): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079100800000000001eb00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 171.927925ms ago: executing program 0 (id=3497): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 0s ago: executing program 4 (id=3498): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000b575cb2398001001000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) (async) shutdown(r1, 0x1) (async) sendto$inet6(r1, &(0x7f0000000140)="42f4", 0x34000, 0x45, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x4000040) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01000000000000000000000000000008000a00", @ANYRES32=r7], 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) close(r2) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) (async) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.0.2104'. [ 247.468071][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'. [ 247.513851][T14009] sit0: entered promiscuous mode [ 247.534857][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 247.556698][T14009] netlink: 'syz.1.2107': attribute type 1 has an invalid length. [ 247.556722][T14009] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2107'. [ 247.644675][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'. [ 247.987249][T14029] netlink: 'syz.2.2114': attribute type 39 has an invalid length. [ 248.701768][T14062] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2125'. [ 248.819238][T14070] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2126'. [ 249.041136][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2130'. [ 249.113970][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'. [ 249.367727][T14087] syz.2.2130 (14087) used greatest stack depth: 18088 bytes left [ 249.417974][ C0] net_ratelimit: 9 callbacks suppressed [ 249.418022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.418787][T11665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.671451][T14114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2138'. [ 249.819918][T12970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.822185][T14121] bridge0: port 2(veth0) entered blocking state [ 249.822337][T14121] bridge0: port 2(veth0) entered listening state [ 249.822604][T14121] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.822734][T14121] bridge0: port 1(bridge_slave_0) entered listening state [ 249.880400][T14121] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 250.458219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.459123][T11666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.861261][ T35] IPVS: starting estimator thread 0... [ 250.947861][T14181] IPVS: using max 39 ests per chain, 93600 per kthread [ 251.491193][T14213] netlink: Setting conntrack mark requires 'commit' flag. [ 251.491259][T14213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.498002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.507823][T11665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.900101][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 251.900685][ C1] bridge0: port 2(veth0) entered learning state [ 253.978162][ C1] bridge0: port 2(veth0) entered forwarding state [ 253.978188][ C1] bridge0: topology change detected, propagating [ 253.981385][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.981408][ C1] bridge0: topology change detected, propagating [ 254.188376][T14229] __nla_validate_parse: 35 callbacks suppressed [ 254.188412][T14229] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2165'. [ 254.232475][T14225] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2164'. [ 254.316239][T14232] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2166'. [ 254.619335][ C0] net_ratelimit: 8 callbacks suppressed [ 254.619376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.634245][T11665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.657596][T14245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.728274][T14254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2176'. [ 254.767968][T14254] vlan2: entered promiscuous mode [ 254.768024][T14254] bond0: entered promiscuous mode [ 254.768056][T14254] team0: entered promiscuous mode [ 254.825701][T14258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2175'. [ 254.897917][T14262] netlink: 'syz.1.2177': attribute type 58 has an invalid length. [ 254.897938][T14262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2177'. [ 254.933741][T14254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2176'. [ 254.965219][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2178'. [ 255.044113][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2178'. [ 255.048453][ T9797] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.057853][ T35] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.057892][ T35] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.057925][ T35] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.405435][T14291] tipc: New replicast peer: 0.0.0.0 [ 255.431113][T14291] tipc: Enabled bearer , priority 10 [ 255.578478][T12967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.586018][T14285] ip_tables: iptables: counters copy to user failed while replacing table [ 255.657973][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.662267][T11666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.741898][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.741946][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.110534][T14325] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 256.421743][T11665] tipc: Node number set to 1823437413 [ 256.433877][T14336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2194'. [ 256.698121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.698714][T11665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.732691][T14354] No such timeout policy "syz0" [ 256.740595][T14354] netlink: get zone limit has 4 unknown bytes [ 256.750974][T14355] No such timeout policy "syz0" [ 257.301326][T14379] pim6reg1: entered promiscuous mode [ 257.301366][T14379] pim6reg1: entered allmulticast mode [ 257.885433][T14414] nbd: must specify at least one socket [ 259.196067][T14462] ip6t_srh: unknown srh invflags 4000 [ 259.595662][T14490] netlink: 'syz.0.2233': attribute type 2 has an invalid length. [ 259.595750][T14490] netlink: 'syz.0.2233': attribute type 1 has an invalid length. [ 259.675616][T14491] __nla_validate_parse: 7 callbacks suppressed [ 259.675640][T14491] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2233'. [ 259.818050][ C0] net_ratelimit: 9 callbacks suppressed [ 259.818082][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.820960][T11667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.854820][T14491] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.948820][T14504] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 260.005563][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 260.157732][T14510] syzkaller0: entered promiscuous mode [ 260.402910][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2240'. [ 260.552526][T14535] sctp: [Deprecated]: syz.3.2243 (pid 14535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.552526][T14535] Use struct sctp_sack_info instead [ 260.858434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.863948][T11667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.948878][T14553] netlink: 'syz.1.2249': attribute type 1 has an invalid length. [ 261.041092][T14562] ip6t_rt: too many addresses specified [ 261.041997][T14562] netlink: 'syz.0.2251': attribute type 1 has an invalid length. [ 261.054070][T14553] bond8: entered promiscuous mode [ 261.054506][T14553] 8021q: adding VLAN 0 to HW filter on device bond8 [ 261.097001][T14562] 8021q: adding VLAN 0 to HW filter on device bond13 [ 261.100645][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2251'. [ 261.136072][T14567] netlink: NAT attribute has 5 unknown bytes [ 261.136105][T14567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.136395][T14567] netlink: NAT attribute has 5 unknown bytes [ 261.136420][T14567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.140682][T14567] netlink: NAT attribute has 5 unknown bytes [ 261.140719][T14567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.158238][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2251'. [ 261.180273][T14553] bond8: (slave bridge7): making interface the new active one [ 261.180298][T14553] bridge7: entered promiscuous mode [ 261.214292][T14553] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 261.524725][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2255'. [ 261.524803][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2255'. [ 261.801307][T14605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2261'. [ 261.801532][T14605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2261'. [ 261.962626][T14610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2265'. [ 262.183431][T14626] veth0: entered promiscuous mode [ 262.417290][T14644] netlink: 'syz.4.2271': attribute type 8 has an invalid length. [ 262.603097][T14649] netlink: 'syz.4.2273': attribute type 8 has an invalid length. [ 262.628958][T14650] nbd: socks must be embedded in a SOCK_ITEM attr [ 262.771511][T14656] IPVS: set_ctl: invalid protocol: 115 172.20.20.10:20002 [ 262.795412][T14609] veth0: left promiscuous mode [ 263.266179][T14683] netlink: 'syz.1.2283': attribute type 10 has an invalid length. [ 263.266538][T14683] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.267025][T14683] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.349217][T14686] bridge_slave_1: left allmulticast mode [ 263.349243][T14686] bridge_slave_1: left promiscuous mode [ 263.349443][T14686] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.397220][T14686] bridge_slave_0: left allmulticast mode [ 263.397247][T14686] bridge_slave_0: left promiscuous mode [ 263.399950][T14686] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.432641][T14677] netlink: 'syz.4.2282': attribute type 29 has an invalid length. [ 263.567993][T14679] netlink: 'syz.4.2282': attribute type 29 has an invalid length. [ 263.744321][T14696] netlink: 'syz.1.2287': attribute type 1 has an invalid length. [ 263.744351][T14696] bond0: option mode: unable to set because the bond device has slaves [ 263.771400][T14696] netlink: 'syz.1.2287': attribute type 1 has an invalid length. [ 263.771430][T14696] bond0: option mode: unable to set because the bond device has slaves [ 264.086689][T14713] veth1_to_bond: Caught tx_queue_len zero misconfig [ 264.675958][T14730] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 264.675988][T14730] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 265.017972][ C0] net_ratelimit: 137 callbacks suppressed [ 265.018008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.018603][T11666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.081629][T14748] netlink: 'syz.2.2301': attribute type 2 has an invalid length. [ 265.125694][T14752] __nla_validate_parse: 7 callbacks suppressed [ 265.125715][T14752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2303'. [ 265.202656][T14754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2300'. [ 265.226447][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2301'. [ 265.545788][T14756] hsr_slave_1 (unregistering): left promiscuous mode [ 265.799363][T14768] 8021q: VLANs not supported on lo [ 265.938253][T14774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2309'. [ 266.057937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.080482][T11665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.930776][T14816] validate_nla: 1 callbacks suppressed [ 266.930798][T14816] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 266.999218][T14814] tipc: Can't bind to reserved service type 0 [ 267.098085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.101996][T11666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.104104][T14816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.166591][T14828] netlink: 'syz.2.2317': attribute type 2 has an invalid length. [ 267.178857][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2317'. [ 267.178895][T14828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2317'. [ 267.381189][T14837] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2319'. [ 267.461122][T14834] netlink: 'syz.4.2320': attribute type 1 has an invalid length. [ 267.561195][T14834] bond11: entered promiscuous mode [ 267.561717][T14834] 8021q: adding VLAN 0 to HW filter on device bond11 [ 267.631355][T14853] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 267.754810][T14855] netlink: 'syz.1.2326': attribute type 9 has an invalid length. [ 267.985225][T14867] netlink: 4964 bytes leftover after parsing attributes in process `syz.2.2328'. [ 268.116260][T14867] bond4: entered allmulticast mode [ 268.124896][T14867] netlink: 'syz.2.2328': attribute type 12 has an invalid length. [ 268.138330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.140461][T11665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.142498][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2328'. [ 268.224746][T14874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2330'. [ 268.781832][T14909] netlink: 'syz.3.2340': attribute type 1 has an invalid length. [ 268.854327][T14911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.178087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.420437][T14949] raw_sendmsg: syz.4.2349 forgot to set AF_INET. Fix it! [ 269.533795][T14957] netlink: 'syz.0.2350': attribute type 1 has an invalid length. [ 269.629676][T14961] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 270.166520][T14984] ip6gre1: entered promiscuous mode [ 270.173184][T14982] __nla_validate_parse: 6 callbacks suppressed [ 270.173217][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2359'. [ 270.218045][ C0] net_ratelimit: 2 callbacks suppressed [ 270.218079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.221545][ T9797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.442345][T14991] bond4: peer notification delay (25) is not a multiple of miimon (261), value rounded to 0 ms [ 270.442410][T14991] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 270.470306][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.478196][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.485584][T14991] bond4 (unregistering): Released all slaves [ 270.905346][T15028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2373'. [ 270.914646][T15028] tunl0: entered promiscuous mode [ 270.922296][T15028] netlink: 'syz.2.2373': attribute type 3 has an invalid length. [ 270.922343][T15028] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2373'. [ 271.059223][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2375'. [ 271.059262][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2375'. [ 271.142522][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2378'. [ 271.143204][T15040] hsr_slave_0: left promiscuous mode [ 271.144146][T15040] hsr_slave_1: left promiscuous mode [ 271.210189][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2378'. [ 271.258126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.724913][T15063] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2382'. [ 271.725677][T15069] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2382'. [ 271.814047][T15085] netlink: 'syz.0.2384': attribute type 1 has an invalid length. [ 271.815770][T15085] netlink: 'syz.0.2384': attribute type 3 has an invalid length. [ 271.815789][T15085] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2384'. [ 272.110196][T15093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.298129][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.379202][T15113] siw: device registration error -23 [ 272.813308][T15129] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 273.337956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.578502][T15159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.632757][T15158] veth0: Caught tx_queue_len zero misconfig [ 273.910162][T15179] netlink: 'syz.0.2415': attribute type 1 has an invalid length. [ 274.021214][T15179] bond14: entered promiscuous mode [ 274.022191][T15179] 8021q: adding VLAN 0 to HW filter on device bond14 [ 274.064249][T15179] bond14: (slave bridge9): making interface the new active one [ 274.064304][T15179] bridge9: entered promiscuous mode [ 274.065519][T15179] bond14: (slave bridge9): Enslaving as an active interface with an up link [ 274.413848][T15210] tipc: New replicast peer: 255.255.255.255 [ 274.431839][T15210] tipc: Enabled bearer , priority 10 [ 274.432591][T15207] netlink: 'syz.0.2418': attribute type 7 has an invalid length. [ 274.433273][T15210] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 274.675249][T15218] x_tables: duplicate entry at hook 2 [ 274.923868][T15228] netlink: 'syz.3.2428': attribute type 4 has an invalid length. [ 275.040625][T15232] xt_LOG: level 8 >= 8 [ 275.285578][T15243] netlink: 'syz.3.2432': attribute type 1 has an invalid length. [ 275.311705][T15248] syzkaller1: entered promiscuous mode [ 275.311729][T15248] syzkaller1: entered allmulticast mode [ 275.315363][T15241] team_slave_1: Caught tx_queue_len zero misconfig [ 275.350288][T15248] __nla_validate_parse: 9 callbacks suppressed [ 275.350309][T15248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2433'. [ 275.417927][ C0] net_ratelimit: 9 callbacks suppressed [ 275.417962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.581931][ T9797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.012095][T15281] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2441'. [ 276.501108][T15299] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 276.501504][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2446'. [ 276.561665][T15306] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 277.249679][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2458'. [ 277.345618][T15345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2460'. [ 277.526841][T15356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2462'. [ 277.648957][T15361] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2465'. [ 277.992210][T15368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2467'. [ 277.992236][T15368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2467'. [ 278.148521][T15379] netlink: 'syz.3.2472': attribute type 1 has an invalid length. [ 278.202541][T15379] bond4: entered promiscuous mode [ 278.202953][T15379] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.368804][T15379] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.374174][T15379] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 278.374216][T15379] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 278.417386][T15379] bond4: (slave wireguard0): making interface the new active one [ 278.417411][T15379] wireguard0: entered promiscuous mode [ 278.432771][T15379] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 278.833541][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2481'. [ 278.911924][T15415] 8021q: adding VLAN 0 to HW filter on device bond9 [ 280.414204][T15497] __nla_validate_parse: 3 callbacks suppressed [ 280.414225][T15497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'. [ 280.414244][T15497] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2499'. [ 280.414259][T15497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'. [ 280.414502][T15497] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2499'. [ 280.414520][T15497] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2499'. [ 280.484927][T15497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2499'. [ 280.504948][T15497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.620885][T15503] tipc: Enabling of bearer rejected, failed to enable media [ 281.223846][T15533] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 281.223886][T15533] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 281.551893][T15549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2521'. [ 281.950983][T15572] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2533'. [ 282.509425][T15599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2544'. [ 282.596239][T15602] vlan4: entered promiscuous mode [ 282.724391][T15594] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 282.724431][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2541'. [ 283.662308][T15656] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 284.092460][T15676] ip_tables: iptables: counters copy to user failed while replacing table [ 285.383049][T15728] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 285.383108][T15728] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 285.383167][T15728] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 285.409363][T15728] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 286.081917][T15760] __nla_validate_parse: 1 callbacks suppressed [ 286.081936][T15760] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2604'. [ 286.173822][T15750] tipc: Resetting bearer [ 287.049371][ T9794] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.049450][ T9794] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.051566][T11668] syz2: Port: 1 Link DOWN [ 287.053714][ T50] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.053769][ T50] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.053861][ T50] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.053903][ T50] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.053969][ T50] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.054026][ T50] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.343979][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'. [ 287.750909][T15792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2616'. [ 287.750965][T15792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2616'. [ 287.992106][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. [ 287.992168][T15804] bond0: Unable to set up delay as MII monitoring is disabled [ 288.185889][T15812] syzkaller1: entered promiscuous mode [ 288.185914][T15812] syzkaller1: entered allmulticast mode [ 288.892412][T15840] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2631'. [ 289.190736][T15860] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2640'. [ 289.214547][T15857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2639'. [ 289.215616][T15862] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 289.215641][T15862] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 289.878495][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 290.037229][T15903] syzkaller0: entered promiscuous mode [ 290.037252][T15903] syzkaller0: entered allmulticast mode [ 290.101431][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2656'. [ 291.543565][T15973] tipc: Enabling of bearer rejected, already enabled [ 291.752285][T15979] __nla_validate_parse: 1 callbacks suppressed [ 291.752324][T15979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2690'. [ 292.182653][T16003] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2701'. [ 292.199999][T16005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2699'. [ 292.200074][T16005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2699'. [ 292.622289][T16012] tipc: Resetting bearer [ 294.285780][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2718'. [ 294.372867][T16039] bond8: entered allmulticast mode [ 294.373313][T16044] hsr_slave_0: left promiscuous mode [ 294.393904][T16044] hsr_slave_1: left promiscuous mode [ 294.479899][ T50] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.479947][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.480206][ T9797] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.480233][ T9797] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.480267][ T9797] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.480291][ T9797] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.480323][ T9797] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.480347][ T9797] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.655939][T16053] netlink: 'syz.3.2722': attribute type 4 has an invalid length. [ 295.027349][T16075] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2729'. [ 295.033250][T16075] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2729'. [ 295.033368][T16075] 0ªî{X¹¦: renamed from gretap0 [ 295.073989][T16075] 0ªî{X¹¦: entered allmulticast mode [ 295.090593][T16075] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 295.381186][T16085] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 295.385090][T16085] bond5 (unregistering): Released all slaves [ 295.428581][T16095] syz_tun: entered allmulticast mode [ 295.431645][T16087] syz_tun: left allmulticast mode [ 295.463441][T16097] ip_tables: iptables: counters copy to user failed while replacing table [ 295.521028][T16097] syzkaller0: left promiscuous mode [ 295.521059][T16097] syzkaller0: left allmulticast mode [ 295.585909][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 295.789794][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'. [ 296.012080][T16125] netlink: 'syz.2.2742': attribute type 58 has an invalid length. [ 296.012120][T16125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2742'. [ 296.444703][T16145] netlink: 'syz.4.2748': attribute type 4 has an invalid length. [ 296.559158][T16143] pimreg: entered allmulticast mode [ 296.919396][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'. [ 296.930078][T16164] xt_esp: unknown flags DD [ 296.977539][T16165] tipc: Enabling of bearer rejected, failed to enable media [ 297.191047][T16171] tipc: Enabling of bearer rejected, failed to enable media [ 297.387512][T16179] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 297.553513][T16186] netlink: 'syz.2.2763': attribute type 4 has an invalid length. [ 297.958399][T16206] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2768'. [ 298.384842][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 298.497188][T16230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.527735][ T4933] block nbd2: Receive control failed (result -32) [ 298.565684][T16230] syzkaller0: entered promiscuous mode [ 298.565738][T16230] syzkaller0: entered allmulticast mode [ 298.729436][T16235] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2779'. [ 298.731815][T16235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2779'. [ 298.773899][T16244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2783'. [ 298.865487][T16244] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2783'. [ 299.337913][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2792'. [ 299.339984][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2792'. [ 299.782504][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2795'. [ 299.961213][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.964592][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.967299][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.999872][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.002516][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.049083][ T4933] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 300.052409][ T4933] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 300.053146][ T4933] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 300.055471][ T4933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 300.056292][ T4933] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.165877][T16300] netlink: 'syz.0.2797': attribute type 23 has an invalid length. [ 300.346876][T16311] netlink: zone id is out of range [ 300.349559][T16311] netlink: zone id is out of range [ 300.349588][T16311] netlink: zone id is out of range [ 300.349596][T16311] netlink: zone id is out of range [ 300.349620][T16311] netlink: zone id is out of range [ 300.349628][T16311] netlink: zone id is out of range [ 300.349656][T16311] netlink: zone id is out of range [ 300.349679][T16311] netlink: zone id is out of range [ 300.349687][T16311] netlink: zone id is out of range [ 300.420047][T16313] netlink: zone id is out of range [ 301.176547][T16350] syzkaller0: entered promiscuous mode [ 301.176569][T16350] syzkaller0: entered allmulticast mode [ 301.439212][T16361] x_tables: duplicate underflow at hook 2 [ 302.139007][ T5629] Bluetooth: hci5: command tx timeout [ 302.228103][T16407] 8021q: VLANs not supported on gre0 [ 302.427484][T16295] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.430848][T16295] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.431006][T16295] bridge_slave_0: entered allmulticast mode [ 302.463880][T16295] bridge_slave_0: entered promiscuous mode [ 302.481366][T16295] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.481464][T16295] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.481600][T16295] bridge_slave_1: entered allmulticast mode [ 302.483489][T16295] bridge_slave_1: entered promiscuous mode [ 302.556881][T16295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.600815][T16295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.810700][T16430] __nla_validate_parse: 1 callbacks suppressed [ 302.810719][T16430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2826'. [ 302.865065][T16295] team0: Port device team_slave_0 added [ 302.898353][T16430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2826'. [ 303.105752][T16295] team0: Port device team_slave_1 added [ 303.202133][T16449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2832'. [ 303.253276][T16295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.253288][T16295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.253313][T16295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.255244][T16295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.255254][T16295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.255279][T16295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.415191][T16295] hsr_slave_0: entered promiscuous mode [ 303.416241][T16295] hsr_slave_1: entered promiscuous mode [ 303.416944][T16295] debugfs: 'hsr0' already exists in 'hsr' [ 303.416963][T16295] Cannot create hsr debugfs directory [ 303.483326][T16451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.872096][T16463] syzkaller0: entered promiscuous mode [ 303.872121][T16463] syzkaller0: entered allmulticast mode [ 304.220089][ T5629] Bluetooth: hci5: command tx timeout [ 304.270001][T16483] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2843'. [ 304.468793][T16490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2847'. [ 304.611907][T16488] bond15: option resend_igmp: invalid value (32767) [ 304.611951][T16488] bond15: option resend_igmp: allowed values 0 - 255 [ 304.632822][T16488] bond15 (unregistering): Released all slaves [ 304.799854][T16516] netlink: 'syz.2.2852': attribute type 2 has an invalid length. [ 304.799877][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 305.013695][T16518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2853'. [ 305.145528][T16295] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 305.183772][T16295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 305.184687][T16295] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 305.185428][T16523] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2855'. [ 305.229890][T16295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.236593][T16523] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2855'. [ 305.236885][T16295] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 305.281300][T16295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.284045][T16295] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 305.321486][T16295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.597562][T16542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2859'. [ 305.725392][T16295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.776099][T16295] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.815891][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.816077][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.903728][ T9794] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.903896][ T9794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.300899][ T5629] Bluetooth: hci5: command tx timeout [ 306.445212][T16570] veth7: entered allmulticast mode [ 306.595551][T16580] vlan0: entered promiscuous mode [ 306.595591][T16580] hsr0: entered promiscuous mode [ 306.596047][T16580] vlan0: entered allmulticast mode [ 306.596081][T16580] hsr0: entered allmulticast mode [ 306.596111][T16580] hsr_slave_0: entered allmulticast mode [ 306.596142][T16580] hsr_slave_1: entered allmulticast mode [ 306.634281][T16580] hsr_slave_0: left promiscuous mode [ 306.637587][T16580] hsr_slave_1: left promiscuous mode [ 306.938770][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 307.641092][T16615] netlink: 'syz.1.2876': attribute type 21 has an invalid length. [ 307.641177][T16615] netlink: 'syz.1.2876': attribute type 4 has an invalid length. [ 307.641190][T16615] netlink: 'syz.1.2876': attribute type 5 has an invalid length. [ 307.641619][T16617] netlink: 'syz.1.2876': attribute type 21 has an invalid length. [ 307.641661][T16617] netlink: 'syz.1.2876': attribute type 4 has an invalid length. [ 307.641674][T16617] netlink: 'syz.1.2876': attribute type 5 has an invalid length. [ 308.283859][T16638] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 308.347264][T16640] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 308.377897][ T5629] Bluetooth: hci5: command tx timeout [ 308.443895][T16295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.746602][T16295] veth0_vlan: entered promiscuous mode [ 308.803662][T16295] veth1_vlan: entered promiscuous mode [ 308.841606][T16666] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 308.935004][T16668] team0: Mode changed to "broadcast" [ 309.061181][T16295] veth0_macvtap: entered promiscuous mode [ 309.121818][T16295] veth1_macvtap: entered promiscuous mode [ 309.273892][T16295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.275130][T16679] tc_dump_action: action bad kind [ 309.276021][T16679] ipt_REJECT: TCP_RESET invalid for non-tcp [ 309.341917][T16295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.439289][T13024] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.439729][T13024] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.439768][T13024] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.439801][T13024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.513526][T16683] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 309.513555][T16683] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 309.627928][T16689] __nla_validate_parse: 57 callbacks suppressed [ 309.627991][T16689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2901'. [ 309.733904][T16691] bond12: entered promiscuous mode [ 309.733968][T16691] bond12: entered allmulticast mode [ 310.036127][T16700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2898'. [ 310.087183][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.087205][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.180671][ T9793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.180709][ T9793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.455862][T16718] netlink: 'syz.2.2905': attribute type 1 has an invalid length. [ 310.603915][T16718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2905'. [ 310.624628][T16719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2905'. [ 310.849196][T16740] net_ratelimit: 11 callbacks suppressed [ 310.849234][T16740] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 310.850340][T16740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2911'. [ 310.982611][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 311.055218][T16740] vlan4: entered promiscuous mode [ 311.478260][T16771] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2918'. [ 311.531265][T16771] ip_tables: iptables: counters copy to user failed while replacing table [ 311.752475][T16782] vlan2: entered promiscuous mode [ 311.752511][T16782] hsr0: entered promiscuous mode [ 311.752885][T16782] vlan2: entered allmulticast mode [ 311.752898][T16782] hsr0: entered allmulticast mode [ 311.752911][T16782] hsr_slave_0: entered allmulticast mode [ 311.752926][T16782] hsr_slave_1: entered allmulticast mode [ 311.775623][T16782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2921'. [ 311.868189][T16782] hsr_slave_0: left promiscuous mode [ 311.869756][T16782] hsr_slave_1: left promiscuous mode [ 311.887961][T16792] netlink: 'syz.0.2924': attribute type 4 has an invalid length. [ 312.353552][T16800] x_tables: duplicate underflow at hook 1 [ 312.442562][T16809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2926'. [ 312.517874][T16813] netlink: 'syz.2.2930': attribute type 1 has an invalid length. [ 312.615046][T16816] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2930'. [ 312.646504][ T4933] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.650658][ T4933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.652030][ T4933] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.655351][ T4933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.659863][ T4933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.554743][ T9794] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.554800][ T9794] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.703634][T16859] sctp: [Deprecated]: syz.3.2940 (pid 16859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.703634][T16859] Use struct sctp_sack_info instead [ 313.832165][ T9794] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.832219][ T9794] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.121897][ T9794] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.121934][ T9794] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.124805][T16878] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 314.184917][T16883] FAULT_INJECTION: forcing a failure. [ 314.184917][T16883] name failslab, interval 1, probability 0, space 0, times 1 [ 314.184959][T16883] CPU: 1 UID: 0 PID: 16883 Comm: syz.3.2946 Not tainted syzkaller #0 PREEMPT(full) [ 314.184981][T16883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 314.185001][T16883] Call Trace: [ 314.185013][T16883] [ 314.185021][T16883] dump_stack_lvl+0xe8/0x150 [ 314.185056][T16883] should_fail_ex+0x410/0x560 [ 314.185087][T16883] should_failslab+0xa8/0x100 [ 314.185114][T16883] __kmalloc_noprof+0xfe/0x720 [ 314.185132][T16883] ? rcu_is_watching+0x16/0xb0 [ 314.185156][T16883] ? tomoyo_realpath_from_path+0xef/0x640 [ 314.185183][T16883] ? tomoyo_realpath_from_path+0xef/0x640 [ 314.185218][T16883] tomoyo_realpath_from_path+0xef/0x640 [ 314.185255][T16883] ? tomoyo_path_number_perm+0x219/0x5f0 [ 314.185279][T16883] tomoyo_path_number_perm+0x246/0x5f0 [ 314.185305][T16883] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 314.185328][T16883] ? __lock_acquire+0x747/0x2de0 [ 314.185365][T16883] ? hook_file_ioctl+0x1f2/0x600 [ 314.185410][T16883] ? __fget_files+0x2a/0x420 [ 314.185441][T16883] ? __fget_files+0x2a/0x420 [ 314.185467][T16883] ? __fget_files+0x3a2/0x420 [ 314.185491][T16883] ? __fget_files+0x2a/0x420 [ 314.185522][T16883] security_file_ioctl+0xc3/0x2a0 [ 314.185544][T16883] __se_sys_ioctl+0x47/0x170 [ 314.185570][T16883] do_syscall_64+0x166/0x520 [ 314.185597][T16883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.185617][T16883] ? clear_bhb_loop+0x70/0xc0 [ 314.185642][T16883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.185669][T16883] RIP: 0033:0x7fa713d9e159 [ 314.185689][T16883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.185705][T16883] RSP: 002b:00007fa714bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.185733][T16883] RAX: ffffffffffffffda RBX: 00007fa714025fa0 RCX: 00007fa713d9e159 [ 314.185747][T16883] RDX: 0000000000000000 RSI: 00000000000089ed RDI: 0000000000000004 [ 314.185759][T16883] RBP: 00007fa714bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 314.185771][T16883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.185782][T16883] R13: 00007fa714026038 R14: 00007fa714025fa0 R15: 00007ffe868fd478 [ 314.185815][T16883] [ 314.197380][T16883] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.286135][T16878] bond15: entered promiscuous mode [ 314.301329][T16878] 8021q: adding VLAN 0 to HW filter on device bond15 [ 314.427553][ T9794] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.427587][ T9794] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.778859][ T5629] Bluetooth: hci1: command tx timeout [ 314.893571][ T9800] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.969891][T16908] __nla_validate_parse: 5 callbacks suppressed [ 314.969911][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2955'. [ 315.196318][ T9794] veth0: left allmulticast mode [ 315.196359][ T9794] veth0: left promiscuous mode [ 315.197375][ T9794] bridge0: port 2(veth0) entered disabled state [ 315.226227][ T9794] bridge_slave_0: left allmulticast mode [ 315.227574][ T9794] bridge_slave_0: left promiscuous mode [ 315.234114][ T9794] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.324817][T16927] FAULT_INJECTION: forcing a failure. [ 315.324817][T16927] name failslab, interval 1, probability 0, space 0, times 0 [ 315.324880][T16927] CPU: 0 UID: 0 PID: 16927 Comm: syz.3.2958 Not tainted syzkaller #0 PREEMPT(full) [ 315.324904][T16927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 315.324916][T16927] Call Trace: [ 315.324923][T16927] [ 315.324931][T16927] dump_stack_lvl+0xe8/0x150 [ 315.324963][T16927] should_fail_ex+0x410/0x560 [ 315.324992][T16927] should_failslab+0xa8/0x100 [ 315.325018][T16927] __kmalloc_noprof+0xfe/0x720 [ 315.325040][T16927] ? tomoyo_encode+0x2ad/0x570 [ 315.325064][T16927] ? tomoyo_encode+0x2ad/0x570 [ 315.325098][T16927] tomoyo_encode+0x2ad/0x570 [ 315.325131][T16927] tomoyo_realpath_from_path+0x5fa/0x640 [ 315.325169][T16927] ? tomoyo_path_number_perm+0x219/0x5f0 [ 315.325193][T16927] tomoyo_path_number_perm+0x246/0x5f0 [ 315.325220][T16927] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 315.325243][T16927] ? __lock_acquire+0x747/0x2de0 [ 315.325281][T16927] ? hook_file_ioctl+0x1f2/0x600 [ 315.325328][T16927] ? __fget_files+0x2a/0x420 [ 315.325359][T16927] ? __fget_files+0x2a/0x420 [ 315.325385][T16927] ? __fget_files+0x3a2/0x420 [ 315.325411][T16927] ? __fget_files+0x2a/0x420 [ 315.325444][T16927] security_file_ioctl+0xc3/0x2a0 [ 315.325468][T16927] __se_sys_ioctl+0x47/0x170 [ 315.325492][T16927] do_syscall_64+0x166/0x520 [ 315.325548][T16927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.325568][T16927] ? clear_bhb_loop+0x70/0xc0 [ 315.325591][T16927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.325610][T16927] RIP: 0033:0x7fa713d9e159 [ 315.325629][T16927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.325646][T16927] RSP: 002b:00007fa714bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.325668][T16927] RAX: ffffffffffffffda RBX: 00007fa714025fa0 RCX: 00007fa713d9e159 [ 315.325682][T16927] RDX: 0000000000000000 RSI: 00000000000089ed RDI: 0000000000000004 [ 315.325693][T16927] RBP: 00007fa714bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 315.325705][T16927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.325717][T16927] R13: 00007fa714026038 R14: 00007fa714025fa0 R15: 00007ffe868fd478 [ 315.325750][T16927] [ 315.325906][T16927] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.472972][ T9794] pim6reg: left allmulticast mode [ 315.475932][ T9794] dvmrp1: left allmulticast mode [ 315.533658][ T9794] batman_adv: batadv0: Interface deactivated: gretap4 [ 315.535198][ T9794] tipc: Resetting bearer [ 315.700745][T16935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2959'. [ 316.120555][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2965'. [ 316.265140][ T9794] bond1 (unregistering): (slave gretap1): Releasing active interface [ 316.314955][ T9794] bond4 (unregistering): (slave gretap0): Releasing backup interface [ 316.334067][ T9794] batman_adv: batadv0: Removing interface: gretap4 [ 316.462181][ T9794] tipc: Disabling bearer [ 316.530453][ T9794] bond6 (unregistering): (slave bridge8): Releasing active interface [ 316.595105][ T9794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.608423][ T9794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.611141][ T9794] bond0 (unregistering): (slave team0): Releasing backup interface [ 316.612926][ T9794] bond0 (unregistering): Released all slaves [ 316.622374][ T9794] bond1 (unregistering): Released all slaves [ 316.634850][ T9794] bond2 (unregistering): Released all slaves [ 316.647521][ T9794] bond3 (unregistering): Released all slaves [ 316.663110][ T9794] bond4 (unregistering): Released all slaves [ 316.686133][ T9794] bond5 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 316.699426][ T9794] bond5 (unregistering): Released all slaves [ 316.724715][ T9794] bond6 (unregistering): Released all slaves [ 316.742193][ T9794] bond7 (unregistering): Released all slaves [ 316.756256][ T9794] bond8 (unregistering): Released all slaves [ 316.779953][ T9794] bond9 (unregistering): Released all slaves [ 316.803446][ T9794] bond10 (unregistering): Released all slaves [ 316.817342][ T9794] bond11 (unregistering): Released all slaves [ 316.837338][ T9794] bond12 (unregistering): Released all slaves [ 316.856897][T16917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2954'. [ 316.858273][ T5629] Bluetooth: hci1: command tx timeout [ 316.912093][ T9800] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.912183][ T9800] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.955775][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2966'. [ 317.112448][ T9797] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.185134][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.185203][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.204809][ T9794] : left promiscuous mode [ 317.730361][ T9794] tipc: Disabling bearer [ 317.730491][ T9794] tipc: Disabling bearer [ 317.730656][ T9794] tipc: Left network mode [ 318.151795][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'. [ 318.507374][T17020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2979'. [ 318.718598][T17029] TCP: TCP_TX_DELAY enabled [ 318.779620][T16815] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.779723][T16815] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.779875][T16815] bridge_slave_0: entered allmulticast mode [ 318.790527][T16815] bridge_slave_0: entered promiscuous mode [ 318.808183][T16815] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.808287][T16815] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.808434][T16815] bridge_slave_1: entered allmulticast mode [ 318.818735][T16815] bridge_slave_1: entered promiscuous mode [ 318.828727][T17030] netlink: 316 bytes leftover after parsing attributes in process `syz.3.2981'. [ 318.828750][T17030] netlink: 316 bytes leftover after parsing attributes in process `syz.3.2981'. [ 318.938307][ T5629] Bluetooth: hci1: command tx timeout [ 318.977417][T17039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2982'. [ 319.145667][T16815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.164885][T16815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.280330][ T9794] batman_adv: batadv0: Removing interface: macvtap1 [ 319.396464][T16815] team0: Port device team_slave_0 added [ 319.400288][T17057] Cannot find map_set index 135 as target [ 319.402499][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 319.446152][T16815] team0: Port device team_slave_1 added [ 319.525112][T17061] netlink: 'syz.2.2989': attribute type 5 has an invalid length. [ 319.581538][T17061] geneve5: entered promiscuous mode [ 319.581579][T17061] geneve5: entered allmulticast mode [ 319.645305][T16815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.645338][T16815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.645381][T16815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.649894][T16815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.649924][T16815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.649966][T16815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.728831][T13024] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 319.733432][ T137] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 319.758109][ T9797] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 319.764255][ T137] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 319.841832][ T9794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.841856][ T9794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.843193][ T9794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.843213][ T9794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.845288][ T9794] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 319.845307][ T9794] batman_adv: batadv0: Removing interface: ipvlan3 [ 319.903743][ T9794] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 319.903765][ T9794] batman_adv: batadv0: Removing interface: ipvlan4 [ 319.959774][ T9794] veth1_macvtap: left promiscuous mode [ 319.959833][ T9794] veth0_macvtap: left promiscuous mode [ 319.959993][ T9794] veth0_vlan: left promiscuous mode [ 320.183491][T17080] __nla_validate_parse: 4 callbacks suppressed [ 320.183511][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2996'. [ 320.984445][ T9794] team0 (unregistering): Port device team_slave_1 removed [ 321.026748][ T5629] Bluetooth: hci1: command tx timeout [ 321.293227][ T9794] smc: removing net device team0 with user defined pnetid SYZ2 [ 321.475835][T16815] hsr_slave_0: entered promiscuous mode [ 321.476909][T16815] hsr_slave_1: entered promiscuous mode [ 321.494348][T16815] debugfs: 'hsr0' already exists in 'hsr' [ 321.494369][T16815] Cannot create hsr debugfs directory [ 321.633629][T17126] netlink: 972 bytes leftover after parsing attributes in process `syz.3.3003'. [ 321.697295][T17121] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3004'. [ 321.751697][T17130] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3003'. [ 321.861825][T17142] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 321.864613][T17134] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 321.923388][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3003'. [ 321.947880][T17125] syzkaller1: entered promiscuous mode [ 321.947913][T17125] syzkaller1: entered allmulticast mode [ 321.964957][T17134] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 322.091775][T17138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3004'. [ 322.622397][T16815] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.783932][ T9794] IPVS: stop unused estimator thread 0... [ 322.914088][T16815] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.044302][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 323.105456][T17174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3009'. [ 323.228851][T16815] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.303016][T17185] netlink: 'syz.3.3011': attribute type 1 has an invalid length. [ 323.303060][T17185] netlink: 'syz.3.3011': attribute type 1 has an invalid length. [ 323.303087][T17185] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3011'. [ 323.303118][T17185] netlink: 'syz.3.3011': attribute type 1 has an invalid length. [ 323.511278][ T4933] Bluetooth: hci5: connection err: -111 [ 323.545816][T16815] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.696433][T17202] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 324.084606][T17213] veth1_macvtap: left promiscuous mode [ 324.084635][T17213] macsec0: entered promiscuous mode [ 324.174573][T17220] netlink: 'syz.0.3019': attribute type 4 has an invalid length. [ 324.226913][T17221] netlink: 'syz.2.3018': attribute type 11 has an invalid length. [ 324.226968][T17221] netlink: 'syz.2.3018': attribute type 11 has an invalid length. [ 324.226998][T17221] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3018'. [ 324.417193][T16815] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 324.441860][T16815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.444551][T16815] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 324.495249][T16815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.496096][T16815] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 324.542494][T16815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.543432][T16815] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.570797][T16815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.571696][T17232] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.572487][T17232] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.572713][T17232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.583469][T17236] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.584014][T17236] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.584342][T17236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.093216][T16815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.194349][T16815] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.267233][ T9794] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.267426][ T9794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.336191][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.336301][ T9797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.367914][T17266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.473635][T17272] netlink: 'syz.2.3029': attribute type 10 has an invalid length. [ 325.518330][T17272] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 325.571881][T17272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3029'. [ 325.571938][T17272] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3029'. [ 325.571972][T17272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3029'. [ 325.841251][T17284] netlink: 'syz.3.3031': attribute type 4 has an invalid length. [ 326.633002][T17317] netlink: 'syz.1.3039': attribute type 1 has an invalid length. [ 326.952245][T17325] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 326.954382][T17325] bond11 (unregistering): Released all slaves [ 327.038428][T17314] bridge8: entered promiscuous mode [ 327.071326][T17342] pim6reg: entered allmulticast mode [ 327.138264][T17344] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3045'. [ 327.139584][T17345] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3045'. [ 327.399918][T17363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3047'. [ 327.399953][T17363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3047'. [ 327.616216][T16815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.929513][T17377] xt_LOG: prefix is not null-terminated [ 328.313666][T17393] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3054'. [ 328.480838][T17403] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 328.486716][T17403] bond10 (unregistering): Released all slaves [ 328.916237][T17419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3059'. [ 329.079186][T17431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3060'. [ 329.819773][T16815] veth0_vlan: entered promiscuous mode [ 329.861590][T16815] veth1_vlan: entered promiscuous mode [ 329.932800][T17463] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 329.962721][T16815] veth0_macvtap: entered promiscuous mode [ 329.980900][T16815] veth1_macvtap: entered promiscuous mode [ 330.011227][T17464] Bluetooth: hci0: unsupported parameter 5134 [ 330.011281][T17464] Bluetooth: hci0: unsupported parameter 8192 [ 330.011294][T17464] Bluetooth: hci0: unsupported parameter 5134 [ 330.011323][T17464] Bluetooth: hci0: unsupported parameter 8192 [ 330.034291][T17467] Bluetooth: hci0: unsupported parameter 5134 [ 330.034328][T17467] Bluetooth: hci0: unsupported parameter 8192 [ 330.034364][T17467] Bluetooth: hci0: unsupported parameter 5134 [ 330.034392][T17467] Bluetooth: hci0: unsupported parameter 8192 [ 330.081739][T16815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.154726][T16815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.220944][ T9800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.291704][ T9794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.291724][ T9794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.348813][T13024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.348883][T13024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.348945][T13024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.412289][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.412354][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.501848][T17472] hsr_slave_0: left promiscuous mode [ 330.506737][T17472] hsr_slave_1: left promiscuous mode [ 330.599726][T17474] : renamed from bond_slave_0 (while UP) [ 331.687090][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.698209][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.700633][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.704815][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.707501][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.824517][ T4933] Bluetooth: hci4: command tx timeout [ 334.744207][T17582] netlink: 'syz.4.3077': attribute type 21 has an invalid length. [ 334.774177][T17589] netlink: 'syz.3.3079': attribute type 1 has an invalid length. [ 335.251347][T17610] netlink: 'syz.4.3084': attribute type 4 has an invalid length. [ 335.836065][T17635] netlink: 'syz.0.3093': attribute type 39 has an invalid length. [ 335.903774][ T4933] Bluetooth: hci4: command tx timeout [ 336.068343][T17639] __nla_validate_parse: 8 callbacks suppressed [ 336.068399][T17639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3094'. [ 336.173009][T17646] netlink: 'syz.4.3095': attribute type 4 has an invalid length. [ 336.334033][T17653] netlink: 'syz.3.3098': attribute type 5 has an invalid length. [ 336.355622][T17653] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 336.383632][T17656] netlink: 'syz.4.3099': attribute type 1 has an invalid length. [ 336.418461][T17658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 336.723703][T17524] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.723809][T17524] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.723998][T17524] bridge_slave_0: entered allmulticast mode [ 336.727333][T17524] bridge_slave_0: entered promiscuous mode [ 336.758554][T17524] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.758740][T17524] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.758900][T17524] bridge_slave_1: entered allmulticast mode [ 336.760644][T17524] bridge_slave_1: entered promiscuous mode [ 336.840496][T17524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.843678][T17524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.893583][T17524] team0: Port device team_slave_0 added [ 336.896366][T17524] team0: Port device team_slave_1 added [ 336.937234][T17524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.937253][T17524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.937279][T17524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.985444][T17524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.985462][T17524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.985488][T17524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.065137][T17667] xt_hashlimit: invalid interval [ 337.090633][T17667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3101'. [ 337.120045][T17667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3101'. [ 337.323024][T17524] hsr_slave_0: entered promiscuous mode [ 337.330331][T17524] hsr_slave_1: entered promiscuous mode [ 337.433614][T17688] netlink: 'syz.4.3108': attribute type 4 has an invalid length. [ 337.525814][T17697] bridge_slave_0: invalid flags given to default FDB implementation [ 337.982277][ T4933] Bluetooth: hci4: command tx timeout [ 338.052687][T17524] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.052722][T17524] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.052746][T17524] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 338.052770][T17524] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 338.333101][T17524] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.333169][T17524] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.333230][T17524] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 338.333273][T17524] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 338.460868][T17524] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.460904][T17524] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.460929][T17524] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 338.460954][T17524] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 338.588682][T17524] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.588719][T17524] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.588745][T17524] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 338.588770][T17524] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 338.733505][T17732] Bluetooth: MGMT ver 1.23 [ 338.778802][T17712] xt_NETMAP: bad rangesize 37. [ 338.819455][ T9793] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x3f [ 339.190354][T17752] netlink: 'syz.4.3122': attribute type 11 has an invalid length. [ 339.314140][T17524] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.331939][T17524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.352293][T17524] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.372829][T17524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.373710][T17524] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.394108][T17524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.396738][T17524] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.460418][T17524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 339.972893][T17787] geneve2: entered promiscuous mode [ 339.972916][T17787] geneve2: entered allmulticast mode [ 340.001016][T17792] ip6gre1: entered allmulticast mode [ 340.014274][ T9794] IPVS: starting estimator thread 0... [ 340.022972][T17524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.056327][ T9794] IPVS: starting estimator thread 0... [ 340.061889][ T4933] Bluetooth: hci4: command tx timeout [ 340.110224][T17794] IPVS: using max 34 ests per chain, 81600 per kthread [ 340.130408][T17797] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 340.133030][T17787] IPVS: Scheduler module ip_vs_mh not found [ 340.147882][T17795] IPVS: using max 31 ests per chain, 74400 per kthread [ 340.164328][T17524] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.217576][ T9793] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.217818][ T9793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.267485][T17801] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 340.276762][T17802] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 340.304429][T13024] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.306316][T13024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.361735][T17804] bridge10: entered promiscuous mode [ 340.361795][T17804] bridge10: entered allmulticast mode [ 341.052756][T17833] netlink: 'syz.4.3146': attribute type 2 has an invalid length. [ 341.077052][T17833] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3146'. [ 341.388591][T17844] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.388609][T17844] IPv6: NLM_F_CREATE should be set when creating new route [ 341.388651][T17844] IPv6: NLM_F_CREATE should be set when creating new route [ 341.388675][T17844] IPv6: NLM_F_CREATE should be set when creating new route [ 341.428843][T17844] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.785115][T17859] batadv_slave_1: entered promiscuous mode [ 342.174388][T17524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.283336][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 342.306146][T17888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.342317][T17888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.411303][T17891] x_tables: duplicate underflow at hook 2 [ 342.487337][T17524] veth0_vlan: entered promiscuous mode [ 342.515094][T17888] xfrm1: entered allmulticast mode [ 342.532736][T17524] veth1_vlan: entered promiscuous mode [ 342.569912][T17524] veth0_macvtap: entered promiscuous mode [ 342.670674][T17524] veth1_macvtap: entered promiscuous mode [ 342.698645][T17524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.734621][T17524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.856670][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3161'. [ 342.968011][T17911] netlink: 'syz.4.3163': attribute type 13 has an invalid length. [ 342.968225][T17911] netlink: 'syz.4.3163': attribute type 13 has an invalid length. [ 342.968423][T17911] netlink: 'syz.4.3163': attribute type 13 has an invalid length. [ 342.968611][T17911] netlink: 'syz.4.3163': attribute type 13 has an invalid length. [ 342.972944][T17911] netlink: 'syz.4.3163': attribute type 13 has an invalid length. [ 342.973165][T17911] netlink: 'syz.4.3163': attribute type 13 has an invalid length. [ 342.973350][T17911] netlink: 'syz.4.3163': attribute type 13 has an invalid length. [ 342.976329][T17911] netlink: 'syz.4.3163': attribute type 13 has an invalid length. [ 342.976542][T17911] netlink: 'syz.4.3163': attribute type 13 has an invalid length. [ 343.153976][ T9794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.154085][ T9794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.154169][ T9794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.294432][ T9793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.599439][ T9794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.599461][ T9794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.850377][T17934] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3167'. [ 343.850401][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 343.881477][ T9793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.881513][ T9793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.940051][T17955] xt_LOG: prefix is not null-terminated [ 344.345820][T17975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'. [ 344.377064][T17975] hsr_slave_0: left promiscuous mode [ 344.386740][T17975] hsr_slave_1: left promiscuous mode [ 344.870677][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.875326][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.885559][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.904962][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.911609][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.041276][T17995] nbd: must specify a device to reconfigure [ 345.042256][T17991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3182'. [ 345.347142][T18009] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 345.459569][ T9797] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.459669][ T9797] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.459738][ T9797] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.459805][ T9797] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.566454][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3190'. [ 345.576765][T18022] hsr_slave_0: left promiscuous mode [ 345.585101][T18022] hsr_slave_1: left promiscuous mode [ 345.634381][T18028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3191'. [ 345.634412][T18028] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 346.013855][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.013892][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.088999][T18043] bond1: option arp_missed_max: invalid value (0) [ 346.089025][T18043] bond1: option arp_missed_max: allowed values 1 - 255 [ 346.089631][T18040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.092338][T18043] bond1 (unregistering): Released all slaves [ 346.148966][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'. [ 346.449457][T18059] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3200'. [ 346.619490][T18069] netlink: 'syz.2.3201': attribute type 11 has an invalid length. [ 346.619511][T18069] netlink: 'syz.2.3201': attribute type 11 has an invalid length. [ 347.029787][ T4933] Bluetooth: hci2: command tx timeout [ 347.326186][T18094] pimreg3: entered allmulticast mode [ 347.336613][T17985] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.336720][T17985] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.336894][T17985] bridge_slave_0: entered allmulticast mode [ 347.365635][T17985] bridge_slave_0: entered promiscuous mode [ 347.379227][T17985] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.379395][T17985] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.379530][T17985] bridge_slave_1: entered allmulticast mode [ 347.383016][T17985] bridge_slave_1: entered promiscuous mode [ 347.449033][T17985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.452126][T17985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.460898][T18099] __nla_validate_parse: 1 callbacks suppressed [ 347.460932][T18099] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3210'. [ 347.460966][T18099] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3210'. [ 347.460998][T18099] validate_nla: 27 callbacks suppressed [ 347.461008][T18099] netlink: 'syz.2.3210': attribute type 5 has an invalid length. [ 347.461037][T18099] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3210'. [ 347.545981][T18102] Unknown options in mask 4 [ 347.566678][T17985] team0: Port device team_slave_0 added [ 347.575683][T17985] team0: Port device team_slave_1 added [ 347.613287][T17985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.613306][T17985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.613333][T17985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.615235][T17985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.615249][T17985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.615272][T17985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.718723][T18103] Bluetooth: hci1: too big key_count value 32778 [ 347.801965][T17985] hsr_slave_0: entered promiscuous mode [ 347.802946][T17985] hsr_slave_1: entered promiscuous mode [ 348.279183][T17985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.721502][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'. [ 348.744139][T17985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.098091][ T4933] Bluetooth: hci2: command tx timeout [ 349.150631][T17985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.166101][T18156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.422157][T17985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.032164][T17985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 350.054582][T17985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 350.055469][T17985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 350.079520][T17985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 350.080437][T17985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.087300][T17985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 350.149864][T17985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 350.171638][T17985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 350.195216][T18193] netlink: 'syz.2.3234': attribute type 1 has an invalid length. [ 350.249901][T18199] bond0: (slave bond_slave_0): Releasing backup interface [ 350.293479][T18199] bond0: (slave bond_slave_1): Releasing backup interface [ 350.300400][T18209] netlink: 'syz.1.3235': attribute type 1 has an invalid length. [ 350.308598][T18207] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3237'. [ 350.331932][T18199] team0: Port device team_slave_0 removed [ 350.342666][T18199] team0: Port device team_slave_1 removed [ 350.367224][T18199] team0: Port device erspan1 removed [ 350.375547][T18199] bond3: (slave wireguard0): Releasing backup interface [ 350.375576][T18199] wireguard0: left promiscuous mode [ 350.395124][T18199] bond5: (slave bridge4): Releasing backup interface [ 350.395150][T18199] bridge4: left promiscuous mode [ 350.395348][T18199] bridge4: left allmulticast mode [ 350.412138][T18199] bond6: (slave bridge5): Releasing backup interface [ 350.412176][T18199] bond6: (slave bridge5): the permanent HWaddr of slave - 0a:2a:13:90:12:7f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 350.413393][T18199] bridge5: left promiscuous mode [ 350.413884][T18199] bond6: (slave bridge6): making interface the new active one [ 350.413920][T18199] bridge6: entered promiscuous mode [ 350.466834][T18199] bond6: (slave bridge6): Releasing backup interface [ 350.466862][T18199] bridge6: left promiscuous mode [ 350.470739][T18214] ip_tables: iptables: counters copy to user failed while replacing table [ 350.490941][T18199] bond8: (slave bridge7): Releasing backup interface [ 350.490968][T18199] bridge7: left promiscuous mode [ 350.887307][T17985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.944317][T17985] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.995827][ T9795] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.996020][ T9795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.080721][ T9793] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.080892][ T9793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.108265][T18237] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3246'. [ 351.180557][ T4933] Bluetooth: hci2: command tx timeout [ 351.914612][T18271] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 351.914643][T18271] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 352.071591][T18271] veth5: entered promiscuous mode [ 352.111579][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3259'. [ 352.723867][T17985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.935904][T17985] veth0_vlan: entered promiscuous mode [ 352.989155][T17985] veth1_vlan: entered promiscuous mode [ 353.093294][T18323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'. [ 353.110381][T17985] veth0_macvtap: entered promiscuous mode [ 353.136433][T17985] veth1_macvtap: entered promiscuous mode [ 353.210456][T17985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.241192][T17985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.258152][ T4933] Bluetooth: hci2: command tx timeout [ 353.309419][ T9797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.378192][ T9795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.378236][ T9795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.378270][ T9795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.482066][ T9794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.482101][ T9794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.551326][ T9794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.551345][ T9794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.333118][T18364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3282'. [ 354.333165][T18364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3282'. [ 354.421062][T18368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3282'. [ 354.421126][T18368] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 354.744263][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.764619][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.765770][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.796989][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.797807][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.079156][T18389] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3288'. [ 355.113285][T18394] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3288'. [ 355.271103][ T5624] tipc: Disabling bearer [ 355.993303][T18425] xt_limit: Overflow, try lower: 536871034/0 [ 356.689311][T18379] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.689567][T18379] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.689861][T18379] bridge_slave_0: entered allmulticast mode [ 356.693474][T18379] bridge_slave_0: entered promiscuous mode [ 356.705366][T18379] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.705629][T18379] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.706308][T18379] bridge_slave_1: entered allmulticast mode [ 356.713820][T18379] bridge_slave_1: entered promiscuous mode [ 356.780107][T18455] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 356.780167][T18455] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 356.938029][ T4933] Bluetooth: hci0: command tx timeout [ 356.947430][T18379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.966725][T18379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.034757][T18470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3306'. [ 357.081939][T18471] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 357.179492][T18379] team0: Port device team_slave_0 added [ 357.184411][T18472] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 357.186630][T18379] team0: Port device team_slave_1 added [ 357.260289][ T9795] IPVS: starting estimator thread 0... [ 357.305485][T18379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.305504][T18379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.305532][T18379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.316867][T18379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.316882][T18379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.316908][T18379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.361767][T18479] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3308'. [ 357.376529][T18479] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3308'. [ 357.376744][T18479] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3308'. [ 357.399399][T18475] IPVS: using max 30 ests per chain, 72000 per kthread [ 357.571188][T18379] hsr_slave_0: entered promiscuous mode [ 357.575509][T18379] hsr_slave_1: entered promiscuous mode [ 357.590908][T18379] debugfs: 'hsr0' already exists in 'hsr' [ 357.590932][T18379] Cannot create hsr debugfs directory [ 357.593180][T18485] netlink: 'syz.2.3309': attribute type 4 has an invalid length. [ 358.222901][T18512] ip_tables: iptables: counters copy to user failed while replacing table [ 358.444639][T18521] FAULT_INJECTION: forcing a failure. [ 358.444639][T18521] name failslab, interval 1, probability 0, space 0, times 0 [ 358.444687][T18521] CPU: 0 UID: 0 PID: 18521 Comm: syz.3.3319 Not tainted syzkaller #0 PREEMPT(full) [ 358.444708][T18521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 358.444719][T18521] Call Trace: [ 358.444728][T18521] [ 358.444736][T18521] dump_stack_lvl+0xe8/0x150 [ 358.444776][T18521] should_fail_ex+0x410/0x560 [ 358.444806][T18521] should_failslab+0xa8/0x100 [ 358.444834][T18521] __kmalloc_cache_noprof+0xa3/0x600 [ 358.444855][T18521] ? __kmalloc_cache_noprof+0x14d/0x600 [ 358.444873][T18521] ? sctp_add_bind_addr+0x8c/0x370 [ 358.444889][T18521] ? sctp_add_bind_addr+0x8c/0x370 [ 358.444916][T18521] sctp_add_bind_addr+0x8c/0x370 [ 358.444941][T18521] sctp_copy_local_addr_list+0x31a/0x4e0 [ 358.444965][T18521] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 358.444986][T18521] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 358.445011][T18521] ? sctp_v4_is_any+0x35/0x60 [ 358.445032][T18521] ? sctp_copy_one_addr+0x93/0x360 [ 358.445053][T18521] sctp_bind_addr_copy+0xb3/0x3c0 [ 358.445073][T18521] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 358.445104][T18521] sctp_connect_new_asoc+0x2ff/0x6b0 [ 358.445130][T18521] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 358.445160][T18521] ? __local_bh_enable_ip+0xd6/0x140 [ 358.445190][T18521] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 358.445215][T18521] ? security_sctp_bind_connect+0x7e/0x2c0 [ 358.445241][T18521] sctp_sendmsg+0x159b/0x2d00 [ 358.445281][T18521] ? __pfx_sctp_sendmsg+0x10/0x10 [ 358.445309][T18521] ? irqentry_exit+0x218/0x910 [ 358.445337][T18521] ? irqentry_exit+0x218/0x910 [ 358.445371][T18521] ? sock_rps_record_flow+0x19/0x350 [ 358.445395][T18521] ? inet_sendmsg+0x298/0x320 [ 358.445419][T18521] ? __pfx_inet_sendmsg+0x10/0x10 [ 358.445435][T18521] sock_sendmsg_nosec+0x10e/0x180 [ 358.445460][T18521] ____sys_sendmsg+0x54e/0x850 [ 358.445493][T18521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.445529][T18521] ? import_iovec+0x73/0xa0 [ 358.445557][T18521] ___sys_sendmsg+0x2a5/0x360 [ 358.445583][T18521] ? __lock_acquire+0x747/0x2de0 [ 358.445607][T18521] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.445670][T18521] ? __fget_files+0x2a/0x420 [ 358.445696][T18521] ? __fget_files+0x3a2/0x420 [ 358.445732][T18521] __x64_sys_sendmsg+0x1b1/0x290 [ 358.445761][T18521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.445807][T18521] do_syscall_64+0x166/0x520 [ 358.445834][T18521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.445853][T18521] ? clear_bhb_loop+0x70/0xc0 [ 358.445877][T18521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.445896][T18521] RIP: 0033:0x7fa713d9e159 [ 358.445915][T18521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.445931][T18521] RSP: 002b:00007fa714bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.445952][T18521] RAX: ffffffffffffffda RBX: 00007fa714025fa0 RCX: 00007fa713d9e159 [ 358.445968][T18521] RDX: 0000000000000010 RSI: 0000200000000d80 RDI: 0000000000000003 [ 358.445981][T18521] RBP: 00007fa714bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.445993][T18521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.446005][T18521] R13: 00007fa714026038 R14: 00007fa714025fa0 R15: 00007ffe868fd478 [ 358.446040][T18521] [ 358.911628][ T4933] Bluetooth: hci2: unexpected cc 0x2003 length: 0 < 9 [ 358.911936][T18526] netlink: 'syz.3.3320': attribute type 4 has an invalid length. [ 359.018229][ T4933] Bluetooth: hci0: command tx timeout [ 359.152442][T18543] __nla_validate_parse: 7 callbacks suppressed [ 359.152464][T18543] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3321'. [ 359.462814][T18379] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 359.726988][T18529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.893404][T18571] ip_tables: iptables: counters copy to user failed while replacing table [ 360.030418][T18379] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.070495][T18379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.074595][T18379] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.117977][T18379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.120931][T18379] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.159767][T18379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.160698][T18379] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.236801][T18577] FAULT_INJECTION: forcing a failure. [ 360.236801][T18577] name failslab, interval 1, probability 0, space 0, times 0 [ 360.236836][T18577] CPU: 1 UID: 0 PID: 18577 Comm: syz.4.3329 Not tainted syzkaller #0 PREEMPT(full) [ 360.236859][T18577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 360.236870][T18577] Call Trace: [ 360.236878][T18577] [ 360.236887][T18577] dump_stack_lvl+0xe8/0x150 [ 360.236920][T18577] should_fail_ex+0x410/0x560 [ 360.236947][T18577] ? __alloc_skb+0x1db/0x7a0 [ 360.236972][T18577] should_failslab+0xa8/0x100 [ 360.236998][T18577] ? __alloc_skb+0x1db/0x7a0 [ 360.237021][T18577] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 360.237041][T18577] ? __alloc_skb+0x18d/0x7a0 [ 360.237066][T18577] ? __alloc_skb+0x1db/0x7a0 [ 360.237097][T18577] __alloc_skb+0x1db/0x7a0 [ 360.237127][T18577] netlink_sendmsg+0x5d4/0xb40 [ 360.237158][T18577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.237187][T18577] ? apparmor_socket_sendmsg+0x98/0x360 [ 360.237213][T18577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.237232][T18577] sock_sendmsg_nosec+0x13a/0x180 [ 360.237261][T18577] ____sys_sendmsg+0x54e/0x850 [ 360.237296][T18577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.237333][T18577] ? import_iovec+0x73/0xa0 [ 360.237364][T18577] ___sys_sendmsg+0x2a5/0x360 [ 360.237390][T18577] ? __lock_acquire+0x747/0x2de0 [ 360.237415][T18577] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.237472][T18577] ? __fget_files+0x2a/0x420 [ 360.237506][T18577] ? __fget_files+0x3a2/0x420 [ 360.237542][T18577] __x64_sys_sendmsg+0x1b1/0x290 [ 360.237574][T18577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.237619][T18577] do_syscall_64+0x166/0x520 [ 360.237643][T18577] ? trace_irq_disable+0x3b/0x140 [ 360.237662][T18577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.237681][T18577] ? clear_bhb_loop+0x70/0xc0 [ 360.237704][T18577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.237721][T18577] RIP: 0033:0x7ff5a439e159 [ 360.237740][T18577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.237757][T18577] RSP: 002b:00007ff5a51cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.237777][T18577] RAX: ffffffffffffffda RBX: 00007ff5a4625fa0 RCX: 00007ff5a439e159 [ 360.237791][T18577] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 360.237803][T18577] RBP: 00007ff5a51cc090 R08: 0000000000000000 R09: 0000000000000000 [ 360.237815][T18577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.237827][T18577] R13: 00007ff5a4626038 R14: 00007ff5a4625fa0 R15: 00007ffef3daf928 [ 360.237866][T18577] [ 360.257235][T18379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.630590][T18589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3331'. [ 360.949866][T18379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.031314][T18602] xt_cgroup: invalid path, errno=-2 [ 361.032815][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3335'. [ 361.033610][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3335'. [ 361.065104][T18379] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.099282][ T4933] Bluetooth: hci0: command tx timeout [ 361.129312][ T9793] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.129418][ T9793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.215712][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.215886][ T9797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.610224][T18622] netlink: 'syz.2.3341': attribute type 2 has an invalid length. [ 361.610250][T18622] netlink: 'syz.2.3341': attribute type 2 has an invalid length. [ 361.951705][T18636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3346'. [ 361.951749][T18636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3346'. [ 361.953540][T18636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3346'. [ 361.953578][T18636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3346'. [ 361.997398][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3346'. [ 361.997452][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3346'. [ 362.424539][T18656] veth0_to_batadv: mtu less than device minimum [ 362.885757][T18683] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 363.067244][T18379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.162160][T18698] FAULT_INJECTION: forcing a failure. [ 363.162160][T18698] name failslab, interval 1, probability 0, space 0, times 0 [ 363.162210][T18698] CPU: 0 UID: 0 PID: 18698 Comm: syz.2.3358 Not tainted syzkaller #0 PREEMPT(full) [ 363.162231][T18698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 363.162242][T18698] Call Trace: [ 363.162249][T18698] [ 363.162257][T18698] dump_stack_lvl+0xe8/0x150 [ 363.162290][T18698] should_fail_ex+0x410/0x560 [ 363.162320][T18698] should_failslab+0xa8/0x100 [ 363.162343][T18698] ? skb_clone+0x212/0x3a0 [ 363.162372][T18698] kmem_cache_alloc_noprof+0xa1/0x600 [ 363.162395][T18698] ? skb_clone+0x212/0x3a0 [ 363.162428][T18698] skb_clone+0x212/0x3a0 [ 363.162459][T18698] __netlink_deliver_tap+0x413/0x860 [ 363.162488][T18698] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.162508][T18698] netlink_deliver_tap+0x19c/0x1b0 [ 363.162529][T18698] netlink_unicast+0x781/0x940 [ 363.162570][T18698] netlink_sendmsg+0x813/0xb40 [ 363.162601][T18698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.162631][T18698] ? apparmor_socket_sendmsg+0x98/0x360 [ 363.162657][T18698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.162675][T18698] sock_sendmsg_nosec+0x13a/0x180 [ 363.162699][T18698] ____sys_sendmsg+0x54e/0x850 [ 363.162730][T18698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.162767][T18698] ? import_iovec+0x73/0xa0 [ 363.162796][T18698] ___sys_sendmsg+0x2a5/0x360 [ 363.162823][T18698] ? __lock_acquire+0x747/0x2de0 [ 363.162857][T18698] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.162922][T18698] ? __fget_files+0x2a/0x420 [ 363.162949][T18698] ? __fget_files+0x3a2/0x420 [ 363.162986][T18698] __x64_sys_sendmsg+0x1b1/0x290 [ 363.163015][T18698] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.163064][T18698] do_syscall_64+0x166/0x520 [ 363.163090][T18698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.163110][T18698] ? clear_bhb_loop+0x70/0xc0 [ 363.163133][T18698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.163152][T18698] RIP: 0033:0x7f0dfe99e159 [ 363.163171][T18698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.163186][T18698] RSP: 002b:00007f0dff940028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.163208][T18698] RAX: ffffffffffffffda RBX: 00007f0dfec25fa0 RCX: 00007f0dfe99e159 [ 363.163222][T18698] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 363.163235][T18698] RBP: 00007f0dff940090 R08: 0000000000000000 R09: 0000000000000000 [ 363.163248][T18698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.163260][T18698] R13: 00007f0dfec26038 R14: 00007f0dfec25fa0 R15: 00007ffd75bd5848 [ 363.163293][T18698] [ 363.179956][ T4933] Bluetooth: hci0: command tx timeout [ 363.562930][T18379] veth0_vlan: entered promiscuous mode [ 363.645777][T18379] veth1_vlan: entered promiscuous mode [ 363.861004][T18379] veth0_macvtap: entered promiscuous mode [ 363.904567][T18379] veth1_macvtap: entered promiscuous mode [ 363.949490][T18379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.980264][T18379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.994996][T18722] veth0_to_bond: entered allmulticast mode [ 364.067019][ T1114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.242364][ T9796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.242416][ T9796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.309117][T13022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.309203][T13022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.309278][T13022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.356730][T13022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.356751][T13022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.389207][T18735] FAULT_INJECTION: forcing a failure. [ 364.389207][T18735] name failslab, interval 1, probability 0, space 0, times 0 [ 364.389240][T18735] CPU: 1 UID: 0 PID: 18735 Comm: syz.3.3369 Not tainted syzkaller #0 PREEMPT(full) [ 364.389261][T18735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 364.389271][T18735] Call Trace: [ 364.389279][T18735] [ 364.389288][T18735] dump_stack_lvl+0xe8/0x150 [ 364.389318][T18735] should_fail_ex+0x410/0x560 [ 364.389348][T18735] should_failslab+0xa8/0x100 [ 364.389374][T18735] __kmalloc_cache_noprof+0xa3/0x600 [ 364.389396][T18735] ? nf_tables_newchain+0xf9c/0x28b0 [ 364.389422][T18735] ? nf_tables_newchain+0xf9c/0x28b0 [ 364.389455][T18735] nf_tables_newchain+0xf9c/0x28b0 [ 364.389498][T18735] ? __pfx_nf_tables_newchain+0x10/0x10 [ 364.389557][T18735] ? lock_acquire+0x115/0x350 [ 364.389579][T18735] ? nfnl_pernet+0x23/0x240 [ 364.389617][T18735] ? __nla_parse+0x40/0x60 [ 364.389648][T18735] nfnetlink_rcv+0x1288/0x28c0 [ 364.389720][T18735] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 364.389765][T18735] ? ref_tracker_free+0x689/0x830 [ 364.389814][T18735] ? skb_clone+0x246/0x3a0 [ 364.389847][T18735] ? __netlink_deliver_tap+0x811/0x860 [ 364.389879][T18735] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.389898][T18735] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.389922][T18735] netlink_unicast+0x7bd/0x940 [ 364.389961][T18735] netlink_sendmsg+0x813/0xb40 [ 364.389991][T18735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.390020][T18735] ? apparmor_socket_sendmsg+0x98/0x360 [ 364.390047][T18735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.390067][T18735] sock_sendmsg_nosec+0x13a/0x180 [ 364.390090][T18735] ____sys_sendmsg+0x54e/0x850 [ 364.390124][T18735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.390160][T18735] ? import_iovec+0x73/0xa0 [ 364.390188][T18735] ___sys_sendmsg+0x2a5/0x360 [ 364.390215][T18735] ? __lock_acquire+0x747/0x2de0 [ 364.390240][T18735] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.390303][T18735] ? __fget_files+0x2a/0x420 [ 364.390330][T18735] ? __fget_files+0x3a2/0x420 [ 364.390368][T18735] __x64_sys_sendmsg+0x1b1/0x290 [ 364.390399][T18735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.390450][T18735] do_syscall_64+0x166/0x520 [ 364.390477][T18735] ? trace_irq_disable+0x3b/0x140 [ 364.390498][T18735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.390518][T18735] ? clear_bhb_loop+0x70/0xc0 [ 364.390543][T18735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.390562][T18735] RIP: 0033:0x7fa713d9e159 [ 364.390581][T18735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.390598][T18735] RSP: 002b:00007fa714bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.390620][T18735] RAX: ffffffffffffffda RBX: 00007fa714025fa0 RCX: 00007fa713d9e159 [ 364.390634][T18735] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 364.390647][T18735] RBP: 00007fa714bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 364.390659][T18735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.390671][T18735] R13: 00007fa714026038 R14: 00007fa714025fa0 R15: 00007ffe868fd478 [ 364.390711][T18735] [ 364.431731][T18725] __nla_validate_parse: 6 callbacks suppressed [ 364.431767][T18725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3367'. [ 364.880371][T18741] Bluetooth: MGMT ver 1.23 [ 364.880436][T18741] Bluetooth: hci0: unsupported parameter 5134 [ 364.880465][T18741] Bluetooth: hci0: unsupported parameter 8192 [ 364.880480][T18741] Bluetooth: hci0: unsupported parameter 5134 [ 364.880505][T18741] Bluetooth: hci0: unsupported parameter 8192 [ 364.890235][T18748] Bluetooth: hci0: unsupported parameter 5134 [ 364.890270][T18748] Bluetooth: hci0: unsupported parameter 8192 [ 364.890299][T18748] Bluetooth: hci0: unsupported parameter 5134 [ 364.890325][T18748] Bluetooth: hci0: unsupported parameter 8192 [ 364.932302][T18745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3372'. [ 364.985322][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3372'. [ 365.225325][T18759] netlink: 'syz.0.3377': attribute type 4 has an invalid length. [ 365.352469][T18766] netlink: 'syz.0.3380': attribute type 2 has an invalid length. [ 365.352508][T18766] netlink: 'syz.0.3380': attribute type 1 has an invalid length. [ 365.569312][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3383'. [ 365.656910][T18784] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3384'. [ 365.679403][T18786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3385'. [ 365.804993][T18797] netlink: 'syz.0.3387': attribute type 1 has an invalid length. [ 365.810430][T18799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3387'. [ 366.103371][T18810] xt_TPROXY: Can be used only with -p tcp or -p udp [ 366.216396][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3394'. [ 366.295664][T18823] batman_adv: batadv0: Adding interface: veth0 [ 366.295684][T18823] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.296906][T18823] batman_adv: batadv0: Interface activated: veth0 [ 366.315062][T18823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3397'. [ 366.315087][T18823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.315105][T18823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.396493][T18823] batman_adv: batadv0: Interface deactivated: veth0 [ 366.396516][T18823] batman_adv: batadv0: Removing interface: veth0 [ 366.709721][T18831] bond1: entered promiscuous mode [ 366.956374][T18856] ip_tables: iptables: counters copy to user failed while replacing table [ 366.960894][T18854] x_tables: duplicate underflow at hook 1 [ 367.007562][T18863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3407'. [ 367.914275][T18900] openvswitch: netlink: IPv4 tun info is not correct [ 367.994915][T18911] ip_tables: iptables: counters copy to user failed while replacing table [ 368.332261][T18923] ip_tables: iptables: counters copy to user failed while replacing table [ 368.405447][T18925] netlink: 'syz.2.3425': attribute type 3 has an invalid length. [ 368.431104][T18923] syzkaller1: entered promiscuous mode [ 368.431129][T18923] syzkaller1: entered allmulticast mode [ 368.759756][T18939] netlink: 'syz.3.3432': attribute type 5 has an invalid length. [ 368.826361][T18942] sctp: [Deprecated]: syz.1.3434 (pid 18942) Use of int in maxseg socket option. [ 368.826361][T18942] Use struct sctp_assoc_value instead [ 368.826400][T18942] sctp: [Deprecated]: syz.1.3434 (pid 18942) Use of int in maxseg socket option. [ 368.826400][T18942] Use struct sctp_assoc_value instead [ 368.826423][T18942] sctp: [Deprecated]: syz.1.3434 (pid 18942) Use of int in maxseg socket option. [ 368.826423][T18942] Use struct sctp_assoc_value instead [ 368.826446][T18942] sctp: [Deprecated]: syz.1.3434 (pid 18942) Use of int in maxseg socket option. [ 368.826446][T18942] Use struct sctp_assoc_value instead [ 368.826468][T18942] sctp: [Deprecated]: syz.1.3434 (pid 18942) Use of int in maxseg socket option. [ 368.826468][T18942] Use struct sctp_assoc_value instead [ 368.826491][T18942] sctp: [Deprecated]: syz.1.3434 (pid 18942) Use of int in maxseg socket option. [ 368.826491][T18942] Use struct sctp_assoc_value instead [ 368.826513][T18942] sctp: [Deprecated]: syz.1.3434 (pid 18942) Use of int in maxseg socket option. [ 368.826513][T18942] Use struct sctp_assoc_value instead [ 368.826535][T18942] sctp: [Deprecated]: syz.1.3434 (pid 18942) Use of int in maxseg socket option. [ 368.826535][T18942] Use struct sctp_assoc_value instead [ 368.826558][T18942] sctp: [Deprecated]: syz.1.3434 (pid 18942) Use of int in maxseg socket option. [ 368.826558][T18942] Use struct sctp_assoc_value instead [ 368.826581][T18942] sctp: [Deprecated]: syz.1.3434 (pid 18942) Use of int in maxseg socket option. [ 368.826581][T18942] Use struct sctp_assoc_value instead [ 369.075609][T18951] tipc: Started in network mode [ 369.075628][T18951] tipc: Node identity , cluster identity 4711 [ 369.075643][T18951] tipc: Failed to set node id, please configure manually [ 369.075712][T18951] tipc: Enabling of bearer rejected, failed to enable media [ 369.127011][T18956] lo: entered promiscuous mode [ 369.127452][T18956] tunl0: entered promiscuous mode [ 369.130861][T18956] gre0: entered promiscuous mode [ 369.146606][T18956] gretap0: entered promiscuous mode [ 369.159082][T18956] erspan0: entered promiscuous mode [ 369.165715][T18956] ip_vti0: entered promiscuous mode [ 369.451679][T18967] syzkaller0: entered promiscuous mode [ 369.451974][T18967] syzkaller0: entered allmulticast mode [ 369.745554][T18974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.759850][T18974] __nla_validate_parse: 6 callbacks suppressed [ 369.759896][T18974] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3444'. [ 369.837795][T18979] netlink: 'syz.2.3445': attribute type 4 has an invalid length. [ 369.842905][T18974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.875074][T18974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.889446][T18974] bond0 (unregistering): Released all slaves [ 370.167185][T18992] netlink: 'syz.2.3449': attribute type 1 has an invalid length. [ 370.362517][T19002] FAULT_INJECTION: forcing a failure. [ 370.362517][T19002] name failslab, interval 1, probability 0, space 0, times 0 [ 370.362550][T19002] CPU: 1 UID: 0 PID: 19002 Comm: syz.1.3451 Not tainted syzkaller #0 PREEMPT(full) [ 370.362573][T19002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 370.362584][T19002] Call Trace: [ 370.362592][T19002] [ 370.362600][T19002] dump_stack_lvl+0xe8/0x150 [ 370.362634][T19002] should_fail_ex+0x410/0x560 [ 370.362664][T19002] should_failslab+0xa8/0x100 [ 370.362692][T19002] __kmalloc_cache_noprof+0xa3/0x600 [ 370.362715][T19002] ? nft_trans_table_add+0x56/0x430 [ 370.362752][T19002] ? nft_trans_table_add+0x56/0x430 [ 370.362788][T19002] nft_trans_table_add+0x56/0x430 [ 370.362823][T19002] nf_tables_newtable+0xd26/0x1990 [ 370.362872][T19002] nfnetlink_rcv+0x1288/0x28c0 [ 370.362938][T19002] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 370.363002][T19002] ? ref_tracker_free+0x689/0x830 [ 370.363051][T19002] ? skb_clone+0x246/0x3a0 [ 370.363085][T19002] ? __netlink_deliver_tap+0x811/0x860 [ 370.363114][T19002] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.363133][T19002] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.363159][T19002] netlink_unicast+0x7bd/0x940 [ 370.363200][T19002] netlink_sendmsg+0x813/0xb40 [ 370.363233][T19002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.363263][T19002] ? apparmor_socket_sendmsg+0x98/0x360 [ 370.363290][T19002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.363310][T19002] sock_sendmsg_nosec+0x13a/0x180 [ 370.363336][T19002] ____sys_sendmsg+0x54e/0x850 [ 370.363370][T19002] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.363412][T19002] ? import_iovec+0x73/0xa0 [ 370.363444][T19002] ___sys_sendmsg+0x2a5/0x360 [ 370.363471][T19002] ? __lock_acquire+0x747/0x2de0 [ 370.363498][T19002] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.363564][T19002] ? __fget_files+0x2a/0x420 [ 370.363592][T19002] ? __fget_files+0x3a2/0x420 [ 370.363631][T19002] __x64_sys_sendmsg+0x1b1/0x290 [ 370.363664][T19002] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.363716][T19002] do_syscall_64+0x166/0x520 [ 370.363750][T19002] ? trace_irq_disable+0x3b/0x140 [ 370.363771][T19002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.363791][T19002] ? clear_bhb_loop+0x70/0xc0 [ 370.363816][T19002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.363836][T19002] RIP: 0033:0x7feedc79e159 [ 370.363854][T19002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.363871][T19002] RSP: 002b:00007feedd6c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.363893][T19002] RAX: ffffffffffffffda RBX: 00007feedca25fa0 RCX: 00007feedc79e159 [ 370.363908][T19002] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 370.363921][T19002] RBP: 00007feedd6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 370.363933][T19002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.363945][T19002] R13: 00007feedca26038 R14: 00007feedca25fa0 R15: 00007fffe08a9ce8 [ 370.363979][T19002] [ 370.743909][T19017] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 370.743941][T19017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.005706][T19031] netlink: 'syz.1.3459': attribute type 4 has an invalid length. [ 371.045654][T19034] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3460'. [ 371.206022][T19041] nbd3: detected capacity change from 0 to 274877906944 [ 371.225527][ T4933] block nbd3: Receive control failed (result -104) [ 371.246548][T19048] FAULT_INJECTION: forcing a failure. [ 371.246548][T19048] name failslab, interval 1, probability 0, space 0, times 0 [ 371.246580][T19048] CPU: 1 UID: 0 PID: 19048 Comm: syz.3.3465 Not tainted syzkaller #0 PREEMPT(full) [ 371.246603][T19048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 371.246615][T19048] Call Trace: [ 371.246623][T19048] [ 371.246631][T19048] dump_stack_lvl+0xe8/0x150 [ 371.246665][T19048] should_fail_ex+0x410/0x560 [ 371.246704][T19048] should_failslab+0xa8/0x100 [ 371.246733][T19048] __kmalloc_cache_noprof+0xa3/0x600 [ 371.246757][T19048] ? nf_tables_commit+0x906/0xad60 [ 371.246782][T19048] ? nf_tables_commit+0x906/0xad60 [ 371.246818][T19048] nf_tables_commit+0x906/0xad60 [ 371.246846][T19048] ? __pfx_stack_trace_save+0x10/0x10 [ 371.246873][T19048] ? nf_tables_register_hook+0x71/0x200 [ 371.246908][T19048] ? kasan_save_track+0x4f/0x80 [ 371.246930][T19048] ? __kasan_kmalloc+0x93/0xb0 [ 371.246951][T19048] ? __kmalloc_cache_noprof+0x321/0x600 [ 371.246970][T19048] ? nfnetlink_rcv+0x1021/0x28c0 [ 371.246997][T19048] ? netlink_unicast+0x7bd/0x940 [ 371.247026][T19048] ? ___sys_sendmsg+0x2a5/0x360 [ 371.247052][T19048] ? __x64_sys_sendmsg+0x1b1/0x290 [ 371.247078][T19048] ? do_syscall_64+0x166/0x520 [ 371.247104][T19048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.247135][T19048] ? __pfx_nf_tables_commit+0x10/0x10 [ 371.247195][T19048] ? rcu_is_watching+0x16/0xb0 [ 371.247227][T19048] ? __kmalloc_cache_noprof+0x321/0x600 [ 371.247248][T19048] ? nfnetlink_rcv+0x1021/0x28c0 [ 371.247274][T19048] ? nfnetlink_rcv+0x1021/0x28c0 [ 371.247311][T19048] nfnetlink_rcv+0x1caf/0x28c0 [ 371.247373][T19048] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 371.247417][T19048] ? ref_tracker_free+0x689/0x830 [ 371.247465][T19048] ? skb_clone+0x246/0x3a0 [ 371.247497][T19048] ? __netlink_deliver_tap+0x811/0x860 [ 371.247527][T19048] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.247547][T19048] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.247579][T19048] netlink_unicast+0x7bd/0x940 [ 371.247626][T19048] netlink_sendmsg+0x813/0xb40 [ 371.247655][T19048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.247692][T19048] ? apparmor_socket_sendmsg+0x98/0x360 [ 371.247718][T19048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.247738][T19048] sock_sendmsg_nosec+0x13a/0x180 [ 371.247764][T19048] ____sys_sendmsg+0x54e/0x850 [ 371.247798][T19048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.247837][T19048] ? import_iovec+0x73/0xa0 [ 371.247868][T19048] ___sys_sendmsg+0x2a5/0x360 [ 371.247896][T19048] ? __lock_acquire+0x747/0x2de0 [ 371.247923][T19048] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.247991][T19048] ? __fget_files+0x2a/0x420 [ 371.248019][T19048] ? __fget_files+0x3a2/0x420 [ 371.248062][T19048] __x64_sys_sendmsg+0x1b1/0x290 [ 371.248100][T19048] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.248149][T19048] do_syscall_64+0x166/0x520 [ 371.248174][T19048] ? trace_irq_disable+0x3b/0x140 [ 371.248195][T19048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.248213][T19048] ? clear_bhb_loop+0x70/0xc0 [ 371.248237][T19048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.248254][T19048] RIP: 0033:0x7fa713d9e159 [ 371.248272][T19048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.248288][T19048] RSP: 002b:00007fa714bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.248308][T19048] RAX: ffffffffffffffda RBX: 00007fa714025fa0 RCX: 00007fa713d9e159 [ 371.248323][T19048] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 371.248336][T19048] RBP: 00007fa714bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 371.248348][T19048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.248359][T19048] R13: 00007fa714026038 R14: 00007fa714025fa0 R15: 00007ffe868fd478 [ 371.248390][T19048] [ 371.796017][T19069] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 371.822562][T19070] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.3467'. [ 371.864063][T19075] netlink: 'syz.3.3473': attribute type 4 has an invalid length. [ 371.956667][T19078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3475'. [ 372.695038][T19102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3479'. [ 372.697207][T19102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3479'. [ 372.697232][T19102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3479'. [ 372.714061][T19102] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3479'. [ 372.714117][T19102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3479'. [ 374.428474][T19056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.810001][T19114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3486'. [ 374.810096][T19114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3486'. [ 374.845744][T19115] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 374.902497][T19118] netlink: 'syz.3.3485': attribute type 4 has an invalid length. [ 375.007213][T19123] sock: sock_set_timeout: `syz.4.3491' (pid 19123) tries to set negative timeout [ 375.127002][T19127] FAULT_INJECTION: forcing a failure. [ 375.127002][T19127] name failslab, interval 1, probability 0, space 0, times 0 [ 375.127067][T19127] CPU: 0 UID: 0 PID: 19127 Comm: syz.2.3488 Not tainted syzkaller #0 PREEMPT(full) [ 375.127093][T19127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 375.127105][T19127] Call Trace: [ 375.127113][T19127] [ 375.127121][T19127] dump_stack_lvl+0xe8/0x150 [ 375.127155][T19127] should_fail_ex+0x410/0x560 [ 375.127183][T19127] ? __alloc_skb+0x1db/0x7a0 [ 375.127208][T19127] should_failslab+0xa8/0x100 [ 375.127234][T19127] ? __alloc_skb+0x1db/0x7a0 [ 375.127256][T19127] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 375.127276][T19127] ? __alloc_skb+0x18d/0x7a0 [ 375.127301][T19127] ? __alloc_skb+0x1db/0x7a0 [ 375.127331][T19127] __alloc_skb+0x1db/0x7a0 [ 375.127369][T19127] netlink_ack+0x136/0xb30 [ 375.127407][T19127] nfnetlink_rcv+0x260c/0x28c0 [ 375.127470][T19127] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 375.127514][T19127] ? ref_tracker_free+0x689/0x830 [ 375.127562][T19127] ? skb_clone+0x246/0x3a0 [ 375.127592][T19127] ? __netlink_deliver_tap+0x811/0x860 [ 375.127618][T19127] ? netlink_deliver_tap+0x2e/0x1b0 [ 375.127636][T19127] ? netlink_deliver_tap+0x2e/0x1b0 [ 375.127661][T19127] netlink_unicast+0x7bd/0x940 [ 375.127699][T19127] netlink_sendmsg+0x813/0xb40 [ 375.127730][T19127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.127757][T19127] ? apparmor_socket_sendmsg+0x98/0x360 [ 375.127783][T19127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.127803][T19127] sock_sendmsg_nosec+0x13a/0x180 [ 375.127828][T19127] ____sys_sendmsg+0x54e/0x850 [ 375.127862][T19127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.127898][T19127] ? import_iovec+0x73/0xa0 [ 375.127928][T19127] ___sys_sendmsg+0x2a5/0x360 [ 375.127955][T19127] ? __lock_acquire+0x747/0x2de0 [ 375.127981][T19127] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.128045][T19127] ? __fget_files+0x2a/0x420 [ 375.128072][T19127] ? __fget_files+0x3a2/0x420 [ 375.128110][T19127] __x64_sys_sendmsg+0x1b1/0x290 [ 375.128142][T19127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.128192][T19127] do_syscall_64+0x166/0x520 [ 375.128219][T19127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.128239][T19127] ? clear_bhb_loop+0x70/0xc0 [ 375.128263][T19127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.128283][T19127] RIP: 0033:0x7f0dfe99e159 [ 375.128302][T19127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.128319][T19127] RSP: 002b:00007f0dff940028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.128340][T19127] RAX: ffffffffffffffda RBX: 00007f0dfec25fa0 RCX: 00007f0dfe99e159 [ 375.128362][T19127] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 375.128376][T19127] RBP: 00007f0dff940090 R08: 0000000000000000 R09: 0000000000000000 [ 375.128388][T19127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.128400][T19127] R13: 00007f0dfec26038 R14: 00007f0dfec25fa0 R15: 00007ffd75bd5848 [ 375.128432][T19127] [ 375.380438][T19130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3493'. [ 375.384329][T19130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3493'. [ 375.682826][T19148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3492'. [ 375.744372][T19138] netlink: 'syz.1.3494': attribute type 26 has an invalid length. [ 375.917160][T19163] netlink: 'syz.4.3498': attribute type 11 has an invalid length. [ 375.928068][T19161] netlink: 'syz.4.3498': attribute type 1 has an invalid length. [ 375.968004][T19165] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 375.968041][T19165] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 375.968058][T19165] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 375.968816][T19165] [ 375.995153][T19165] ====================================================== [ 376.002179][T19165] WARNING: possible circular locking dependency detected [ 376.009224][T19165] syzkaller #0 Not tainted [ 376.013730][T19165] ------------------------------------------------------ [ 376.020749][T19165] syz.4.3498/19165 is trying to acquire lock: [ 376.026817][T19165] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x600 [ 376.036146][T19165] [ 376.036146][T19165] but task is already holding lock: [ 376.043513][T19165] ffffffff8f8035e0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 376.052404][T19165] [ 376.052404][T19165] which lock already depends on the new lock. [ 376.052404][T19165] [ 376.062810][T19165] [ 376.062810][T19165] the existing dependency chain (in reverse order) is: [ 376.071822][T19165] [ 376.071822][T19165] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 376.078953][T19165] __mutex_lock+0x19d/0x1550 [ 376.084110][T19165] get_device_parent+0x16f/0x3a0 [ 376.089573][T19165] device_add+0x2d4/0xb80 [ 376.094424][T19165] device_create+0x269/0x300 [ 376.099533][T19165] msr_device_create+0x33/0x50 [ 376.104822][T19165] cpuhp_invoke_callback+0x434/0x810 [ 376.110637][T19165] cpuhp_thread_fun+0x362/0x780 [ 376.116023][T19165] smpboot_thread_fn+0x565/0xa70 [ 376.121496][T19165] kthread+0x38b/0x480 [ 376.126089][T19165] ret_from_fork+0x514/0xb70 [ 376.131202][T19165] ret_from_fork_asm+0x1a/0x30 [ 376.136498][T19165] [ 376.136498][T19165] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 376.144060][T19165] cpuhp_thread_fun+0x127/0x780 [ 376.149448][T19165] smpboot_thread_fn+0x565/0xa70 [ 376.154929][T19165] kthread+0x38b/0x480 [ 376.159527][T19165] ret_from_fork+0x514/0xb70 [ 376.164312][T19161] bond2: entered promiscuous mode [ 376.164727][T19161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.176233][T19165] ret_from_fork_asm+0x1a/0x30 [ 376.181538][T19165] [ 376.181538][T19165] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 376.189278][T19165] cpus_read_lock+0x42/0x160 [ 376.194389][T19165] static_key_slow_inc+0x12/0x30 [ 376.199852][T19165] setup_udp_tunnel_sock+0x2eb/0x4f0 [ 376.205658][T19165] gtp_encap_enable_socket+0x3d3/0x5c0 [ 376.211638][T19165] gtp_newlink+0x636/0x16e0 [ 376.216662][T19165] rtnl_newlink_create+0x305/0x7b0 [ 376.222302][T19165] rtnl_newlink+0x166d/0x1c30 [ 376.227509][T19165] rtnetlink_rcv_msg+0x802/0xc00 [ 376.232989][T19165] netlink_rcv_skb+0x226/0x4a0 [ 376.238316][T19165] netlink_unicast+0x7bd/0x940 [ 376.243623][T19165] netlink_sendmsg+0x813/0xb40 [ 376.248918][T19165] sock_sendmsg_nosec+0x13a/0x180 [ 376.254477][T19165] ____sys_sendmsg+0x54e/0x850 [ 376.259788][T19165] ___sys_sendmsg+0x2a5/0x360 [ 376.265004][T19165] __x64_sys_sendmsg+0x1b1/0x290 [ 376.270477][T19165] do_syscall_64+0x166/0x520 [ 376.275595][T19165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.282008][T19165] [ 376.282008][T19165] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 376.289654][T19165] lock_sock_nested+0x41/0x100 [ 376.294943][T19165] inet_shutdown+0x6a/0x390 [ 376.299971][T19165] nbd_mark_nsock_dead+0x2cb/0x550 [ 376.305607][T19165] recv_work+0x1cee/0x1e10 [ 376.310546][T19165] process_scheduled_works+0xc3d/0x1630 [ 376.316611][T19165] worker_thread+0xa47/0xfb0 [ 376.321722][T19165] kthread+0x38b/0x480 [ 376.326303][T19165] ret_from_fork+0x514/0xb70 [ 376.331407][T19165] ret_from_fork_asm+0x1a/0x30 [ 376.337042][T19165] [ 376.337042][T19165] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 376.344692][T19165] __mutex_lock+0x19d/0x1550 [ 376.349803][T19165] nbd_queue_rq+0x373/0xff0 [ 376.354822][T19165] blk_mq_dispatch_rq_list+0x499/0x1990 [ 376.360882][T19165] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 376.367729][T19165] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 376.374235][T19165] blk_mq_run_work_fn+0x16c/0x300 [ 376.379785][T19165] process_scheduled_works+0xc3d/0x1630 [ 376.385852][T19165] worker_thread+0xa47/0xfb0 [ 376.390961][T19165] kthread+0x38b/0x480 [ 376.395544][T19165] ret_from_fork+0x514/0xb70 [ 376.400641][T19165] ret_from_fork_asm+0x1a/0x30 [ 376.405924][T19165] [ 376.405924][T19165] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 376.413128][T19165] __mutex_lock+0x19d/0x1550 [ 376.418240][T19165] nbd_queue_rq+0xc1/0xff0 [ 376.423172][T19165] blk_mq_dispatch_rq_list+0x499/0x1990 [ 376.429236][T19165] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 376.436086][T19165] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 376.442583][T19165] blk_mq_run_work_fn+0x16c/0x300 [ 376.448132][T19165] process_scheduled_works+0xc3d/0x1630 [ 376.454196][T19165] worker_thread+0xa47/0xfb0 [ 376.459316][T19165] kthread+0x38b/0x480 [ 376.463901][T19165] ret_from_fork+0x514/0xb70 [ 376.469014][T19165] ret_from_fork_asm+0x1a/0x30 [ 376.474300][T19165] [ 376.474300][T19165] -> #3 (set->srcu){.+.+}-{0:0}: [ 376.481418][T19165] __synchronize_srcu+0xc9/0x2f0 [ 376.486871][T19165] elevator_switch+0x1e8/0x7b0 [ 376.492148][T19165] elevator_change+0x2fa/0x480 [ 376.497427][T19165] elevator_set_default+0x375/0x440 [ 376.503138][T19165] blk_register_queue+0x3f3/0x4e0 [ 376.508677][T19165] __add_disk+0x6b8/0xdb0 [ 376.513530][T19165] add_disk_fwnode+0x100/0x3a0 [ 376.518809][T19165] nbd_dev_add+0x733/0xb60 [ 376.523739][T19165] nbd_init+0x168/0x1f0 [ 376.528419][T19165] do_one_initcall+0x250/0x870 [ 376.533704][T19165] do_initcall_level+0x10a/0x1a0 [ 376.539159][T19165] do_initcalls+0x59/0xa0 [ 376.544000][T19165] kernel_init_freeable+0x29d/0x3e0 [ 376.549708][T19165] kernel_init+0x22/0x1d0 [ 376.554548][T19165] ret_from_fork+0x514/0xb70 [ 376.559648][T19165] ret_from_fork_asm+0x1a/0x30 [ 376.564931][T19165] [ 376.564931][T19165] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 376.572748][T19165] __mutex_lock+0x19d/0x1550 [ 376.577866][T19165] elevator_change+0x1af/0x480 [ 376.583148][T19165] elevator_set_none+0xb5/0x140 [ 376.588508][T19165] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 376.594841][T19165] nbd_start_device+0x189/0xb30 [ 376.600205][T19165] nbd_genl_connect+0x167d/0x1cd0 [ 376.605740][T19165] genl_family_rcv_msg_doit+0x233/0x340 [ 376.611804][T19165] genl_rcv_msg+0x614/0x7a0 [ 376.616830][T19165] netlink_rcv_skb+0x226/0x4a0 [ 376.622103][T19165] genl_rcv+0x28/0x40 [ 376.626608][T19165] netlink_unicast+0x7bd/0x940 [ 376.631894][T19165] netlink_sendmsg+0x813/0xb40 [ 376.637169][T19165] sock_sendmsg_nosec+0x13a/0x180 [ 376.642705][T19165] ____sys_sendmsg+0x54e/0x850 [ 376.648004][T19165] ___sys_sendmsg+0x2a5/0x360 [ 376.653198][T19165] __x64_sys_sendmsg+0x1b1/0x290 [ 376.658653][T19165] do_syscall_64+0x166/0x520 [ 376.663761][T19165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.670164][T19165] [ 376.670164][T19165] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 376.678768][T19165] blk_alloc_queue+0x544/0x690 [ 376.684051][T19165] __blk_mq_alloc_disk+0x194/0x390 [ 376.689691][T19165] nbd_dev_add+0x494/0xb60 [ 376.694620][T19165] nbd_init+0x168/0x1f0 [ 376.699305][T19165] do_one_initcall+0x250/0x870 [ 376.704600][T19165] do_initcall_level+0x10a/0x1a0 [ 376.710068][T19165] do_initcalls+0x59/0xa0 [ 376.714910][T19165] kernel_init_freeable+0x29d/0x3e0 [ 376.720620][T19165] kernel_init+0x22/0x1d0 [ 376.725467][T19165] ret_from_fork+0x514/0xb70 [ 376.730571][T19165] ret_from_fork_asm+0x1a/0x30 [ 376.735859][T19165] [ 376.735859][T19165] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 376.743065][T19165] __lock_acquire+0x164c/0x2de0 [ 376.748435][T19165] lock_acquire+0x115/0x350 [ 376.753450][T19165] fs_reclaim_acquire+0x71/0x100 [ 376.758898][T19165] __kmalloc_cache_noprof+0x61/0x600 [ 376.764706][T19165] get_device_parent+0x255/0x3a0 [ 376.770157][T19165] device_add+0x2d4/0xb80 [ 376.774997][T19165] firmware_fallback_sysfs+0x2dd/0xa50 [ 376.780975][T19165] _request_firmware+0x1049/0x1780 [ 376.786601][T19165] request_firmware+0x36/0x50 [ 376.791795][T19165] devlink_compat_flash_update+0x157/0x2c0 [ 376.798112][T19165] dev_ethtool+0x23cf/0x29e0 [ 376.803228][T19165] dev_ioctl+0x392/0x1150 [ 376.808071][T19165] sock_do_ioctl+0x23e/0x320 [ 376.813169][T19165] sock_ioctl+0x57a/0x7e0 [ 376.818011][T19165] __se_sys_ioctl+0xfc/0x170 [ 376.823116][T19165] do_syscall_64+0x166/0x520 [ 376.828225][T19165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.834661][T19165] [ 376.834661][T19165] other info that might help us debug this: [ 376.834661][T19165] [ 376.844879][T19165] Chain exists of: [ 376.844879][T19165] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 376.844879][T19165] [ 376.856870][T19165] Possible unsafe locking scenario: [ 376.856870][T19165] [ 376.864307][T19165] CPU0 CPU1 [ 376.869660][T19165] ---- ---- [ 376.875010][T19165] lock(gdp_mutex); [ 376.878895][T19165] lock(cpuhp_state-up); [ 376.885736][T19165] lock(gdp_mutex); [ 376.892143][T19165] lock(fs_reclaim); [ 376.896122][T19165] [ 376.896122][T19165] *** DEADLOCK *** [ 376.896122][T19165] [ 376.904256][T19165] locks held by syz.4.3498/19165: 3, last CPU#1: [ 376.910576][T19165] #0: ffff888056c0a258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_compat_flash_update+0xa6/0x2c0 [ 376.921632][T19165] #1: ffffffff8ebf7d88 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 376.931985][T19165] #2: ffffffff8f8035e0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 376.941294][T19165] [ 376.941294][T19165] stack backtrace: [ 376.947173][T19165] CPU: 1 UID: 0 PID: 19165 Comm: syz.4.3498 Not tainted syzkaller #0 PREEMPT(full) [ 376.956531][T19165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 376.966578][T19165] Call Trace: [ 376.969859][T19165] [ 376.972782][T19165] dump_stack_lvl+0xe8/0x150 [ 376.977375][T19165] print_circular_bug+0x2e2/0x300 [ 376.982405][T19165] check_noncircular+0x12f/0x150 [ 376.987365][T19165] __lock_acquire+0x164c/0x2de0 [ 376.992220][T19165] ? lockdep_unlock+0x5c/0xd0 [ 376.996895][T19165] ? __lock_acquire+0x1511/0x2de0 [ 377.001917][T19165] lock_acquire+0x115/0x350 [ 377.006411][T19165] ? __kmalloc_cache_noprof+0x61/0x600 [ 377.011872][T19165] fs_reclaim_acquire+0x71/0x100 [ 377.016889][T19165] ? __kmalloc_cache_noprof+0x61/0x600 [ 377.022341][T19165] __kmalloc_cache_noprof+0x61/0x600 [ 377.027631][T19165] ? get_device_parent+0x255/0x3a0 [ 377.032752][T19165] ? get_device_parent+0x255/0x3a0 [ 377.037862][T19165] get_device_parent+0x255/0x3a0 [ 377.042812][T19165] device_add+0x2d4/0xb80 [ 377.047141][T19165] firmware_fallback_sysfs+0x2dd/0xa50 [ 377.052596][T19165] ? kfree+0x1c5/0x650 [ 377.056666][T19165] _request_firmware+0x1049/0x1780 [ 377.061778][T19165] ? __pfx__request_firmware+0x10/0x10 [ 377.067229][T19165] ? xa_get_mark+0x67/0x7a0 [ 377.071744][T19165] request_firmware+0x36/0x50 [ 377.076412][T19165] devlink_compat_flash_update+0x157/0x2c0 [ 377.082209][T19165] ? dev_ethtool+0x2262/0x29e0 [ 377.086972][T19165] ? dev_ioctl+0x392/0x1150 [ 377.091509][T19165] ? sock_ioctl+0x57a/0x7e0 [ 377.096005][T19165] ? __se_sys_ioctl+0xfc/0x170 [ 377.100763][T19165] ? do_syscall_64+0x166/0x520 [ 377.105528][T19165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.111595][T19165] ? __pfx_devlink_compat_flash_update+0x10/0x10 [ 377.117920][T19165] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 377.123729][T19165] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 377.129532][T19165] dev_ethtool+0x23cf/0x29e0 [ 377.134130][T19165] ? __lock_acquire+0x747/0x2de0 [ 377.139087][T19165] ? __pfx_dev_ethtool+0x10/0x10 [ 377.144034][T19165] ? inet_ioctl+0x484/0x560 [ 377.148540][T19165] ? lock_acquire+0x115/0x350 [ 377.153221][T19165] ? dev_load+0x21/0x1f0 [ 377.157467][T19165] ? dev_load+0x21/0x1f0 [ 377.161709][T19165] dev_ioctl+0x392/0x1150 [ 377.166040][T19165] sock_do_ioctl+0x23e/0x320 [ 377.170629][T19165] ? __pfx_sock_do_ioctl+0x10/0x10 [ 377.175731][T19165] ? hook_file_ioctl+0x1f2/0x600 [ 377.180672][T19165] sock_ioctl+0x57a/0x7e0 [ 377.184998][T19165] ? __pfx_sock_ioctl+0x10/0x10 [ 377.189844][T19165] ? __fget_files+0x2a/0x420 [ 377.194436][T19165] ? __fget_files+0x3a2/0x420 [ 377.199120][T19165] ? __fget_files+0x2a/0x420 [ 377.203727][T19165] ? bpf_lsm_file_ioctl+0x9/0x20 [ 377.208667][T19165] ? __pfx_sock_ioctl+0x10/0x10 [ 377.213522][T19165] __se_sys_ioctl+0xfc/0x170 [ 377.218127][T19165] do_syscall_64+0x166/0x520 [ 377.222727][T19165] ? trace_irq_disable+0x3b/0x140 [ 377.227753][T19165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.234178][T19165] ? clear_bhb_loop+0x70/0xc0 [ 377.238854][T19165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.244743][T19165] RIP: 0033:0x7ff5a439e159 [ 377.249152][T19165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.268766][T19165] RSP: 002b:00007ff5a25f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.277187][T19165] RAX: ffffffffffffffda RBX: 00007ff5a4626270 RCX: 00007ff5a439e159 [ 377.285159][T19165] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000008 [ 377.293126][T19165] RBP: 00007ff5a443506b R08: 0000000000000000 R09: 0000000000000000 [ 377.301096][T19165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.309069][T19165] R13: 00007ff5a4626308 R14: 00007ff5a4626270 R15: 00007ffef3daf928 [ 377.317044][T19165] [ 377.364955][T19172] ip_tables: iptables: counters copy to user failed while replacing table [ 378.619153][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.619199][ T1310] ieee802154 phy1 wpan1: encryption failed: -22