last executing test programs: 18.193062997s ago: executing program 4 (id=3246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xf}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r7, 0x1, 0x4000, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb}}}}]}, 0x40}}, 0x4000010) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80620}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa4, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40804}, 0x8c0) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmmsg$sock(r5, &(0x7f0000003180)=[{{&(0x7f0000000240)=@hci={0x1d, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="024468f75872dcc35c4a865167ce141180f86d6d2d2b667592a3c33936463143e7bb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86995e3ae7dbd8b6bc88af335ebe083ced9a2b1f3b847103b7af298aabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25000000000000", 0x7e}, {&(0x7f0000000bc0)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d94173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x200000c1) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r4, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x440b0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000002d80), &(0x7f0000002dc0)=0x8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000240), &(0x7f00000000c0)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x20000040) 17.441519993s ago: executing program 4 (id=3251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"9102fb09b95cd846f38d86bd744d83eb", r4, r5, {0x2755, 0x7}, {0x1, 0x2}, 0x0, [0x2, 0x4, 0x52, 0xffffffffffff35cf, 0x738, 0xffff, 0x8000000000000000, 0x1, 0x3, 0x3, 0xdb4, 0x9, 0x7, 0x8, 0x7, 0x80000001]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x4b, 0x0, 0xad) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000006c0)={"0b7e17c15b174b93b1521e9991fdf469", r4, r6, {0xac94, 0x1}, {0x6, 0xfc}, 0x80, [0x1, 0xc9c, 0x972, 0x4, 0xc, 0x0, 0x9153, 0x10001, 0x3, 0x8001, 0x9, 0xfffffffffffff001, 0x3, 0xffffffffffffff45, 0x2f3, 0x400]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), 0xce, r0}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = epoll_create(0x7) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket(0x21, 0x80000, 0x1) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) (async) sendmsg(r13, 0x0, 0x44000) (async) getpeername$packet(r13, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000006a00020026b97000fedbdf000000000008000500", @ANYRES32=r14, @ANYRES32=r8, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r10, @ANYRES16, @ANYRES32=r12, @ANYRESDEC=r11, @ANYRES8=r15, @ANYRES32=r10, @ANYRESOCT=r11, @ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000ff3f000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070209000000ffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r17, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 3.667199414s ago: executing program 1 (id=3329): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000380)=0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) poll(&(0x7f0000000240)=[{r3, 0x86}], 0x1, 0x9) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010127bd7002fbdbdf251000000008000300", @ANYRES32=r6, @ANYBLOB="080006"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0x13, 0x0, &(0x7f00000005c0)="07ec0c191cd2749bf8ffc2c4257f078b3909d0", 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r2, @ANYBLOB="b60001f2cea6feb89815d711201ac78f9b1bab6566b7f272a5c708b9d68037be3d019b42d83ddf"], 0x3c}}, 0x8000) 3.236088491s ago: executing program 1 (id=3334): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x80800) read$alg(r2, &(0x7f0000000240)=""/72, 0x48) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1b, &(0x7f0000000000)=0xbb, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x51}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, 'hj'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.773458924s ago: executing program 1 (id=3339): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x34, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x390c, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x410c0}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x20040000) (async) socket(0x10, 0x3, 0xf1) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0x0, 0xb}, {0xfff1, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x7}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) (async, rerun: 64) r12 = socket$kcm(0x11, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) 2.177226877s ago: executing program 2 (id=3343): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x4, 0x1}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @rand_addr=0x64010101}, @in6={0xa, 0x0, 0x0, @empty}], 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @private1={0xfc, 0x1, '\x00', 0x7}, [0x0, 0xff, 0xffffff00, 0xffff00], [0x0, 0xff000000, 0x0, 0xff000000], 'veth0_vlan\x00', 'veth0_to_team\x00', {}, {}, 0x2f, 0x1, 0x1, 0x9}, 0x0, 0xd8, 0x110, 0x60030000, {0x0, 0xff000000}, [@common=@srh={{0x30}, {0x1bb, 0x4, 0x50, 0x7, 0x3, 0x8, 0x83f15b5406f1ba61}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x6, 0x6}, {0x3, 0x2, 0x5}, {0xffffffffffffffff, 0x4, 0x6}, 0x1, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 2.018862095s ago: executing program 2 (id=3345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x14, &(0x7f0000000780)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x7, 0x0, 0x3, 0x2, 0x1, 0xfffffffffffffff8, 0x1}, @map_fd={0x18, 0x654054c2a2b21b4d, 0x1, 0x0, r0}, @generic={0x8, 0x2, 0xc, 0x78c, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1000}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x6}, @jmp={0x5, 0x0, 0xd, 0xa, 0x6, 0x80, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001200)={0x60000010}) (async) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000003c0)=0x7, 0x4) (async) epoll_create1(0x0) (async) r4 = epoll_create1(0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$rds(0x15, 0x5, 0x0) (async) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x80002005}) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x81) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0xfffffffffffffe7d, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0xa}, @TCA_SKBEDIT_PTYPE={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x500}}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) (async) setsockopt$sock_int(r7, 0x1, 0x52, &(0x7f0000000280)=0x2, 0x4) readv(r7, &(0x7f0000000500)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000680)="5b71372eb3e23a56084945e31640f78bc6dd06dc03095f0809f2e2d439a7609db775e71e5f45f9cf36737d1ba5646a64b404457ecce47ec9b7bd4ea6a7f5b5b65db695c358ad4832162dc87690135645995fff22793c65da01486420287560b4ab567200845c91981bc87100965a131f7f07a796734273bd50939b0d952a6ce6e9c0ad17c660d1b5edd43aee9bdc32a03f4e121434845a637b92fc2559507e221f7973d6f21297a3d38c110192369f6ed325f3efdd25cc6528b9e0505670f55a22b3992603b05f1090b6baae60", 0xcd) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r8}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.91378271s ago: executing program 1 (id=3347): syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (rerun: 32) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000bc0)}}], 0x1, 0x400c011) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) (async) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x60}}, 0x24040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x4, 0x206, 0x4}]}}]}}]}, 0x5c}}, 0x24040084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async) unshare(0x2a060400) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 64) connect$unix(r8, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) 1.77056865s ago: executing program 0 (id=3348): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000880)={0x27, 0x0, 0x0, 0x6, 0x0, 0x2, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) (async, rerun: 64) close(0x4) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002d00070100000000ffdbdf25097c000008000180040006000400028008000380040008"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="c4cc90477157deed7f5503abd7b60900c2e56a57c7c074ea4e1e6f1be9eeccc4a99867ac6a34e66ea03a0f9ba11bab6ee2f4ff34fa715c917144c84e62f718daa272be382d27b7a0b6f66ab5dc793a41a1c13e1778", 0x55}, {&(0x7f0000000100)="262676e907137cb9a400818dc68537cc325aee081ec67df18a52698b7af276102b6e2f07e7c7bec59caadd172b52bbea337f0ef6a59a8d61bc699239cbba425ae81c42b8fb2e87da1f9f53e33984b8cf581132370f244655980bc4ae3099a73bc1", 0x61}, {&(0x7f00000001c0)="d83554de610fbf148919ba8577e46404f17423169e004da00014324cc93a5b2d272ac248ebad3afd1b7254c2c2aa2045a93f68bc5ec25d8570adc232f44d3fe657ea42ef3ab48da757c3950d1dc4a971cc0492fcd2a247ac81a7280842727e6257f31f6f85254d77adfcadac3eb03a3b2acfa5532893584fbbdfa1b1f42597a81ddef6e0615f279ea70e556b7a6c8c48b6df8312c684cc55b9b031700017690f6018500aa37b6b", 0xa7}, {&(0x7f0000000400)="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", 0x1000}], 0x4, &(0x7f0000001440)}}], 0x1, 0x8000) 1.595293684s ago: executing program 0 (id=3349): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000000)='^,\'\x00', 0x403, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x351c]}, {0x7, 0x8d0a, 0x10001, 0x7fffffff}}, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x6}, {[0x7, 0x7, 0x4, 0x3]}, 0x2, 0xe2, &(0x7f0000000340)=""/226}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000500)=ANY=[@ANYBLOB="30030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x4000011}, 0x80) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fe0000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2482172b6fec147be1355d5a143913000000", @ANYRES16, @ANYBLOB="010000000000ffff"], 0x24}, 0x2, 0x34005, 0x0, 0x8010}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1d0000001400010000000000000000002d000000020600000500"], 0x1d}}, 0x24084000) 1.310718775s ago: executing program 3 (id=3351): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x3ff, 0x7ff}, &(0x7f0000000340)=0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b87, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4) 1.262223915s ago: executing program 0 (id=3352): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000001000)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005a0001ff7f000000000000000400fd80080003"], 0x1c}], 0x1}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240)={0x80, 0x7a, 0x3, 0x1}, 0x8) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f00000000c0)='}', 0xff41, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 1.173719643s ago: executing program 3 (id=3353): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe94}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000000010000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095000000000045bb"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 1.063548235s ago: executing program 0 (id=3354): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f0000002dc0)={0x14, 0x26, 0x303, 0x70bd28, 0x25dfdbfe, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000844) r10 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r14], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 982.616778ms ago: executing program 3 (id=3355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x8000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@getlink={0x4c, 0x12, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x1800, 0x2004}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x16ea}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}, @IFLA_EVENT={0x8, 0x2c, 0x13}, @IFLA_VF_PORTS={0x10, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x4c}}, 0x40000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in6=@private1}}, &(0x7f0000000380)=0xe8) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000003340)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x42, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x7fffffff, @loopback, 0x8}, 0x1c, &(0x7f0000002b80)=[{&(0x7f0000000180)="4d0345edc1313cd7152aad502f22336edf8746e9e2f7d048b1833e3b3f283a5b48f881359f1025c0de827027dc39ec3c7e1de5faa2b0ec4650ad9e9a05b9297fac9701246afff785fcd49b2c99ec3bb4af67255762db8f8076dd937d84", 0x5d}, {&(0x7f0000000840)="e3b2ccb7136d90f22e8c027c421e5ac9d9bffc3b465a31656a3277c476d369760c388c4cfddfb216946d56de89ecf113a02f68cf189e6d2e6f82622e1659994bf9fac0a499b0482311f102ad129bc11df2dec5f44bbb6c11bddfe9", 0x5b}, {&(0x7f0000000340)="16eeb22c4e767feb5b1e27d6718d9991f41530d4b0197a5be03d3fabbd6ad34b3c56a99c33e3e0d14a810117a59ef821d554917ee13a83f7b5ad22f0580e2f9de928818cc344e9e6c8b5503925b85a099327ebd7f1dab16770b1f809f5b45598acfaf6f3cf3fff20a97392fe615ad38b364cd2c2986774a99f3c97f84f73ab4a57d4367a586d954de631b337896ceaf5e073204beed22672404180a2c15b1642c6d1993762b6192beb5991a0d21a3160cdc8285b770c3f5a4878308e0a66c2967177567e8768d286ec1f308905d82b7602374ee7cb79c8cb5a097e2538c3fed087457c1550c3989784dd0c6adf1cc1092c", 0xf1}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="f81f3178c886cfd8f86aaf45719831eca51e27d4acef10dea33284eb2ca86cdc1fca53ae20c54d1e928d3396d2ad82a6c2f004107d288d4926cf56a31d783ad566c9ed9d21a12b87406391c56b59520dd135331d677392732117c13ad1ab0838cc17cdee41809d245404baddd8d1eb6ecd139c5dd6490c6b159d054c992d0b4871d5697d300b1fe75e6425b651d163ce08cca91f26cba2a5500450", 0x9b}, {&(0x7f0000001b40)="889365b83f37fe3a8ff85e200b80b87dfc0ce53cee25396ab9a4926d3f3c5b1fde01adc5e92c5b5ce809d49bce51078d8bd4eafc19c2def312d27ed689", 0x3d}, {&(0x7f0000001b80)="5ba15284a4544ed7e3bd7d1051e30f974cfa977deb0b5ddfdd6f0be929796b8305bb8ebb8dfc364c63310834a8fde5d721ef8796365876032714a9100f9db4227bc27eb402af731884a689c13367421fda6c99e502f3e59b10ad9a9615802356878c0ee5a3ef4b244c5d7965792f5dab542f9a9bcc898fdbcda9b0f36970ef1ef5db7d282ef8d7aa8555b1131f1e03b958f10568c111dc0fbc801ffd9d4096c9d4c0bc054725d76e9d0bbea4f77a5b2a5d5bf28a20ed71708c307c0af870dfac867e9f708f78e38d311534ed48144300ed326e2b5500ddc324fbbe46b78b1b563b082b84de5e6d21b80aae5b3f3d19ccd6c9e256be420b1b6da4ac77e2361250a72975dedfae0952bfdaf98af0297035229bf88f4ec679c02dbbdb2742f01c27357531e6c4490f20f989ee89877ccfa5f1b0106b20b757898ec56b76000d67609282cc733bcb8ea9a954a042eefbce1ee842eb3e4cefb54e8e9b7b0fbf89ed24b353d4b12e6f13ea5b5c9e9866ef2d080092f748a9c50e7c080d978ffb52b80b474c4fcc1495105eb4c5145f38db08210b9afaa4fcdae7e789298835fe4bc76f9677bb5917e2d7292d4f0d53936fed187097b1c015c54e65b7c4db144814f39500c324df28428f9cf8cd930ed064ca32b958b3d38ef7eb7501522df6281abf4c38b94a3c1a96807be7790079248f5d06c5091cc8e1b5a8798ccda8b4a8d86b2515479e4bd4ee4d2b02cc09d12e3407761eb0f51ffd0679abf710de4a387566f9c9875338c64d0008b88bdce6a8fb6d18331ab11f0cfdb4c8c58cf72dc5e39cada69e75fa977b143f9262603ac8079bf2357c7ee6351abea17b272a2a9e32f529bf3ac690939ac7990b0baccdf2ce203a1e4bd0c0bd8c4ef15a6746c811d17332c48e4d8444df1272ad1141408ce02adafacee386248b9837735dd623fdecfd83e38a4efc5370f36b8e12eabb9d416ba1dc305dbe4dfc7de7d6c8e523d4b6c575a57e7c54b061ea9bc2312a5444a5c047c59b5ff169b81d5c45a8c0fd7ec083bf0d3680e2cc65a271cab3654c152bd4183e3e220b4ef7a63dfb07769eb9ba5831c7810f64eeb92346854b729f2e0303c88007d2bf39455eda5c7fd601420de08ef4be208597e194aac12cfe275e7c76542b38b2a838a410250477d29372c351a9215f9f907e791f6cd374e7376bdfaf727788f5343ca39781e43eda4370db57431bab5a5e943f6c7e7c75b21a540e6818c5b8ca15570c5af455e633eebd0ef556af4f32950acdad487a49f1ce44e17764e2d4f96d3c9c69a0371888414ef441bc5cc6421e51b334428c149fc41fcb0ae6c6cfc99aec09be81070a22a9448b651ff4b1e18c2e60e7d94375604b1201bfc6079cc72519bfddf3a85ac025a7fdb00794156873867917d1225908f9d886e18e5907da7dbdb34d2b9a53e96498dc9b6a90f99839ee2521d48c095a0a0da7d3c9c8784224293d1edb0b6060bab42199048ba5e7fb01c8e156a8f08da7650c3f9ae7a892ae7c835796fcee2227421ec8af0d7574cd3fb91ff89e05f0f623cfca16b23d28814527f3ab3a7c28900fd605c4ba15d4c9228ace994eed100877785176f311ca58640eeb638f5abfea90ba07319f18f091625815138032ccdbe92b272971616f3e93be9672d57276b7b1e08e1d0358cf91e950dcfb0398525149e9e67638dbad78391055b069b63e3ef715f5ca208c5f5c35b3a2ca8db3d7147865c6836bc4729f187d5141408a3e721d8634835455200c052c318b05ea9a4c05d1d8abd6789b8cfe1fb18a2ff87d05e6d60ac419a8032eeeb11fdb3d850e86a5037d789aedb8e5356b0cf89d722c2ec1d31c784744ccf38613d8e10c35b5a46074695e9fea9650b31f2527ff68ed0c67e8cc4cd1678b5e131ff52249623a3853163606ed2f81c2c4e6f61aff15a3aab17c009198c2a1163a696d78f7ac1c5793139e85cb8cd50e0e81642b1924ef53165806463413966239f9b9ac908e821e66070e326a52c12935727d1a8a52c63f9f3bd4488811f2eeb7b22b69e6bda9e296605305a6f88c0c3480d2c13adddbc32ca02c0221923a41b7a58fd1251bd1924c602dba82eba2b6698fa8f8b0c0a295236dbc76d39d5a7c6cc5c5cc8a3158835394ea16584ec35ca86ecc69a38d2ce841478d34711897ed4033623d9ecfbd9cd1f1bcd093e243ef37ad3326e65f2e53120a2371297c7ae6451c44506dfdbe3e30819a23140f6ae6b26406813bcc5b5ca2107cfe74085e1dcacaf147800762c69249772553abe54811614a907532c6d214ee81c60085696fe7e5ba83235a20b1518445c909dae6cb54594579d95767d0782d182a2bb287d6d7f0d80c1ba7cc556055f2edefc7c113e6908fb69ab3b5c43c2fb61ca8de1f00e3546a1c1f7b49e90e6a528786b0923815aa5e65e60f4db9b89c250d1b7bc2af96031a20ae4be6523b7d162014ecea9e50a3091e2ce506624d5492ccd3737d040e7ea3282a7d9c8cc04b972dd843dbed3b02379a3e01e90963e2b2ee6f27e0acad856ad001f6df75d227bec6101e91d0fd96e3cbf4dd0db5b1c7bbdd5df33f78a3da77c0d9be74a6b9d98e8e369c1c9263975e85dbab70dbc56405ee79351b6f12e4ef0c6bd619612e7abc53760f945d3d7b542040fe0d489c9d0e91ce57dad3f9313d881583b96bd691671cb4b86a9fdaf4dd57f54f88e1856dfc8d0ed5cd6ddf2c3a51ae8efcc745e28cb714c2033bf6fc17d87508b3343e2ca2c3557a25d532dbb2d818d4eb08da7335a34c29a0e4e6d96f6a31c225fa650ffcea4928c7cda1832355120266e1cd5722f19af089d131fa2e33459e9efcaa42c34b33aa4e2498094f99acae036c695c87fc1f949cb2778c992d7bf0bc3cc795941f3eca3193a0666c1e57e8e37f6ab7e859e6fb33142c7f46a5aedcba0c16ff2adf594a6049758c6709e7c66f5915de813dc800a9a8084bd228807b539814754f622b911988572963e8b7332ec370af7b5d3d3c91c4dede4d939998bf5aa8bbaf2d6c0dfdd5909fb9f3effd9adf39586ea173114611812c5723e843d7cc76f90391992e9fb0bb1f454b55b38eb9631f91109c78bc80d1e6ae751e09eb9ed8c1e000c072dfcd05e74498e0d7cf467db652f66f3ac337367d6b270bdea7fff75c3a3529b59888c9a15d92c45174767eabd805c530f31b26e6fcfcac79d2df0ee5814da422c761c1090749db11f4ff529d30b212f5be34b427bfea4d6272409b20782fda3e957f07e2a8b8a9c4dacba6191c1ad0d102473efecc522da4a29c1b8fc403d5a8aaca1747a0f5f0942ff5892c1f3ecc44e9b1ec7fab94eeee29bdaea8ab55b04604b827ab73fda61d0714e3aba227a5077e548b8fc4a2eaa03c92a6239dea851de83f4949af4f8a790d91826682c04cfddefb6b746badd0fcb34ba6f436cc95b38aeaebf8ed31e15dea90a505883a2db5c102471aa420f7c58f531d680e0a46b8e8ce65c0f21a4b376a19199415571055cf1c495a078496ed1f6be38b47204d490ebc68730580abc54a7d915e78efee9455737da6f952e24d33f9e47b38e7db939dd2486038ab8aa84018c19a9d960fa75dbd5dd8e27d528e45322bf460852d38cbf1106700d7bf386a4db4d1c4c5597b227c59764cd97bcebf3fdaa3046542989ea3ca6153df5494866ff33d805ff45f79dbc5467be6938f91da384d7853e91a6881ba3b185842f25b921935a5cae94df87c44c0d9eeed6359cfa977cbe1f1d79b1ebbf8ae1c8bcd20a64a8e7d84e5b93215bf90ee5d2c44852390ad46db0aad465488d37d53743f56c92a2831ffcc3e5b9235be216dac34f5ff05f467b4cb463e192cab025b542689000399c54b47d77cc7adb3538cb20a9212d4c8c281650d2a60bc024df78230cd58c4512dbb32945a8fe9c097eec48291c17795ef121e8d451093c3f24e0671069618768cd56097136eb8f7d656b4754718daa29b5d09ef7563a5a171c25421d4c3e87eebcfc0f06f026e7b8f0cb6663862a9ef07ed7bf204ec1db709112bef453eeab3a8c99636b4c58ac75e005927739454758b2481bcc03be5cc8f56f8878ee47768008b48a84f1da9792665bab433f7b3926580097fcd005eec7982b3c72e00e9c5929bb2f31eda1d884adcc12d6a3b360e92522d90834a5c5f85dff25c3a0f50b0eb121ff45e32d333676b419dfd0471d57de245d0f7833ea9bbc78bb448d9aaa81c0dbc4a9bc9a8f04dedfc91b83024a1834b692f16c6105c02dd05bf9c147957890e7e430996d427b01df3357c744cfa1dc26ebc7e4688d7f1784baf1336c600cf1dc7df908c2a38e4e91496c424fe2681d28d4966782faa11218d1f8e60adeffaacb2d90cbebdad2607b0748db84e309e3818cfadd87574fc3ad101e4cac022def682d0668293160aeb5e5fe82ab9239a845c3308fc25c272e8a99a3f352ff10b9accde7a1e14c74ae2e43dbabad9d7ee2ec313995f85a951e59e2502e7c87757befb2cfb2776abc6f451730709a3ed2bd5345197e93c71679f70479c5d79b76e87b1a76b4890d845196f8436725dc803d52d8876196eeb8caa5e9c30163a16a067303e4d3b431797a92ae483f25175890de4576956c2570cd9ba1c3703bea12569049c45d556ffb92e218ae32dc1bf3293bcc597916a517a245d4afea79c7ef9e901ca4fb404a9459dad41ae182b2eb49b6305f8bc382d94380f9e97c8bdc472c8aa0a10132b8236c32c203263296f705fbadc39c8c00aa4a8387dcc51097bebd0cd735f97980d63c1bd63c25b5fb034fc83c7e1f9458564105c65f501a046f8fb1c70a2c1f3fb18275ef0b219d8cb4e148a41411fbf858a9e04b901a339c4a7af1e331508db14b6084bd687abd6d065d3b0001818de80bcf2e497b2f2bd4cb7c10be81622b09a71c0c7e4dbf0d205dcef4371e25115202e3da0fe68aedb5e544c7d7da51f939451465e9193e3a89f96a9e6fe3eac27bd9a4b7159e56cb7e4113c01023186de0d33cd0625586e1251f353f987e6a135dcdeac8a5c9a34ddadd252881bf86ac4d2bdbcc15a4f6f7c1a613fbaf84d8d5dc070d052f51b59c1483b70e5ffcfa1ad861a90c9c8cebb69400fdcf8c1d1216f2e603c83c934abbbb27eefa2c3730ef0702898ddb5f1194c273e5a8d4bbae76e8985af70d19a895b2fcdfcdc14540c32296e79a72189f4282218854482e9d16c041da646ed516009d27701ee96ffffcce58d3a1391714fd3d7fcc07fcc0c8b7dd84f870a2fa148ceb5c6e7a31682ac2fe86c1a51cdc16c1658d113f413e43be423831a5a07190be2dea0a8cdbd90f6195f02137b5bb84185ca8c175f17dd2ac9e57af06c60785c5a005e92d5e125b557eeb1ebbf7862885ae3b9468d99ec6df746aca314a282d12680d8a5fa65d076797bf54d30c1cef7fce18300dafe346756517c1b58f17189861c81927d083391a4f5699bb4d5e86dcf4a551fc84e5591f8b95fd5ac01cb8d5c8fa913783d972820295d82c666f6f66bed463ab53a54dd5f6a9486e2db5c8e9846113f24dc00bf90b32732f01feac6b810ca3101d5d08c3ac6627d173ee946b89aebc29054961554a2c84ac678517bcf793131de275ec00a708ec5b8e0e37bcbbea8c934de63a498e0990debcd8b00f803b24aaf8410c83193f9c98046ce62b20e53ee8497d5d837fd4ae10b0d20f2d731f32aea0fdd4f7ba3fe07cc7cfef2052d79ab4b7520b83f7feec5c7f40c4f2cc0d30e92eefa043514e09683716b1fd511a4c42ea3bb9d0769067487f09355d7026f1c", 0x1000}], 0x7, &(0x7f0000003a40)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}, @rthdrdstopts={{0x120, 0x29, 0x37, {0x6, 0x21, '\x00', [@jumbo={0xc2, 0x4, 0x200}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @generic={0x5, 0x9c, "8e43f3c170f09af08a61c1f0f78f1f71870abda02c07d25d0b1c926b98366beb4a3c52811c00b71d2ed83d1cb386788d78dfa5eefa3f52df61c3f0fccfb01a63c99660bd14d38bcea3761a164d52f108c09e1f6f2b3261ddb7fbdb8f435a8c3357630490da751bca67e0764049f067055ef61509b68856c63df71a39958c441e1a2d14a4362d9de57e91372a5bb3c5d932542fe30c6531563842a020"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @calipso={0x7, 0x40, {0x1, 0xe, 0xc, 0x9, [0x10, 0x800, 0x8, 0x2, 0x5, 0x7, 0xffffffffffffff71]}}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x88, 0x29, 0x36, {0x0, 0xd, '\x00', [@pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0x80, 0x743, [0x6, 0x8000000000000001, 0x81, 0x9]}}, @ra, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x1, 0xa, 0x8, 0x9, [0x8001, 0x6, 0x1, 0xfffffffffffffffa, 0x1]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xba8}}, @dstopts={{0x120, 0x29, 0x37, {0x2b, 0x20, '\x00', [@enc_lim, @calipso={0x7, 0x18, {0x3, 0x4, 0xb, 0x0, [0x3, 0x1]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x1, [0x8, 0xae, 0x6]}}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x18, {0x3, 0x4, 0x74, 0x2, [0x6, 0x7]}}, @ra={0x5, 0x2, 0xa61f}, @generic={0x3, 0x8e, "07f8f5683cdb04f2a77725159a29eda12e316344de8277a62599d813dfa0c08b83617ba1fc753477ab3ddaa7d3cf459abb34f104d9f574e1698d185aabe8ad7698043b26492f1b87af9c4ab6700b4a012a005356229d830a2714f10f67cd7a4bcf9c077dd6965db7f6dd086cd55947f94d06a9ad5897b5273e1acd8b14fc6a2b38804653bbd1f62a8c02d46b040e"}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x320}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002e40)="f5641349fe86637037712a032d117356e231dbef201a89962fa137a5b209f28ffa75881e0f482f95bac5b9eb46d7399275b4493e1216ad568556508029c84b0ff7faf801642f90", 0x47}, {&(0x7f0000002ec0)="1e24dfd44ff391708e24ec0783bde4a59f6b0921d93ca3f68010091fab181ac3ce97f17bb9979072cc22d7dbfc9a7e2a9cf2c5816935deb63c57fc35ddccbde66bae7832a79090ca94a930adec169d0b6c8f6e9c", 0x54}], 0x2}}, {{&(0x7f0000002f80)={0xa, 0x4e22, 0xa7dd, @local, 0x7}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000002fc0)="487575efef95428b44baa61f2a97ad72bf76f8ae27cf55b7adac6f3680c0578c9ad3ad98cdd30db9be526d01018f999e1957ade8e328bc9aec5311a40206e56d1b6de4efbc931dbe88c7534d93c390d392b0ca287cbb3643d4ba029cbfd625089eef51a6c5d4774e00e78d95058916064cde97cd3944deccb461dfb2e11b9b1d91b1e28dfb8181b07c732d5709d0788ca173590278aa28d3dbada2205f80640ad827d7bb08531285620dc772c3f1b2672d2d07890ccb74623f6edc4b232e4942ebab5ca1a9a8e2109cad2bb80e347a781c6899fcde459b5a8d77cf6cca8755b8b3292c5c2562051899efc96b429c3cecdcc65822d9096280", 0xf8}], 0x1}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000003100)="c67dc1c0e110e6040b04d5a4796f9331c835237a689666ba58266ea7484e5cfaf25041ed9ed3c1a768974d6cfabae23bf989100725440aadb58c", 0x3a}], 0x1, &(0x7f00000034c0)=[@dstopts_2292={{0x1b8, 0x29, 0x4, {0x73, 0x33, '\x00', [@generic={0x6, 0x199, "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"}, @enc_lim={0x4, 0x1, 0x5}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x21, 0x2, 0x0, 0x81, 0x0, [@loopback]}}}, @rthdr={{0x28, 0x29, 0x39, {0x87, 0x2, 0x1, 0x1, 0x0, [@private2]}}}, @hopopts={{0x148, 0x29, 0x36, {0x6, 0x25, '\x00', [@jumbo={0xc2, 0x4, 0x7fffffff}, @ra={0x5, 0x2, 0x8000}, @jumbo={0xc2, 0x4, 0x7ffffffb}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xad, 0xd9, "63a70c1afd55edb48ac516f442208906e969bd16c1a9ae364ce5134a63ae767d2f0a0896f8742c0ff83d69aa69a3bc59bd277d122bdabd92d529a2050e75217b7e2011eae7baf8bef23381088f5e43c32b6093f4e0aacaea587f248aef662a08a6ba9cea494e0d9b56d36f0bada55dc619694ea2ea12822c747bf025e946b680155133ad32bddf089f54cf156259b3316b0230a5ee62f036f22b8eb3fdd52c99e1d2b8337df25554aeeb77674950d78d5cb72ec7da5765acdb02daa946e770955731b91c0674782a303c9cc39cff8a812b397802e1e4228dd5"}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x368}}], 0x6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="9df37837001000003c0012800b000100697036746e6c00002c000280140047809bf7d4e5cf3f9a111d1782187824507d4e7ac08053b60300200100000000000000000000fb74cd96060bafd31c685819d36130bb4ad2e81bcae33bbe55fac27f698699edbf40dd8f19a93545253e585262986f9ac5bff91f5536db8605e8affb1b3a6b930faa8b7408"], 0x5c}}, 0x4040084) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x4) 978.46965ms ago: executing program 2 (id=3356): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000ffffff8110180000000000ce050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3221}, 0x1c) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x3, 0x2, 0x2, 0x1}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)="8d6ba23a0c62f2f6204976ee0529a53a7b8ba9620e7878afa0187415a220e21ccb3d5e132bcd7626c87a933780fe1581d00bf1f468eb8e24b81b8811d1f6669ab44d86eeebf2371d2119c542446b8e01baf49e9ca1b8c26412cbbefb880f364bede032359d3e8f4366ac744b5cbe19224dd4b45e96a672e5bbb6e5ca3f0f36ccf62eb05853c3e7431957cae027fcd8de705e0cd4e368940226e11dd4008fe70e17b98b7a80a4642cd8ad521b1719fa7591f510257aff6f5b8d0528", 0xbb}, {&(0x7f0000000240)="82e0ad8667efc13286de20d9b3a45668fb769882f749479c1b0ca54a655b923159b940c5320d5440d8f854912ae0fffd4c623aff8ac9471f36ea64bc4a28c1e6c43400c7b7fefc8e836850d968bfa372d5a3696586b73a160866717dd439b67694485f30f7f978b675dabdc1f380e4863515dffff43fa9b9c6ffa2023ac6d87e670f82f2a418dcca4ffc70be1743ee83f90d7137de46a1aef6451dfe15c672b8ede25432295097b2ff7c350fba6b86d36f2e4af1a6cb91691ae66e67335aba5ae54831abd25058f7b9a2596471acc681e3d2", 0xd2}, {&(0x7f0000000340)="37f7223e9c334234b68a46b3633ca4c63fd1da379c3a977ffb9cd8f519e00c1a1682458f587310426060f35461912c5f237967497c6f1fe88bf327aba7ce2fd0f1bd54b26b1b490930b8bdc78986becd18a80d97607b0f6b81b7bd229a9c963eda5162a04358e9c663f23016791b2c89896eff8cb161d61f4788c2b9234667e399e8971cf5544b776c44b6fe96d14564ece148f2992531e0fd019dfd5974a123f48c7b82b68c0135e70af6085d9a3f5b6d3b96cff7dd5a1bb832f116c9451c859aebb9227f14bbd0e610c03f86781371eaa994a5178f93ec1bf017f3696efe9538c90f619f95a9255d8c", 0xea}, {&(0x7f0000000440)="6ba905d1990790e360019eb358cfdcb553239f3b3be61b71bde17643a22c1c981ff63cd6292f405fb6f884782119486e58da4168f7943e4968f992", 0x3b}], 0x4, &(0x7f00000004c0)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}, 0x4) 906.917812ms ago: executing program 2 (id=3357): r0 = socket(0x10, 0x803, 0x0) unshare(0x600) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0x5, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, 0x0, 0x4}, 0x20) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000440)=0x9, 0x4) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="00042d887000fcdbdf253f08000014005e80080005004d00000008000900000000004c005e8008000200a3b4000008000300e10a00000800038000000000080005005f000000080007000f050000180001000500000000040000010000000000000000000000080003000600000020005e8008000700aa02000008000600050000000c0001000104000009000000"], 0x94}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r3, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$packet(r4, &(0x7f0000000400)="86ff3b518c8a", 0x6, 0x4ba346f6d29095b8, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) 854.248003ms ago: executing program 4 (id=3256): r0 = socket(0xa, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)={0x24, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x3ffe, 0x0, 0x0, @fd=r0}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x1, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 751.369737ms ago: executing program 1 (id=3358): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000007540), 0x2, 0x0) read(r0, &(0x7f00000013c0)=""/155, 0x9b) r1 = socket(0x2, 0xa, 0x300) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180), &(0x7f0000000440)=0x4) getpeername$packet(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x20000800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x31c}, 0x1, 0x0, 0x0, 0x4050}, 0x4800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, 0x0, 0x4008000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4048000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'pimreg\x00', {0x1}, 0xb5}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r4, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0x1b}], 0x27, 0x0, 0xfffffffe) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, r1, 0xbefb3000) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000308004900e7380000000000019078ac1414bbac1414bb44100b000000000000000000000000000d009078000900020000672d0000000100000009"], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r7, 0x70, &(0x7f0000000480)=[@in6={0xa, 0x4e21, 0xfffffff8, @empty, 0x3}, @in6={0xa, 0x4e24, 0x573, @rand_addr=' \x01\x00'}, @in6={0xa, 0x4e23, 0x7, @mcast2, 0xa6}, @in6={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb}]}, &(0x7f0000000300)=0x10) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x0, r6, 0x3d}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x9, &(0x7f0000000340)=ANY=[@ANYBLOB="1801000020696c2500000000002020207b1af8ff00000000bf878e5963c80b0a3d0000b7030000673b0f5d850000005d0000009500"/72], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x4}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r9, @ANYBLOB="010000000000fcdbdf2503000000740001802c0004001400010002004e20ac1414aa0000000000004e20ffffffff000000000000000044000400200001000a004e26000000445f0000000000002e000000005f00002e2a7f0000200002000a004e21fffffffcff0200000000000000000000000000010500"/130], 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0) 735.558267ms ago: executing program 4 (id=3359): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x80}]}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x20000000) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) write$cgroup_pid(r1, &(0x7f0000000280)=r2, 0x12) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000340)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}], 0x3c) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100001060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012800d00010076736f636b6d6f6e"], 0x44}}, 0x0) 593.895203ms ago: executing program 2 (id=3360): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "9a"}]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) socket$inet6(0xa, 0x5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=ANY=[@ANYBLOB="4800000010001fff000000001f51df2500000000f3b3895ee38a422f8943e8f9b06caf7528a0fd99010c5662f3e00d9c89c1df24314274be1864b4e9501e04435ea060da62472a0dae8bede37a48b78b7713fc5484393239fdd6443163a4a87e68dcaebc2ffc036ca246db50b7cc250987a3086c328beab0151c0d9d7633aef900c3e777db818d720bc265a71ad6b3e3c908a6", @ANYBLOB="f754da0ee1b069ddd2549f9073a29cb00ab8d7bb57ca73f81c09ec3c30271e39292b71351bbd55d99539b5467c1ca1719a2e1c1d220854b2995b0cd998c8ff55d44723b0958ad06c85d5fab1c62dcb120d937c67c28514440ceba027d67ab35128993cfd95bb52678c919f778170679481c620f0aecb91f43438d37482e8af01ec436da8179d03934d9edf5562fb09b4f6d5126dc8a1d91cd2cf739378136cc356aa56bb95ede7efd3bb1df9e07087549211dc476393f635a3ff6126", @ANYRES16=r4, @ANYRESOCT=r7], 0x48}}, 0x81) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r10, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r10, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44040) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x67}, 0x1, 0x0, 0x0, 0x4000020}, 0x40040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000480)={r11, 0x7, 0x3}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000003800)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40000102, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 546.744847ms ago: executing program 3 (id=3361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000100)=@deltclass={0x24, 0x29, 0x100, 0x709d2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5e291e8239e04253, 0x5}, {0xffe0, 0xf}, {0xfff3, 0x10}}}, 0xffaa}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) nanosleep(&(0x7f00000006c0)={0x0, 0x2faf080}, &(0x7f0000000700)) 444.190765ms ago: executing program 4 (id=3362): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xfffffffffffffcaa, 0x408c4, 0x0, 0xffffffffffffff10) pselect6(0x40, &(0x7f0000000100)={0x9, 0x8000000000000, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x0, 0x5, 0xc}, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) 335.809988ms ago: executing program 3 (id=3363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40008008}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000100000000000700000608000340000094821bc2162b9f7b44ddfc3071fa8d9640d6080005400000000a0c02e8b72e000140000000090800064000001901000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40008008}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000100000000000700000608000340000094821bc2162b9f7b44ddfc3071fa8d9640d6080005400000000a0c02e8b72e000140000000090800064000001901000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400080000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000108000840000001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400080000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000108000840000001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000c40)={'hsr0\x00', 0x100}) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="1059d2afbeac3bb281e05828f9b7d09ca91315b07a9ad227c08b7f59ae8623e07e753c74e0e3f79fe76fa38dff7c859e5b0e7978e93bf488fc2d289232b3088f86169d37a1ccb3747f93ab2d6005258666046eea65dfaac4e5b1a0833cc1ea727664b5a8adba8c0f0ee978cbfdecf6e92a6ae9d5c1d8857ad01ae07790", 0x7d}], 0x1}, 0x4000c000) 282.569247ms ago: executing program 4 (id=3364): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000030000000000000000000003000000000300000002000000fd1c5c9e059e41c9c45700030000000010000000010000000000000c02000000005f00"], 0x0, 0x4f}, 0x28) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2400c804) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000000c0)={0x6, 'pimreg0\x00', {0x7fff}, 0x26}) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000200)=""/209, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x94) r5 = socket$inet(0x2, 0x4, 0x1) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240000c6) nanosleep(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a23000000000a030000000000000000000a00000708000240000000020900010073797a31d8fa52deb99af22b030a010100000000000000000a0000070900010073797a31000000000900030073797b320000000014000000110001c53918026a817b72ad62ebc91b5387a8422f5f10fe4e6287c8564a51"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20000054}, 0x20004005) close(0x3) 270.219146ms ago: executing program 0 (id=3365): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00fe0186f6f0bb8c75fb737c6dd9c078fafee1e91bf64479cdc62144f4c12519d812d157a5767f7625840d868f0707487c4f65264a1ae68c5bb8c45e089aeaa8435629ef05f17a1ec9f36f25fd23c756c4820ec50a25eda83096bb9af2bc34207d23c3532be3d28f83a5189d9fe696cb2e8f0ca1489d253e1c2320d61cfe52d0a3beb4815d751b44", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000b80)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfff}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb01001800008000000000280000002800000008000000060000000000000e04000000010000000c0000000100009301000000070000000000000009000000002e5f71305f5f009fb66eb2443938124e4e"], &(0x7f0000000240)=""/186, 0x48, 0xba, 0x0, 0xda24}, 0x28) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x40090) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e00000005000000ffffff7f420e000089260100", @ANYRES32=0x1, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000005000000050400000300"/24, @ANYRES32=r5, @ANYBLOB], 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x27, "dfa99857c31a32983d8140a393aee6df0b0a3bcf74ae47738ac9d1346ac0d2c31df487aab83f46"}, &(0x7f0000000200)=0x2f) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmmsg$inet(r8, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x80, '\x00', 0x0, r4, 0x1, 0x3, 0x1}, 0x50) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[], 0x90}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x38, 0x2d, 0x107, 0x0, 0x25dfdbfc, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}, @nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x42}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x24058415) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r7}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) close(0x3) 73.967661ms ago: executing program 2 (id=3366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0xfffffea2}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r5, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x8}}}}, ["", "", "", "", "", ""]}, 0x28}}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000004a00010200000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4000010) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000180), 0x4) r8 = socket$netlink(0x10, 0x3, 0xa) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000980)=ANY=[@ANYBLOB="23de81bf79db31e85d91050cc5bfbd14b3c9e600"/29, @ANYRES16=r9, @ANYBLOB="00040000000000000000670000004c004280480000800500090001000000050006000100000005000c0001000000050007009500000005000600000000000c000300fdffffffffffffff06000500770000000500060001000000"], 0x60}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x18, 0x401, 0x101, 0x7fff, 0x4000, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000500)={@remote, 0x0}, &(0x7f00000005c0)=0x14) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0xf, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x7}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x8a6, 0x21, &(0x7f00000004c0)=""/33, 0x41000, 0x0, '\x00', r12, @lirc_mode2=0x10, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x2, 0xa, 0x9f, 0x2}, 0x10, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000200)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c030) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) r16 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21505, 0x200feff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r16}]}}}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 72.734564ms ago: executing program 0 (id=3367): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @local}, 0x10) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000280)="64cc5e56be74c055ff9a82860542000615ba73a367d717f385395408c764cd45f81f65cf1d77e3687b7c203a1a6b4ac8beb70b350edf75e55ee929b538a9fb19f00e342afbb1261b5efd11f957d712f12d6c5f0501c2f6bb25247f52563f7631744d5b6cb60372a0a075ae5b51d9bc417813fbfee1b4e8d8662b74ba0e8570e0e401c0962ab0bf2ea31ed5ab72bd67bfb81fb93b6615315d10be783b6eafc9a092576af94ff911c53a7a01b2771a19484ef483bacf92e4a10a69ac9304591356802454ae333efaa6a70d9be0905f6c17cc7bd9acd0212a7e4b2e85cec7072ccd1ea57b20a0ada54adce277a087ecbbab7b") connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000240)={0xffffff80, 0xa, 0x1df}, 0xc) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @local}, 0x10) (async) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000280)="64cc5e56be74c055ff9a82860542000615ba73a367d717f385395408c764cd45f81f65cf1d77e3687b7c203a1a6b4ac8beb70b350edf75e55ee929b538a9fb19f00e342afbb1261b5efd11f957d712f12d6c5f0501c2f6bb25247f52563f7631744d5b6cb60372a0a075ae5b51d9bc417813fbfee1b4e8d8662b74ba0e8570e0e401c0962ab0bf2ea31ed5ab72bd67bfb81fb93b6615315d10be783b6eafc9a092576af94ff911c53a7a01b2771a19484ef483bacf92e4a10a69ac9304591356802454ae333efaa6a70d9be0905f6c17cc7bd9acd0212a7e4b2e85cec7072ccd1ea57b20a0ada54adce277a087ecbbab7b") (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000240)={0xffffff80, 0xa, 0x1df}, 0xc) (async) 71.969237ms ago: executing program 3 (id=3368): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x8000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES8=r4, @ANYRESHEX=r1, @ANYRES16=r1, @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) socket(0x2, 0x3, 0x66) 0s ago: executing program 1 (id=3369): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xfb05, 0x0, 0x20, {0x0, 0x0, 0x4a00, 0x0, 0xff7f, 0x800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) kernel console output (not intermixed with test programs): 530.513287][T16643] veth0_to_bridge: entered allmulticast mode [ 530.532398][T16613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.605504][T16643] veth0_to_bridge: left allmulticast mode [ 530.605627][T16643] veth0_to_bridge: left promiscuous mode [ 530.724850][T16654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.058410][T16661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.058793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.059776][T16661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.060077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.266430][T16667] tipc: Can't bind to reserved service type 1 [ 535.009659][T16617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.253823][T16687] __nla_validate_parse: 2 callbacks suppressed [ 535.253843][T16687] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2504'. [ 535.254027][T16686] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2504'. [ 535.492367][T16695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2505'. [ 535.622468][T16698] netlink: 5396 bytes leftover after parsing attributes in process `syz.1.2509'. [ 535.622494][T16698] openvswitch: netlink: Flow key attr not present in new flow. [ 535.637005][T16613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.676960][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'. [ 535.676992][T16697] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2509'. [ 535.790579][T16707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2508'. [ 535.790606][T16707] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2508'. [ 536.106100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.196938][T16721] netlink: 'syz.3.2512': attribute type 1 has an invalid length. [ 536.257947][T16721] bond5: entered promiscuous mode [ 536.258492][T16721] 8021q: adding VLAN 0 to HW filter on device bond5 [ 536.268693][T16622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.545207][T16721] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 536.700937][T16734] pim6reg1: entered promiscuous mode [ 536.700963][T16734] pim6reg1: entered allmulticast mode [ 537.012581][T16743] FAULT_INJECTION: forcing a failure. [ 537.012581][T16743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.012615][T16743] CPU: 0 UID: 0 PID: 16743 Comm: syz.3.2518 Not tainted syzkaller #0 PREEMPT(full) [ 537.012636][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 537.012647][T16743] Call Trace: [ 537.012655][T16743] [ 537.012664][T16743] dump_stack_lvl+0xe8/0x150 [ 537.012704][T16743] should_fail_ex+0x410/0x560 [ 537.012737][T16743] _copy_from_user+0x2d/0xb0 [ 537.012767][T16743] x25_ioctl+0x835/0xff0 [ 537.012919][T16743] ? __pfx_x25_ioctl+0x10/0x10 [ 537.012956][T16743] ? kasan_quarantine_put+0xbb/0x1f0 [ 537.012994][T16743] ? tomoyo_path_number_perm+0x219/0x5f0 [ 537.013065][T16743] ? tomoyo_path_number_perm+0x219/0x5f0 [ 537.013090][T16743] ? do_vfs_ioctl+0x116f/0x1530 [ 537.013130][T16743] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 537.013158][T16743] sock_do_ioctl+0x101/0x320 [ 537.013186][T16743] ? __pfx_sock_do_ioctl+0x10/0x10 [ 537.013204][T16743] ? hook_file_ioctl+0x1f2/0x600 [ 537.013312][T16743] sock_ioctl+0x57a/0x7e0 [ 537.013331][T16743] ? __pfx_sock_ioctl+0x10/0x10 [ 537.013347][T16743] ? __fget_files+0x2a/0x420 [ 537.013370][T16743] ? __fget_files+0x3a2/0x420 [ 537.013395][T16743] ? __fget_files+0x2a/0x420 [ 537.013424][T16743] ? bpf_lsm_file_ioctl+0x9/0x20 [ 537.013465][T16743] ? __pfx_sock_ioctl+0x10/0x10 [ 537.013484][T16743] __se_sys_ioctl+0xfc/0x170 [ 537.013507][T16743] do_syscall_64+0x166/0x520 [ 537.013534][T16743] ? trace_irq_disable+0x3b/0x140 [ 537.013553][T16743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.013574][T16743] ? clear_bhb_loop+0x70/0xc0 [ 537.013598][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.013616][T16743] RIP: 0033:0x7fe7db59e159 [ 537.013636][T16743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.013651][T16743] RSP: 002b:00007fe7dc4f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.013672][T16743] RAX: ffffffffffffffda RBX: 00007fe7db825fa0 RCX: 00007fe7db59e159 [ 537.013685][T16743] RDX: 0000200000000f40 RSI: 00000000000089e7 RDI: 0000000000000004 [ 537.013697][T16743] RBP: 00007fe7dc4f2090 R08: 0000000000000000 R09: 0000000000000000 [ 537.013708][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.013719][T16743] R13: 00007fe7db826038 R14: 00007fe7db825fa0 R15: 00007fff257184b8 [ 537.013752][T16743] [ 537.146487][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.712371][T16750] netlink: 'syz.4.2520': attribute type 83 has an invalid length. [ 537.892503][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2524'. [ 537.988360][T16764] netlink: 4624 bytes leftover after parsing attributes in process `syz.4.2526'. [ 537.997629][T16764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.186021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.861065][T10115] infiniband s`z1: ib_query_port failed (-19) [ 538.983276][T16617] smbdirect: ib_dev[s`z1] removed [ 539.529639][T16793] xt_CT: No such helper "snmp" [ 539.564423][T16796] bond6: option updelay: invalid value (18446744073709518847) [ 539.564453][T16796] bond6: option updelay: allowed values 0 - 2147483647 [ 539.601765][T16796] bond6 (unregistering): Released all slaves [ 539.738855][T16802] xt_hashlimit: size too large, truncated to 1048576 [ 539.823822][T16807] netlink: 'syz.2.2539': attribute type 1 has an invalid length. [ 540.026694][T16613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.423216][T16821] __nla_validate_parse: 5 callbacks suppressed [ 540.423242][T16821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2542'. [ 540.539214][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2544'. [ 540.546803][T16821] bond10: entered promiscuous mode [ 540.546828][T16821] bond10: entered allmulticast mode [ 540.666961][T16622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.902852][T16837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2548'. [ 541.268913][T16844] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 541.277906][T16845] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 541.319578][T16841] ip_tables: iptables: counters copy to user failed while replacing table [ 541.324619][T16845] Bluetooth: hci0: unsupported parameter 5135 [ 541.324643][T16845] Bluetooth: hci0: invalid length 1, exp 2 for type 24 [ 541.342651][T16841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2549'. [ 541.342674][T16841] tipc: Cannot configure node identity twice [ 541.502498][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 541.650411][T16857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2555'. [ 542.027797][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.039763][T16864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.121975][T16867] syzkaller0: entered promiscuous mode [ 542.121999][T16867] syzkaller0: entered allmulticast mode [ 542.403855][T16874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2560'. [ 542.403887][T16874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2560'. [ 542.564894][T16879] bridge0: port 1(.`) entered blocking state [ 542.564997][T16879] bridge0: port 1(.`) entered disabled state [ 542.565166][T16879] .`: entered allmulticast mode [ 542.598289][T16879] .`: entered promiscuous mode [ 542.631520][T16888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2563'. [ 542.667727][T16879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2562'. [ 542.727866][T16879] hsr_slave_1 (unregistering): left promiscuous mode [ 542.768568][T16848] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 543.051543][T16891] bridge0: port 1(wlan1) entered blocking state [ 543.051734][T16891] bridge0: port 1(wlan1) entered disabled state [ 543.052533][T16891] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 543.100030][T16891] mac80211_hwsim hwsim11 wlan1 (unregistering): left allmulticast mode [ 543.102720][T16891] bridge0: port 1(wlan1) entered disabled state [ 543.347979][T16896] xt_ipcomp: unknown flags 1D [ 543.750743][T16906] FAULT_INJECTION: forcing a failure. [ 543.750743][T16906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.750778][T16906] CPU: 0 UID: 0 PID: 16906 Comm: syz.2.2570 Not tainted syzkaller #0 PREEMPT(full) [ 543.750800][T16906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 543.750812][T16906] Call Trace: [ 543.750820][T16906] [ 543.750829][T16906] dump_stack_lvl+0xe8/0x150 [ 543.750863][T16906] should_fail_ex+0x410/0x560 [ 543.750891][T16906] _copy_from_user+0x2d/0xb0 [ 543.750917][T16906] ___sys_sendmsg+0x1c6/0x360 [ 543.750943][T16906] ? __lock_acquire+0x747/0x2de0 [ 543.750970][T16906] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.750999][T16906] ? kstrtouint+0x6e/0xe0 [ 543.751041][T16906] ? __fget_files+0x2a/0x420 [ 543.751066][T16906] ? __fget_files+0x3a2/0x420 [ 543.751099][T16906] __sys_sendmmsg+0x273/0x4d0 [ 543.751129][T16906] ? __pfx___sys_sendmmsg+0x10/0x10 [ 543.751162][T16906] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 543.751208][T16906] ? ksys_write+0x242/0x270 [ 543.751236][T16906] ? __pfx_ksys_write+0x10/0x10 [ 543.751268][T16906] __x64_sys_sendmmsg+0xa0/0xc0 [ 543.751296][T16906] do_syscall_64+0x166/0x520 [ 543.751318][T16906] ? trace_irq_disable+0x3b/0x140 [ 543.751335][T16906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.751354][T16906] ? clear_bhb_loop+0x70/0xc0 [ 543.751375][T16906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.751394][T16906] RIP: 0033:0x7f5c7639e159 [ 543.751409][T16906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.751425][T16906] RSP: 002b:00007f5c77343028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 543.751444][T16906] RAX: ffffffffffffffda RBX: 00007f5c76625fa0 RCX: 00007f5c7639e159 [ 543.751459][T16906] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 543.751469][T16906] RBP: 00007f5c77343090 R08: 0000000000000000 R09: 0000000000000000 [ 543.751481][T16906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.751492][T16906] R13: 00007f5c76626038 R14: 00007f5c76625fa0 R15: 00007ffe5edc92f8 [ 543.751521][T16906] [ 544.197097][T16916] syzkaller1: entered promiscuous mode [ 544.197123][T16916] syzkaller1: entered allmulticast mode [ 544.243438][T16917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 544.243465][T16917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 544.567490][T16929] netlink: 'syz.3.2576': attribute type 10 has an invalid length. [ 544.568485][T16929] batman_adv: batadv0: Interface deactivated: dummy0 [ 544.618820][T16929] batman_adv: batadv0: Removing interface: dummy0 [ 544.621717][T16934] netlink: 'syz.3.2576': attribute type 10 has an invalid length. [ 545.066361][T16617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.646190][T16956] __nla_validate_parse: 5 callbacks suppressed [ 545.646214][T16956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2582'. [ 545.788186][T16952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2579'. [ 545.814368][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2582'. [ 545.867671][T16622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.957373][T16964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2581'. [ 546.106130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.106739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.107196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.107619][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.108028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.108417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.108799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.109184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.314311][T16956] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 546.329601][T16956] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 546.933268][T16979] x_tables: duplicate underflow at hook 2 [ 547.728113][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2589'. [ 548.421272][T17017] bridge0: entered allmulticast mode [ 549.000460][T17043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2599'. [ 549.000990][T17048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2599'. [ 549.094351][T17044] x_tables: duplicate underflow at hook 2 [ 549.124900][T17038] ipvlan2: entered promiscuous mode [ 549.246685][T17044] ipvlan3: entered promiscuous mode [ 549.488511][T17064] xt_hashlimit: max too large, truncated to 1048576 [ 549.488535][T17064] xt_hashlimit: overflow, try lower: 0/0 [ 549.507563][T17064] tc_dump_action: action bad kind [ 549.782720][T17076] netlink: 'syz.2.2603': attribute type 1 has an invalid length. [ 549.840802][T17075] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2603'. [ 550.017136][T17076] 8021q: adding VLAN 0 to HW filter on device bond11 [ 550.345506][T17077] gretap2: entered promiscuous mode [ 550.354422][ T5938] net_ratelimit: 126 callbacks suppressed [ 550.354442][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.394506][T17077] bond11: (slave gretap2): making interface the new active one [ 550.405257][T17077] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 550.615405][T17095] 8021q: adding VLAN 0 to HW filter on device .` [ 550.645430][T17095] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 550.672653][T17095] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2606'. [ 550.906381][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.907089][T17096] macsec0: entered promiscuous mode [ 550.907110][T17096] macsec0: entered allmulticast mode [ 551.019425][T17105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2610'. [ 551.060713][T17105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2610'. [ 551.524812][T17139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.533041][T17137] netlink: 'syz.0.2616': attribute type 29 has an invalid length. [ 551.533065][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 551.533607][T17137] netlink: 'syz.0.2616': attribute type 29 has an invalid length. [ 551.533622][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'. [ 551.537555][T17137] smc: net device lo applied user defined pnetid SYZ2 [ 551.538037][T17137] smc: net device lo erased user defined pnetid SYZ2 [ 551.715849][T17143] ip_tables: iptables: counters copy to user failed while replacing table [ 552.010945][T17152] openvswitch: netlink: Flow actions attr not present in new flow. [ 552.210221][T17161] sysfs: cannot create duplicate filename '/class/ieee80211/.PÑè'óG!DEÒSˆ' [ 552.210245][T17161] CPU: 1 UID: 0 PID: 17161 Comm: syz.4.2622 Not tainted syzkaller #0 PREEMPT(full) [ 552.210270][T17161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 552.210283][T17161] Call Trace: [ 552.210292][T17161] [ 552.210302][T17161] dump_stack_lvl+0xe8/0x150 [ 552.210339][T17161] sysfs_warn_dup+0x8e/0xa0 [ 552.210413][T17161] sysfs_do_create_link_sd+0xc0/0x110 [ 552.210447][T17161] device_add_class_symlinks+0x1cf/0x240 [ 552.210547][T17161] device_add+0x467/0xb80 [ 552.210573][T17161] wiphy_register+0x1fc8/0x2ff0 [ 552.210662][T17161] ? __pfx_wiphy_register+0x10/0x10 [ 552.210687][T17161] ? __pfx_netdev_run_todo+0x10/0x10 [ 552.210769][T17161] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 552.210862][T17161] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 552.210921][T17161] ieee80211_register_hw+0x3d7c/0x4b40 [ 552.211006][T17161] ? ieee80211_register_hw+0x19e1/0x4b40 [ 552.211078][T17161] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 552.211109][T17161] ? __asan_memset+0x22/0x50 [ 552.211136][T17161] ? __hrtimer_setup+0x1b7/0x260 [ 552.211173][T17161] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 552.211278][T17161] mac80211_hwsim_new_radio+0x3264/0x5720 [ 552.211340][T17161] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 552.211363][T17161] ? kstrndup+0xbd/0x160 [ 552.211401][T17161] ? kstrndup+0xbd/0x160 [ 552.211427][T17161] hwsim_new_radio_nl+0xd8b/0xf90 [ 552.211472][T17161] genl_family_rcv_msg_doit+0x233/0x340 [ 552.211511][T17161] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 552.211603][T17161] ? bpf_lsm_capable+0x9/0x20 [ 552.211636][T17161] ? security_capable+0x7e/0x2c0 [ 552.211745][T17161] genl_rcv_msg+0x614/0x7a0 [ 552.211782][T17161] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.211808][T17161] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 552.211853][T17161] netlink_rcv_skb+0x226/0x4a0 [ 552.211887][T17161] ? __pfx_genl_rcv_msg+0x10/0x10 [ 552.211914][T17161] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.211964][T17161] ? down_read+0x2be/0x330 [ 552.211998][T17161] genl_rcv+0x28/0x40 [ 552.212027][T17161] netlink_unicast+0x7bd/0x940 [ 552.212070][T17161] netlink_sendmsg+0x813/0xb40 [ 552.212105][T17161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.212138][T17161] ? apparmor_socket_sendmsg+0x98/0x360 [ 552.212165][T17161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.212185][T17161] sock_sendmsg_nosec+0x13a/0x180 [ 552.212212][T17161] ____sys_sendmsg+0x54e/0x850 [ 552.212277][T17161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.212319][T17161] ? import_iovec+0x73/0xa0 [ 552.212353][T17161] ___sys_sendmsg+0x2a5/0x360 [ 552.212382][T17161] ? __lock_acquire+0x747/0x2de0 [ 552.212411][T17161] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.212444][T17161] ? futex_wait+0x2a2/0x390 [ 552.212513][T17161] ? __fget_files+0x2a/0x420 [ 552.212543][T17161] ? __fget_files+0x3a2/0x420 [ 552.212587][T17161] __x64_sys_sendmsg+0x1b1/0x290 [ 552.212622][T17161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.212680][T17161] do_syscall_64+0x166/0x520 [ 552.212707][T17161] ? trace_irq_disable+0x3b/0x140 [ 552.212730][T17161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.212749][T17161] ? clear_bhb_loop+0x70/0xc0 [ 552.212772][T17161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.212795][T17161] RIP: 0033:0x7fd31919e159 [ 552.212818][T17161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.212836][T17161] RSP: 002b:00007fd31a0d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.212861][T17161] RAX: ffffffffffffffda RBX: 00007fd319425fa0 RCX: 00007fd31919e159 [ 552.212877][T17161] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 552.212892][T17161] RBP: 00007fd31923506b R08: 0000000000000000 R09: 0000000000000000 [ 552.212905][T17161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.212918][T17161] R13: 00007fd319426038 R14: 00007fd319425fa0 R15: 00007fff797b4f38 [ 552.212958][T17161] [ 552.245492][T17164] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 552.475325][T17165] netlink: 'syz.2.2623': attribute type 14 has an invalid length. [ 552.475345][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2623'. [ 552.475369][T17165] bond0: option xmit_hash_policy: invalid value (22) [ 552.522710][T17165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2623'. [ 552.817112][T17186] sctp: [Deprecated]: syz.1.2625 (pid 17186) Use of int in maxseg socket option. [ 552.817112][T17186] Use struct sctp_assoc_value instead [ 553.019042][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2626'. [ 553.174868][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2626'. [ 553.192663][T17196] ip_tables: iptables: counters copy to user failed while replacing table [ 553.302152][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2628'. [ 553.472271][T17206] netlink: 'syz.3.2633': attribute type 6 has an invalid length. [ 553.472300][T17206] IPv6: NLM_F_CREATE should be specified when creating new route [ 553.547638][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.208363][T17269] syzkaller1: entered promiscuous mode [ 555.208388][T17269] syzkaller1: entered allmulticast mode [ 555.351645][T17277] ipvlan4: entered promiscuous mode [ 555.719954][T17290] __nla_validate_parse: 5 callbacks suppressed [ 555.719977][T17290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 555.719994][T17290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2657'. [ 555.832704][T17295] netlink: 'syz.0.2660': attribute type 1 has an invalid length. [ 555.959590][T17295] bond7: entered promiscuous mode [ 555.960085][T17295] 8021q: adding VLAN 0 to HW filter on device bond7 [ 556.026816][T17295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'. [ 556.088637][T17303] netlink: 'syz.4.2662': attribute type 11 has an invalid length. [ 556.089250][T17302] netlink: 'syz.4.2662': attribute type 11 has an invalid length. [ 556.089269][T17302] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2662'. [ 556.112942][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.113839][T16620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.413881][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2665'. [ 556.605253][T17334] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2665'. [ 556.746808][T17336] netlink: 'syz.0.2668': attribute type 1 has an invalid length. [ 557.184863][T17350] FAULT_INJECTION: forcing a failure. [ 557.184863][T17350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.184901][T17350] CPU: 0 UID: 0 PID: 17350 Comm: syz.3.2672 Not tainted syzkaller #0 PREEMPT(full) [ 557.184923][T17350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 557.184936][T17350] Call Trace: [ 557.184945][T17350] [ 557.184954][T17350] dump_stack_lvl+0xe8/0x150 [ 557.184989][T17350] should_fail_ex+0x410/0x560 [ 557.185018][T17350] _copy_from_iter+0x1d3/0x1660 [ 557.185044][T17350] ? __alloc_skb+0x27a/0x7a0 [ 557.185071][T17350] ? __alloc_skb+0x27a/0x7a0 [ 557.185097][T17350] ? __alloc_skb+0x27a/0x7a0 [ 557.185121][T17350] ? __pfx__copy_from_iter+0x10/0x10 [ 557.185142][T17350] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 557.185171][T17350] ? __alloc_skb+0x27a/0x7a0 [ 557.185192][T17350] ? __alloc_skb+0x27a/0x7a0 [ 557.185221][T17350] ? netlink_sendmsg+0x650/0xb40 [ 557.185241][T17350] ? skb_put+0x112/0x210 [ 557.185268][T17350] netlink_sendmsg+0x6c0/0xb40 [ 557.185299][T17350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.185329][T17350] ? apparmor_socket_sendmsg+0x98/0x360 [ 557.185356][T17350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.185375][T17350] sock_sendmsg_nosec+0x13a/0x180 [ 557.185402][T17350] ____sys_sendmsg+0x54e/0x850 [ 557.185435][T17350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.185472][T17350] ? import_iovec+0x73/0xa0 [ 557.185502][T17350] ___sys_sendmsg+0x2a5/0x360 [ 557.185532][T17350] ? __lock_acquire+0x747/0x2de0 [ 557.185560][T17350] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.185584][T17350] ? __lock_acquire+0x747/0x2de0 [ 557.185611][T17350] ? kstrtouint+0x6e/0xe0 [ 557.185679][T17350] __sys_sendmmsg+0x273/0x4d0 [ 557.185722][T17350] ? __pfx___sys_sendmmsg+0x10/0x10 [ 557.185761][T17350] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 557.185806][T17350] ? ksys_write+0x242/0x270 [ 557.185840][T17350] ? __pfx_ksys_write+0x10/0x10 [ 557.185878][T17350] __x64_sys_sendmmsg+0xa0/0xc0 [ 557.185907][T17350] do_syscall_64+0x166/0x520 [ 557.185933][T17350] ? trace_irq_disable+0x3b/0x140 [ 557.185953][T17350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.185974][T17350] ? clear_bhb_loop+0x70/0xc0 [ 557.185999][T17350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.186020][T17350] RIP: 0033:0x7fe7db59e159 [ 557.186039][T17350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.186057][T17350] RSP: 002b:00007fe7dc4f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 557.186081][T17350] RAX: ffffffffffffffda RBX: 00007fe7db825fa0 RCX: 00007fe7db59e159 [ 557.186096][T17350] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 557.186109][T17350] RBP: 00007fe7dc4f2090 R08: 0000000000000000 R09: 0000000000000000 [ 557.186123][T17350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.186135][T17350] R13: 00007fe7db826038 R14: 00007fe7db825fa0 R15: 00007fff257184b8 [ 557.186170][T17350] [ 557.212270][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'. [ 557.622624][T17361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2676'. [ 557.636868][T16619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.636895][T16619] syzkaller0: tun_net_xmit 76 [ 557.648374][T16619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.648398][T16619] syzkaller0: tun_net_xmit 48 [ 557.670077][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.670107][ T5738] syzkaller0: tun_net_xmit 76 [ 557.711715][T17361] syzkaller0: create flow: hash 1612806617 index 0 [ 557.784130][T17365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2678'. [ 557.813761][T17361] syzkaller0 (unregistered): delete flow: hash 1612806617 index 0 [ 557.999478][T17377] netlink: 'syz.3.2681': attribute type 2 has an invalid length. [ 558.369677][T17391] gretap0: entered promiscuous mode [ 558.499918][T17399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2688'. [ 558.602321][T17401] netlink: 'syz.4.2690': attribute type 4 has an invalid length. [ 558.635303][T17401] netlink: 'syz.4.2690': attribute type 4 has an invalid length. [ 558.673115][T16619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.943361][T17436] tc action pedit offset 132 out of bounds [ 560.191300][T17447] FAULT_INJECTION: forcing a failure. [ 560.191300][T17447] name failslab, interval 1, probability 0, space 0, times 0 [ 560.191336][T17447] CPU: 1 UID: 0 PID: 17447 Comm: syz.0.2701 Not tainted syzkaller #0 PREEMPT(full) [ 560.191358][T17447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 560.191370][T17447] Call Trace: [ 560.191378][T17447] [ 560.191388][T17447] dump_stack_lvl+0xe8/0x150 [ 560.191422][T17447] should_fail_ex+0x410/0x560 [ 560.191450][T17447] ? __alloc_skb+0x1db/0x7a0 [ 560.191473][T17447] should_failslab+0xa8/0x100 [ 560.191498][T17447] ? __alloc_skb+0x1db/0x7a0 [ 560.191517][T17447] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 560.191545][T17447] ? __alloc_skb+0x18d/0x7a0 [ 560.191567][T17447] ? __alloc_skb+0x1db/0x7a0 [ 560.191598][T17447] __alloc_skb+0x1db/0x7a0 [ 560.191627][T17447] netlink_ack+0x136/0xb30 [ 560.191652][T17447] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 560.191741][T17447] ? __lock_acquire+0x747/0x2de0 [ 560.191777][T17447] netlink_rcv_skb+0x2a4/0x4a0 [ 560.191809][T17447] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 560.191836][T17447] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 560.191882][T17447] ? netlink_deliver_tap+0x2e/0x1b0 [ 560.191901][T17447] ? netlink_deliver_tap+0x2e/0x1b0 [ 560.191927][T17447] netlink_unicast+0x7bd/0x940 [ 560.191968][T17447] netlink_sendmsg+0x813/0xb40 [ 560.191998][T17447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.192028][T17447] ? apparmor_socket_sendmsg+0x98/0x360 [ 560.192054][T17447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.192073][T17447] sock_sendmsg_nosec+0x13a/0x180 [ 560.192098][T17447] ____sys_sendmsg+0x54e/0x850 [ 560.192132][T17447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 560.192179][T17447] ? import_iovec+0x73/0xa0 [ 560.192209][T17447] ___sys_sendmsg+0x2a5/0x360 [ 560.192234][T17447] ? __lock_acquire+0x747/0x2de0 [ 560.192260][T17447] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.192285][T17447] ? __lock_acquire+0x747/0x2de0 [ 560.192310][T17447] ? kstrtouint+0x6e/0xe0 [ 560.192376][T17447] __sys_sendmmsg+0x273/0x4d0 [ 560.192410][T17447] ? __pfx___sys_sendmmsg+0x10/0x10 [ 560.192448][T17447] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 560.192492][T17447] ? ksys_write+0x242/0x270 [ 560.192524][T17447] ? __pfx_ksys_write+0x10/0x10 [ 560.192561][T17447] __x64_sys_sendmmsg+0xa0/0xc0 [ 560.192591][T17447] do_syscall_64+0x166/0x520 [ 560.192616][T17447] ? trace_irq_disable+0x3b/0x140 [ 560.192637][T17447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.192656][T17447] ? clear_bhb_loop+0x70/0xc0 [ 560.192680][T17447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.192700][T17447] RIP: 0033:0x7fabdb79e159 [ 560.192720][T17447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.192737][T17447] RSP: 002b:00007fabdc734028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 560.192760][T17447] RAX: ffffffffffffffda RBX: 00007fabdba25fa0 RCX: 00007fabdb79e159 [ 560.192774][T17447] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 560.192787][T17447] RBP: 00007fabdc734090 R08: 0000000000000000 R09: 0000000000000000 [ 560.192800][T17447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.192812][T17447] R13: 00007fabdba26038 R14: 00007fabdba25fa0 R15: 00007ffc034cd508 [ 560.192846][T17447] [ 560.309091][T17451] bridge_slave_0: left allmulticast mode [ 560.309117][T17451] bridge_slave_0: left promiscuous mode [ 560.309364][T17451] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.782376][T17472] __nla_validate_parse: 3 callbacks suppressed [ 560.782433][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2709'. [ 560.898602][T17451] bridge_slave_1: left allmulticast mode [ 560.898632][T17451] bridge_slave_1: left promiscuous mode [ 560.903221][T17451] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.940403][T17478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2709'. [ 560.940429][T17478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2709'. [ 560.940443][T17478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2709'. [ 560.944510][T17451] bond0: (slave bond_slave_0): Releasing backup interface [ 560.947608][T17451] bond0: (slave bond_slave_1): Releasing backup interface [ 560.949080][T17451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.954544][T17451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.961202][T17451] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 560.961382][T17452] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 560.961712][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2704'. [ 561.462270][T17486] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2712'. [ 561.462307][T17486] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2712'. [ 561.462328][T17486] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2712'. [ 561.462346][T17486] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2712'. [ 561.462364][T17486] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2712'. [ 562.173734][T17524] netlink: 'syz.0.2722': attribute type 2 has an invalid length. [ 564.846638][T17524] : entered promiscuous mode [ 564.948665][T17540] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 565.322132][T17555] netlink: 'syz.3.2733': attribute type 20 has an invalid length. [ 565.593160][T17555] netlink: 'syz.3.2733': attribute type 20 has an invalid length. [ 565.594228][T16618] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 565.598351][T16617] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 565.598419][T16617] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 565.598458][T16617] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 565.748919][T17561] IPVS: Error connecting to the multicast addr [ 565.959304][T17556] tipc: Enabled bearer , priority 0 [ 565.965851][T17573] C: renamed from veth1_to_team (while UP) [ 566.054727][T17573] netlink: 'syz.4.2735': attribute type 1 has an invalid length. [ 566.054792][T17573] __nla_validate_parse: 181 callbacks suppressed [ 566.054826][T17573] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2735'. [ 566.065603][T17573] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 566.249266][T17573] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 566.305439][T17568] syzkaller0: entered promiscuous mode [ 566.305515][T17568] syzkaller0: entered allmulticast mode [ 566.562844][T17556] tipc: Resetting bearer [ 566.609406][T17553] tipc: Resetting bearer [ 566.709258][T17553] tipc: Disabling bearer [ 567.110813][T17602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2739'. [ 567.646909][ T5625] block nbd2: Receive control failed (result -32) [ 567.653419][ T5625] block nbd2: Receive control failed (result -32) [ 567.727667][T17620] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 567.751357][T17620] netlink: 'syz.0.2747': attribute type 1 has an invalid length. [ 567.751378][T17620] netlink: 'syz.0.2747': attribute type 2 has an invalid length. [ 567.809764][T17616] netlink: 'syz.2.2745': attribute type 12 has an invalid length. [ 569.322878][T17683] Bluetooth: hci0: unsupported parameter 5134 [ 569.323527][T17683] Bluetooth: hci0: unsupported parameter 8192 [ 569.323572][T17683] Bluetooth: hci0: unsupported parameter 5134 [ 569.323622][T17683] Bluetooth: hci0: unsupported parameter 8192 [ 569.363591][T17682] netlink: 'syz.0.2762': attribute type 11 has an invalid length. [ 569.635277][T17679] syzkaller1: entered promiscuous mode [ 569.635304][T17679] syzkaller1: entered allmulticast mode [ 570.520864][T17720] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2772'. [ 570.523974][T17720] netlink: Invalid conntrack helper [ 570.524006][T17720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.886280][T17726] netlink: 'syz.4.2775': attribute type 11 has an invalid length. [ 571.968424][T17766] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2787'. [ 571.970433][T17766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2787'. [ 572.035088][T17766] syzkaller0: entered promiscuous mode [ 572.035115][T17766] syzkaller0: entered allmulticast mode [ 572.410694][T17772] netlink: 'syz.1.2789': attribute type 11 has an invalid length. [ 572.583805][T17775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.663948][T17775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.702704][T17776] xt_policy: too many policy elements [ 572.742843][T17776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2788'. [ 572.781805][T17772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.864085][T17772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.966234][T17793] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2790'. [ 573.328525][T17804] netlink: 'syz.0.2794': attribute type 11 has an invalid length. [ 573.724598][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2799'. [ 573.724957][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2799'. [ 573.731121][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2799'. [ 573.731533][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2799'. [ 573.733720][T17818] netlink: 'syz.4.2799': attribute type 1 has an invalid length. [ 573.739387][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2799'. [ 574.051782][T17826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.069773][T17826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.807949][T17843] syzkaller0: entered promiscuous mode [ 574.807976][T17843] syzkaller0: entered allmulticast mode [ 574.819239][T17843] tipc: Enabled bearer , priority 0 [ 574.851688][T17848] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2809'. [ 574.853532][T17848] netlink: 'syz.2.2809': attribute type 21 has an invalid length. [ 575.022945][T17856] tipc: Resetting bearer [ 575.282264][T17842] tipc: Resetting bearer [ 575.400129][T17842] tipc: Disabling bearer [ 575.445271][T17861] netlink: 'syz.2.2811': attribute type 11 has an invalid length. [ 575.453141][T17861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.517457][T17861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.598263][T17871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.667494][T17871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.787874][T17878] netlink: 'syz.4.2816': attribute type 11 has an invalid length. [ 575.787900][T17878] netlink: 'syz.4.2816': attribute type 13 has an invalid length. [ 575.792591][T17878] openvswitch: netlink: Flow actions attr not present in new flow. [ 575.854886][T17875] netlink: 'syz.0.2815': attribute type 4 has an invalid length. [ 576.370451][T17899] gre0: entered promiscuous mode [ 576.370476][T17899] gre0: entered allmulticast mode [ 576.598012][T17900] syzkaller0: entered promiscuous mode [ 576.598080][T17900] syzkaller0: entered allmulticast mode [ 576.674990][T17900] tipc: Enabled bearer , priority 0 [ 577.123710][T17893] tipc: Resetting bearer [ 577.192527][T17893] tipc: Disabling bearer [ 577.461833][T17920] nbd4: detected capacity change from 0 to 63 [ 577.480213][T17920] block nbd3: NBD_DISCONNECT [ 577.480241][T17920] block nbd3: Send disconnect failed -32 [ 577.556337][ T5625] block nbd4: Receive control failed (result -104) [ 577.657842][T17927] netlink: 'syz.0.2831': attribute type 11 has an invalid length. [ 577.662952][T17927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.803780][T17928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.822458][T17927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.875809][T17927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.849152][T17960] __nla_validate_parse: 4 callbacks suppressed [ 578.849189][T17960] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2841'. [ 578.883056][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2841'. [ 579.861907][T17984] xt_hashlimit: size too large, truncated to 1048576 [ 579.883876][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'. [ 579.883910][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2847'. [ 580.629718][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'. [ 580.938100][T18008] netlink: 'syz.3.2854': attribute type 2 has an invalid length. [ 580.938125][T18008] netlink: 'syz.3.2854': attribute type 1 has an invalid length. [ 580.938139][T18008] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2854'. [ 580.944836][T18008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2854'. [ 581.417795][T18028] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 582.088093][T18041] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 582.567110][ T31] audit: type=1800 audit(1790370458.970:14): pid=18057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2864" name="memory.events" dev="tmpfs" ino=3054 res=0 errno=0 [ 582.628918][T18058] syzkaller0: entered promiscuous mode [ 582.628988][T18058] syzkaller0: entered allmulticast mode [ 582.804032][T18067] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2863'. [ 583.014847][T18072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 583.015293][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 583.237341][T18072] batman_adv: batadv0: Removing interface: ip6gretap1 [ 584.142292][T18103] ip_tables: iptables: counters copy to user failed while replacing table [ 584.147387][T18103] xt_hashlimit: size too large, truncated to 1048576 [ 584.319210][T18095] syzkaller0: entered promiscuous mode [ 584.319278][T18095] syzkaller0: entered allmulticast mode [ 584.557273][T18095] __nla_validate_parse: 1 callbacks suppressed [ 584.557337][T18095] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2870'. [ 584.557378][T18095] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2870'. [ 584.557437][T18095] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2870'. [ 584.612204][T18116] veth1_to_hsr: mtu less than device minimum [ 584.678520][T18095] syzkaller0: create flow: hash 3403781767 index 0 [ 584.803603][T18120] netlink: 'syz.4.2876': attribute type 1 has an invalid length. [ 584.857531][T18120] 8021q: adding VLAN 0 to HW filter on device bond10 [ 585.170940][T18126] xfrm0: entered allmulticast mode [ 588.124111][ C1] syzkaller0 (unregistering): delete flow: hash 3403781767 index 0 [ 589.527507][T18167] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2886'. [ 589.565157][T18160] erspan0: left promiscuous mode [ 589.681871][T18160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.796714][T18160] bridge_slave_1: entered promiscuous mode [ 589.826056][T18160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 589.830760][T18160] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 589.903754][T18180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2888'. [ 589.916277][T18180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2888'. [ 590.058263][ T5934] bridge0: port 4(veth0_virt_wifi) entered blocking state [ 590.058532][ T5934] bridge0: port 4(veth0_virt_wifi) entered forwarding state [ 590.148483][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2892'. [ 590.262347][T18201] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2891'. [ 590.262462][T18201] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2891'. [ 590.369246][T18196] bond12: Unable to set up delay as MII monitoring is disabled [ 590.393625][T18196] bond12 (unregistering): Released all slaves [ 590.492917][T18201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2891'. [ 590.818469][T18208] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 590.835075][T18208] xt_NETMAP: bad rangesize 37. [ 591.297035][T18228] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2900'. [ 591.313482][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'. [ 591.812210][T18239] ip_tables: iptables: counters copy to user failed while replacing table [ 592.474907][T18260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2909'. [ 592.599556][T18263] netlink: 'syz.0.2908': attribute type 1 has an invalid length. [ 592.710608][T18268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2908'. [ 592.741717][T18263] 8021q: adding VLAN 0 to HW filter on device bond8 [ 592.791849][T18267] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 592.847348][T18268] bond8: entered promiscuous mode [ 592.847376][T18268] bond8: entered allmulticast mode [ 593.006823][T18275] netlink: 'syz.3.2911': attribute type 11 has an invalid length. [ 593.170345][T18263] macvlan3: entered promiscuous mode [ 593.170410][T18263] macvlan3: entered allmulticast mode [ 593.209922][T18263] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 593.232308][T18263] bond8: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 593.249908][T18281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.480264][T18276] syzkaller0: entered promiscuous mode [ 593.480290][T18276] syzkaller0: entered allmulticast mode [ 593.505163][T18284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.631685][T18275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.811046][T18294] 0·: renamed from hsr0 (while UP) [ 593.897617][T18294] 0·: entered allmulticast mode [ 593.897681][T18294] hsr_slave_0: entered allmulticast mode [ 593.899190][T18294] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 594.663390][T18307] netlink: 'syz.2.2919': attribute type 9 has an invalid length. [ 594.683367][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 594.701202][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 594.720236][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 594.721225][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 594.723498][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 594.794401][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 594.803126][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 594.804391][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 594.822447][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 594.838024][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 595.034867][T18318] netlink: 'syz.3.2921': attribute type 6 has an invalid length. [ 595.243853][T18324] __nla_validate_parse: 3 callbacks suppressed [ 595.243877][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 595.268608][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 595.293144][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 595.318378][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 595.335154][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 595.358654][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 595.378677][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 595.403654][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 595.470381][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 595.539176][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 596.545293][T18356] bond_slave_0: entered promiscuous mode [ 596.545318][T18356] bond_slave_0: entered allmulticast mode [ 596.572331][T18356] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 596.987166][ T5617] Bluetooth: hci5: command tx timeout [ 597.882358][T18402] xt_socket: unknown flags 0x4 [ 597.983423][T18411] xfrm3: entered promiscuous mode [ 597.983447][T18411] xfrm3: entered allmulticast mode [ 598.168394][T18408] netlink: 'syz.2.2937': attribute type 11 has an invalid length. [ 598.343982][T18408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.468665][T18422] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 598.474365][T18421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.066361][ T5617] Bluetooth: hci5: command tx timeout [ 599.342580][T18309] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.342930][T18309] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.345423][T18309] bridge_slave_0: entered allmulticast mode [ 599.357252][T18309] bridge_slave_0: entered promiscuous mode [ 599.380525][T18309] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.380780][T18309] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.381834][T18309] bridge_slave_1: entered allmulticast mode [ 599.395473][T18309] bridge_slave_1: entered promiscuous mode [ 599.697929][T18309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.737536][T18309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.824237][T18309] team0: Port device team_slave_0 added [ 599.838569][T18309] team0: Port device team_slave_1 added [ 600.120156][T18452] Bluetooth: hci0: unsupported parameter 5135 [ 600.120184][T18452] Bluetooth: hci0: unsupported parameter 8192 [ 600.120225][T18452] Bluetooth: hci0: unsupported parameter 5135 [ 600.120238][T18452] Bluetooth: hci0: unsupported parameter 8192 [ 600.180951][T18309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.180972][T18309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.180997][T18309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.186688][T18309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.186708][T18309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.268066][T18309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.336422][T18309] hsr_slave_0: entered promiscuous mode [ 600.337745][T18309] hsr_slave_1: entered promiscuous mode [ 601.125978][T18309] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 601.146697][ T5617] Bluetooth: hci5: command tx timeout [ 601.295496][T18468] __nla_validate_parse: 47 callbacks suppressed [ 601.302410][T18468] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2951'. [ 601.342175][T18309] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 601.522210][T18309] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 601.765414][T18309] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 602.711042][T18309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 602.757775][T18309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 602.760665][T18309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 602.802260][T18309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 602.823635][T18309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 602.852180][T18309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 602.853259][T18309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 602.884143][T18309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 603.227180][ T5617] Bluetooth: hci5: command tx timeout [ 603.304126][T18309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.513411][T18309] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.551472][T18528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2961'. [ 603.572192][T16622] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.572311][T16622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.614566][T16622] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.614829][T16622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.258084][T18530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2962'. [ 604.316922][T18531] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2962'. [ 604.780992][T18554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2967'. [ 605.361197][T18309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.479237][T18571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2971'. [ 605.669365][T18574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2971'. [ 606.000271][T18309] veth0_vlan: entered promiscuous mode [ 606.051652][T18309] veth1_vlan: entered promiscuous mode [ 606.151013][T18589] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2974'. [ 606.206112][T18309] veth0_macvtap: entered promiscuous mode [ 606.239957][T18309] veth1_macvtap: entered promiscuous mode [ 606.244613][T18591] syzkaller1: entered promiscuous mode [ 606.244637][T18591] syzkaller1: entered allmulticast mode [ 606.324665][T18309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.357518][T18309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.727151][T16620] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.727694][T16620] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.769589][T18595] netlink: 'syz.2.2975': attribute type 11 has an invalid length. [ 606.795749][T16620] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.864102][T18595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.946057][T18595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.035829][T16622] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.224186][T16618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.224212][T16618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.407108][T16620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.407134][T16620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.571182][T18607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2979'. [ 607.872065][T18612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2982'. [ 607.872095][T18612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2982'. [ 607.872110][T18612] netlink: 'syz.2.2982': attribute type 4 has an invalid length. [ 607.884537][T18620] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2982'. [ 607.952283][ T1975] block nbd4: Possible stuck request ffff888027af5080: control (read@0,1024B). Runtime 30 seconds [ 607.952925][ T1975] block nbd4: Possible stuck request ffff888027af5240: control (read@1024,1024B). Runtime 30 seconds [ 607.952959][ T1975] block nbd4: Possible stuck request ffff888027af5400: control (read@2048,1024B). Runtime 30 seconds [ 607.952985][ T1975] block nbd4: Possible stuck request ffff888027af55c0: control (read@3072,1024B). Runtime 30 seconds [ 607.982299][T18615] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2981'. [ 608.118497][ T5625] block nbd3: Receive control failed (result -32) [ 608.120135][ T5617] block nbd3: Receive control failed (result -32) [ 609.022076][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 609.028988][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 609.034333][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 609.056656][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 609.059622][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 609.404034][T18649] netlink: 'syz.3.2989': attribute type 23 has an invalid length. [ 610.130070][ T5934] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.399390][ T5934] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.624777][ T5934] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.841132][ T5934] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.115295][T18662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2994'. [ 611.152144][T18662] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2994'. [ 611.226588][ T5625] Bluetooth: hci1: command tx timeout [ 611.424760][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880799c9c00: rx timeout, send abort [ 611.727925][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3003'. [ 611.727951][T18716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3003'. [ 611.925198][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807eb60000: rx timeout, send abort [ 611.927443][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880799c9c00: abort rx timeout. Force session deactivation [ 612.080064][ T5934] bridge_slave_1: left allmulticast mode [ 612.080111][ T5934] bridge_slave_1: left promiscuous mode [ 612.082397][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.087249][ T5934] bridge_slave_0: left allmulticast mode [ 612.087277][ T5934] bridge_slave_0: left promiscuous mode [ 612.088503][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.092080][T18720] netlink: 'syz.4.3006': attribute type 11 has an invalid length. [ 612.193736][ T5934] erspan0: left allmulticast mode [ 612.193766][ T5934] erspan0: left promiscuous mode [ 612.193982][ T5934] bridge10: port 1(erspan0) entered disabled state [ 612.222346][ T5934] dvmrp0: left allmulticast mode [ 612.232574][ T5934] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 612.254283][T18722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.287852][T18724] FAULT_INJECTION: forcing a failure. [ 612.287852][T18724] name failslab, interval 1, probability 0, space 0, times 0 [ 612.287887][T18724] CPU: 0 UID: 0 PID: 18724 Comm: syz.1.3007 Not tainted syzkaller #0 PREEMPT(full) [ 612.287907][T18724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 612.287916][T18724] Call Trace: [ 612.287923][T18724] [ 612.287930][T18724] dump_stack_lvl+0xe8/0x150 [ 612.287960][T18724] should_fail_ex+0x410/0x560 [ 612.287983][T18724] ? __alloc_skb+0x1db/0x7a0 [ 612.288003][T18724] should_failslab+0xa8/0x100 [ 612.288024][T18724] ? __alloc_skb+0x1db/0x7a0 [ 612.288040][T18724] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 612.288063][T18724] ? __alloc_skb+0x18d/0x7a0 [ 612.288082][T18724] ? __alloc_skb+0x1db/0x7a0 [ 612.288107][T18724] __alloc_skb+0x1db/0x7a0 [ 612.288130][T18724] netlink_sendmsg+0x5d4/0xb40 [ 612.288156][T18724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.288180][T18724] ? apparmor_socket_sendmsg+0x98/0x360 [ 612.288201][T18724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.288218][T18724] sock_sendmsg_nosec+0x13a/0x180 [ 612.288239][T18724] ____sys_sendmsg+0x54e/0x850 [ 612.288266][T18724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 612.288297][T18724] ? import_iovec+0x73/0xa0 [ 612.288322][T18724] ___sys_sendmsg+0x2a5/0x360 [ 612.288342][T18724] ? __lock_acquire+0x747/0x2de0 [ 612.288363][T18724] ? __pfx____sys_sendmsg+0x10/0x10 [ 612.288419][T18724] ? __fget_files+0x2a/0x420 [ 612.288445][T18724] ? __fget_files+0x3a2/0x420 [ 612.288477][T18724] __x64_sys_sendmsg+0x1b1/0x290 [ 612.288502][T18724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 612.288546][T18724] do_syscall_64+0x166/0x520 [ 612.288574][T18724] ? trace_irq_disable+0x3b/0x140 [ 612.288590][T18724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.288608][T18724] ? clear_bhb_loop+0x70/0xc0 [ 612.288629][T18724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.288645][T18724] RIP: 0033:0x7f52bb99e159 [ 612.288663][T18724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.288680][T18724] RSP: 002b:00007f52bc91e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.288704][T18724] RAX: ffffffffffffffda RBX: 00007f52bbc25fa0 RCX: 00007f52bb99e159 [ 612.288730][T18724] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 612.288743][T18724] RBP: 00007f52bc91e090 R08: 0000000000000000 R09: 0000000000000000 [ 612.288755][T18724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.288767][T18724] R13: 00007f52bbc26038 R14: 00007f52bbc25fa0 R15: 00007ffebab03258 [ 612.288800][T18724] [ 612.425254][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807eb60000: abort rx timeout. Force session deactivation [ 612.621832][ T5934] batman_adv: batadv0: Removing interface: ip6gretap1 [ 613.153827][ T5934] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 613.153855][ T5934] bond2 (unregistering): (slave bridge2): the permanent HWaddr of slave - c2:9c:bd:9c:8b:4a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 613.189392][ T5934] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 613.219764][ T5934] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 613.219850][ T5934] bridge6 (unregistering): left promiscuous mode [ 613.306656][ T5625] Bluetooth: hci1: command tx timeout [ 613.314747][ T5934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.341954][T16622] smbdirect: ib_dev[syz1] removed [ 613.363814][ T5934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.364842][ T5934] bond0 (unregistering): Released all slaves [ 613.429832][ T5934] bond1 (unregistering): Released all slaves [ 613.452329][ T5934] bond2 (unregistering): Released all slaves [ 613.478517][ T5934] bond3 (unregistering): Released all slaves [ 613.504048][ T5934] bond4 (unregistering): Released all slaves [ 613.533861][ T5934] bond5 (unregistering): Released all slaves [ 613.561579][ T5934] bond6 (unregistering): Released all slaves [ 613.583080][ T5934] bond7 (unregistering): Released all slaves [ 613.611442][ T5934] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 613.631391][ T5934] bond8 (unregistering): Released all slaves [ 613.920104][ T5934] : left promiscuous mode [ 614.356776][ T5934] tipc: Left network mode [ 615.387683][ T5625] Bluetooth: hci1: command tx timeout [ 615.754058][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3020'. [ 615.754101][T18789] netlink: 'syz.1.3020': attribute type 21 has an invalid length. [ 615.818093][T18787] xt_bpf: check failed: parse error [ 615.873351][T18791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.009491][T18790] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3021'. [ 616.036087][T18790] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3021'. [ 616.037150][T18640] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.037274][T18640] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.037434][T18640] bridge_slave_0: entered allmulticast mode [ 616.041430][T18640] bridge_slave_0: entered promiscuous mode [ 616.304623][T18640] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.304749][T18640] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.304939][T18640] bridge_slave_1: entered allmulticast mode [ 616.307381][T18640] bridge_slave_1: entered promiscuous mode [ 616.860913][T18640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.920446][T18640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.045374][T18818] ip_tables: iptables: counters copy to user failed while replacing table [ 617.328760][T18832] FAULT_INJECTION: forcing a failure. [ 617.328760][T18832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.328796][T18832] CPU: 0 UID: 0 PID: 18832 Comm: syz.1.3030 Not tainted syzkaller #0 PREEMPT(full) [ 617.328818][T18832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 617.328830][T18832] Call Trace: [ 617.328838][T18832] [ 617.328847][T18832] dump_stack_lvl+0xe8/0x150 [ 617.328882][T18832] should_fail_ex+0x410/0x560 [ 617.328911][T18832] _copy_from_iter+0x1d3/0x1660 [ 617.328936][T18832] ? __alloc_skb+0x27a/0x7a0 [ 617.328962][T18832] ? __alloc_skb+0x27a/0x7a0 [ 617.328986][T18832] ? __alloc_skb+0x27a/0x7a0 [ 617.329009][T18832] ? __pfx__copy_from_iter+0x10/0x10 [ 617.329029][T18832] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 617.329056][T18832] ? __alloc_skb+0x27a/0x7a0 [ 617.329077][T18832] ? __alloc_skb+0x27a/0x7a0 [ 617.329104][T18832] ? netlink_sendmsg+0x650/0xb40 [ 617.329123][T18832] ? skb_put+0x112/0x210 [ 617.329150][T18832] netlink_sendmsg+0x6c0/0xb40 [ 617.329180][T18832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.329213][T18832] ? apparmor_socket_sendmsg+0x98/0x360 [ 617.329239][T18832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.329257][T18832] sock_sendmsg_nosec+0x13a/0x180 [ 617.329281][T18832] ____sys_sendmsg+0x54e/0x850 [ 617.329323][T18832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 617.329360][T18832] ? import_iovec+0x73/0xa0 [ 617.329388][T18832] ___sys_sendmsg+0x2a5/0x360 [ 617.329413][T18832] ? __lock_acquire+0x747/0x2de0 [ 617.329438][T18832] ? __pfx____sys_sendmsg+0x10/0x10 [ 617.329504][T18832] ? __fget_files+0x2a/0x420 [ 617.329528][T18832] ? __fget_files+0x3a2/0x420 [ 617.329565][T18832] __x64_sys_sendmsg+0x1b1/0x290 [ 617.329596][T18832] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 617.329646][T18832] do_syscall_64+0x166/0x520 [ 617.329672][T18832] ? trace_irq_disable+0x3b/0x140 [ 617.329691][T18832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.329711][T18832] ? clear_bhb_loop+0x70/0xc0 [ 617.329736][T18832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.329755][T18832] RIP: 0033:0x7f52bb99e159 [ 617.329775][T18832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.329791][T18832] RSP: 002b:00007f52bc91e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.329813][T18832] RAX: ffffffffffffffda RBX: 00007f52bbc25fa0 RCX: 00007f52bb99e159 [ 617.329828][T18832] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 617.329840][T18832] RBP: 00007f52bc91e090 R08: 0000000000000000 R09: 0000000000000000 [ 617.329853][T18832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.329864][T18832] R13: 00007f52bbc26038 R14: 00007f52bbc25fa0 R15: 00007ffebab03258 [ 617.329898][T18832] [ 617.434622][T18824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.454723][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 617.467926][ T5625] Bluetooth: hci1: command tx timeout [ 617.516314][T18640] team0: Port device team_slave_0 added [ 617.518782][T18824] syzkaller1: entered promiscuous mode [ 617.518842][T18824] syzkaller1: entered allmulticast mode [ 617.758816][T18640] team0: Port device team_slave_1 added [ 617.971630][T18839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'. [ 617.974309][T18840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'. [ 617.975413][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'. [ 618.530198][T18640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.530258][T18640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.538713][T18640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.553593][T18640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.553649][T18640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.553693][T18640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.112849][T18640] hsr_slave_0: entered promiscuous mode [ 619.122993][T18640] hsr_slave_1: entered promiscuous mode [ 619.134135][T18640] debugfs: 'hsr0' already exists in 'hsr' [ 619.134161][T18640] Cannot create hsr debugfs directory [ 619.191875][T18881] FAULT_INJECTION: forcing a failure. [ 619.191875][T18881] name failslab, interval 1, probability 0, space 0, times 0 [ 619.191910][T18881] CPU: 0 UID: 0 PID: 18881 Comm: syz.4.3040 Not tainted syzkaller #0 PREEMPT(full) [ 619.191936][T18881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 619.191948][T18881] Call Trace: [ 619.191956][T18881] [ 619.191965][T18881] dump_stack_lvl+0xe8/0x150 [ 619.192000][T18881] should_fail_ex+0x410/0x560 [ 619.192030][T18881] should_failslab+0xa8/0x100 [ 619.192061][T18881] __kmalloc_noprof+0xfe/0x720 [ 619.192082][T18881] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 619.192168][T18881] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 619.192199][T18881] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 619.192226][T18881] ? __dev_queue_xmit+0x29b/0x3820 [ 619.192287][T18881] genl_family_rcv_msg_doit+0xda/0x340 [ 619.192319][T18881] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 619.192353][T18881] ? apparmor_capable+0x126/0x170 [ 619.192410][T18881] ? bpf_lsm_capable+0x9/0x20 [ 619.192429][T18881] ? security_capable+0x7e/0x2c0 [ 619.192459][T18881] genl_rcv_msg+0x614/0x7a0 [ 619.192489][T18881] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.192512][T18881] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 619.192583][T18881] netlink_rcv_skb+0x226/0x4a0 [ 619.192614][T18881] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.192638][T18881] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.192682][T18881] ? down_read+0x2be/0x330 [ 619.192715][T18881] genl_rcv+0x28/0x40 [ 619.192736][T18881] netlink_unicast+0x7bd/0x940 [ 619.192784][T18881] netlink_sendmsg+0x813/0xb40 [ 619.192815][T18881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.192845][T18881] ? apparmor_socket_sendmsg+0x98/0x360 [ 619.192870][T18881] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.192888][T18881] sock_sendmsg_nosec+0x13a/0x180 [ 619.192912][T18881] ____sys_sendmsg+0x54e/0x850 [ 619.192944][T18881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.192979][T18881] ? import_iovec+0x73/0xa0 [ 619.193008][T18881] ___sys_sendmsg+0x2a5/0x360 [ 619.193033][T18881] ? __lock_acquire+0x747/0x2de0 [ 619.193058][T18881] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.193121][T18881] ? __fget_files+0x2a/0x420 [ 619.193147][T18881] ? __fget_files+0x3a2/0x420 [ 619.193182][T18881] __x64_sys_sendmsg+0x1b1/0x290 [ 619.193212][T18881] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.193261][T18881] do_syscall_64+0x166/0x520 [ 619.193285][T18881] ? trace_irq_disable+0x3b/0x140 [ 619.193305][T18881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.193324][T18881] ? clear_bhb_loop+0x70/0xc0 [ 619.193348][T18881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.193367][T18881] RIP: 0033:0x7fd31919e159 [ 619.193387][T18881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.193403][T18881] RSP: 002b:00007fd31a0b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.193427][T18881] RAX: ffffffffffffffda RBX: 00007fd319426090 RCX: 00007fd31919e159 [ 619.193441][T18881] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 619.193454][T18881] RBP: 00007fd31a0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 619.193466][T18881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.193477][T18881] R13: 00007fd319426128 R14: 00007fd319426090 R15: 00007fff797b4f38 [ 619.193508][T18881] [ 619.846611][ T5934] hsr_slave_0: left promiscuous mode [ 619.862909][ T5934] hsr_slave_1: left promiscuous mode [ 619.873826][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.978683][T18896] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3043'. [ 620.042314][T18896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3043'. [ 620.148554][T18899] netlink: 'syz.4.3044': attribute type 21 has an invalid length. [ 620.227242][T18903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.228783][T18903] netlink: 'syz.4.3044': attribute type 1 has an invalid length. [ 620.898958][T18903] 8021q: adding VLAN 0 to HW filter on device bond11 [ 620.961805][T18926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3048'. [ 620.962085][T18907] bond11: entered allmulticast mode [ 620.984218][T18907] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3044'. [ 621.290616][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 621.369429][ T5934] IPVS: stop unused estimator thread 0... [ 621.392594][T18932] netlink: 'syz.4.3050': attribute type 11 has an invalid length. [ 621.402193][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3052'. [ 621.484185][T18931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3049'. [ 621.499502][T18937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3049'. [ 621.693472][T18945] FAULT_INJECTION: forcing a failure. [ 621.693472][T18945] name failslab, interval 1, probability 0, space 0, times 0 [ 621.693508][T18945] CPU: 0 UID: 0 PID: 18945 Comm: syz.2.3053 Not tainted syzkaller #0 PREEMPT(full) [ 621.693535][T18945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 621.693547][T18945] Call Trace: [ 621.693556][T18945] [ 621.693564][T18945] dump_stack_lvl+0xe8/0x150 [ 621.693602][T18945] should_fail_ex+0x410/0x560 [ 621.693633][T18945] should_failslab+0xa8/0x100 [ 621.693660][T18945] __kmalloc_noprof+0xfe/0x720 [ 621.693680][T18945] ? ethnl_default_set_doit+0x169/0x1080 [ 621.693704][T18945] ? ethnl_default_set_doit+0x169/0x1080 [ 621.693731][T18945] ethnl_default_set_doit+0x169/0x1080 [ 621.693756][T18945] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 621.693805][T18945] genl_family_rcv_msg_doit+0x233/0x340 [ 621.693838][T18945] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 621.693875][T18945] ? bpf_lsm_capable+0x9/0x20 [ 621.693894][T18945] ? security_capable+0x7e/0x2c0 [ 621.693924][T18945] genl_rcv_msg+0x614/0x7a0 [ 621.693957][T18945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.693980][T18945] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 621.694019][T18945] netlink_rcv_skb+0x226/0x4a0 [ 621.694050][T18945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.694075][T18945] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 621.694122][T18945] ? down_read+0x2be/0x330 [ 621.694170][T18945] genl_rcv+0x28/0x40 [ 621.694193][T18945] netlink_unicast+0x7bd/0x940 [ 621.694236][T18945] netlink_sendmsg+0x813/0xb40 [ 621.694267][T18945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.694299][T18945] ? apparmor_socket_sendmsg+0x98/0x360 [ 621.694326][T18945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.694345][T18945] sock_sendmsg_nosec+0x13a/0x180 [ 621.694373][T18945] ____sys_sendmsg+0x54e/0x850 [ 621.694408][T18945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.694448][T18945] ? import_iovec+0x73/0xa0 [ 621.694480][T18945] ___sys_sendmsg+0x2a5/0x360 [ 621.694507][T18945] ? __lock_acquire+0x747/0x2de0 [ 621.694536][T18945] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.694607][T18945] ? __fget_files+0x2a/0x420 [ 621.694634][T18945] ? __fget_files+0x3a2/0x420 [ 621.694667][T18945] __x64_sys_sendmsg+0x1b1/0x290 [ 621.694697][T18945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 621.694751][T18945] do_syscall_64+0x166/0x520 [ 621.694778][T18945] ? trace_irq_disable+0x3b/0x140 [ 621.694798][T18945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.694821][T18945] ? clear_bhb_loop+0x70/0xc0 [ 621.694848][T18945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.694868][T18945] RIP: 0033:0x7f5c7639e159 [ 621.694889][T18945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.694905][T18945] RSP: 002b:00007f5c77322028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.694929][T18945] RAX: ffffffffffffffda RBX: 00007f5c76626090 RCX: 00007f5c7639e159 [ 621.694944][T18945] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 621.694957][T18945] RBP: 00007f5c77322090 R08: 0000000000000000 R09: 0000000000000000 [ 621.694970][T18945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.694982][T18945] R13: 00007f5c76626128 R14: 00007f5c76626090 R15: 00007ffe5edc92f8 [ 621.695018][T18945] [ 622.247847][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'. [ 622.247876][T18972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3057'. [ 622.247901][T18972] netlink: 'syz.1.3057': attribute type 11 has an invalid length. [ 622.393160][T18976] No such timeout policy "syz0" [ 622.679098][T18985] syzkaller0: entered allmulticast mode [ 622.771910][T18986] netlink: 'syz.1.3060': attribute type 2 has an invalid length. [ 623.260410][T18640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 623.279725][T18640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 623.282638][T18640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 623.292155][T18640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 623.299373][T19008] netlink: 'syz.3.3064': attribute type 3 has an invalid length. [ 623.299393][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 623.307611][T19014] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3065'. [ 623.342579][T18640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 623.370246][T18640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 623.375118][T18640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 623.405143][T18640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 623.583958][T19031] FAULT_INJECTION: forcing a failure. [ 623.583958][T19031] name failslab, interval 1, probability 0, space 0, times 0 [ 623.583994][T19031] CPU: 0 UID: 0 PID: 19031 Comm: syz.1.3067 Not tainted syzkaller #0 PREEMPT(full) [ 623.584017][T19031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 623.584028][T19031] Call Trace: [ 623.584037][T19031] [ 623.584046][T19031] dump_stack_lvl+0xe8/0x150 [ 623.584081][T19031] should_fail_ex+0x410/0x560 [ 623.584120][T19031] should_failslab+0xa8/0x100 [ 623.584147][T19031] __kmalloc_noprof+0xfe/0x720 [ 623.584168][T19031] ? ethnl_default_set_doit+0x169/0x1080 [ 623.584193][T19031] ? ethnl_default_set_doit+0x169/0x1080 [ 623.584223][T19031] ethnl_default_set_doit+0x169/0x1080 [ 623.584249][T19031] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 623.584284][T19031] genl_family_rcv_msg_doit+0x233/0x340 [ 623.584319][T19031] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 623.584356][T19031] ? bpf_lsm_capable+0x9/0x20 [ 623.584372][T19031] ? security_capable+0x7e/0x2c0 [ 623.584400][T19031] genl_rcv_msg+0x614/0x7a0 [ 623.584428][T19031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 623.584449][T19031] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 623.584485][T19031] netlink_rcv_skb+0x226/0x4a0 [ 623.584513][T19031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 623.584537][T19031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 623.584579][T19031] ? down_read+0x2be/0x330 [ 623.584620][T19031] genl_rcv+0x28/0x40 [ 623.584641][T19031] netlink_unicast+0x7bd/0x940 [ 623.584680][T19031] netlink_sendmsg+0x813/0xb40 [ 623.584710][T19031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.584740][T19031] ? apparmor_socket_sendmsg+0x98/0x360 [ 623.584765][T19031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.584784][T19031] sock_sendmsg_nosec+0x13a/0x180 [ 623.584810][T19031] ____sys_sendmsg+0x54e/0x850 [ 623.584844][T19031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 623.584880][T19031] ? import_iovec+0x73/0xa0 [ 623.584909][T19031] ___sys_sendmsg+0x2a5/0x360 [ 623.584933][T19031] ? __lock_acquire+0x747/0x2de0 [ 623.584969][T19031] ? __pfx____sys_sendmsg+0x10/0x10 [ 623.585037][T19031] ? __fget_files+0x2a/0x420 [ 623.585063][T19031] ? __fget_files+0x3a2/0x420 [ 623.585101][T19031] __x64_sys_sendmsg+0x1b1/0x290 [ 623.585130][T19031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 623.585181][T19031] do_syscall_64+0x166/0x520 [ 623.585205][T19031] ? trace_irq_disable+0x3b/0x140 [ 623.585224][T19031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.585245][T19031] ? clear_bhb_loop+0x70/0xc0 [ 623.585270][T19031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.585290][T19031] RIP: 0033:0x7f52bb99e159 [ 623.585310][T19031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.585325][T19031] RSP: 002b:00007f52bc91e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.585349][T19031] RAX: ffffffffffffffda RBX: 00007f52bbc25fa0 RCX: 00007f52bb99e159 [ 623.585362][T19031] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 623.585375][T19031] RBP: 00007f52bc91e090 R08: 0000000000000000 R09: 0000000000000000 [ 623.585388][T19031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.585400][T19031] R13: 00007f52bbc26038 R14: 00007f52bbc25fa0 R15: 00007ffebab03258 [ 623.585433][T19031] [ 624.019817][T18640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.127906][T19047] netlink: 356 bytes leftover after parsing attributes in process `syz.4.3072'. [ 624.128537][T18640] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.225584][T16619] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.225709][T16619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.249524][T16619] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.249646][T16619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.423113][T19060] tipc: Enabled bearer , priority 0 [ 624.700629][T19073] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 624.703884][T19073] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 625.211526][T19057] tipc: Disabling bearer [ 626.028928][T19138] __nla_validate_parse: 6 callbacks suppressed [ 626.028950][T19138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3086'. [ 626.039720][T18640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.322776][T19141] veth1_vlan: left promiscuous mode [ 626.332600][T19141] v: left promiscuous mode [ 626.339903][T19141] v: entered promiscuous mode [ 626.349877][T19141] veth1_vlan: entered promiscuous mode [ 626.368510][T19153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3088'. [ 626.390195][T19141] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 626.414706][T19141] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 626.414735][T19141] hsr1: Slave B (veth0_to_team) is not up; please bring it up to get a fully working HSR network [ 626.452089][T19141] 8021q: adding VLAN 0 to HW filter on device eth0 [ 626.461677][T19141] 8021q: adding VLAN 0 to HW filter on device eth1 [ 626.469062][T19141] 8021q: adding VLAN 0 to HW filter on device eth2 [ 626.478422][T19141] 8021q: adding VLAN 0 to HW filter on device eth3 [ 626.499691][T19141] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 626.509976][T16632] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.517032][T16631] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.517094][T16631] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.517127][T16631] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.797175][T18640] veth0_vlan: entered promiscuous mode [ 626.890991][T18640] veth1_vlan: entered promiscuous mode [ 627.151004][T18640] veth0_macvtap: entered promiscuous mode [ 627.161825][T18640] veth1_macvtap: entered promiscuous mode [ 627.185361][T18640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.212527][T18640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.286334][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.286823][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.286902][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.286936][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.729041][T16620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.729066][T16620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.947235][T19171] tap0: tun_chr_ioctl cmd 2147767520 [ 628.017886][T19171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3091'. [ 628.017923][T19171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3091'. [ 628.023168][ T5938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.023206][ T5938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.036846][T19171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3091'. [ 628.036899][T19171] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 628.050738][T19171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3091'. [ 628.304907][T19191] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 628.786866][T19208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3096'. [ 628.786902][T19208] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3096'. [ 629.027526][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 629.034156][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 629.051117][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 629.059671][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 629.060409][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 629.765126][T19231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3102'. [ 630.293889][T19256] xt_hashlimit: size too large, truncated to 1048576 [ 630.294107][T19256] xt_hashlimit: Unknown mode mask A2BF, kernel too old? [ 630.317602][T19257] xt_hashlimit: size too large, truncated to 1048576 [ 630.317623][T19257] xt_hashlimit: Unknown mode mask A2BF, kernel too old? [ 630.359907][T19256] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3106'. [ 630.392958][T19260] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 630.392999][T19260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.533317][T19267] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 630.650219][T19266] ipvlan2: entered allmulticast mode [ 630.650245][T19266] macvlan1: entered allmulticast mode [ 630.650258][T19266] veth1_vlan: entered allmulticast mode [ 630.676671][T19266] batman_adv: batadv0: Adding interface: ipvlan2 [ 630.676691][T19266] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.676725][T19266] batman_adv: batadv0: Interface activated: ipvlan2 [ 631.034076][T19293] ip_tables: iptables: counters copy to user failed while replacing table [ 631.038929][T19295] ip_tables: iptables: counters copy to user failed while replacing table [ 631.103551][T19293] __nla_validate_parse: 1 callbacks suppressed [ 631.103573][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 631.103592][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3114'. [ 631.145696][ T5617] Bluetooth: hci0: command tx timeout [ 631.821759][T19210] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.821895][T19210] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.822079][T19210] bridge_slave_0: entered allmulticast mode [ 631.831073][T19210] bridge_slave_0: entered promiscuous mode [ 631.840773][T19210] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.844004][T19210] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.844170][T19210] bridge_slave_1: entered allmulticast mode [ 631.853340][T19210] bridge_slave_1: entered promiscuous mode [ 631.973060][T19210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.997464][T19210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.054869][T19210] team0: Port device team_slave_0 added [ 632.066996][T19210] team0: Port device team_slave_1 added [ 632.118119][T19210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.118138][T19210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.118164][T19210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.120306][T19210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.120319][T19210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.120345][T19210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.334316][T19210] hsr_slave_0: entered promiscuous mode [ 632.341748][T19210] hsr_slave_1: entered promiscuous mode [ 632.343270][T19210] debugfs: 'hsr0' already exists in 'hsr' [ 632.343291][T19210] Cannot create hsr debugfs directory [ 632.983601][T19210] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 632.983641][T19210] netdevsim netdevsim3 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 632.983666][T19210] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.186253][T19210] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 633.186291][T19210] netdevsim netdevsim3 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 633.186317][T19210] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.238560][ T5617] Bluetooth: hci0: command tx timeout [ 633.344922][T19354] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3119'. [ 633.358327][T19355] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3119'. [ 633.436817][T19357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3120'. [ 633.437633][T19357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3120'. [ 633.444535][T19210] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 633.444569][T19210] netdevsim netdevsim3 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 633.444595][T19210] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.671348][T19210] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 4352 - 0 [ 633.671389][T19210] netdevsim netdevsim3 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 633.671414][T19210] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.878900][T19382] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3127'. [ 633.878931][T19382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3127'. [ 634.005337][T19210] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 634.027995][T19210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 634.029019][T19210] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 634.053340][T19210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 634.054309][T19210] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 634.100120][T19210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 634.101194][T19210] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 634.137459][T19210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 634.457894][T19403] openvswitch: netlink: Flow actions attr not present in new flow. [ 635.305958][ T5617] Bluetooth: hci0: command tx timeout [ 637.089578][T19389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 637.386897][ T5617] Bluetooth: hci0: command tx timeout [ 637.577936][T19210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.692309][T19210] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.712787][T16620] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.712909][T16620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.769817][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.769958][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.779253][T19462] netlink: NAT attribute has 4 unknown bytes [ 637.779288][T19462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.963059][T19460] geneve0: entered promiscuous mode [ 637.986529][T19460] geneve0: left promiscuous mode [ 638.027674][ T1975] block nbd4: Possible stuck request ffff888027af5080: control (read@0,1024B). Runtime 60 seconds [ 638.027720][ T1975] block nbd4: Possible stuck request ffff888027af5240: control (read@1024,1024B). Runtime 60 seconds [ 638.027748][ T1975] block nbd4: Possible stuck request ffff888027af5400: control (read@2048,1024B). Runtime 60 seconds [ 638.027773][ T1975] block nbd4: Possible stuck request ffff888027af55c0: control (read@3072,1024B). Runtime 60 seconds [ 638.119150][T19481] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3143'. [ 638.119174][T19481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3143'. [ 638.140541][T19481] netlink: 'syz.0.3143': attribute type 1 has an invalid length. [ 638.140562][T19481] netlink: 756 bytes leftover after parsing attributes in process `syz.0.3143'. [ 638.189482][T19460] geneve0: entered promiscuous mode [ 638.213492][T19460] geneve0: left promiscuous mode [ 638.234166][T19479] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3143'. [ 638.234191][T19479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3143'. [ 638.246055][T19487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3145'. [ 638.287940][T19487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3145'. [ 638.320974][T19460] geneve0: entered promiscuous mode [ 638.324589][T19460] geneve0: left promiscuous mode [ 638.409232][T19460] geneve0: entered promiscuous mode [ 638.410673][T19460] geneve0: left promiscuous mode [ 638.489639][T19460] geneve0: entered promiscuous mode [ 638.492138][T19460] geneve0: left promiscuous mode [ 638.510063][T19492] netlink: 'syz.2.3148': attribute type 1 has an invalid length. [ 638.510088][T19492] netlink: 'syz.2.3148': attribute type 6 has an invalid length. [ 638.510102][T19492] netlink: 'syz.2.3148': attribute type 3 has an invalid length. [ 638.540557][T19485] netlink: 'syz.0.3143': attribute type 1 has an invalid length. [ 638.540579][T19485] netlink: 756 bytes leftover after parsing attributes in process `syz.0.3143'. [ 638.592351][T19492] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3148'. [ 638.845482][T19496] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 638.853151][T19496] bond2 (unregistering): Released all slaves [ 639.920218][T19548] nft_compat: unsupported protocol 1 [ 639.921657][T19549] nft_compat: unsupported protocol 1 [ 639.992279][T19210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.212143][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3165'. [ 640.228471][T19210] veth0_vlan: entered promiscuous mode [ 640.255412][T19210] veth1_vlan: entered promiscuous mode [ 640.411817][T19210] veth0_macvtap: entered promiscuous mode [ 640.434938][T19210] veth1_macvtap: entered promiscuous mode [ 640.487189][T19210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.491975][T19210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.536005][T16619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.536130][T16619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.536168][T16619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.536204][T16619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.074054][ T4984] udevd[4984]: worker [16981] /devices/virtual/block/nbd4 is taking a long time [ 643.203340][T19613] __nla_validate_parse: 22 callbacks suppressed [ 643.203366][T19613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3173'. [ 643.412707][T19606] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.413457][T19606] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.501727][T19606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.508142][T19606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.668434][T16618] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.668488][T16618] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.668525][T16618] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.668561][T16618] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.931647][T16632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.931671][T16632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.980868][T19631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 644.123329][ T5938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.123355][ T5938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.160392][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3176'. [ 644.394699][T19654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3094'. [ 644.423973][T19654] bond1 (unregistering): Released all slaves [ 644.463267][T19653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3182'. [ 644.745050][T19662] Bluetooth: MGMT ver 1.23 [ 644.803806][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'. [ 644.858696][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'. [ 645.107662][T18312] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 645.112053][T18312] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 645.113072][T18312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 645.125064][T18312] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 645.140989][T18312] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 645.374582][T19682] netlink: 'syz.4.3191': attribute type 10 has an invalid length. [ 645.419724][T19682] team0 (unregistering): Port device wg2 removed [ 645.505105][T19691] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3193'. [ 645.505163][T19691] netlink: 'syz.0.3193': attribute type 9 has an invalid length. [ 645.505177][T19691] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3193'. [ 645.514776][ T31] audit: type=1804 audit(1790370521.910:15): pid=19686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3191" name="/newroot/627/cgroup.controllers" dev="tmpfs" ino=3274 res=1 errno=0 [ 645.517180][ T31] audit: type=1800 audit(1790370521.920:16): pid=19686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3191" name="cgroup.controllers" dev="tmpfs" ino=3274 res=0 errno=0 [ 645.636053][ T31] audit: type=1804 audit(1790370522.030:17): pid=19682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3191" name="/newroot/627/cgroup.controllers" dev="tmpfs" ino=3274 res=1 errno=0 [ 645.645321][T19682] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3191'. [ 646.414902][T19733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.830070][ T5617] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 646.830761][ T5617] Bluetooth: hci0: command 0x0c24 tx timeout [ 647.014004][T19755] ip6erspan0: entered allmulticast mode [ 647.097629][T19671] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.097853][T19671] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.098044][T19671] bridge_slave_0: entered allmulticast mode [ 647.100145][T19671] bridge_slave_0: entered promiscuous mode [ 647.131626][T19671] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.131893][T19757] openvswitch: netlink: IPv4 tunnel dst address is zero [ 647.131928][T19757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.132344][T19671] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.132521][T19671] bridge_slave_1: entered allmulticast mode [ 647.140193][T19671] bridge_slave_1: entered promiscuous mode [ 647.229668][ T5625] Bluetooth: hci4: command tx timeout [ 647.249904][T19671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.253813][T19671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.321941][T19761] syzkaller0: entered promiscuous mode [ 647.321968][T19761] syzkaller0: entered allmulticast mode [ 647.362036][T19671] team0: Port device team_slave_0 added [ 647.365409][T19671] team0: Port device team_slave_1 added [ 647.464624][T19769] syzkaller0: entered promiscuous mode [ 647.464662][T19769] syzkaller0: entered allmulticast mode [ 647.640340][T19671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.640359][T19671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.640384][T19671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.803128][T19671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.803148][T19671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.803176][T19671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.911650][T19671] hsr_slave_0: entered promiscuous mode [ 647.912822][T19671] hsr_slave_1: entered promiscuous mode [ 647.913734][T19671] debugfs: 'hsr0' already exists in 'hsr' [ 647.913767][T19671] Cannot create hsr debugfs directory [ 647.994757][ T5938] IPVS: starting estimator thread 0... [ 648.119462][T19795] IPVS: using max 27 ests per chain, 64800 per kthread [ 648.230789][T19806] __nla_validate_parse: 7 callbacks suppressed [ 648.230812][T19806] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3219'. [ 648.751866][T19818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3222'. [ 649.301242][T19846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3229'. [ 649.303789][T19846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3229'. [ 649.316298][ T5625] Bluetooth: hci4: command tx timeout [ 649.503596][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 649.503634][T19853] netlink: 'syz.0.3232': attribute type 30 has an invalid length. [ 649.533239][T19853] vxlan0: entered promiscuous mode [ 649.533263][T19853] vxlan0: entered allmulticast mode [ 649.534795][T19671] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 649.541089][T19671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 649.549593][T19671] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 649.579150][T19671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 649.580168][T19671] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 649.584908][T19671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 649.586025][T16617] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.587696][T16620] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.587734][T16620] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.587766][T16620] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.612849][T19853] bridge_slave_0: left allmulticast mode [ 649.612878][T19853] bridge_slave_0: left promiscuous mode [ 649.613092][T19853] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.638972][T19853] bridge_slave_1: left allmulticast mode [ 649.639001][T19853] bridge_slave_1: left promiscuous mode [ 649.639302][T19853] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.677218][T19853] bond0: (slave bond_slave_0): Releasing backup interface [ 649.693891][T19853] bond0: (slave bond_slave_1): Releasing backup interface [ 649.711332][T19853] team0: Port device team_slave_0 removed [ 649.715199][T19853] team0: Port device team_slave_1 removed [ 649.726094][T19853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.726120][T19853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.729682][T19853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.729703][T19853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.739367][T19853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 649.780003][T19671] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 649.784957][T19671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 649.801474][T19853] team0: Mode changed to "activebackup" [ 649.949046][T19671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.984306][T19671] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.026240][T16622] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.026361][T16622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.069170][T16622] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.069288][T16622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.318038][T19878] netlink: 'syz.1.3237': attribute type 12 has an invalid length. [ 650.318303][T19877] netlink: 'syz.4.3239': attribute type 4 has an invalid length. [ 650.335786][T19877] netlink: 'syz.4.3239': attribute type 4 has an invalid length. [ 650.404454][T19877] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 650.512276][T19880] block nbd5: server does not support multiple connections per device. [ 650.515139][T19880] block nbd5: shutting down sockets [ 650.644740][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3240'. [ 650.732084][T19887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 650.797471][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3240'. [ 650.816860][T19888] macvlan2: entered promiscuous mode [ 650.816884][T19888] macvlan2: entered allmulticast mode [ 651.332668][T19908] netlink: 'syz.4.3244': attribute type 23 has an invalid length. [ 651.387752][ T5625] Bluetooth: hci4: command tx timeout [ 651.398290][T19671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.531936][T19671] veth0_vlan: entered promiscuous mode [ 651.550632][T19671] veth1_vlan: entered promiscuous mode [ 651.645882][T19671] veth0_macvtap: entered promiscuous mode [ 651.652434][T19671] veth1_macvtap: entered promiscuous mode [ 651.698652][T19671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.720027][T19671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.840279][T16622] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.871157][T19918] netlink: 'syz.4.3246': attribute type 1 has an invalid length. [ 652.009918][T19919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3247'. [ 652.161110][T16632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.161136][T16632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.206503][ T5934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.206573][ T5934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.258727][T16617] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.280807][T19919] smc: net device lo applied user defined pnetid SYZ0 [ 652.282636][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.282655][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.464565][T19927] batman_adv: batadv0: Adding interface: syzkaller0 [ 652.464622][T19927] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.464651][T19927] batman_adv: batadv0: Interface activated: syzkaller0 [ 652.597925][T19926] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 652.676939][T19926] batman_adv: batadv0: Removing interface: syzkaller0 [ 652.762091][T19943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'. [ 652.771209][T19941] netlink: 'syz.2.3253': attribute type 1 has an invalid length. [ 653.233358][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 653.247740][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 653.250939][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 653.274280][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 653.286845][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 653.465881][ T5617] Bluetooth: hci4: command tx timeout [ 653.828114][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3264'. [ 653.940765][T19980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3265'. [ 653.966198][T19980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3265'. [ 653.995239][T19986] netlink: 'syz.2.3267': attribute type 1 has an invalid length. [ 654.071645][T19979] syzkaller0: entered promiscuous mode [ 654.071664][T19979] syzkaller0: entered allmulticast mode [ 654.098788][T19986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3267'. [ 654.194504][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 654.194541][T19963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3259'. [ 655.001928][T20001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3269'. [ 655.310111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.397447][ T5617] Bluetooth: hci3: command tx timeout [ 657.471601][ T5617] Bluetooth: hci3: command tx timeout [ 657.753045][T19963] bridge0: entered promiscuous mode [ 657.753070][T19963] bridge0: entered allmulticast mode [ 658.842462][T20017] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 659.063596][T19958] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.063801][T19958] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.063964][T19958] bridge_slave_0: entered allmulticast mode [ 659.081495][T19958] bridge_slave_0: entered promiscuous mode [ 659.090894][T19958] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.091072][T19958] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.091232][T19958] bridge_slave_1: entered allmulticast mode [ 659.099603][T19958] bridge_slave_1: entered promiscuous mode [ 659.244981][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'. [ 659.245369][T20039] syzkaller1: entered promiscuous mode [ 659.245391][T20039] syzkaller1: entered allmulticast mode [ 659.253866][T20053] netlink: 'syz.3.3280': attribute type 32 has an invalid length. [ 659.300053][T19958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.395121][T19958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.546537][ T5617] Bluetooth: hci3: command tx timeout [ 659.559836][T19958] team0: Port device team_slave_0 added [ 659.596850][T19958] team0: Port device team_slave_1 added [ 659.620083][T20067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3284'. [ 659.711109][T19958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.711131][T19958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.711155][T19958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.713325][T19958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.713341][T19958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.713367][T19958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.944499][T19958] hsr_slave_0: entered promiscuous mode [ 659.950654][T19958] hsr_slave_1: entered promiscuous mode [ 659.952964][T19958] debugfs: 'hsr0' already exists in 'hsr' [ 659.952986][T19958] Cannot create hsr debugfs directory [ 660.176328][T20092] netlink: 'syz.0.3289': attribute type 21 has an invalid length. [ 660.176355][T20092] IPv6: NLM_F_CREATE should be specified when creating new route [ 660.176488][T20092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 660.176500][T20092] IPv6: NLM_F_CREATE should be set when creating new route [ 660.176545][T20092] IPv6: NLM_F_CREATE should be set when creating new route [ 660.176572][T20092] IPv6: NLM_F_CREATE should be set when creating new route [ 660.463755][T20099] ip6gre1: entered promiscuous mode [ 660.463781][T20099] ip6gre1: entered allmulticast mode [ 660.512664][T20102] geneve0: entered allmulticast mode [ 661.382335][T19958] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.382374][T19958] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.635197][ T5617] Bluetooth: hci3: command tx timeout [ 662.444394][T19958] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.444431][T19958] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.618670][T19958] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.618707][T19958] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.065095][T20209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3309'. [ 663.106126][T20211] xt_hashlimit: size too large, truncated to 1048576 [ 663.166806][T20217] x_tables: duplicate entry at hook 1 [ 663.352681][T20208] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.353366][T20208] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.643094][T20208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.657947][T20208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.953826][T20208] ip6erspan0: left allmulticast mode [ 663.954092][T20208] ip6gre1: left promiscuous mode [ 663.954108][T20208] ip6gre1: left allmulticast mode [ 663.966309][ T5936] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.966380][ T5936] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.966414][ T5936] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.966445][ T5936] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.108881][T20223] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 664.185914][ T5617] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 664.186321][ T5625] Bluetooth: hci0: command 0x0c24 tx timeout [ 664.317665][T19958] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 664.343598][T19958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 664.352850][T19958] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 664.383633][T19958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.394679][T19958] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 664.506986][T19958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.516024][T19958] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 664.543447][T19958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.782465][T20237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3315'. [ 664.921297][T20259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.141964][T19958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.156119][T20263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'. [ 665.156270][T20262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'. [ 665.194206][T19958] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.215124][T16622] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.215250][T16622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.278550][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.278674][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.759131][T20295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3324'. [ 665.759565][T20295] netlink: 'syz.3.3324': attribute type 5 has an invalid length. [ 665.772634][T20295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3324'. [ 665.772668][T20295] netlink: 'syz.3.3324': attribute type 5 has an invalid length. [ 665.795061][ T43] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.795118][ T43] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.795153][ T43] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.795185][ T43] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.981503][T20304] netlink: 'syz.3.3326': attribute type 2 has an invalid length. [ 666.156086][T20310] pim6reg1: entered promiscuous mode [ 666.156112][T20310] pim6reg1: entered allmulticast mode [ 666.180279][T20309] netlink: 'syz.1.3329': attribute type 1 has an invalid length. [ 666.297261][T20309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 666.347160][T20310] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 666.444821][T20331] Bluetooth: MGMT ver 1.23 [ 666.638021][T19958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.702480][T20342] netlink: 'syz.1.3334': attribute type 1 has an invalid length. [ 666.716394][T20338] netlink: 'syz.3.3333': attribute type 1 has an invalid length. [ 666.716416][T20338] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3333'. [ 666.817328][T20342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 666.868617][T20347] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 666.943787][ T1110] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 667.118913][ T5934] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 667.148025][T20370] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 667.151359][T20368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3337'. [ 667.238088][T20372] vcan0: entered promiscuous mode [ 667.386930][T19958] veth0_vlan: entered promiscuous mode [ 667.412606][T19958] veth1_vlan: entered promiscuous mode [ 667.430464][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'. [ 667.666524][T20388] ip6t_srh: unknown srh invflags BA61 [ 667.771601][T19958] veth0_macvtap: entered promiscuous mode [ 667.813528][T19958] veth1_macvtap: entered promiscuous mode [ 667.879358][T20394] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 667.941864][T19958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.018058][T20411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3346'. [ 668.079863][T19958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.107583][ T1975] block nbd4: Possible stuck request ffff888027af5080: control (read@0,1024B). Runtime 90 seconds [ 668.107627][ T1975] block nbd4: Possible stuck request ffff888027af5240: control (read@1024,1024B). Runtime 90 seconds [ 668.107653][ T1975] block nbd4: Possible stuck request ffff888027af5400: control (read@2048,1024B). Runtime 90 seconds [ 668.107678][ T1975] block nbd4: Possible stuck request ffff888027af55c0: control (read@3072,1024B). Runtime 90 seconds [ 668.128778][ T5936] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.128836][ T5936] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.128868][ T5936] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.296612][T20417] netlink: 'syz.3.3350': attribute type 11 has an invalid length. [ 668.407366][ T5934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.552746][T16622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.552771][T16622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.743646][ T5936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.743670][ T5936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.907314][T20432] netlink: 'syz.0.3354': attribute type 1 has an invalid length. [ 669.002136][T20432] 8021q: adding VLAN 0 to HW filter on device bond3 [ 669.036984][T20432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3354'. [ 669.059745][T20436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 669.073239][T20436] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 669.074239][T20436] bond3: (slave gre2): Error -95 calling set_mac_address [ 669.152209][T20444] bridge1: entered promiscuous mode [ 669.152253][T20444] bridge1: entered allmulticast mode [ 669.265024][T20455] block nbd0: reconnected socket [ 669.286960][T20445] 8021q: adding VLAN 0 to HW filter on device bond4 [ 669.292225][T20445] bond3: (slave bond4): Enslaving as an active interface with a down link [ 669.323588][T20432] bond3 (unregistering): (slave bond4): Releasing active interface [ 669.343016][T20432] bond3 (unregistering): Released all slaves [ 669.540332][ T5617] block nbd0: Receive control failed (result -32) [ 669.612990][T20466] hsr0: entered promiscuous mode [ 669.630731][T20471] Cannot find add_set index 2 as target [ 669.810256][T20479] ip_tables: iptables: coun ** replaying previous printk message ** [ 669.810256][T20479] ip_tables: iptables: counters copy to user failed while replacing table [ 669.819640][T10108] [ 669.834435][T10108] ====================================================== [ 669.841570][T10108] WARNING: possible circular locking dependency detected [ 669.848622][T10108] syzkaller #0 Not tainted [ 669.853060][T10108] ------------------------------------------------------ [ 669.860124][T10108] kworker/0:45/10108 is trying to acquire lock: [ 669.866371][T10108] ffffffff8ee904e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x610 [ 669.876220][T10108] [ 669.876220][T10108] but task is already holding lock: [ 669.883685][T10108] ffffffff8ebf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 669.893037][T10108] [ 669.893037][T10108] which lock already depends on the new lock. [ 669.893037][T10108] [ 669.903446][T10108] [ 669.903446][T10108] the existing dependency chain (in reverse order) is: [ 669.912460][T10108] [ 669.912460][T10108] -> #7 (wq_pool_mutex){+.+.}-{4:4}: [ 669.919931][T10108] __mutex_lock+0x19d/0x1550 [ 669.925050][T10108] __alloc_workqueue+0xa4f/0x1fe0 [ 669.930685][T10108] alloc_workqueue_noprof+0xe3/0x210 [ 669.936600][T10108] padata_alloc+0xbe/0x360 [ 669.941655][T10108] pcrypt_init_padata+0x27/0x100 [ 669.947262][T10108] pcrypt_init+0x60/0xc0 [ 669.952108][T10108] do_one_initcall+0x250/0x870 [ 669.957428][T10108] do_initcall_level+0x10a/0x1a0 [ 669.963013][T10108] do_initcalls+0x59/0xa0 [ 669.967873][T10108] kernel_init_freeable+0x29d/0x3e0 [ 669.973707][T10108] kernel_init+0x22/0x1d0 [ 669.978558][T10108] ret_from_fork+0x514/0xb70 [ 669.983695][T10108] ret_from_fork_asm+0x1a/0x30 [ 669.988987][T10108] [ 669.988987][T10108] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 669.996722][T10108] cpus_read_lock+0x42/0x160 [ 670.001872][T10108] static_key_slow_inc+0x12/0x30 [ 670.007331][T10108] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 670.013626][T10108] nbd_genl_foreach_sock+0x265/0x450 [ 670.019435][T10108] nbd_genl_reconfigure+0xbbb/0x1040 [ 670.025259][T10108] genl_family_rcv_msg_doit+0x233/0x340 [ 670.031330][T10108] genl_rcv_msg+0x614/0x7a0 [ 670.036361][T10108] netlink_rcv_skb+0x226/0x4a0 [ 670.041657][T10108] genl_rcv+0x28/0x40 [ 670.046183][T10108] netlink_unicast+0x7bd/0x940 [ 670.051504][T10108] netlink_sendmsg+0x813/0xb40 [ 670.056793][T10108] sock_sendmsg_nosec+0x13a/0x180 [ 670.062397][T10108] ____sys_sendmsg+0x54e/0x850 [ 670.067690][T10108] ___sys_sendmsg+0x2a5/0x360 [ 670.072894][T10108] __x64_sys_sendmsg+0x1b1/0x290 [ 670.078355][T10108] do_syscall_64+0x166/0x520 [ 670.083495][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.089911][T10108] [ 670.089911][T10108] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 670.097563][T10108] __mutex_lock+0x19d/0x1550 [ 670.102680][T10108] nbd_queue_rq+0x373/0xff0 [ 670.107705][T10108] blk_mq_dispatch_rq_list+0x499/0x1990 [ 670.113859][T10108] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 670.121005][T10108] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 670.127506][T10108] blk_mq_run_work_fn+0x16c/0x300 [ 670.133056][T10108] process_scheduled_works+0xc3d/0x1630 [ 670.139212][T10108] worker_thread+0xa47/0xfb0 [ 670.144327][T10108] kthread+0x38b/0x480 [ 670.148920][T10108] ret_from_fork+0x514/0xb70 [ 670.154035][T10108] ret_from_fork_asm+0x1a/0x30 [ 670.159586][T10108] [ 670.159586][T10108] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 670.166894][T10108] __mutex_lock+0x19d/0x1550 [ 670.172181][T10108] nbd_queue_rq+0xc1/0xff0 [ 670.177123][T10108] blk_mq_dispatch_rq_list+0x499/0x1990 [ 670.183198][T10108] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 670.190047][T10108] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 670.196552][T10108] blk_mq_run_work_fn+0x16c/0x300 [ 670.202241][T10108] process_scheduled_works+0xc3d/0x1630 [ 670.208312][T10108] worker_thread+0xa47/0xfb0 [ 670.213426][T10108] kthread+0x38b/0x480 [ 670.218112][T10108] ret_from_fork+0x514/0xb70 [ 670.223308][T10108] ret_from_fork_asm+0x1a/0x30 [ 670.228618][T10108] [ 670.228618][T10108] -> #3 (set->srcu){.+.+}-{0:0}: [ 670.235832][T10108] __synchronize_srcu+0xc9/0x2f0 [ 670.241308][T10108] elevator_switch+0x1e8/0x7b0 [ 670.246632][T10108] elevator_change+0x2fa/0x480 [ 670.251915][T10108] elevator_set_default+0x375/0x440 [ 670.257637][T10108] blk_register_queue+0x3f3/0x4e0 [ 670.263238][T10108] __add_disk+0x6b8/0xdb0 [ 670.268124][T10108] add_disk_fwnode+0x100/0x3a0 [ 670.273502][T10108] nbd_dev_add+0x733/0xb60 [ 670.278450][T10108] nbd_init+0x168/0x1f0 [ 670.283198][T10108] do_one_initcall+0x250/0x870 [ 670.288486][T10108] do_initcall_level+0x10a/0x1a0 [ 670.294125][T10108] do_initcalls+0x59/0xa0 [ 670.298971][T10108] kernel_init_freeable+0x29d/0x3e0 [ 670.304691][T10108] kernel_init+0x22/0x1d0 [ 670.309557][T10108] ret_from_fork+0x514/0xb70 [ 670.314666][T10108] ret_from_fork_asm+0x1a/0x30 [ 670.319954][T10108] [ 670.319954][T10108] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 670.327774][T10108] __mutex_lock+0x19d/0x1550 [ 670.332893][T10108] elevator_change+0x1af/0x480 [ 670.338181][T10108] elevator_set_none+0xb5/0x140 [ 670.343552][T10108] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 670.349967][T10108] nbd_start_device+0x189/0xb30 [ 670.355353][T10108] nbd_genl_connect+0x167d/0x1cd0 [ 670.361002][T10108] genl_family_rcv_msg_doit+0x233/0x340 [ 670.367085][T10108] genl_rcv_msg+0x614/0x7a0 [ 670.372289][T10108] netlink_rcv_skb+0x226/0x4a0 [ 670.377585][T10108] genl_rcv+0x28/0x40 [ 670.382097][T10108] netlink_unicast+0x7bd/0x940 [ 670.387492][T10108] netlink_sendmsg+0x813/0xb40 [ 670.392798][T10108] sock_sendmsg_nosec+0x13a/0x180 [ 670.398374][T10108] ____sys_sendmsg+0x54e/0x850 [ 670.403837][T10108] ___sys_sendmsg+0x2a5/0x360 [ 670.409041][T10108] __x64_sys_sendmsg+0x1b1/0x290 [ 670.414505][T10108] do_syscall_64+0x166/0x520 [ 670.419621][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.426039][T10108] [ 670.426039][T10108] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 670.434651][T10108] blk_alloc_queue+0x544/0x690 [ 670.439938][T10108] __blk_mq_alloc_disk+0x194/0x390 [ 670.445576][T10108] nbd_dev_add+0x494/0xb60 [ 670.450513][T10108] nbd_init+0x168/0x1f0 [ 670.455195][T10108] do_one_initcall+0x250/0x870 [ 670.460488][T10108] do_initcall_level+0x10a/0x1a0 [ 670.465948][T10108] do_initcalls+0x59/0xa0 [ 670.470799][T10108] kernel_init_freeable+0x29d/0x3e0 [ 670.476528][T10108] kernel_init+0x22/0x1d0 [ 670.481390][T10108] ret_from_fork+0x514/0xb70 [ 670.486712][T10108] ret_from_fork_asm+0x1a/0x30 [ 670.492018][T10108] [ 670.492018][T10108] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 670.499241][T10108] __lock_acquire+0x164c/0x2de0 [ 670.504621][T10108] lock_acquire+0x115/0x350 [ 670.509647][T10108] fs_reclaim_acquire+0x71/0x100 [ 670.515108][T10108] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 670.521445][T10108] __alloc_workqueue+0xc6e/0x1fe0 [ 670.526999][T10108] alloc_workqueue_noprof+0xe3/0x210 [ 670.532809][T10108] smc_conn_create+0x1589/0x3810 [ 670.538427][T10108] smc_listen_find_device+0x10c0/0x27f0 [ 670.544541][T10108] smc_listen_work+0xa7e/0x1410 [ 670.549913][T10108] process_scheduled_works+0xc3d/0x1630 [ 670.555987][T10108] worker_thread+0xa47/0xfb0 [ 670.561116][T10108] kthread+0x38b/0x480 [ 670.565791][T10108] ret_from_fork+0x514/0xb70 [ 670.571092][T10108] ret_from_fork_asm+0x1a/0x30 [ 670.576431][T10108] [ 670.576431][T10108] other info that might help us debug this: [ 670.576431][T10108] [ 670.586772][T10108] Chain exists of: [ 670.586772][T10108] fs_reclaim --> cpu_hotplug_lock --> wq_pool_mutex [ 670.586772][T10108] [ 670.599638][T10108] Possible unsafe locking scenario: [ 670.599638][T10108] [ 670.607179][T10108] CPU0 CPU1 [ 670.612567][T10108] ---- ---- [ 670.618046][T10108] lock(wq_pool_mutex); [ 670.622299][T10108] lock(cpu_hotplug_lock); [ 670.629324][T10108] lock(wq_pool_mutex); [ 670.636102][T10108] lock(fs_reclaim); [ 670.640091][T10108] [ 670.640091][T10108] *** DEADLOCK *** [ 670.640091][T10108] [ 670.648249][T10108] locks held by kworker/0:45/10108: 5, last CPU#0: [ 670.654761][T10108] #0: ffff888031f6a540 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 670.666266][T10108] #1: ffffc9000f36fc40 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 670.679242][T10108] #2: ffff888076151b60 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_listen_work+0x5e/0x1410 [ 670.688885][T10108] #3: ffffffff9055db60 (smc_server_lgr_pending){+.+.}-{4:4}, at: smc_listen_work+0xa5a/0x1410 [ 670.699254][T10108] #4: ffffffff8ebf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 670.709019][T10108] [ 670.709019][T10108] stack backtrace: [ 670.715032][T10108] CPU: 0 UID: 0 PID: 10108 Comm: kworker/0:45 Not tainted syzkaller #0 PREEMPT(full) [ 670.724658][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 670.734800][T10108] Workqueue: smc_hs_wq smc_listen_work [ 670.740274][T10108] Call Trace: [ 670.743650][T10108] [ 670.746762][T10108] dump_stack_lvl+0xe8/0x150 [ 670.751368][T10108] print_circular_bug+0x2e2/0x300 [ 670.756396][T10108] check_noncircular+0x12f/0x150 [ 670.761344][T10108] __lock_acquire+0x164c/0x2de0 [ 670.766196][T10108] ? preempt_schedule_common+0x7f/0xd0 [ 670.771661][T10108] ? preempt_schedule_thunk+0x16/0x40 [ 670.777040][T10108] ? __mutex_unlock_slowpath+0x796/0x900 [ 670.782683][T10108] lock_acquire+0x115/0x350 [ 670.787200][T10108] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 670.793655][T10108] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 670.799478][T10108] ? pcpu_alloc_noprof+0x100f/0x1900 [ 670.804865][T10108] ? __alloc_workqueue+0xc6e/0x1fe0 [ 670.810068][T10108] fs_reclaim_acquire+0x71/0x100 [ 670.815009][T10108] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 670.820992][T10108] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 670.826809][T10108] ? __alloc_workqueue+0xc6e/0x1fe0 [ 670.832012][T10108] __alloc_workqueue+0xc6e/0x1fe0 [ 670.837047][T10108] alloc_workqueue_noprof+0xe3/0x210 [ 670.842337][T10108] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 670.847718][T10108] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 670.853615][T10108] ? trace_kmalloc+0x2a/0xf0 [ 670.858300][T10108] smc_conn_create+0x1589/0x3810 [ 670.863250][T10108] ? smc_clc_match_eid+0x1ce/0x250 [ 670.868374][T10108] smc_listen_find_device+0x10c0/0x27f0 [ 670.874014][T10108] ? __pfx_smc_listen_find_device+0x10/0x10 [ 670.879914][T10108] ? smc_ism_is_v2_capable+0x9/0x20 [ 670.885264][T10108] ? smc_listen_v2_check+0x5ef/0x9e0 [ 670.890562][T10108] ? smc_clc_srv_v2x_features_validate+0x2b0/0x5c0 [ 670.897072][T10108] smc_listen_work+0xa7e/0x1410 [ 670.902118][T10108] ? rcu_is_watching+0x16/0xb0 [ 670.906917][T10108] ? process_scheduled_works+0x97a/0x1630 [ 670.912817][T10108] process_scheduled_works+0xc3d/0x1630 [ 670.918465][T10108] ? __pfx_process_scheduled_works+0x10/0x10 [ 670.924450][T10108] ? assign_work+0x3cf/0x5d0 [ 670.929047][T10108] worker_thread+0xa47/0xfb0 [ 670.933651][T10108] kthread+0x38b/0x480 [ 670.937723][T10108] ? __pfx_worker_thread+0x10/0x10 [ 670.942843][T10108] ? __pfx_kthread+0x10/0x10 [ 670.947438][T10108] ret_from_fork+0x514/0xb70 [ 670.952120][T10108] ? __pfx_ret_from_fork+0x10/0x10 [ 670.957233][T10108] ? __switch_to+0xc89/0x1420 [ 670.961938][T10108] ? __pfx_kthread+0x10/0x10 [ 670.966616][T10108] ret_from_fork_asm+0x1a/0x30 [ 670.971478][T10108] [ 670.982571][T20479] __nla_validate_parse: 1 callbacks suppressed [ 670.982593][T20479] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3364'.