last executing test programs: 4.829657636s ago: executing program 0 (id=3759): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}], 0x20) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="04f4", 0x2}], 0x1}}], 0x1, 0x4000040) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x8, 0x8000, 0x6, 0x0, {{0xb, 0x4, 0x2, 0x3a, 0x2c, 0x66, 0x0, 0x6, 0x4, 0x0, @empty, @rand_addr=0x64010101, {[@rr={0x7, 0x13, 0x62, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010101, @empty]}, @generic={0x83, 0x2}]}}}}}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5760, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x80000000}}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x38dd53c5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0xd9, &(0x7f0000000f80)=""/217, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x1}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r9, 0x0) r10 = accept(r9, 0x0, 0x0) setsockopt$sock_timeval(r10, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000400), &(0x7f00000002c0)=@tcp=r10}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pI4 \x00'}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000800), 0x3) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x806}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xf, 0x2, 0xf, 0x7, 0x739c}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x4800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x49d3, 0x0, 0x0, 0x0, 0x7fff}, [@ldst={0x3, 0x2, 0x0, 0x8, 0x0, 0x20, 0x4}, @jmp={0x5, 0x1, 0xd, 0xb, 0x1, 0xfffffffffffffff0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7f}]}, &(0x7f0000000180)='syzkaller\x00', 0xbd0, 0xdd, &(0x7f0000000280)=""/221, 0x41100, 0x1, '\x00', r2, 0x18, r3, 0x8, &(0x7f00000003c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x9, 0x7, 0xffffffff}, 0x10, 0x285d1, r4, 0x0, &(0x7f0000000700)=[r5, r6, r7, r8, r11, r12], 0x0, 0x10, 0xfff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000001500)=ANY=[@ANYBLOB="1f000000000000007311a300000000008510000002000000850000000000000095000000000000009500a50500000000597aa90a8a1dd84e2a7f99d68ab4df031ea9453ddddb644d9c831ada9cc8cc6938c7c7290512b01c384f187f64be99f21839d17c3eeb0ba2d1aee4d56ce5ad946bf675e430e412e51624bace9a74a2e30baff92ebc853ecf407c59873ca65ced6531f7846dcfc34a4b9346d9ee70bad600f4623c9d067d0d3539d1bc1a8866cc365df2b2ccb247d5ed3340cfb23d41912cd0c9960556871eeed00d4c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.918292567s ago: executing program 0 (id=3777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000020c0)="b9ff03316844268cb89e14f0080047", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$inet(r2, 0x0, 0x44810) r3 = socket$pppoe(0x18, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x40000) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x30}}, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x4, @remote, 'pimreg1\x00'}}, 0x1e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x25, &(0x7f0000001500)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{&(0x7f0000000a80)="ac44", 0x2}], 0x1, 0x1) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3811ffff1700010000000000000000a20a0000000000000000000000080004005ceb18265ba883137066dd847577d0b214c2627ce45dc1f1b27423a515d051b162b2b1bbd059a3b655395cef4d673efdca9abac3bab554a2d69ca73e37d1d65fcd9d61f1fa3ea6472dd533c43fe37d3194ebafb287b40fb8d0df3752328021b44bbbcfc945228e064ebf96cffcf48b6e7de996", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 3.496945823s ago: executing program 3 (id=3784): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ff2500"/20, @ANYRESHEX=r0, @ANYBLOB="4200000021200000240012800c0001006d6163766c616e0014000280100005800a000400"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 3.476661377s ago: executing program 4 (id=3785): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="0002290800030006000000080002000100000008000300000000000800040099740000080004000e0000000800020006000000050005008000000004000680080003000600000034000680060001000200000008"], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0xb, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000540)='syzkaller\x00', 0x8, 0x1e, &(0x7f0000000580)=""/30, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x10, 0x4f4, 0xfffffffa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x15, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="9700000f00000000070000000000000095000000000000007bc23ca5c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f680000010000000000000000000000e9a4c08533107c07c9b73604e5040287f964c7fcff8d6db8f6e2f0824762e354f40fa3a86274ad89485c24"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xcc, &(0x7f0000000440)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) unshare(0x20000400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r6, 0xc4fc9e906872338b, 0x70bd2d, 0xfffffffd, {{0x15}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c014}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$phonet(0x23, 0x2, 0x1) sendmsg(r9, &(0x7f0000001940)={&(0x7f00000006c0)=@ll={0x11, 0x5, 0x0, 0x1, 0x8, 0x6, @remote}, 0x80, 0x0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c24000000000000000000000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r11, 0x28543634fae43ad, 0xfffffff8, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) recvmsg(r3, &(0x7f0000000b00)={&(0x7f0000000880)=@x25={0x9, @remote}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1}, 0x0) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 3.349271611s ago: executing program 3 (id=3786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) socket$inet(0x2, 0x2, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r2], 0x18}, 0x2000c8d0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r3 = accept4(r1, 0x0, 0x0, 0x800) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000140)=0x80) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) close(0x4) 3.31026443s ago: executing program 3 (id=3788): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdc03, {0x0, 0x0, 0x0, 0x0, 0x64e90, 0x36801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x4048002) 3.229778868s ago: executing program 3 (id=3789): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000480)=ANY=[], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0x3, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000fedbdf25060000004000018000000100", @ANYRES32=r2, @ANYBLOB="0800030003000000080003000300000000000100", @ANYRES32=r2, @ANYBLOB="000003000200000008000100", @ANYRES32=r2, @ANYBLOB="18808c0f246ce4ca65085a7f025a8263ee30292760c7fa79651c2f36"], 0xffffffffffffff16}, 0x1, 0x0, 0x0, 0x200400d0}, 0xc040) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3f0, 0x2a0, 0x700001b, 0x148, 0x2a0, 0x148, 0x358, 0x206, 0x240, 0x358, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x280, 0x2a0, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'nr0\x00', {0x5, 0xff9, 0x69, 0x17, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@unspec=@string={{0xc0}, {0xf5, 0x8, 'kmp\x00', "9c7433923e8af806c7a21e5441a3a7794060bf608e69163e4ce230b366a4b4c37f15d90ba54c7234f19985f0cb67f0b40ca8ef2ec82d3dbbf81238fa075649764eb1600da7e7b703d2e1d23df317058a582d2bbf82de04509515836e70cb2b5bc51d53d01124e133ebd3bde08554b5da2a74f6e0b55e5888cd620b4179c4739e", 0x7d, 0x1, {0x9}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8000, 0x1000, 0x2, 'syz0\x00', {0x2000000000000009}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="569f093b6cdbfed6bd2e2b73c45ba9da4bcb3c81cc8655390f8f655b80af768458b551a890c05725b2ff2da9382c112f11ac3bb37586689ba0b684e9da14af092c160e1dee9633da696e769e533637052aa25dc355405a31475b375300537d3958d55b40e7ea492b4c31e12e13c541b8f4bfc37dc080cf04d1a4afeb5d30a41d00a1e069c92c059c4d60903a7f27004ad0c3b2dbb1156bf3e080b3032be7420424af0d5fb528c04bd09365d9d9f4e8209e3db46c10c3afde20d43967cc263c2ba50a551fcc69013bb7ea3363adbcb888290656525ca8247599e79cf61117baa00b8c1e1299e29249f558f3305ea0e1f394f96da1d356c31143c302d79b7520316470f0d585932ed0230a20c09d5faa723b8c8be201fae77538435ea3cc3de49d788d6d375d1055a68338480147536c5e2842702d768c5c176e8757bb5cdc6f7d7a4cf189eedb488b5f5e6f33eb8b5fb48fd0f0411f096c90c097a821b6ea297a46d2fcdfff29229acdaf82d02a93bdae841ea754ae5abab7fa7fe14248a26d89bcf28bc7a0c58f50dd7b6b7d54aa0a5d318c14b167ecb6e638aeac73a27f0c96f0d8caa68bf9c2c1d5ebdc5dafae9e79cc389390216e61c961796700ef7b52265158ffda85a1c299e389c81bed0b64a5037500"/478, @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf254c0000001c00a900c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000280)={0x3, 0x1, 0xb}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) socket$inet_mptcp(0x2, 0x1, 0x106) 3.088829355s ago: executing program 0 (id=3792): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$phonet(0x23, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000c0c1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x8000010) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) write(r4, &(0x7f0000000140)="aaf966de3301c86b64a736d9196e06402b7512d348d710bc7e4031c774f26e4aa53edc4880f49816f07014bae39dfa2ab8a9e2d800000000000000", 0x3b) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0xc8, 0x30, 0x1, 0x4, 0x25dfdbfe, {}, [{0xb4, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x42a2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xb, 0x12, 0x6, 0x695}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc8}}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r3, 0x67a6d000) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x4) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.988212303s ago: executing program 2 (id=3793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xe8710f0ce6e6316c, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x10) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (rerun: 32) pwrite64(r1, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x2, 0x3, 0xff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x1b, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r7, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000200)='%-010d \x00'}, 0x20) (async) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000000), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000030000000000000012000000850000009300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x211}, 0x94) ioctl$sock_proto_private(r9, 0x89e0, &(0x7f0000001080)) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r11}, 0xc) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000001000)={0x3c4, r13, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0xc636ec45, 0x1d}}}}, [@NL80211_ATTR_IE={0xa6, 0x2a, [@ht={0x2d, 0x1a, {0x400, 0x2, 0x4, 0x0, {0x9d2d, 0x2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x3, 0x6}}, @random={0x4, 0x7e, "335009db653df8603323613faca9878a6e6fcebc87790fb528c14379582aa43a36e7c6dd05b2527f0e38006ea4a4ca394120fb6db7904642b87697446ef717b378b804f6c888b2dd4df014d617f02e42030b4989d1fa270a44cd9bf4185de8c14c8f37f5b0b6c3e727ca53f1efc3c9ccb95643c53767729d9dd464eaf900"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0xb3, 0xd}}]}, @NL80211_ATTR_IE={0x11a, 0x2a, [@fast_bss_trans={0x37, 0x114, {0xf1, 0x7, "1ab0ffd35eff32c007075306e88ca360", "24c70bd89d46a76bda7dbc64b10d3b94be015c12d25421b62270423f09db2dcd", "408d7950a2eb23d0e0cac7c0365201555bce098c94ae45c50bb0db5400c094bd", [{0x2, 0x1a, "e256ed4d27286252c0b4cd0ac81b8ed6bf98963f0553a0a08b2d"}, {0x1, 0x25, "798bcb0feebe95b0b2a623e391c4b267d534009101683ac0b0408266bdb2949c158491287b"}, {0x2, 0x14, "326a928627e3a7fa8413bbb407fa5c397a3e3c03"}, {0x3, 0x26, "8da17ffc378c7c7b62ceb629e60d3986af98c808d5b3218798e5cfe90890d1bb494ac698f64b"}, {0x1, 0x1b, "1bdaf1f98c3286ca2bb8459ecf0218ec077bdb2042d95e6f042d64"}, {0x3, 0x13, "186214f59599bf49044f77e2db2bc9ef0d0f5e"}, {0x2, 0xd, "c35d8fd29d9916ca1e387276c3"}]}}]}, @NL80211_ATTR_IE={0x1a3, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4, 0x0, 0x2f, 0x14}}, @link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x35, 0x5}}, @random_vendor={0xdd, 0xad, "12fb0fcdb0e50973b0204ffeeb3febf05ab8f06e297122f98950f50234d45376b93f89330fb9c9a09723ac1de0d498072c83e343c16069b59631976ec8104fc9b91c9542a6af25f69029944a3e74414797e46e0d972c3197c390b9afb9544c11527846af134d8372dcba82bb74dfbcd66fd8fa2b206bf50407da05797efe715740056e56394d9f0bf277aa24b9d07e1790e3c24d49464ea673d75083198292cf5917206a7adfa529f69ba53009"}, @perr={0x84, 0x2, {0x3}}, @tim={0x5, 0xc8, {0x0, 0x21, 0x5, "9e5eb0ebb2e881b1fac7ef1e08290327a01b9f344177f1fcd4f9de17ae498b710ab16762b962a8f225c4296bc2ece7287bf5942d56c6c3b6b9b67e66401a13158b72c8f7a441bb4fb0d630994654c0a50870f99852d721e864888160e4377386efbf047e3732d6752f0e27fcce8f479afe4736c639c8ed78d9efd7d8501fb8a26d4be49e20d7e593690edc385c174283ee3d5f953785c7b304b3fc6e0662a37e1c02302215f53cbd9c9ce2c30e855f6cf7e285e3961c7aabd4dd9d38b34626814b6def733a"}}]}, @NL80211_ATTR_IE={0x29, 0x2a, [@cf={0x4, 0x6, {0x8, 0x2a, 0xfff9, 0x401}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mic={0x8c, 0x18, {0xbbf, "e49bfa50642d", @long="393fc6540f9dd05e6116b4df1aed286a"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x10}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040050) 2.976425742s ago: executing program 0 (id=3794): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket$xdp(0x2c, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="18030000f000000000000000ff000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b5020000140000008500000083000000bc0900000000000055090100240000009500000000002fa86e4e000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x1006, &(0x7f0000001b00)=""/4102, 0x40f00, 0x9, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) unshare(0x6a040000) r3 = socket$inet6(0xa, 0x80002, 0x0) unshare(0x40000480) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000018000904d81f0000000000002d"], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4008054) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0x18, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x0, 0x1, r7}, @NFC_ATTR_LLC_PARAM_MIUX={0x0, 0x11, 0x7c}]}, 0x34}, 0x1, 0x0, 0x0, 0x2204c0d1}, 0x8000) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x7, 0x0, 0xc, 0xffff7fff, 0xfffffffd]}, &(0x7f00000002c0)=0x54) 2.697459272s ago: executing program 2 (id=3795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="8c7a22b00574e94d879029f491d6e4e2febb84050139ae89e2bd3ebf8ad2a15a4702e442154c2f69dfb328", 0x2b}], 0x1, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}], 0x30}, 0x48814) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x140b, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x140000c4}, 0x4000004) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff0500030003000000"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 2.597534479s ago: executing program 2 (id=3796): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff18000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x105e, &(0x7f0000002500)=""/4098, 0x41100}, 0x94) 2.566017939s ago: executing program 1 (id=3797): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x88, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfffffffd, @loopback={0xfe80000000000000, 0xac14140c}, 0x8, 0xc}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)='\x00', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0x60) syz_emit_ethernet(0xd3, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x2c, 0x1d363366768e6a55, @dev={0xfe, 0x80, '\x00', 0x6d}, @mcast2, {[], @echo_reply}}}}}, 0x0) 2.53144843s ago: executing program 3 (id=3798): ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000003d00)={0x0, 0x8}) unshare(0x6a040000) r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@getnexthop={0x20, 0x76, 0xb0d, 0x20, 0x25dfdbfc, {0x3}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/ipc\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r4, &(0x7f0000000240)='\x00', 0x1, 0x40c0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/150, 0xa3}], 0x1, &(0x7f00000003c0)=""/76, 0x4c}, 0x7b}], 0x9e, 0x20003, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000001080)=[{r5}], 0x1, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24048097}, 0x404c001) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x140b, 0x20, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) 2.405165962s ago: executing program 1 (id=3799): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdc03, {0x0, 0x0, 0x0, 0x0, 0x64e90, 0x36801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x4048002) 2.402875738s ago: executing program 2 (id=3800): r0 = socket(0xa, 0x3, 0x3a) r1 = socket(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0xc}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_TO={0x8, 0x2, 0x94}]}}]}, 0x44}}, 0x2000c800) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000080)={0xa, 0x4c24, 0x1ff, @private2={0xfc, 0x2, '\x00', 0x5}, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000200)="b873375e38bd", 0x6}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000580)='\x00', 0x1}, {&(0x7f0000000000)="2a72605b4772230a7ab617c57aa2191afcaadc8a8228a0d08ef8908ff40ac332ac72e3b306e49823dbdbfc743bb55c1f2dec60eceae13ba02ba9c6c9038f6576f5b2135631f66a0d2319656e681c", 0x4e}], 0x2}}], 0x2, 0x40) 2.386488173s ago: executing program 4 (id=3801): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x401, 0x8, 0x8, 0x9957539453c4dcad, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xd}, 0x50) unshare(0x22020400) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000010c0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRES8, @ANYBLOB="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"], 0x32600) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r3, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$packet(r0, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x401, 0x8, 0x8, 0x9957539453c4dcad, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xd}, 0x50) (async) unshare(0x22020400) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f00000010c0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRES8, @ANYBLOB="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"], 0x32600) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r3, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) sendto$packet(r0, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x85, 0x6, @broadcast}, 0x14) (async) socket(0x10, 0x803, 0x0) (async) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) 2.165417715s ago: executing program 2 (id=3802): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x28, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000001080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @empty, 0x4}]}, &(0x7f0000000080)=0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000001240)={@empty}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r9, 0x0, 0x0, 0x20, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast1, 0x700, 0x8000, 0xfffffffc}}) 2.089139037s ago: executing program 4 (id=3803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020605200700000000000000000000000c00078008001200000000000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8404) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delneigh={0x38, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_PORT={0x6, 0x6, 0x4e24}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f0000000500)=""/112, 0x70}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000002700)=""/4113, 0x1011}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000600)=""/217, 0xd9}, {&(0x7f0000002540)=""/210, 0xd2}], 0x8}, 0x40030162) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x4e8, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4d4, 0x3, 0x0, 0x1, [{0x4d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c8, 0x1, "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"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x524}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r3) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x64, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xfffffe8b, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x2dc}}, 0x0) 2.070107245s ago: executing program 1 (id=3804): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07002bbd700001dcdf2508000000080001002700150008000300", @ANYRES32, @ANYBLOB="0c0099000400000002"], 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x4000090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x16}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) 1.96736144s ago: executing program 1 (id=3805): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f6b08be896"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "a24b512b3f5361f6"}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4008805) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb", 0xff6e}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000400)="17a8a6c41e58e8b6cdb8040db329c064116e4c4cbb04627dfddbd514be6688ff", 0x20}], 0x3) (async) writev(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb", 0xff6e}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000400)="17a8a6c41e58e8b6cdb8040db329c064116e4c4cbb04627dfddbd514be6688ff", 0x20}], 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000002c0)=@base={0xa, 0x4, 0x8000, 0x5c, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000006c0)=0x4000000000000200, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x9c4}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x5, 0x4, 0x3}, 0xfffffffd, 0x83, 0xfffffffd}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0x1, 0x40, 0x2, 0xffffffff, 0x0, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x90}}, 0x4000080) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r6, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) sendto$inet6(r6, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.865645407s ago: executing program 4 (id=3806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="01030000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.733280449s ago: executing program 4 (id=3807): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001240)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) read(r1, &(0x7f00000006c0)=""/222, 0xde) listen(r2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) sendmsg$inet_sctp(r4, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff0703"], 0x18, 0x20000001}, 0x20008000) accept4$inet(r4, 0x0, 0x0, 0x800) accept4$nfc_llcp(r4, 0x0, 0x0, 0x800) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x4c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x840) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000b80)={'batadv_slave_0\x00'}) 1.188995165s ago: executing program 2 (id=3808): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000003000000040000000800000000000000", @ANYRES32], 0x50) close(0x3) close(0x3) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) write(r0, &(0x7f0000000080)="3300000058001f000307f4f9002304000a04f55f0800010002010002170003800500000099db973b91aa057972513500b04067", 0x33) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008800000000008dffffff18110000aac13bdae32fc361463b395cd1c1afcf4903957003b24a75f3ea43a05beb3e66fa74112ad4a82f476fb31467ac3e46e92dd598748080e781a84c97ada98d3a162ec64e792ce9165c71084746f0a2c86e2aa3e9baa3af16036c0c5896fa6c304e4e40c150c1f850adf305515a244e74136339e2a0db", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000500008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r2, 0x0, 0xa4, 0x1000, &(0x7f0000000280)="723784d4b9ab6f34e65d227fb3482c42535bd1c12904eb9a0b2790b23e8057d55d5cc757b4339efa45d020a129e027f87966cd33698f54ca90edba6206723f508392c6bce0d28f40bc22335e7e9bacfc717d34f6d4f4a67b0c81ed692e74cf841c05decb6d117262640a2ae0af5a36a30ce6ac182539781fc060d117ca37159c90969992296d181a6a0c9a23e3db90bbf17325addf72a8a8e79aa1d25eac6bf3846f23e0", &(0x7f0000000340)=""/4096, 0x5, 0x0, 0x9b, 0x0, &(0x7f0000001340)="09e91c557f1a342f8c78fff7fd09546f3d0a852e7362d9e79734a6faaeec1154905fb02f4729e03ad7ea233bde2ee0ee3b07b98b15a2339a114e4165dea968714cdb1a3e31c59da795ab280b89736995d96d05fe059663876db98d738c513a601d9b8e79b5a54f5776bd592b006ed787426ec8313a14c0c0c5ba1b4fafc46e1f2bda3e1443912607e062e457e7335902147d167caa619f388b545d", &(0x7f0000000000), 0x0, 0x0, 0x5}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000dc0)={'veth0\x00', &(0x7f0000000d40)=@ethtool_gstrings={0x3c, 0x8}}) unshare(0x62000000) 1.126914875s ago: executing program 1 (id=3809): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000c60001002500000085100000010000009500000000000000184000000200000000000000000000009500000000000000850000002b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$inet(r1, &(0x7f0000001a00)={&(0x7f0000000700)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000740)="521caa635bda52290b661339f6805e9483872a0813ca3850d3bda5012b58a423d6b25e5727099e64a0c72dbea2cb9673964bb078045e5652e56aabf3314adcfc527537c3c86eac062b9c4930a12200185fcc7571ea74234f2b8e5724869b60016858661fedaf0ca8e4cdf7af6fd9f08da00df1741087cbccc2d75505692e05d9a959f6b48d8a916447cd466a693361914fe380dbc77000449ef0e5a98fdf9b07950a6a3fd98e67d607da75f06a5fefcba22d379571ea82c7ccda8d5e2fbf03ea2304de71cd417214b3ef2aa15f434e3104b31d2220f199afab4c777553cc62b6c2a772e3070d14c4d873679bb127b8bc4e4b5b4ed0601dceb59480ff8ae8ebc46bdb3e2be6fc5874d70ca7c85088f93705f629e9f7611af7815b29768729d28c71b052365fc0bfb92d6ee75e67bc3e8b3eb8bc447d8a70871ae66e7ef895577ab0a9e0dfb7ae3aa7dcb6728d318080316d5d321f8db818e9d1fa037b0b97d91a5b8ce8dae7ae4c9a1a7fec1dae85ff7d928790909b08e1d40722ddeda6ade89118247c2d934246c5734b3b37c91f9d112a732ce472884a23a6db5026fd3021f7b6a36cd77bc31caa0801935f0d76b75706fe58e3f11da6528d5be547c4ae1db1ccc57212216188428dc90727028992858fd70939ff676bdab1f57889fffb34b39b7b358bd29f5f614d2811304ff4677d327fbcf2d57d806055f6f6c0b5dd14dd31e55658ea7fab2fe82084583e366726d137fce9eb41f9b695539cd1e4fd948767b00c2742d0ffceff69e2a0c95d60002ede2b6645df58bb4976326ea08b9f00e35ae87dab263dfb7f8ed0a58f4ae2740a056dcf56ce32dcb3e081384454f1d34e18c18dfae0e22450e533f9fc692b5ca28595fba41ffe1f58bf81187653a8d530f0deb89a396d819c35e07fb83d207fdcc89d808bea952c2f1f3e6c81a61bef866237f4521e8f75bfef0cf248fd4980c32c14574c9f13483960251afb6d771faf6c1d4693fdc58a20840b5421b53cbdbfbe39839aec2d4b1ae3cf705507633cde868b97c391cbb3a7f760e2bc618c83971b56fcfcd3e3fe5132d1a00febfbfd879cbf95813c53873bcbe7601fa4a9b70a697bc7436c47770a767fb31841218b2bafa9c92b5d56aca5bff4fb14332e993b85d22c18db7faa1a76df356c2b1423a8a1c132735aa3312fb111e3955947ed4b3fa9b9dec9f4f290ff8d5a8e7b0f4e50483153ccae4309e95aa8d2c03d8bf7c97702b8ef14d8647f795cbb22cef69d0df4bcf4bc64d82c8e401ee9d4b4dee68ded355c430ac087680ab3d91510b7d128bda8552fc69171e2a2ac6fed02d8894db982c4ad6b086170c26b188a2217a40cac06fb05983a2dc7257ed39ffaeb09a63ffcb94e74d2ccacfd71b1010a4754e23bebcdc6e0b1a196551a9990f3198eb00b6bfe1f0eb4718ef81e5d12dd58432604f3d2c0187eecffe592de17c64201fce080b0b3278fe1e32013ac0f3d55757c7d7b9c28cbafd541119d813dabc7b06234e9a931973808a21e49f4f648e7ca147011a5cc783ccdd22ca62f2ad4a847a2649396b0f3bbf9282571c6c1aa3679d3a298933989f8dd121458cc90f5a2e0854c321c95c565d95c852c8dcf54c4f3a7d59f4488eee2d7cd6219251983cf257b385a02d3141f21a2c0aebe7474b5c241766ae18280063f1638b04224f784c1d6958dfe2461a3455264daf0c3ded526a10e477ca5908f5846a3bb6881b57fb92aa1a7ab1a04b892ed493df42647cf1bfa84f897f2bcf66e018d7c29ee2289231d80bb77b75b0ce1c0d4c19b40ace39ff0e700bd1cae8374619beb675b5c5d1c6f3b5b3f71d360b74d24ff8d4c8fe5f16d192613ae78b2af65ef7434624bfa1534b60015895617c9b81182f389a0e7a637eecbad3afc4adfff0200055583cb7ee66b6d0d78b0768e00a4cdb61a25d130e461fa15d3047bf6c50f86916b6a6140e24f6adb008001035491c8710eb180cd902f165d79ec720a99508140c1feeeff797a02b81f0898fd4dad9885512ea678c63c6acd5d77464fd3b4a44417bc610102ea2f48aa7772973fa3933ebd3345d50a07e959ad676b8ca0fb369b2e4fd59f9ea3c736907df40fd2a35fde3778528caee796630ff33146d20c3212a9052e5d0830e13ba2b3435f78b5669239a6f4b2e1c6d5eb3d49cdef836d44ae9d1835315872acad28250ff337ccb3758a72006ac8763661d8ac0128ddcbf79f8838988c316ad3758880455eacd7a1763fa9a0dd502084c7f63bf7ad1ed2aa12e7a22e97b1a2ecebbbef6ed9d81e6013e2adc7f283d93d2d25f69d75739382e47c5c26ce106412ae3c62e55f17d8bb95cfc1e0debe5deb93a7b0564215f113051cd562e20279d847f4b1f41428e2457888a8c8026f8a1fcf305bd66b29f4dcc25afa7549dd5ad31bc118716e74457a66ee4e3535a39a7e69d2a35485ab977024336013cb213d237f1f1240c712cc8906f0f2427d743de74f247354c271ecc97961069dcec408ea69782f14d40680caa6865ec76fd3731163bba8f3599828f78a89be68ca476ec4f94de08f1f545e5e088d733fd6409fef513db87d5697f334352a092c2b0c6f225166903eef711bbf1ee7585393112902c5317eee47eb29018f99c8cdbe5d0c973b23021cb882e06eebbeca421f7fb160099a3e64d074c385bb6f40ca372ddf19af0086aeea997320cf73624d94e83778c026ee114b4e8c0d1ee0cad61595be7375e9be7a0e5497e59ca6047b9ad0ce2613443e91f41729e79afb5427af6edc97987fa6e9d60ff7aaf6e82c2b59abd76fa61f3c0f367efbd6e6d0508f17840d767fe9d3a6a81774097ed6b32da3fb389a9d6b911cd918930d4a05def2bbf777f60758bd70a16f0a721aa8087e640b2fd647e1bf7ee888abc4e263e85fc95a03bbbcda2d4032fd2b67b5bdcf9373d231c77161b86d2f1b8bfa8c576312de7a07d67fce32c750f9f7d16bad7d96da13a2d3324498d610fba42d692415b55cc4f264a47875dd67fc52bb3b368d7aae8432f7d585f0f2a025c78f0c04f4fb9b922b5f892ea9319b9c27380f2e70aa92ad6440f15b01ae8bb59112a9070cef7fffbbad00416c4dbe22ef024cc781a72735198669b0e06c99e1ffaacc3fd59c2c3dbcb9e103b3176912783dca48c246aa89ac0abd8f1c1c5d6992db27530ffa3cbdbd85ac08059c260e3a91a6a7b12e4d7570a01e304016bb9a2a7a26533996301cd37f8f4f60a645bb5d0b95f2cde16145174626622e289a964ccdcc151d515bbede4a975f522ef32d0311b331981d0364d96c8e5f2fb3ebca6d509a15d19bb5b0f6b0e683a17f7ffca492ea7e9ae0871b6257faf322f4383cc27033724b4b5ae3fd0b4c61596cdd91c64bb4c8eb8589cfd6561f4d6ccf7690f4dc45f99f57c21c482c45b6141047fe83cf1c7f43ca3c3b817c9c41ac00c88ed15d63195a9cb602d0b5a7829af020a675b0f9015ba000a80180df7e2fb339e8247f9b14943f0533cd55a96ccc98ee794fea699781f51bde9ec6541f67838c2d9833ad0a12f9748aa25c0a443d06b5d08a614e8aa1a4e273367eac9a1a51eab21c5871707ec6c30ce9e58addaa4e6a537fc6202aced367fe43e7c3cee054be6fa3f807ea197d4f3eddafc5cd4c0538914142b5f84077fc332e856ad46f88acef03e9e203c0b0a110db59566106d7ca5fd4ec264e437596ed4b931c78a07b981209ee97c97055d8fe1269afb863c46343aedd183bf1af568ab944ed0be041f58956a8ae9c27b5e08c8b92304d8d9ecda1f7aa9a158d122af3e4ba8dfd23432bd2f90f277f9121444311014ace08fcfabf603d0be1af35af58d502fa3f59abecc4d4ded40fb7b764f30da6f9545c97b08ba45fb6288f42c3382ba2db9a5f6cbeb5085cee5d931c87473d28f4fd510320b466a8621eb5a5a7d8cb94b70cf3c9bb47e334695a7a20a39d2136bf18e8d973dab5681ff317a5fbdd9252956b49432f69fd4c05f6c7fb1124b824eb76e64a6736ac6d40ca31c406fb489b3fe2e9a96fca6c6996c4f27c34b9b9da8e70709597e780a99194310d2611b1f9899677c172f4d9fa3f60e473926a6ddae37c1fe636f61e9fe065aad29bef4538cbdee0fe5aaf107af2368c4d6e35d551a43f39d46ef89a09d946ba2b19baf819f15f0178693bf292bf6cb143c220a4cb3e2f7da340d065e38ec160183da69a0cf46dc34139bd3093b0562d0a19ad64226453ac373cb20f88a6c09540873a492df36524d227a468ea595580515f0c647059efaba66b418525db3127cf5809c3da69a0fe1992f111cac2bcba6ba7788e721752fd136f30f8dd35c4fa7ac9a51d00b5efcc21c1985a517db4321dd9c8333cbe610338bd7f5366e387ebe2d9afea0c4353f97277006a5a7753c3a54ea95753e07ce89f7af92cbbf33769d4f06b386675a9c15b48b33ff21a0f5af5190ff73bd734e4e215f1bbfa250d344b72d55130a9c3d1dd55d9ee2589fae2f911799f0b0518e318909bf2c67332ad88809cbb3f2513c8e6c372e27d0c9af75c3cf4134e7af737cbd83d2719e003e148300eb4c144deaa15b649befcacff1738174f104ac458312685e79a49cea1068494d2f2512d4495a1c0925bbd25ce7575cc12cc7a7b8004f2741e4e03ffe767aa4544c6f16e7d33d7796450ada46d536c12690b0ea8729df8d9f32f1cab71f26ac47d7a88b270fde9d7430fcdeced7c5f6ed74b175512867cad66f7107a0cf7f655056b0ed61dcec2eec6db42c376a4732a16d7de0a95561a27dea8cd782cf86b7e193d0f5fd345a4e65d2d95156d570d7111a1f77e5d823536fe1c5fe531b456d3ac618ca62178144c123ec1f1ec08456f2af93da7900e381402472fefbbbfe8f55a15deedeec252e3fc04888b65afe2423a7649b096a95fce441c73113ea71d6dedee9de4f2b9a9bfb2376679c47674b29de9973d63c5e10cd4e89f6156d2b3275d88db28a4578bd696628d805bee75b969249791671904995b9b3504dff98f2fc52cbed97cf96d2d66b00e6fb12a2acbe90f0420eb2073a7de48df6e04869113ad76007b6bb4d6b50a86df73d87b0b17299fdedc5ea7399be7ccb58d822d0399b8043f7c79e4ad2016505165fa5d5702b976c5fd82c4390374ebb774eb46fc7dedf0417e08afe90c38a86b8a32989fe40c8c54615ce6b5d5df3b635910e821b28f1156e64b7f44cd904f9914184f8d1f06e820edaa5935949f792148ddcfe2f559363d90a10386387f5dbe82b3610d914dadf55ad68e3c4c0fb8f8c0f4399f4d7ba0ebf271f2f1130e3636826c34c12c6529c5d1c9d5ce9b7bac5c74ad10e94a04ce925a0e401abbfbfa71994450e32cc6688df40cbde726c95cd5c02de46f1175a94aaa594edd767bd8a8cffb3c35834313a7b51147d2ab5580911151f95a397fab53e3cb01d6bc65daf4de863c9ee023f73a59ac923abe505455807a5c10de0a7acc2372ff68ccf6a4f18302f7fa16663280bf816c59cc6f195038cda5a39bc9abe44231593d9e54219024c758586688fc99b41c0089dc3b5553dc7c9d5d1c5e953ec55e46bef8e4ac2850d66f57f8fea667696cc72daac5a1c9a50b0ea4938b15bf3ebc6c48fb70e23d98ec50f9f8cc3740d3e6bb2a64e14cd5eb7a1fdf27cf5d0dc8a07a759a79a4ce651801abb0ef721f4975a728ef2f6d1c6837c2076d8df1d0e749de21e1d93c9e497df37f13444175236947551d022ae92d582d463e41a4567cb65ea0e32b51e83b6f0f27a988be59e054b81c2193efe9e77718aa23", 0x1000}, {&(0x7f0000001740)="9a6fbb0784e3bcf95588c6abf82216e8b7a8ac0daba4053c4bb03964fb68ff1fdfb03869d020ddd4b16ff0167902a10c343c7699c3672ca8d17d9127bf42240cfcb9ef99c07d7d890162f8708dabcecccf63a4011be6339095ab586c05dc89770569f2b693631bc92c5887b586bb3d719d6d98e1a5c59939aa7ed9090ffd3d23e14d1ae843fa1607c40363115d0950134102f570bce7275629dee8cee7e80eb64982d0c7630c4cd608831903ecb424be6aaf555054d5ddfdde4e39b43bc246596ac8b974b83fc88234b7c5e20e55aedf7b417f73c15bfb847b185fe8d94a82d11726ef80d47ac0ac9d8e66bf94ec37ff2c0af2abaf9c2312", 0xf8}, {&(0x7f0000001840)="5da24a74b1cbd246cb2a58ca7155", 0xe}], 0x3, &(0x7f00000018c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xd1, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x1}, {@loopback, 0x9}]}, @timestamp_addr={0x44, 0x44, 0x6b, 0x1, 0xe, [{@broadcast, 0x4}, {@broadcast, 0x8}, {@rand_addr=0x64010102, 0xb}, {@loopback, 0x8}, {@multicast1, 0x7}, {@remote}, {@remote, 0x17a1}, {@empty, 0xffff}]}, @cipso={0x86, 0x35, 0x2, [{0x5, 0x9, "a5e0366281f3e9"}, {0x6, 0x12, "2ed34ea632b3e129afc631f5643a5909"}, {0x7, 0x12, "14ec9be8897be3a3999370cb1258b511"}, {0x0, 0x2}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xc}}}}], 0x120}, 0x840) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000540)={r0, &(0x7f00000003c0)='GPL\x00', 0xc0081, &(0x7f0000000480)={@align=0x35b, {0x7, 0xfffd, 0x10000, 0xffffffffffff0393}}, 0x401, &(0x7f00000004c0), &(0x7f0000000500)}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000600)={'syztnl0\x00', r6, 0x80, 0x20, 0x4, 0xd6, {{0x22, 0x4, 0x2, 0x9, 0x88, 0x64, 0x0, 0x81, 0x29, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4}, @noop, @cipso={0x86, 0x52, 0xffffffffffffffff, [{0x2, 0xfffffea4, "548857a0fbacaac462"}, {0x1, 0xe, "684e79b14317ebb6540ad2d4"}, {0x7, 0x11, "8bef9ec0c5fd2c99a35ad281a5b304"}, {0x0, 0x7, "895e5e9bf1"}, {0x5, 0x12, "6dc89e7dc5b8daa09b1a7cbc1580f276"}, {0x7, 0x2}, {0x0, 0x7, "9baf4a121a"}]}, @timestamp_addr={0x44, 0x1c, 0x4d, 0x1, 0x9, [{@empty}, {@rand_addr=0x64010100, 0x188e}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x1}]}]}}}}}) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4000}, 0x18) r8 = accept4$inet(r5, &(0x7f0000001a40)={0x2, 0x0, @private}, &(0x7f0000001a80)=0x10, 0x80800) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000001b00)=@req={0x28, &(0x7f0000001ac0)={'vcan0\x00', @ifru_addrs=@rc={0x1f, @any, 0x80}}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f00000000c0)="178d88b0d8ad7a6426af1bebbb660d3a89e8ee94b4e38bf75638ccd833e77d5c8037737987c8702d484cd446099b309cb07be97a464ddc0b82c73f4b", &(0x7f0000000140)=""/43, &(0x7f0000000180)="0fa95cf468e750b20acc609aae61fce737ee7bc427258f5928494c1c1570f019459874628f36b4ef8703dd748f4e480229ea070f6a285b88bd51dc72004eb581814f240fbda38fc118598fab17b05848d8d8c6bb7afabdd4e4211bc73a579ef28838612948698f4e", &(0x7f0000000200)="6de7dbf765c28bfc46daadcd921a247295ce38efdf22496f00ce8092d5a03587aa25f39522372027700369cd681846e369e6f9f580ee0b6b0a079c1e426d527036501d611d83547fe492c1e221fc1a909c67b69f365a64cce1405b64071c4ae14cef50cbad40dc24178f083d95627ed7d85101892f03c91c65a928e0d403f55e7e1565460250c53127462bc926c166faf0ee83c30d7460938ee4d2e805d59eb508c2fd66ede71882c873f33fe7c53fa5cad1a5ac96b3b9b6920825cf183183f825ed780bf440d60d97708dcc", 0x5, r7}, 0x38) 853.135928ms ago: executing program 1 (id=3810): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val={0x0, 0x806}, @void, @eth={@local, @multicast, @void, {@mpls_uc={0x8847, {[{0x20}, {0x7, 0x0, 0x1}], @generic="3f60e32228f30d981d00f29932d79e1ab490f60c6965dde07cbd1126d05321bfa8d905c8b8bb1cd56225190f5c0d0db34b50409a28523bdb3df3bbc0d7fae437f4cb104985cc63053e9de2f6436dbc76db510d68cee9d39c45830efc3e3a3fea8fa53581f49e0128bbda76f53b81f2fe1b5c10d739ee1db85289729caa"}}}}}, 0x97) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77f}, 0x94) r1 = socket$kcm(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r4, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x5, 0x0}, 0x0) syz_emit_ethernet(0x1b, &(0x7f0000000000)={@broadcast, @multicast, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@generic={0xf5, "ac45c30cc790d94ca5"}}}, 0x0) 554.777617ms ago: executing program 0 (id=3811): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x2f}, {0x0, 0x0, 0x1}}}]}]}]}}]}, 0x54}}, 0x0) r4 = socket(0x2a, 0x800, 0x5) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x4000880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x702, 0xe, 0x0, &(0x7f0000000400)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) write(r4, &(0x7f0000000040)="2400000011005f0414f9f407000904ff810000000d0000000000010008000f0001000000", 0x24) 465.200532ms ago: executing program 4 (id=3812): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd50fb", @ANYRESDEC=r0], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="f9ff0000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="140002007767320000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000008000700060000001400020077673100000000000000000000000000140002007767310000000000000000000000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e1400020077673000000000000000000000000000060006004e210000060006004e200000"], 0xcc}, 0x1, 0x0, 0x0, 0x60048090}, 0xc0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f00000003c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000080)=0xb, 0x4) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fbdbdd250401f2800c00160002ac0f0000000000140017"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r9, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 1.781473ms ago: executing program 0 (id=3813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) sendmmsg(r4, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="89560a28203a88f265a7d058bd084b10ba4d7442455a0a26ad377b8e4ea42dfafffa6e812f89e76a9b29e6d1a99dca8c83cfe8ea5dda72d2eddc1f8c2e822951b1b2a47b3e947953cc81b70cf090f10457fb06e0f76e5f95406a4abaa17ee2ce2463d0b34b3568e5", 0x68}, {&(0x7f00000000c0)="1d330d34074ff229520dfed7f5669327d00791bb30a695d3cdc61e", 0x1b}, {&(0x7f0000000400)="19aa375a", 0x4}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)="eea76e5fd39ca2f8df722f233e2027479105bd1ef9b7f56efa234e17488b866a20878e2b137995529c5689c4de413fee17ec46fbffe87cdc821a86c805f62597fdd19afc9f2fa2db834d02e2cf543e62c2901dd389c88ca9fc3c91bb322fdb27ec87296b950501eb92d7fe8a44b900bb10db22231b", 0x75}, {&(0x7f0000000700)="3eff2c2af56c14ad40a2084eae1e46c0e5c48d", 0x13}, {&(0x7f0000000740)="78721d22fc7a771d0894d82e13179e8b34e56673a55625ea780189ea241060232bfdfa4474b46d5df859e6e3f91c05d6ed516a92634470635103c7bc55368d5bbc33ba49b11e62bac807124710f50d107cfec099bb9c0065bb9402b74bd9f170f77d06ce7e2d5dee2c0cbce21e44a41fb31e8875cc797682599ce2544c7acac641e5b38220c12b5554aee96f64347b3927083eff64535e6401af1079051c3bab5c3ab656ef73616495b386a98b9114d06b91fb15c33b62920f", 0xb9}, {&(0x7f0000000800)="d5b66f9ac9f35d1c476301b9d9da36e58714e442", 0x14}, {&(0x7f0000000840)="49a768bfdee35c5af089ef6d99fc88f12043e980c323ba04093fe7b8cafb1e1e657321070861b12a8c6a300d0f1156a5b2f2bb4bf813246ea252f89556b472f9292ab942e146c4490cb87969104526639d54411e86f1bfdd071b75fc", 0x5c}], 0x5, &(0x7f0000000a80)=[{0x10, 0x79da85451d925f27, 0x1}, {0x10, 0x10e, 0x8}], 0x20}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)="1e7cb2a61ce2e9be0b70daac4c9acd96280393b80976885b243367a821761cefa9ecd54c", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000e80)="d28b755afccbbfe62e6ac81947c0549e8b90106eb64ae9ad96d8f855f84f591cf99b90d7035dc3f2ea7f4ab4eeff65e9140e774cdc11d0234726493773432ee362d85365a0f03d2863ecdd858dbeadb342a455ec9e249826fcae053d26686b17c914b5d5ff83ad9f10de192ff4ba01111209b5e13792770c24f63f287ef7e3", 0x7f}, {&(0x7f0000000f40)="587a6177a487b8d9ca97b9ff181a2515236085b741bb2540f07afed077aa5d77e0f336f9f95a80138e54ddc4d2365a188681dd439a7032a036e06dca05c41baee60b324cdbd73fcb4f803390ec2db3e2d0017f696ac5d242ac", 0x59}, {&(0x7f0000002240)="2937b436807e9727dd92e64e1c5e4d9105fcbb914b889f1e36d5f9655ce86477682affe23f434c9605a9e1c4429cac71bc7125fb52301848e5a94621190b252251736be54f75e399d0faaf066f5f405cc4ed5dc265bec1241d9293688ca48d5aeaa0e9a8d73334d8f4813ccefc54450d2c7b297b2ab0242d7adcaba6ad65a2a8fd8f", 0x82}], 0x3}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000055c0)="06380009000000ff3cd831e454c34744db9b6803d73a3f3f9e2d8bc7a24f00000000000000ffaab3c89ed97b2ed45bea0b54a7429d94777dad6e13a89175fbfa3061", 0x42}, {&(0x7f0000002840)="9e17743fb903b7eccbfd03ffa422813b324b6df571c240cab6700d7a73451426565c0ec7f68ad4060a61fd6b2876c6698b4e73e75d991f22dd1fae7ed83b4e3217be4b32890252b223ed23d1d33c3f946f400b1b492afd301b3ff24c160ecb3a99059843030606e80b820470", 0x6c}, {&(0x7f00000028c0)="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", 0xb9d}], 0x3}}], 0x5, 0x48004) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004070000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd255985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8c7049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290c7536fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a57482cdb4070de8dd60fd65dacb9ec5003fb1cca05ce1c9f924cc2ec45e8d5adf7c89e3b0b8da35c1aa7fbbee6f839a8f05294a6c02281afb7601252611583408f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) (async) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r8, 0xbbff7b7924af81ff, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async, rerun: 64) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070001000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021680000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000003c0003803800008008000340000000032c20"], 0xec}}, 0x0) 0s ago: executing program 3 (id=3814): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdc03, {0x0, 0x0, 0x0, 0x0, 0x64e90, 0x36801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x4048002) kernel console output (not intermixed with test programs): all Trace: [ 273.096070][T14680] [ 273.096077][T14680] dump_stack_lvl+0xe8/0x150 [ 273.096105][T14680] should_fail_ex+0x412/0x560 [ 273.096132][T14680] _copy_from_iter+0x1d3/0x1670 [ 273.096159][T14680] ? rcu_is_watching+0x15/0xb0 [ 273.096204][T14680] ? __pfx__copy_from_iter+0x10/0x10 [ 273.096236][T14680] ? netlink_sendmsg+0x650/0xb40 [ 273.096259][T14680] ? skb_put+0x11b/0x210 [ 273.096283][T14680] netlink_sendmsg+0x6c0/0xb40 [ 273.096310][T14680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.096335][T14680] ? aa_sock_msg_perm+0xf1/0x1b0 [ 273.096356][T14680] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.096376][T14680] ____sys_sendmsg+0x972/0x9f0 [ 273.096399][T14680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.096422][T14680] ? import_iovec+0x73/0xa0 [ 273.096447][T14680] ___sys_sendmsg+0x2a5/0x360 [ 273.096467][T14680] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.096509][T14680] ? __fget_files+0x2a/0x420 [ 273.096530][T14680] ? __fget_files+0x3a0/0x420 [ 273.096558][T14680] __x64_sys_sendmsg+0x1bd/0x2a0 [ 273.096575][T14680] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.096599][T14680] ? __pfx_ksys_write+0x10/0x10 [ 273.096627][T14680] do_syscall_64+0x14d/0xf80 [ 273.096650][T14680] ? trace_irq_disable+0x3b/0x150 [ 273.096672][T14680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.096687][T14680] ? clear_bhb_loop+0x40/0x90 [ 273.096706][T14680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.096721][T14680] RIP: 0033:0x7ffb79d9c799 [ 273.096736][T14680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.096749][T14680] RSP: 002b:00007ffb7ac1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.096765][T14680] RAX: ffffffffffffffda RBX: 00007ffb7a015fa0 RCX: 00007ffb79d9c799 [ 273.096777][T14680] RDX: 0000000004000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 273.096788][T14680] RBP: 00007ffb7ac1b090 R08: 0000000000000000 R09: 0000000000000000 [ 273.096799][T14680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.096809][T14680] R13: 00007ffb7a016038 R14: 00007ffb7a015fa0 R15: 00007ffd1677f7d8 [ 273.096835][T14680] [ 273.695366][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.705672][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.714315][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.722998][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.744547][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.858889][T14696] lo speed is unknown, defaulting to 1000 [ 273.912913][T14696] wlan1 speed is unknown, defaulting to 1000 [ 273.952806][T14696] lo speed is unknown, defaulting to 1000 [ 273.958257][T14709] netlink: 'syz.1.2759': attribute type 1 has an invalid length. [ 273.970317][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 273.978377][ C0] lec:lec_tx_timeout: lec0 [ 273.983130][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 274.045960][T14709] 8021q: adding VLAN 0 to HW filter on device bond8 [ 274.191548][T14715] bond8: (slave veth13): Enslaving as an active interface with a down link [ 274.245225][T14709] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 274.263487][T14709] bond8: (slave batadv1): making interface the new active one [ 274.272825][T14709] batadv1: entered promiscuous mode [ 274.278577][T14709] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 274.330524][T14719] siw: device registration error -23 [ 274.343973][T14720] siw: device registration error -23 [ 274.467847][T14723] __nla_validate_parse: 3 callbacks suppressed [ 274.467866][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2763'. [ 274.609525][T14696] chnl_net:caif_netlink_parms(): no params data found [ 274.628335][T14734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2765'. [ 274.715678][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.719150][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2765'. [ 274.723611][T14696] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.733821][T14730] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2765'. [ 274.740176][T14696] bridge_slave_0: entered allmulticast mode [ 274.787914][T14696] bridge_slave_0: entered promiscuous mode [ 274.825317][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.836985][T14696] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.844962][T14696] bridge_slave_1: entered allmulticast mode [ 274.857024][T14696] bridge_slave_1: entered promiscuous mode [ 274.894099][T14696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.906799][T14696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.952946][T14696] team0: Port device team_slave_0 added [ 274.969808][T14696] team0: Port device team_slave_1 added [ 275.017649][T14696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.042059][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.094352][T14762] FAULT_INJECTION: forcing a failure. [ 275.094352][T14762] name failslab, interval 1, probability 0, space 0, times 0 [ 275.115677][T14696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.134294][T14762] CPU: 0 UID: 0 PID: 14762 Comm: syz.2.2772 Not tainted syzkaller #0 PREEMPT(full) [ 275.134320][T14762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 275.134330][T14762] Call Trace: [ 275.134337][T14762] [ 275.134344][T14762] dump_stack_lvl+0xe8/0x150 [ 275.134373][T14762] should_fail_ex+0x412/0x560 [ 275.134400][T14762] should_failslab+0xa8/0x100 [ 275.134424][T14762] __kmalloc_noprof+0xe8/0x760 [ 275.134443][T14762] ? fib_nl2rule+0x2e9/0x1a00 [ 275.134471][T14762] fib_nl2rule+0x2e9/0x1a00 [ 275.134499][T14762] ? __pfx_fib_nl2rule+0x10/0x10 [ 275.134525][T14762] ? __nla_parse+0x40/0x60 [ 275.134552][T14762] fib_newrule+0x321/0x1030 [ 275.134583][T14762] ? __pfx_fib_newrule+0x10/0x10 [ 275.134637][T14762] ? __pfx_fib_nl_newrule+0x10/0x10 [ 275.134662][T14762] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 275.134689][T14762] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 275.134710][T14762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.134737][T14762] ? __lock_acquire+0x6b5/0x2cf0 [ 275.134767][T14762] netlink_rcv_skb+0x232/0x4b0 [ 275.134791][T14762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.134812][T14762] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.134843][T14762] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.134873][T14762] netlink_unicast+0x80f/0x9b0 [ 275.134902][T14762] ? __pfx_netlink_unicast+0x10/0x10 [ 275.134924][T14762] ? netlink_sendmsg+0x650/0xb40 [ 275.134945][T14762] ? skb_put+0x11b/0x210 [ 275.134973][T14762] netlink_sendmsg+0x813/0xb40 [ 275.135002][T14762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.135027][T14762] ? aa_sock_msg_perm+0xf1/0x1b0 [ 275.135048][T14762] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.135070][T14762] ____sys_sendmsg+0x972/0x9f0 [ 275.135094][T14762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.135119][T14762] ? import_iovec+0x73/0xa0 [ 275.135146][T14762] ___sys_sendmsg+0x2a5/0x360 [ 275.135166][T14762] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.135210][T14762] ? __fget_files+0x2a/0x420 [ 275.135234][T14762] ? __fget_files+0x3a0/0x420 [ 275.135270][T14762] __x64_sys_sendmsg+0x1bd/0x2a0 [ 275.135295][T14762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.135319][T14762] ? __pfx_ksys_write+0x10/0x10 [ 275.135347][T14762] do_syscall_64+0x14d/0xf80 [ 275.135370][T14762] ? trace_irq_disable+0x3b/0x150 [ 275.135392][T14762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.135410][T14762] ? clear_bhb_loop+0x40/0x90 [ 275.135431][T14762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.135448][T14762] RIP: 0033:0x7f7f9a59c799 [ 275.135465][T14762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.135479][T14762] RSP: 002b:00007f7f9b439028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.135498][T14762] RAX: ffffffffffffffda RBX: 00007f7f9a815fa0 RCX: 00007f7f9a59c799 [ 275.135510][T14762] RDX: 0000000004000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 275.135521][T14762] RBP: 00007f7f9b439090 R08: 0000000000000000 R09: 0000000000000000 [ 275.135531][T14762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.135542][T14762] R13: 00007f7f9a816038 R14: 00007f7f9a815fa0 R15: 00007ffea1966068 [ 275.135567][T14762] [ 275.138766][T14696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.547717][T14696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.595426][T14696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.772881][T14781] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2777'. [ 275.775503][T14782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2776'. [ 275.799877][T14696] hsr_slave_0: entered promiscuous mode [ 275.815185][T14696] hsr_slave_1: entered promiscuous mode [ 275.826604][T14786] netlink: 'syz.1.2777': attribute type 3 has an invalid length. [ 275.834790][T14786] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2777'. [ 275.844899][T14696] debugfs: 'hsr0' already exists in 'hsr' [ 275.850746][T14696] Cannot create hsr debugfs directory [ 275.856313][T14784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2778'. [ 275.856932][ T51] Bluetooth: hci5: command tx timeout [ 275.870640][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2776'. [ 275.880945][T14782] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2776'. [ 276.101592][T14791] lo speed is unknown, defaulting to 1000 [ 276.142629][T14791] wlan1 speed is unknown, defaulting to 1000 [ 276.215375][T14791] lo speed is unknown, defaulting to 1000 [ 276.366575][T14696] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.510848][T14815] netlink: 'syz.3.2789': attribute type 1 has an invalid length. [ 276.512157][T14696] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.530968][T14815] nbd: error processing sock list [ 276.565458][T14815] nbd: must specify at least one socket [ 276.687118][T14696] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.756223][T14696] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.789564][T14831] netlink: 'syz.0.2794': attribute type 1 has an invalid length. [ 276.800566][T14831] nbd: error processing sock list [ 276.816101][T14830] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 276.988875][T14834] sit1: entered allmulticast mode [ 277.135148][T14846] FAULT_INJECTION: forcing a failure. [ 277.135148][T14846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.143103][T14696] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 277.152797][T14846] CPU: 0 UID: 0 PID: 14846 Comm: syz.3.2803 Not tainted syzkaller #0 PREEMPT(full) [ 277.152823][T14846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.152833][T14846] Call Trace: [ 277.152840][T14846] [ 277.152847][T14846] dump_stack_lvl+0xe8/0x150 [ 277.152875][T14846] should_fail_ex+0x412/0x560 [ 277.152900][T14846] _copy_from_iter+0x1d3/0x1670 [ 277.152927][T14846] ? rcu_is_watching+0x15/0xb0 [ 277.152954][T14846] ? __pfx__copy_from_iter+0x10/0x10 [ 277.152983][T14846] ? netlink_sendmsg+0x650/0xb40 [ 277.153005][T14846] ? skb_put+0x11b/0x210 [ 277.153031][T14846] netlink_sendmsg+0x6c0/0xb40 [ 277.153060][T14846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.153086][T14846] ? aa_sock_msg_perm+0xf1/0x1b0 [ 277.153108][T14846] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.153128][T14846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.153149][T14846] sock_write_iter+0x49b/0x4f0 [ 277.153170][T14846] ? __pfx_sock_write_iter+0x10/0x10 [ 277.153206][T14846] do_iter_readv_writev+0x619/0x8c0 [ 277.153229][T14846] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 277.153251][T14846] ? bpf_lsm_file_permission+0x9/0x20 [ 277.153271][T14846] ? security_file_permission+0x75/0x260 [ 277.153289][T14846] ? rw_verify_area+0x255/0x4d0 [ 277.153310][T14846] vfs_writev+0x33c/0x990 [ 277.153338][T14846] ? __pfx_vfs_writev+0x10/0x10 [ 277.153371][T14846] ? __fget_files+0x2a/0x420 [ 277.153398][T14846] ? __fget_files+0x3a0/0x420 [ 277.153419][T14846] ? __fget_files+0x2a/0x420 [ 277.153449][T14846] do_writev+0x154/0x2e0 [ 277.153471][T14846] ? __pfx_do_writev+0x10/0x10 [ 277.153503][T14846] do_syscall_64+0x14d/0xf80 [ 277.153524][T14846] ? trace_irq_disable+0x3b/0x150 [ 277.153547][T14846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.153564][T14846] ? clear_bhb_loop+0x40/0x90 [ 277.153584][T14846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.153600][T14846] RIP: 0033:0x7f1da979c799 [ 277.153616][T14846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.153630][T14846] RSP: 002b:00007f1daa5ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 277.153650][T14846] RAX: ffffffffffffffda RBX: 00007f1da9a15fa0 RCX: 00007f1da979c799 [ 277.153662][T14846] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 277.153673][T14846] RBP: 00007f1daa5ca090 R08: 0000000000000000 R09: 0000000000000000 [ 277.153683][T14846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.153693][T14846] R13: 00007f1da9a16038 R14: 00007f1da9a15fa0 R15: 00007ffe2c83ccc8 [ 277.153726][T14846] [ 277.389555][ T5178] block nbd2: Possible stuck request ffff888026d08000: control (read@0,1024B). Runtime 60 seconds [ 277.426316][ T5178] block nbd2: Possible stuck request ffff888026d08200: control (read@1024,1024B). Runtime 60 seconds [ 277.437378][ T5178] block nbd2: Possible stuck request ffff888026d08400: control (read@2048,1024B). Runtime 60 seconds [ 277.449950][ T5178] block nbd2: Possible stuck request ffff888026d08600: control (read@3072,1024B). Runtime 60 seconds [ 277.522469][T14845] vlan0: entered allmulticast mode [ 277.527866][T14845] bond0: entered allmulticast mode [ 277.537187][T14845] bond_slave_0: entered allmulticast mode [ 277.543627][T14845] bond_slave_1: entered allmulticast mode [ 277.558166][T14696] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 277.579827][T14696] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.603063][T14696] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 277.658459][T14863] syzkaller0: entered promiscuous mode [ 277.665263][T14863] syzkaller0: entered allmulticast mode [ 277.799295][T14696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.853503][T14696] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.866431][T14514] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.873626][T14514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.916958][T14514] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.924265][T14514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.933823][ T51] Bluetooth: hci5: command tx timeout [ 277.967078][T14886] FAULT_INJECTION: forcing a failure. [ 277.967078][T14886] name failslab, interval 1, probability 0, space 0, times 0 [ 278.006546][T14886] CPU: 1 UID: 0 PID: 14886 Comm: syz.2.2813 Not tainted syzkaller #0 PREEMPT(full) [ 278.006570][T14886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.006580][T14886] Call Trace: [ 278.006586][T14886] [ 278.006594][T14886] dump_stack_lvl+0xe8/0x150 [ 278.006621][T14886] should_fail_ex+0x412/0x560 [ 278.006649][T14886] should_failslab+0xa8/0x100 [ 278.006671][T14886] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 278.006689][T14886] ? __alloc_skb+0x186/0x7d0 [ 278.006709][T14886] ? __alloc_skb+0x1d0/0x7d0 [ 278.006728][T14886] ? __local_bh_enable_ip+0xd0/0x130 [ 278.006751][T14886] __alloc_skb+0x1d0/0x7d0 [ 278.006770][T14886] ? sock_diag_check_cookie+0x12f/0x1d0 [ 278.006790][T14886] udp_diag_dump_one+0x59d/0x850 [ 278.006813][T14886] ? inet_diag_lock_handler+0x8b/0x2c0 [ 278.006836][T14886] ? udp_diag_dump_one+0xe7/0x850 [ 278.006858][T14886] ? __pfx_udp_diag_dump_one+0x10/0x10 [ 278.006883][T14886] ? inet_diag_lock_handler+0x8b/0x2c0 [ 278.006909][T14886] inet_diag_cmd_exact+0x416/0x550 [ 278.006929][T14886] ? is_bpf_text_address+0x26/0x2b0 [ 278.006949][T14886] ? __pfx_inet_diag_cmd_exact+0x10/0x10 [ 278.006970][T14886] ? is_bpf_text_address+0x26/0x2b0 [ 278.006990][T14886] ? kernel_text_address+0xa5/0xe0 [ 278.007021][T14886] ? __lock_acquire+0x6b5/0x2cf0 [ 278.007046][T14886] inet_diag_handler_cmd+0x21e/0x2c0 [ 278.007070][T14886] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 278.007096][T14886] ? sock_diag_lock_handler+0x19/0x290 [ 278.007115][T14886] ? sock_diag_lock_handler+0x19/0x290 [ 278.007138][T14886] sock_diag_rcv_msg+0x4cc/0x600 [ 278.007170][T14886] netlink_rcv_skb+0x232/0x4b0 [ 278.007192][T14886] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 278.007214][T14886] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.007242][T14886] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.007267][T14886] netlink_unicast+0x80f/0x9b0 [ 278.007292][T14886] ? __pfx_netlink_unicast+0x10/0x10 [ 278.007311][T14886] ? netlink_sendmsg+0x650/0xb40 [ 278.007329][T14886] ? skb_put+0x11b/0x210 [ 278.007352][T14886] netlink_sendmsg+0x813/0xb40 [ 278.007380][T14886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.007406][T14886] ? aa_sock_msg_perm+0xf1/0x1b0 [ 278.007429][T14886] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.007449][T14886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.007471][T14886] sock_write_iter+0x49b/0x4f0 [ 278.007493][T14886] ? __pfx_sock_write_iter+0x10/0x10 [ 278.007531][T14886] do_iter_readv_writev+0x619/0x8c0 [ 278.007553][T14886] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 278.007578][T14886] ? bpf_lsm_file_permission+0x9/0x20 [ 278.007599][T14886] ? security_file_permission+0x75/0x260 [ 278.007617][T14886] ? rw_verify_area+0x255/0x4d0 [ 278.007636][T14886] vfs_writev+0x33c/0x990 [ 278.007665][T14886] ? __pfx_vfs_writev+0x10/0x10 [ 278.007698][T14886] ? __fget_files+0x2a/0x420 [ 278.007724][T14886] ? __fget_files+0x3a0/0x420 [ 278.007746][T14886] ? __fget_files+0x2a/0x420 [ 278.007776][T14886] do_writev+0x154/0x2e0 [ 278.007800][T14886] ? __pfx_do_writev+0x10/0x10 [ 278.007829][T14886] do_syscall_64+0x14d/0xf80 [ 278.007852][T14886] ? trace_irq_disable+0x3b/0x150 [ 278.007874][T14886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.007892][T14886] ? clear_bhb_loop+0x40/0x90 [ 278.007913][T14886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.007930][T14886] RIP: 0033:0x7f7f9a59c799 [ 278.007947][T14886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.007962][T14886] RSP: 002b:00007f7f9b439028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 278.007981][T14886] RAX: ffffffffffffffda RBX: 00007f7f9a815fa0 RCX: 00007f7f9a59c799 [ 278.007994][T14886] RDX: 0000000000000001 RSI: 0000200000001200 RDI: 0000000000000004 [ 278.008005][T14886] RBP: 00007f7f9b439090 R08: 0000000000000000 R09: 0000000000000000 [ 278.008015][T14886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.008025][T14886] R13: 00007f7f9a816038 R14: 00007f7f9a815fa0 R15: 00007ffea1966068 [ 278.008052][T14886] [ 278.421979][T14889] syzkaller0: entered promiscuous mode [ 278.427489][T14889] syzkaller0: entered allmulticast mode [ 278.624071][T14696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.821351][T14906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.961165][T14917] tipc: Started in network mode [ 278.993926][T14917] tipc: Node identity e2c2296c84a1, cluster identity 4711 [ 279.037339][T14917] tipc: Enabled bearer , priority 0 [ 279.092169][T14931] FAULT_INJECTION: forcing a failure. [ 279.092169][T14931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.105768][T14931] CPU: 1 UID: 0 PID: 14931 Comm: syz.2.2825 Not tainted syzkaller #0 PREEMPT(full) [ 279.105793][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 279.105803][T14931] Call Trace: [ 279.105811][T14931] [ 279.105818][T14931] dump_stack_lvl+0xe8/0x150 [ 279.105847][T14931] should_fail_ex+0x412/0x560 [ 279.105874][T14931] _copy_to_user+0x31/0xb0 [ 279.105900][T14931] simple_read_from_buffer+0xe1/0x170 [ 279.105938][T14931] proc_fail_nth_read+0x1bb/0x230 [ 279.105965][T14931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.105991][T14931] ? rw_verify_area+0x2a6/0x4d0 [ 279.106009][T14931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.106033][T14931] vfs_read+0x20c/0xa70 [ 279.106049][T14931] ? fdget_pos+0x246/0x320 [ 279.106077][T14931] ? __pfx___mutex_lock+0x10/0x10 [ 279.106103][T14931] ? __pfx_vfs_read+0x10/0x10 [ 279.106122][T14931] ? __fget_files+0x2a/0x420 [ 279.106150][T14931] ? __fget_files+0x3a0/0x420 [ 279.106170][T14931] ? __fget_files+0x2a/0x420 [ 279.106198][T14931] ksys_read+0x150/0x270 [ 279.106218][T14931] ? __pfx_ksys_read+0x10/0x10 [ 279.106246][T14931] do_syscall_64+0x14d/0xf80 [ 279.106269][T14931] ? trace_irq_disable+0x3b/0x150 [ 279.106291][T14931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.106309][T14931] ? clear_bhb_loop+0x40/0x90 [ 279.106329][T14931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.106346][T14931] RIP: 0033:0x7f7f9a55cfce [ 279.106363][T14931] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 279.106377][T14931] RSP: 002b:00007f7f9b438fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 279.106395][T14931] RAX: ffffffffffffffda RBX: 00007f7f9b4396c0 RCX: 00007f7f9a55cfce [ 279.106407][T14931] RDX: 000000000000000f RSI: 00007f7f9b4390a0 RDI: 0000000000000005 [ 279.106418][T14931] RBP: 00007f7f9b439090 R08: 0000000000000000 R09: 0000000000000000 [ 279.106427][T14931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.106437][T14931] R13: 00007f7f9a816038 R14: 00007f7f9a815fa0 R15: 00007ffea1966068 [ 279.106466][T14931] [ 279.357097][T14900] tipc: Disabling bearer [ 279.427608][T14936] lo speed is unknown, defaulting to 1000 [ 279.435683][T14936] wlan1 speed is unknown, defaulting to 1000 [ 279.443774][T14936] lo speed is unknown, defaulting to 1000 [ 279.505243][T14696] veth0_vlan: entered promiscuous mode [ 279.519252][T14696] veth1_vlan: entered promiscuous mode [ 279.555527][T14696] veth0_macvtap: entered promiscuous mode [ 279.569558][T14696] veth1_macvtap: entered promiscuous mode [ 279.611793][T14943] __nla_validate_parse: 10 callbacks suppressed [ 279.611812][T14943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2826'. [ 279.634897][T14696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.652455][T14944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2828'. [ 279.699717][T14696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.751564][T14514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.782582][T14514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.792784][T14514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.811064][T14514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.920639][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5940 ms [ 279.928672][ C0] lec:lec_tx_timeout: lec0 [ 279.933561][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 279.984741][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2833'. [ 279.995277][T14958] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2833'. [ 280.002982][ T51] Bluetooth: hci5: command tx timeout [ 280.134434][T14962] bond12: option min_links: invalid value (18446744073709551612) [ 280.142319][T14962] bond12: option min_links: allowed values 0 - 2147483647 [ 280.191481][T14962] bond12 (unregistering): Released all slaves [ 280.224251][T14963] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 280.279460][T14960] lo speed is unknown, defaulting to 1000 [ 280.302236][T14968] bond9: (slave bond_slave_1): Device is not our slave [ 280.309202][T14968] bond9: option active_slave: invalid value (bond_slave_1) [ 280.319162][T14968] bond9 (unregistering): Released all slaves [ 280.356993][T14960] wlan1 speed is unknown, defaulting to 1000 [ 280.365456][T14510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.381941][T14510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.473694][T14960] lo speed is unknown, defaulting to 1000 [ 280.539925][T14513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.573415][T14513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.676546][T14980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2840'. [ 280.747470][T14980] tc_dump_action: action bad kind [ 280.794611][T14978] siw: device registration error -23 [ 280.933556][T14998] xt_hashlimit: size too large, truncated to 1048576 [ 281.937677][T15020] SET target dimension over the limit! [ 281.961730][T15023] lo speed is unknown, defaulting to 1000 [ 281.974988][T15025] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2849'. [ 281.979380][T15023] wlan1 speed is unknown, defaulting to 1000 [ 282.017616][T15023] lo speed is unknown, defaulting to 1000 [ 282.080760][ T51] Bluetooth: hci5: command tx timeout [ 282.761753][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2860'. [ 282.887538][T15064] netlink: 'syz.4.2862': attribute type 6 has an invalid length. [ 282.915539][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2861'. [ 282.949041][T15064] netlink: 'syz.4.2862': attribute type 1 has an invalid length. [ 282.961405][T15064] nbd: error processing sock list [ 283.001057][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.014966][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.023987][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.032156][T14514] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.052054][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2861'. [ 283.070837][T14514] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.092499][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.102907][T14514] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.126491][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.152986][T14514] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.360165][T15071] lo speed is unknown, defaulting to 1000 [ 283.391677][T15071] wlan1 speed is unknown, defaulting to 1000 [ 283.417792][T15071] lo speed is unknown, defaulting to 1000 [ 283.469062][ T5828] team0: Port device syz_tun removed [ 283.721947][T15102] netlink: 'syz.3.2872': attribute type 8 has an invalid length. [ 283.735909][T15102] sch_fq: defrate 0 ignored. [ 283.772683][T15103] bridge_slave_0: left promiscuous mode [ 283.778681][T15103] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.830590][T15103] bridge_slave_1: left allmulticast mode [ 283.836272][T15103] bridge_slave_1: left promiscuous mode [ 283.844088][T15103] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.858208][T15103] bond0: (slave bond_slave_0): Releasing backup interface [ 283.873089][T15103] bond0: (slave bond_slave_1): Releasing backup interface [ 283.897249][T15103] team0: Port device team_slave_0 removed [ 283.907401][T15103] team0: Port device team_slave_1 removed [ 283.925693][T15103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.936550][T15112] xt_TPROXY: Can be used only with -p tcp or -p udp [ 283.947190][T15103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.957525][T15103] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 283.997067][T15109] team0: No ports can be present during mode change [ 284.076511][T15108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2874'. [ 284.304713][T15130] netlink: 'syz.0.2880': attribute type 8 has an invalid length. [ 284.490582][T15071] chnl_net:caif_netlink_parms(): no params data found [ 284.892648][T15071] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.917498][T15071] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.940312][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 284.948398][ C0] lec:lec_tx_timeout: lec0 [ 284.953015][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 284.959599][T15071] bridge_slave_0: entered allmulticast mode [ 284.972479][T15071] bridge_slave_0: entered promiscuous mode [ 284.989375][T15166] netlink: 'syz.1.2888': attribute type 1 has an invalid length. [ 284.999650][T15071] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.012731][T15071] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.021430][T15071] bridge_slave_1: entered allmulticast mode [ 285.040246][T15071] bridge_slave_1: entered promiscuous mode [ 285.056979][T15166] erspan1: entered allmulticast mode [ 285.149863][T15183] __nla_validate_parse: 1 callbacks suppressed [ 285.149882][T15183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2891'. [ 285.200353][ T51] Bluetooth: hci4: command tx timeout [ 285.224438][T15071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.244211][T15071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.341994][T15071] team0: Port device team_slave_0 added [ 285.382106][T15071] team0: Port device team_slave_1 added [ 285.439495][T15195] tipc: Enabled bearer , priority 0 [ 285.476528][T15195] syzkaller0: entered promiscuous mode [ 285.490657][T15195] syzkaller0: entered allmulticast mode [ 285.528160][T15195] tipc: Resetting bearer [ 285.546739][T15071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.560208][T15071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.589258][T15071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.605023][T15071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.622411][T15071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.650001][T15071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.680782][T15208] netlink: 'syz.0.2898': attribute type 4 has an invalid length. [ 285.722235][T15213] netlink: 'syz.3.2902': attribute type 10 has an invalid length. [ 285.731422][T15205] tipc: Resetting bearer [ 285.757550][T15205] tipc: Disabling bearer [ 285.775051][T15213] team0: Port device dummy0 added [ 285.886850][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2904'. [ 285.891890][T15071] hsr_slave_0: entered promiscuous mode [ 285.917639][T15071] hsr_slave_1: entered promiscuous mode [ 285.939728][T15071] debugfs: 'hsr0' already exists in 'hsr' [ 285.966234][T15071] Cannot create hsr debugfs directory [ 285.975756][T15232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2906'. [ 286.107472][T15240] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2909'. [ 286.196487][T15244] xt_hashlimit: max too large, truncated to 1048576 [ 286.361974][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'. [ 286.542787][T15261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2918'. [ 286.570665][T14511] batadv1: left promiscuous mode [ 286.628699][T15265] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2920'. [ 286.653365][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2920'. [ 286.662483][T15265] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2920'. [ 286.728174][T15271] netlink: 'syz.1.2921': attribute type 58 has an invalid length. [ 286.890159][T15281] siw: device registration error -23 [ 287.111889][T15071] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 287.143696][T15071] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 287.204342][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2930'. [ 287.216474][T15071] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 287.250980][T15071] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 287.280342][ T51] Bluetooth: hci4: command tx timeout [ 287.512911][T15071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.567077][T15071] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.589347][T14514] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.596548][T14514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.637062][T14501] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.644270][T14501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.761916][T15344] syzkaller0: entered promiscuous mode [ 287.770902][T15344] syzkaller0: entered allmulticast mode [ 287.838833][T15348] FAULT_INJECTION: forcing a failure. [ 287.838833][T15348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.854651][T15348] CPU: 1 UID: 0 PID: 15348 Comm: syz.4.2942 Not tainted syzkaller #0 PREEMPT(full) [ 287.854677][T15348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.854689][T15348] Call Trace: [ 287.854696][T15348] [ 287.854703][T15348] dump_stack_lvl+0xe8/0x150 [ 287.854733][T15348] should_fail_ex+0x412/0x560 [ 287.854760][T15348] _copy_to_user+0x31/0xb0 [ 287.854787][T15348] bpf_test_finish+0x1db/0x6b0 [ 287.854819][T15348] ? __pfx_bpf_test_finish+0x10/0x10 [ 287.854845][T15348] ? _copy_from_user+0x94/0xb0 [ 287.854870][T15348] ? bpf_test_init+0x113/0x150 [ 287.854893][T15348] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 287.854931][T15348] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 287.854959][T15348] ? __fget_files+0x2a/0x420 [ 287.854986][T15348] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 287.855008][T15348] bpf_prog_test_run+0x2c7/0x340 [ 287.855026][T15348] __sys_bpf+0x643/0x950 [ 287.855052][T15348] ? __pfx___sys_bpf+0x10/0x10 [ 287.855089][T15348] ? ksys_write+0x242/0x270 [ 287.855110][T15348] ? __pfx_ksys_write+0x10/0x10 [ 287.855135][T15348] __x64_sys_bpf+0x7c/0x90 [ 287.855169][T15348] do_syscall_64+0x14d/0xf80 [ 287.855192][T15348] ? trace_irq_disable+0x3b/0x150 [ 287.855214][T15348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.855231][T15348] ? clear_bhb_loop+0x40/0x90 [ 287.855250][T15348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.855267][T15348] RIP: 0033:0x7f762219c799 [ 287.855289][T15348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.855304][T15348] RSP: 002b:00007f7622fba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.855323][T15348] RAX: ffffffffffffffda RBX: 00007f7622415fa0 RCX: 00007f762219c799 [ 287.855335][T15348] RDX: 0000000000000019 RSI: 0000200000000600 RDI: 000000000000000a [ 287.855345][T15348] RBP: 00007f7622fba090 R08: 0000000000000000 R09: 0000000000000000 [ 287.855355][T15348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.855366][T15348] R13: 00007f7622416038 R14: 00007f7622415fa0 R15: 00007ffee83e1078 [ 287.855394][T15348] [ 288.121399][T15071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.185357][T15354] siw: device registration error -23 [ 288.210034][T15071] veth0_vlan: entered promiscuous mode [ 288.224579][T15071] veth1_vlan: entered promiscuous mode [ 288.352253][T15071] veth0_macvtap: entered promiscuous mode [ 288.384686][T15071] veth1_macvtap: entered promiscuous mode [ 288.419663][T15071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.458807][T15071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.529780][T14510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.581040][T14510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.600369][T14510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.609137][T14510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.788054][T15383] FAULT_INJECTION: forcing a failure. [ 288.788054][T15383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.820779][T15383] CPU: 1 UID: 0 PID: 15383 Comm: syz.4.2953 Not tainted syzkaller #0 PREEMPT(full) [ 288.820804][T15383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 288.820814][T15383] Call Trace: [ 288.820821][T15383] [ 288.820829][T15383] dump_stack_lvl+0xe8/0x150 [ 288.820857][T15383] should_fail_ex+0x412/0x560 [ 288.820883][T15383] _copy_to_user+0x31/0xb0 [ 288.820910][T15383] bpf_test_finish+0x22c/0x6b0 [ 288.820941][T15383] ? __pfx_bpf_test_finish+0x10/0x10 [ 288.820967][T15383] ? _copy_from_user+0x94/0xb0 [ 288.820991][T15383] ? bpf_test_init+0x113/0x150 [ 288.821013][T15383] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 288.821048][T15383] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 288.821073][T15383] ? __fget_files+0x2a/0x420 [ 288.821099][T15383] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 288.821122][T15383] bpf_prog_test_run+0x2c7/0x340 [ 288.821143][T15383] __sys_bpf+0x643/0x950 [ 288.821169][T15383] ? __pfx___sys_bpf+0x10/0x10 [ 288.821207][T15383] ? ksys_write+0x242/0x270 [ 288.821233][T15383] ? __pfx_ksys_write+0x10/0x10 [ 288.821258][T15383] __x64_sys_bpf+0x7c/0x90 [ 288.821282][T15383] do_syscall_64+0x14d/0xf80 [ 288.821305][T15383] ? trace_irq_disable+0x3b/0x150 [ 288.821328][T15383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.821345][T15383] ? clear_bhb_loop+0x40/0x90 [ 288.821366][T15383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.821382][T15383] RIP: 0033:0x7f762219c799 [ 288.821399][T15383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.821413][T15383] RSP: 002b:00007f7622fba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.821432][T15383] RAX: ffffffffffffffda RBX: 00007f7622415fa0 RCX: 00007f762219c799 [ 288.821445][T15383] RDX: 0000000000000019 RSI: 0000200000000600 RDI: 000000000000000a [ 288.821456][T15383] RBP: 00007f7622fba090 R08: 0000000000000000 R09: 0000000000000000 [ 288.821467][T15383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.821477][T15383] R13: 00007f7622416038 R14: 00007f7622415fa0 R15: 00007ffee83e1078 [ 288.821505][T15383] [ 289.201388][T15391] x_tables: (null)_tables: pkttype.0 match: invalid size 8 (kernel) != (user) 16 [ 289.216403][T14511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.270331][T14511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.320691][T14511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.328891][T14511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.354037][T15390] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 289.361555][ T51] Bluetooth: hci4: command tx timeout [ 289.524283][T15418] netlink: 'syz.0.2958': attribute type 8 has an invalid length. [ 289.833097][T15434] 8021q: VLANs not supported on sit0 [ 289.960311][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 289.968411][ C0] lec:lec_tx_timeout: lec0 [ 289.973186][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 290.069765][T15435] ve: renamed from veth0_vlan [ 290.110132][T15446] FAULT_INJECTION: forcing a failure. [ 290.110132][T15446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.159754][T15446] CPU: 0 UID: 0 PID: 15446 Comm: syz.4.2965 Not tainted syzkaller #0 PREEMPT(full) [ 290.159781][T15446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.159792][T15446] Call Trace: [ 290.159799][T15446] [ 290.159805][T15446] dump_stack_lvl+0xe8/0x150 [ 290.159832][T15446] should_fail_ex+0x412/0x560 [ 290.159856][T15446] _copy_to_user+0x31/0xb0 [ 290.159881][T15446] bpf_test_finish+0x53c/0x6b0 [ 290.159911][T15446] ? __pfx_bpf_test_finish+0x10/0x10 [ 290.159936][T15446] ? _copy_from_user+0x94/0xb0 [ 290.159959][T15446] ? bpf_test_init+0x113/0x150 [ 290.159979][T15446] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 290.160015][T15446] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 290.160048][T15446] ? __fget_files+0x2a/0x420 [ 290.160076][T15446] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 290.160099][T15446] bpf_prog_test_run+0x2c7/0x340 [ 290.160117][T15446] __sys_bpf+0x643/0x950 [ 290.160141][T15446] ? __pfx___sys_bpf+0x10/0x10 [ 290.160178][T15446] ? ksys_write+0x242/0x270 [ 290.160199][T15446] ? __pfx_ksys_write+0x10/0x10 [ 290.160225][T15446] __x64_sys_bpf+0x7c/0x90 [ 290.160248][T15446] do_syscall_64+0x14d/0xf80 [ 290.160269][T15446] ? trace_irq_disable+0x3b/0x150 [ 290.160288][T15446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.160304][T15446] ? clear_bhb_loop+0x40/0x90 [ 290.160322][T15446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.160339][T15446] RIP: 0033:0x7f762219c799 [ 290.160355][T15446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.160369][T15446] RSP: 002b:00007f7622fba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.160387][T15446] RAX: ffffffffffffffda RBX: 00007f7622415fa0 RCX: 00007f762219c799 [ 290.160399][T15446] RDX: 0000000000000019 RSI: 0000200000000600 RDI: 000000000000000a [ 290.160410][T15446] RBP: 00007f7622fba090 R08: 0000000000000000 R09: 0000000000000000 [ 290.160420][T15446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.160429][T15446] R13: 00007f7622416038 R14: 00007f7622415fa0 R15: 00007ffee83e1078 [ 290.160453][T15446] [ 290.428729][T15458] __nla_validate_parse: 20 callbacks suppressed [ 290.428748][T15458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2970'. [ 290.466609][T15461] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2968'. [ 290.485045][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2970'. [ 290.527169][T15458] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2970'. [ 290.797091][T15484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2975'. [ 290.843003][T15488] netlink: 'syz.0.2977': attribute type 1 has an invalid length. [ 290.860399][T15488] netlink: 'syz.0.2977': attribute type 2 has an invalid length. [ 290.889245][T15488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2977'. [ 291.298979][T15519] netlink: 'syz.3.2984': attribute type 4 has an invalid length. [ 291.350122][T15528] netlink: 'syz.3.2984': attribute type 4 has an invalid length. [ 291.424392][ T5880] lo speed is unknown, defaulting to 1000 [ 291.432569][ T5880] syz0: Port: 1 Link ACTIVE [ 291.447656][ T51] Bluetooth: hci4: command tx timeout [ 291.458973][ T5809] lo speed is unknown, defaulting to 1000 [ 291.611223][T15515] delete_channel: no stack [ 291.667623][T15543] siw: device registration error -23 [ 292.007109][T15572] netlink: 'syz.2.2996': attribute type 2 has an invalid length. [ 292.015851][ T5489] ve: left promiscuous mode [ 292.049753][ T5489] ve: entered promiscuous mode [ 292.097174][T15575] IPv6: addrconf: prefix option has invalid lifetime [ 292.124510][T15579] IPv6: addrconf: prefix option has invalid lifetime [ 292.133739][T15572] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 292.195836][T15572] netlink: 'syz.2.2996': attribute type 1 has an invalid length. [ 292.211289][T15572] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2996'. [ 292.243058][T15572] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2996'. [ 292.278810][T15586] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2999'. [ 292.287914][T15586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2999'. [ 292.578566][T15604] siw: device registration error -23 [ 292.661298][T15618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.668581][T15618] IPv6: NLM_F_CREATE should be set when creating new route [ 292.839760][T15626] lo speed is unknown, defaulting to 1000 [ 292.883914][T15626] wlan1 speed is unknown, defaulting to 1000 [ 292.955998][T15626] lo speed is unknown, defaulting to 1000 [ 293.505819][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 293.516123][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 293.531113][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 293.555423][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 293.567067][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 293.635581][T15661] siw: device registration error -23 [ 293.682941][T15667] lo speed is unknown, defaulting to 1000 [ 293.745177][T15667] wlan1 speed is unknown, defaulting to 1000 [ 293.819609][T15667] lo speed is unknown, defaulting to 1000 [ 294.041190][ T5821] team0: Port device syz_tun removed [ 294.332509][T15691] lo speed is unknown, defaulting to 1000 [ 294.385584][T15691] wlan1 speed is unknown, defaulting to 1000 [ 294.484958][T15691] lo speed is unknown, defaulting to 1000 [ 294.887535][T15721] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.024553][T15721] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.154410][T15721] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.202175][T15667] chnl_net:caif_netlink_parms(): no params data found [ 295.282273][T15721] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.393514][T15726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.536746][T15667] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.557678][T15667] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.566987][T15667] bridge_slave_0: entered allmulticast mode [ 295.574890][T15667] bridge_slave_0: entered promiscuous mode [ 295.584247][T15667] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.591953][T15667] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.599484][T15667] bridge_slave_1: entered allmulticast mode [ 295.611043][ T51] Bluetooth: hci3: command tx timeout [ 295.619695][T15749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3032'. [ 295.643135][T15667] bridge_slave_1: entered promiscuous mode [ 295.737778][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3032'. [ 295.760299][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 295.760595][T14510] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.768314][ C0] lec:lec_tx_timeout: lec0 [ 295.776815][T15749] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3032'. [ 295.781800][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 295.967669][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3035'. [ 295.984570][T15667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.993697][T14509] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.006286][T14509] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.068059][T15667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.092111][T14509] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.163440][T15667] team0: Port device team_slave_0 added [ 296.175870][T15667] team0: Port device team_slave_1 added [ 296.228152][T15667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.250395][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.318864][T15667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.355491][T15667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.362825][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.381084][T15778] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3038'. [ 296.410365][T15667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.477300][T15767] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 296.539153][T15667] hsr_slave_0: entered promiscuous mode [ 296.546358][T15667] hsr_slave_1: entered promiscuous mode [ 296.555400][T15667] debugfs: 'hsr0' already exists in 'hsr' [ 296.561960][T15667] Cannot create hsr debugfs directory [ 296.835196][T15790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3043'. [ 296.864091][T15794] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3045'. [ 296.948985][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3043'. [ 296.990532][T15795] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3043'. [ 297.074753][T15801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3049'. [ 297.462666][T15804] syzkaller0: entered promiscuous mode [ 297.468177][T15804] syzkaller0: entered allmulticast mode [ 297.578500][T15815] ip6erspan0: entered promiscuous mode [ 297.630462][T15815] ip6erspan0: entered allmulticast mode [ 297.682228][ T51] Bluetooth: hci3: command tx timeout [ 299.219534][T15844] tipc: Started in network mode [ 299.225056][T15844] tipc: Node identity 12a8353fdae1, cluster identity 4711 [ 299.232671][T15844] tipc: Enabled bearer , priority 0 [ 299.241378][T15847] syzkaller0: entered promiscuous mode [ 299.247272][T15847] syzkaller0: entered allmulticast mode [ 299.383839][T15858] tipc: Resetting bearer [ 299.465865][T15858] tipc: Disabling bearer [ 299.723561][T15667] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.762787][ T51] Bluetooth: hci3: command tx timeout [ 299.776637][T15667] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.832175][T15667] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.855714][T15667] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 300.082534][T15898] syzkaller0: entered promiscuous mode [ 300.097687][T15898] syzkaller0: entered allmulticast mode [ 300.131727][T15667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.219262][T15667] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.238968][T14511] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.246144][T14511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.295661][T14511] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.302921][T14511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.567660][T15667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.607582][T15667] veth0_vlan: entered promiscuous mode [ 300.619993][T15667] veth1_vlan: entered promiscuous mode [ 300.656102][T15667] veth0_macvtap: entered promiscuous mode [ 300.666713][T15667] veth1_macvtap: entered promiscuous mode [ 300.697529][T15667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.725607][T15667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.750948][T14510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.761725][T14510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.772000][T14510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.783604][T14510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.810522][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 300.818646][ C0] lec:lec_tx_timeout: lec0 [ 300.823550][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 301.212605][T15943] x_tables: duplicate entry at hook 3 [ 301.373068][T15949] bridge0: entered promiscuous mode [ 301.379013][T15949] vlan2: entered promiscuous mode [ 301.840559][ T51] Bluetooth: hci3: command tx timeout [ 303.374172][T15926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.478376][T14511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.501335][T14511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.545939][T15952] __nla_validate_parse: 9 callbacks suppressed [ 303.545958][T15952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3085'. [ 303.566302][T14511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.584519][T14511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.598045][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3085'. [ 303.630476][T15952] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3085'. [ 303.894651][T14511] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.914375][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.934771][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.944404][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.952970][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.961443][T14511] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.970152][T14511] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.978916][T14511] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.987486][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.100759][T15978] lo speed is unknown, defaulting to 1000 [ 304.128138][T15978] wlan1 speed is unknown, defaulting to 1000 [ 304.153867][T15983] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3089'. [ 304.184612][T15978] lo speed is unknown, defaulting to 1000 [ 304.191388][T15966] lo speed is unknown, defaulting to 1000 [ 304.208025][T15966] wlan1 speed is unknown, defaulting to 1000 [ 304.773826][T15966] lo speed is unknown, defaulting to 1000 [ 305.181682][T16024] siw: device registration error -23 [ 305.379929][T16037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3107'. [ 305.389940][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3106'. [ 305.394310][T16037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3107'. [ 305.450172][T16040] netlink: 'syz.0.3106': attribute type 1 has an invalid length. [ 305.556219][T16037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3107'. [ 305.601520][T15978] chnl_net:caif_netlink_parms(): no params data found [ 305.834466][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 305.842818][ C0] lec:lec_tx_timeout: lec0 [ 305.848172][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 306.066402][T16071] siw: device registration error -23 [ 306.275965][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 307.453256][ T5178] block nbd2: Possible stuck request ffff888026d08000: control (read@0,1024B). Runtime 90 seconds [ 307.463997][ T5178] block nbd2: Possible stuck request ffff888026d08200: control (read@1024,1024B). Runtime 90 seconds [ 307.475293][ T5178] block nbd2: Possible stuck request ffff888026d08400: control (read@2048,1024B). Runtime 90 seconds [ 307.492463][ T5178] block nbd2: Possible stuck request ffff888026d08600: control (read@3072,1024B). Runtime 90 seconds [ 307.607321][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3120'. [ 307.643669][T16082] lo speed is unknown, defaulting to 1000 [ 307.678460][T16082] wlan1 speed is unknown, defaulting to 1000 [ 307.707886][T16082] lo speed is unknown, defaulting to 1000 [ 307.736772][T16089] lo speed is unknown, defaulting to 1000 [ 307.807852][T16089] wlan1 speed is unknown, defaulting to 1000 [ 307.894733][T15978] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.910928][T15978] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.942466][T15978] bridge_slave_0: entered allmulticast mode [ 307.970776][T15978] bridge_slave_0: entered promiscuous mode [ 307.998158][T15978] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.017364][T15978] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.028713][T15978] bridge_slave_1: entered allmulticast mode [ 308.037082][T15978] bridge_slave_1: entered promiscuous mode [ 308.099777][T15978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.126573][T15978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.222080][T15978] team0: Port device team_slave_0 added [ 308.233564][T15978] team0: Port device team_slave_1 added [ 308.262329][T16089] lo speed is unknown, defaulting to 1000 [ 308.341410][T15978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.358699][T15978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.402456][T15978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.421158][T15978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.438424][T15978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.465190][T15978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.583175][T16123] lo speed is unknown, defaulting to 1000 [ 308.595937][T16127] __nla_validate_parse: 6 callbacks suppressed [ 308.595950][T16127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3127'. [ 308.612917][T16127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3127'. [ 308.632918][T16123] wlan1 speed is unknown, defaulting to 1000 [ 308.670075][T15978] hsr_slave_0: entered promiscuous mode [ 308.677178][T15978] hsr_slave_1: entered promiscuous mode [ 308.700109][T15978] debugfs: 'hsr0' already exists in 'hsr' [ 308.713534][T15978] Cannot create hsr debugfs directory [ 308.719318][T16123] lo speed is unknown, defaulting to 1000 [ 309.068754][T16134] macsec1: entered allmulticast mode [ 309.080437][T16134] macsec0: entered allmulticast mode [ 309.086340][T16134] veth1_macvtap: entered allmulticast mode [ 309.102886][T16134] macsec0: left allmulticast mode [ 309.112878][T16134] veth1_macvtap: left allmulticast mode [ 309.441158][T15978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.452838][T15978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.647664][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3130'. [ 309.671846][T15978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.690530][T15978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.796384][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3133'. [ 309.801475][T16145] ip6erspan1: entered allmulticast mode [ 309.826261][T15978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.835127][T16149] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3134'. [ 309.837934][T15978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.957666][T15978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.987435][T15978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.169779][T16163] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 310.193064][T16160] team0 (unregistering): Port device team_slave_0 removed [ 310.218819][T16160] team0 (unregistering): Port device team_slave_1 removed [ 310.319405][T16149] IPVS: Unknown mcast interface: veth0_to_ýÿnd [ 310.350887][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3142'. [ 310.389312][T15978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.414001][T15978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.456966][T15978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.473510][T16178] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 310.495353][T15978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.715868][T15978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.805382][T15978] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.856932][T14511] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.864140][T14511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.870296][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 310.879317][ C0] lec:lec_tx_timeout: lec0 [ 310.884183][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 310.900313][T14512] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.907444][T14512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.924460][T16214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3152'. [ 310.935746][T16214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3152'. [ 310.983076][T16218] lo speed is unknown, defaulting to 1000 [ 311.004347][T16218] wlan1 speed is unknown, defaulting to 1000 [ 311.027197][T16218] lo speed is unknown, defaulting to 1000 [ 311.177077][T16230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3154'. [ 311.243396][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'. [ 311.384428][T15978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.516841][T15978] veth0_vlan: entered promiscuous mode [ 311.545426][T15978] veth1_vlan: entered promiscuous mode [ 311.625534][T15978] veth0_macvtap: entered promiscuous mode [ 311.649777][T15978] veth1_macvtap: entered promiscuous mode [ 311.725399][T15978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.796008][T15978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.877018][T14512] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.887729][T14512] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.906146][T14512] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.918770][T14512] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.226304][T14513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.259783][T14513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.387874][T14515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.416560][T14515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.504324][T16278] lo: Caught tx_queue_len zero misconfig [ 312.702307][T16294] siw: device registration error -23 [ 314.037507][T16359] netlink: 'syz.0.3187': attribute type 16 has an invalid length. [ 314.046525][T16359] netlink: 'syz.0.3187': attribute type 17 has an invalid length. [ 314.164460][T16367] __nla_validate_parse: 6 callbacks suppressed [ 314.164481][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 314.206192][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'. [ 314.232721][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'. [ 314.306963][T16372] lo speed is unknown, defaulting to 1000 [ 314.332463][T16377] netlink: 'syz.0.3191': attribute type 1 has an invalid length. [ 314.455474][T16372] wlan1 speed is unknown, defaulting to 1000 [ 314.472979][T16372] lo speed is unknown, defaulting to 1000 [ 314.704292][T16393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3194'. [ 314.730560][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3194'. [ 314.750651][T16393] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3194'. [ 315.377308][T16430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3207'. [ 315.398276][T16430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3207'. [ 315.426504][T16430] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3207'. [ 315.498630][T16439] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3209'. [ 315.890455][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 315.898541][ C0] lec:lec_tx_timeout: lec0 [ 315.903790][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 315.995055][T16463] tap0: tun_chr_ioctl cmd 1074025692 [ 316.146379][T16480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.153659][T16480] IPv6: NLM_F_CREATE should be set when creating new route [ 316.245861][T16484] rdma_op ffff888094eb79f0 conn xmit_rdma 0000000000000000 [ 316.513844][T16499] 8021q: VLANs not supported on nlmon0 [ 317.157226][T16533] netlink: 'syz.0.3235': attribute type 27 has an invalid length. [ 317.194001][T16533] netlink: 'syz.0.3235': attribute type 1 has an invalid length. [ 317.226069][T16533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.267413][T16539] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 317.830649][T16585] xt_hashlimit: size too large, truncated to 1048576 [ 317.989301][T14515] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.999977][T14515] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.024145][T14515] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.051312][T16587] lo speed is unknown, defaulting to 1000 [ 318.116295][T14515] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.222217][T16587] wlan1 speed is unknown, defaulting to 1000 [ 318.261893][T16587] lo speed is unknown, defaulting to 1000 [ 318.664170][T16640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.735527][T16637] syzkaller0: entered promiscuous mode [ 318.751402][T16637] syzkaller0: entered allmulticast mode [ 319.178975][T16664] __nla_validate_parse: 25 callbacks suppressed [ 319.178995][T16664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3277'. [ 319.939848][T16680] netlink: 684 bytes leftover after parsing attributes in process `syz.3.3280'. [ 319.969598][T16680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.200641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.210003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.620547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.628831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.726113][T16729] lo speed is unknown, defaulting to 1000 [ 320.747402][T16729] wlan1 speed is unknown, defaulting to 1000 [ 320.770745][T16729] lo speed is unknown, defaulting to 1000 [ 320.910299][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 320.918427][ C0] lec:lec_tx_timeout: lec0 [ 320.923029][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 321.274274][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.284214][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.292731][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.309277][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.317036][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.379975][T16741] netlink: 'syz.1.3295': attribute type 1 has an invalid length. [ 321.387908][T16741] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3295'. [ 321.440376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.448586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.506556][T16738] lo speed is unknown, defaulting to 1000 [ 321.533996][T16743] netlink: 'syz.2.3296': attribute type 1 has an invalid length. [ 321.542364][T16738] wlan1 speed is unknown, defaulting to 1000 [ 321.659250][T16743] bond1: entered promiscuous mode [ 321.698379][T16743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.822089][T16738] lo speed is unknown, defaulting to 1000 [ 321.900442][T16743] bond1: (slave bridge2): making interface the new active one [ 321.916067][T16743] bridge2: entered promiscuous mode [ 321.934515][T16743] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 322.297601][T16764] syzkaller0: entered promiscuous mode [ 322.322495][T16764] syzkaller0: entered allmulticast mode [ 322.383425][T16765] macsec1: entered promiscuous mode [ 322.996343][T16738] chnl_net:caif_netlink_parms(): no params data found [ 323.050192][T16778] netlink: 'syz.2.3304': attribute type 11 has an invalid length. [ 323.084487][T16779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3304'. [ 323.120613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.128864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.168662][T16738] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.176117][T16738] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.183867][T16738] bridge_slave_0: entered allmulticast mode [ 323.192325][T16738] bridge_slave_0: entered promiscuous mode [ 323.244361][T16738] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.251942][T16738] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.259209][T16738] bridge_slave_1: entered allmulticast mode [ 323.274430][T16738] bridge_slave_1: entered promiscuous mode [ 323.293156][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3305'. [ 323.326975][T16790] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3307'. [ 323.360387][ T51] Bluetooth: hci1: command tx timeout [ 323.383712][T16782] vxcan1: entered allmulticast mode [ 323.396291][T16738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.406405][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3307'. [ 323.409314][T16738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.425186][T16790] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3307'. [ 323.509787][T16738] team0: Port device team_slave_0 added [ 323.526624][T16738] team0: Port device team_slave_1 added [ 323.598635][T16738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.616292][T16800] netlink: 'syz.2.3308': attribute type 83 has an invalid length. [ 323.618713][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.652723][T16738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.753877][T16806] Bluetooth: MGMT ver 1.23 [ 323.763482][T16802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.825242][T16738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.836070][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.862791][T16738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.981575][T16802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.021655][T16738] hsr_slave_0: entered promiscuous mode [ 324.052939][T16738] hsr_slave_1: entered promiscuous mode [ 324.063122][T16738] debugfs: 'hsr0' already exists in 'hsr' [ 324.073998][T16738] Cannot create hsr debugfs directory [ 324.115132][T16802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.199705][T16802] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.452646][T16825] sctp: [Deprecated]: syz.0.3315 (pid 16825) Use of int in max_burst socket option deprecated. [ 324.452646][T16825] Use struct sctp_assoc_value instead [ 324.464175][T16827] netlink: 'syz.4.3316': attribute type 1 has an invalid length. [ 324.484205][T16738] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.496236][T16738] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.506425][T16738] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 324.526620][T14513] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.535679][T14513] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.546218][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3316'. [ 324.750204][T16830] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.757740][T16830] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.005579][T16830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.043523][T16830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.374998][T16738] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.385116][T16738] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.395509][T16738] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 325.433825][T14509] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.443059][ T51] Bluetooth: hci1: command tx timeout [ 325.454128][T14509] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.470850][T14509] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.479946][T14509] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.489088][T14509] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.512280][T16738] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.525878][T16738] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.538538][T16738] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 325.583733][T14509] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.614333][T16738] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.645142][T16738] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.660453][T16738] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 325.922851][T16738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 325.930316][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 325.938423][ C0] lec:lec_tx_timeout: lec0 [ 325.943757][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 325.974470][T16738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 326.006242][T16738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 326.041240][T16738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 326.150669][T16889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3330'. [ 326.171280][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3330'. [ 326.172130][T16738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.188843][T16889] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3330'. [ 326.203773][T16738] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.216465][T14510] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.223770][T14510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.246621][T14515] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.253950][T14515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.314274][T16892] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3331'. [ 326.400573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.408767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.542990][T16738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.675200][T16738] veth0_vlan: entered promiscuous mode [ 326.709187][T16738] veth1_vlan: entered promiscuous mode [ 326.746873][T16738] veth0_macvtap: entered promiscuous mode [ 326.764242][T16738] veth1_macvtap: entered promiscuous mode [ 326.788512][T16738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.807815][T16738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.826987][T14514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.853064][T14514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.863868][T14514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.890154][T14514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.007313][T14513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.018464][T14513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.055191][T16927] PKCS7: Unknown OID: [4] (bad) [ 327.060160][T16927] PKCS7: Only support pkcs7_signedData type [ 327.121867][T14513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.138839][T14513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.176531][T16934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3340'. [ 327.209550][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3340'. [ 327.224239][T16934] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3340'. [ 327.366992][T16944] lo speed is unknown, defaulting to 1000 [ 327.395461][T16944] wlan1 speed is unknown, defaulting to 1000 [ 327.404894][T16944] lo speed is unknown, defaulting to 1000 [ 327.539899][ T51] Bluetooth: hci1: command tx timeout [ 327.741296][T16955] lo speed is unknown, defaulting to 1000 [ 327.793826][T16955] wlan1 speed is unknown, defaulting to 1000 [ 327.800972][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3347'. [ 327.813767][T16955] lo speed is unknown, defaulting to 1000 [ 327.973363][T16959] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3348'. [ 328.556144][T16980] netlink: 'syz.0.3352': attribute type 7 has an invalid length. [ 328.564331][T16980] netlink: 'syz.0.3352': attribute type 8 has an invalid length. [ 328.772769][T16992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 329.141323][T17007] lo speed is unknown, defaulting to 1000 [ 329.149672][T17007] wlan1 speed is unknown, defaulting to 1000 [ 329.220343][T17007] lo speed is unknown, defaulting to 1000 [ 329.429522][T17028] netlink: 'syz.0.3367': attribute type 27 has an invalid length. [ 329.601133][ T51] Bluetooth: hci1: command tx timeout [ 329.719283][T17041] __nla_validate_parse: 9 callbacks suppressed [ 329.719302][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3371'. [ 329.764158][T17041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3371'. [ 329.877136][T17045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.884459][T17045] IPv6: NLM_F_CREATE should be set when creating new route [ 329.963228][T17049] netlink: 'syz.4.3374': attribute type 2 has an invalid length. [ 329.971427][T17049] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3374'. [ 329.991800][T17047] tipc: Started in network mode [ 329.996706][T17047] tipc: Node identity 6a6ac9e1cc4c, cluster identity 4711 [ 330.021281][T17047] tipc: Enabled bearer , priority 0 [ 330.033248][T17047] syzkaller0: entered promiscuous mode [ 330.039021][T17047] syzkaller0: entered allmulticast mode [ 330.069506][T17051] lo speed is unknown, defaulting to 1000 [ 330.075483][T17047] tipc: Resetting bearer [ 330.087642][T17046] tipc: Resetting bearer [ 330.133062][T17046] tipc: Disabling bearer [ 330.164742][T17051] wlan1 speed is unknown, defaulting to 1000 [ 330.178794][T17051] lo speed is unknown, defaulting to 1000 [ 330.203282][T17056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3377'. [ 330.232510][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3377'. [ 330.250914][T17056] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3377'. [ 330.337537][T17060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3379'. [ 330.464966][T17063] lo speed is unknown, defaulting to 1000 [ 330.495832][T17063] wlan1 speed is unknown, defaulting to 1000 [ 330.506065][T17065] veth0: entered promiscuous mode [ 330.567116][T17071] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 330.591972][T17064] veth0: left promiscuous mode [ 330.668999][ T980] IPVS: starting estimator thread 0... [ 330.698711][T17063] lo speed is unknown, defaulting to 1000 [ 330.787601][T17073] IPVS: using max 35 ests per chain, 84000 per kthread [ 330.929544][T17080] lo speed is unknown, defaulting to 1000 [ 330.950294][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 330.958383][ C0] lec:lec_tx_timeout: lec0 [ 330.963566][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 331.003599][T17080] wlan1 speed is unknown, defaulting to 1000 [ 331.117570][T17080] lo speed is unknown, defaulting to 1000 [ 331.304154][T17090] lo speed is unknown, defaulting to 1000 [ 331.496759][T17090] wlan1 speed is unknown, defaulting to 1000 [ 331.695033][T17090] lo speed is unknown, defaulting to 1000 [ 331.973628][T17108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3393'. [ 331.994512][T17108] openvswitch: netlink: Flow key attr not present in new flow. [ 332.112899][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3395'. [ 332.976431][T17131] netlink: 'syz.1.3401': attribute type 8 has an invalid length. [ 332.995599][T17120] lo speed is unknown, defaulting to 1000 [ 333.004296][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'. [ 333.033152][T17135] netlink: 'syz.1.3401': attribute type 5 has an invalid length. [ 333.040395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.049142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.062376][T17120] wlan1 speed is unknown, defaulting to 1000 [ 333.070088][T17120] lo speed is unknown, defaulting to 1000 [ 333.081538][T17131] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.090195][T17131] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.063722][T17185] lo speed is unknown, defaulting to 1000 [ 334.072729][T17185] wlan1 speed is unknown, defaulting to 1000 [ 334.082252][T17185] lo speed is unknown, defaulting to 1000 [ 334.398244][T17189] netlink: 'syz.1.3416': attribute type 32 has an invalid length. [ 334.478124][T17189] bond1: Setting coupled_control to off (0) [ 334.845516][T17198] siw: device registration error -23 [ 334.852982][T17210] siw: device registration error -23 [ 334.885175][T17207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.006415][T17208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.394663][T17225] lo speed is unknown, defaulting to 1000 [ 335.448462][T17225] wlan1 speed is unknown, defaulting to 1000 [ 335.463507][T17238] __nla_validate_parse: 6 callbacks suppressed [ 335.463524][T17238] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3428'. [ 335.483626][T17225] lo speed is unknown, defaulting to 1000 [ 335.638441][T17245] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3429'. [ 335.892920][T17255] netlink: 'syz.1.3432': attribute type 62 has an invalid length. [ 335.970356][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 335.978415][ C0] lec:lec_tx_timeout: lec0 [ 335.983411][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 336.150525][T17258] netlink: 'syz.0.3433': attribute type 1 has an invalid length. [ 336.171417][T17258] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3433'. [ 336.439937][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3440'. [ 336.449807][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3440'. [ 336.593464][T17288] veth0_to_bridge: entered promiscuous mode [ 336.609354][T17286] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.633703][T17288] veth0_to_bridge: left promiscuous mode [ 336.644840][T17288] netlink: 'syz.0.3443': attribute type 2 has an invalid length. [ 336.696742][T17293] netlink: 'syz.0.3443': attribute type 1 has an invalid length. [ 336.753484][T17288] ÃM¯”ÛÓó: entered promiscuous mode [ 336.855177][T17293] 8021q: adding VLAN 0 to HW filter on device bond3 [ 336.888604][T17288] bond3: (slave ip6gretap1): making interface the new active one [ 336.898473][T17288] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 336.917957][T17286] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.009483][T17286] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.085840][T17286] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.110852][T17310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3448'. [ 337.209320][T17319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3452'. [ 337.219150][T17319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3452'. [ 337.250497][T14515] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.285791][T14515] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.300418][T14514] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.350391][T14514] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.455432][T17327] netlink: 'syz.0.3455': attribute type 3 has an invalid length. [ 337.522353][ T5178] block nbd2: Possible stuck request ffff888026d08000: control (read@0,1024B). Runtime 120 seconds [ 337.533561][ T5178] block nbd2: Possible stuck request ffff888026d08200: control (read@1024,1024B). Runtime 120 seconds [ 337.545031][ T5178] block nbd2: Possible stuck request ffff888026d08400: control (read@2048,1024B). Runtime 120 seconds [ 337.547895][T17327] block nbd0: NBD_DISCONNECT [ 337.557399][ T5178] block nbd2: Possible stuck request ffff888026d08600: control (read@3072,1024B). Runtime 120 seconds [ 337.608998][T17327] block nbd0: Send disconnect failed -32 [ 337.616517][T17327] block nbd0: Send disconnect failed -32 [ 337.622417][T17327] block nbd0: Send disconnect failed -32 [ 337.628074][T17327] block nbd0: Send disconnect failed -32 [ 337.635436][T17327] block nbd0: Send disconnect failed -32 [ 337.719701][T17331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.739171][T17331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 337.757134][T17338] netlink: 'syz.3.3459': attribute type 3 has an invalid length. [ 337.896517][T17346] FAULT_INJECTION: forcing a failure. [ 337.896517][T17346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.923248][T17346] CPU: 0 UID: 0 PID: 17346 Comm: syz.3.3462 Not tainted syzkaller #0 PREEMPT(full) [ 337.923271][T17346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.923282][T17346] Call Trace: [ 337.923289][T17346] [ 337.923296][T17346] dump_stack_lvl+0xe8/0x150 [ 337.923326][T17346] should_fail_ex+0x412/0x560 [ 337.923351][T17346] _copy_from_user+0x2d/0xb0 [ 337.923377][T17346] ___sys_sendmsg+0x1c6/0x360 [ 337.923398][T17346] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.923443][T17346] ? __fget_files+0x2a/0x420 [ 337.923466][T17346] ? __fget_files+0x3a0/0x420 [ 337.923495][T17346] __x64_sys_sendmsg+0x1bd/0x2a0 [ 337.923514][T17346] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.923538][T17346] ? __pfx_ksys_write+0x10/0x10 [ 337.923563][T17346] do_syscall_64+0x14d/0xf80 [ 337.923586][T17346] ? trace_irq_disable+0x3b/0x150 [ 337.923629][T17346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.923646][T17346] ? clear_bhb_loop+0x40/0x90 [ 337.923666][T17346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.923681][T17346] RIP: 0033:0x7f05efb9c799 [ 337.923697][T17346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.923712][T17346] RSP: 002b:00007f05f0a69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.923730][T17346] RAX: ffffffffffffffda RBX: 00007f05efe15fa0 RCX: 00007f05efb9c799 [ 337.923742][T17346] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000008 [ 337.923754][T17346] RBP: 00007f05f0a69090 R08: 0000000000000000 R09: 0000000000000000 [ 337.923764][T17346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.923773][T17346] R13: 00007f05efe16038 R14: 00007f05efe15fa0 R15: 00007ffdc69118c8 [ 337.923800][T17346] [ 338.114550][T17340] lo speed is unknown, defaulting to 1000 [ 338.122186][T17340] wlan1 speed is unknown, defaulting to 1000 [ 338.130148][T17340] lo speed is unknown, defaulting to 1000 [ 338.312662][T17354] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3464'. [ 338.374925][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3467'. [ 338.495889][T17363] netlink: 'syz.0.3470': attribute type 11 has an invalid length. [ 338.795349][T17381] siw: device registration error -23 [ 339.155361][T17400] netlink: 'syz.2.3485': attribute type 1 has an invalid length. [ 339.429237][T17421] siw: device registration error -23 [ 339.506999][T17418] lo speed is unknown, defaulting to 1000 [ 339.560158][T17418] wlan1 speed is unknown, defaulting to 1000 [ 339.612081][T17418] lo speed is unknown, defaulting to 1000 [ 339.627274][T17432] netlink: 'syz.1.3492': attribute type 19 has an invalid length. [ 339.635341][ T51] block nbd0: Receive control failed (result -32) [ 339.658710][T17432] netlink: 'syz.1.3492': attribute type 20 has an invalid length. [ 339.831157][T17436] lo speed is unknown, defaulting to 1000 [ 339.844302][T17436] wlan1 speed is unknown, defaulting to 1000 [ 339.978310][T17447] openvswitch: netlink: Flow actions attr not present in new flow. [ 340.650002][T17458] __nla_validate_parse: 13 callbacks suppressed [ 340.650020][T17458] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3502'. [ 340.753415][T17463] lo speed is unknown, defaulting to 1000 [ 340.831786][T17463] wlan1 speed is unknown, defaulting to 1000 [ 341.013172][T17436] lo speed is unknown, defaulting to 1000 [ 341.356232][T17463] lo speed is unknown, defaulting to 1000 [ 341.672315][T17477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3506'. [ 341.696040][T17477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3506'. [ 341.720376][T17477] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3506'. [ 342.000315][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6020 ms [ 342.008416][ C0] lec:lec_tx_timeout: lec0 [ 342.015574][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 342.037331][T17479] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3507'. [ 342.353250][T17485] lo speed is unknown, defaulting to 1000 [ 342.554216][T17496] veth1_macvtap: renamed from veth0_vlan [ 342.578908][T17485] wlan1 speed is unknown, defaulting to 1000 [ 342.668181][T17485] lo speed is unknown, defaulting to 1000 [ 342.701171][T17501] netlink: 'syz.4.3510': attribute type 1 has an invalid length. [ 342.851519][T17501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.060008][T17506] bond3: (slave veth3): Enslaving as an active interface with a down link [ 343.113799][T17521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3513'. [ 343.161357][T17512] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 343.174174][T17512] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 343.383755][T17531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3517'. [ 343.399128][T17531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3517'. [ 343.408338][T17531] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3517'. [ 343.498800][T17527] lo speed is unknown, defaulting to 1000 [ 343.576111][T17527] wlan1 speed is unknown, defaulting to 1000 [ 343.618905][T17539] lo speed is unknown, defaulting to 1000 [ 343.696389][T17539] wlan1 speed is unknown, defaulting to 1000 [ 343.746945][T17551] sit0: entered allmulticast mode [ 343.893447][T17527] lo speed is unknown, defaulting to 1000 [ 344.041080][T17551] lo speed is unknown, defaulting to 1000 [ 344.116435][T17551] wlan1 speed is unknown, defaulting to 1000 [ 344.140142][ T5489] veth1_macvtap: left promiscuous mode [ 344.173429][ T5489] veth1_macvtap: entered promiscuous mode [ 344.442691][T17539] lo speed is unknown, defaulting to 1000 [ 344.735522][T17551] lo speed is unknown, defaulting to 1000 [ 345.070995][T17564] siw: device registration error -23 [ 345.236016][T17591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3530'. [ 346.162905][T17610] FAULT_INJECTION: forcing a failure. [ 346.162905][T17610] name failslab, interval 1, probability 0, space 0, times 0 [ 346.181208][T17610] CPU: 0 UID: 0 PID: 17610 Comm: syz.3.3535 Not tainted syzkaller #0 PREEMPT(full) [ 346.181233][T17610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.181243][T17610] Call Trace: [ 346.181250][T17610] [ 346.181258][T17610] dump_stack_lvl+0xe8/0x150 [ 346.181286][T17610] should_fail_ex+0x412/0x560 [ 346.181312][T17610] should_failslab+0xa8/0x100 [ 346.181335][T17610] __kmalloc_noprof+0xe8/0x760 [ 346.181354][T17610] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 346.181380][T17610] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 346.181400][T17610] ? __dev_queue_xmit+0x28b/0x3870 [ 346.181421][T17610] genl_family_rcv_msg_doit+0xd9/0x330 [ 346.181438][T17610] ? __asan_memcpy+0x40/0x70 [ 346.181457][T17610] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 346.181480][T17610] ? apparmor_capable+0x126/0x170 [ 346.181505][T17610] ? bpf_lsm_capable+0x9/0x20 [ 346.181527][T17610] ? security_capable+0x7e/0x2c0 [ 346.181552][T17610] genl_rcv_msg+0x61c/0x7a0 [ 346.181576][T17610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.181592][T17610] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 346.181617][T17610] ? __lock_acquire+0x6b5/0x2cf0 [ 346.181649][T17610] netlink_rcv_skb+0x232/0x4b0 [ 346.181672][T17610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.181691][T17610] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.181729][T17610] ? down_read+0x272/0x2e0 [ 346.181744][T17610] ? genl_rcv+0xd/0x40 [ 346.181761][T17610] genl_rcv+0x28/0x40 [ 346.181776][T17610] netlink_unicast+0x80f/0x9b0 [ 346.181805][T17610] ? __pfx_netlink_unicast+0x10/0x10 [ 346.181827][T17610] ? netlink_sendmsg+0x650/0xb40 [ 346.181848][T17610] ? skb_put+0x11b/0x210 [ 346.181874][T17610] netlink_sendmsg+0x813/0xb40 [ 346.181906][T17610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.181930][T17610] ? aa_sock_msg_perm+0xf1/0x1b0 [ 346.181952][T17610] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.181981][T17610] ____sys_sendmsg+0x972/0x9f0 [ 346.182006][T17610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.182031][T17610] ? import_iovec+0x73/0xa0 [ 346.182058][T17610] ___sys_sendmsg+0x2a5/0x360 [ 346.182080][T17610] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.182130][T17610] ? __fget_files+0x2a/0x420 [ 346.182153][T17610] ? __fget_files+0x3a0/0x420 [ 346.182185][T17610] __x64_sys_sendmsg+0x1bd/0x2a0 [ 346.182206][T17610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.182232][T17610] ? __pfx_ksys_write+0x10/0x10 [ 346.182261][T17610] do_syscall_64+0x14d/0xf80 [ 346.182284][T17610] ? trace_irq_disable+0x3b/0x150 [ 346.182306][T17610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.182323][T17610] ? clear_bhb_loop+0x40/0x90 [ 346.182344][T17610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.182361][T17610] RIP: 0033:0x7f05efb9c799 [ 346.182377][T17610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.182391][T17610] RSP: 002b:00007f05f0a69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.182409][T17610] RAX: ffffffffffffffda RBX: 00007f05efe15fa0 RCX: 00007f05efb9c799 [ 346.182421][T17610] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000008 [ 346.182432][T17610] RBP: 00007f05f0a69090 R08: 0000000000000000 R09: 0000000000000000 [ 346.182442][T17610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.182452][T17610] R13: 00007f05efe16038 R14: 00007f05efe15fa0 R15: 00007ffdc69118c8 [ 346.182478][T17610] [ 346.480505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.534473][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.762058][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 347.770088][ C0] lec:lec_tx_timeout: lec0 [ 347.775477][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 347.957365][T17606] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 347.967065][T17606] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 347.980031][T17606] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 348.174426][T17636] __nla_validate_parse: 2 callbacks suppressed [ 348.174526][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3543'. [ 348.615310][T17645] lo speed is unknown, defaulting to 1000 [ 348.624503][T17645] wlan1 speed is unknown, defaulting to 1000 [ 348.668869][T17645] lo speed is unknown, defaulting to 1000 [ 348.749885][T17639] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 348.769748][T17639] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 348.853164][T17661] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3548'. [ 349.229988][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3555'. [ 349.444333][T17688] FAULT_INJECTION: forcing a failure. [ 349.444333][T17688] name failslab, interval 1, probability 0, space 0, times 0 [ 349.469316][T17688] CPU: 0 UID: 0 PID: 17688 Comm: syz.2.3557 Not tainted syzkaller #0 PREEMPT(full) [ 349.469341][T17688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 349.469351][T17688] Call Trace: [ 349.469447][T17688] [ 349.469455][T17688] dump_stack_lvl+0xe8/0x150 [ 349.469596][T17688] should_fail_ex+0x412/0x560 [ 349.469683][T17688] should_failslab+0xa8/0x100 [ 349.469735][T17688] __kmalloc_noprof+0xe8/0x760 [ 349.469759][T17688] ? nsim_set_coalesce+0x29/0x40 [ 349.469873][T17688] ? ethnl_default_notify+0x1b2/0xbe0 [ 349.469980][T17688] ethnl_default_notify+0x1b2/0xbe0 [ 349.470009][T17688] ? do_raw_spin_lock+0x12b/0x2f0 [ 349.470051][T17688] ? __pfx_ethnl_default_notify+0x10/0x10 [ 349.470091][T17688] ? mutex_is_locked+0x17/0x50 [ 349.470119][T17688] ? rtnl_is_locked+0x15/0x20 [ 349.470207][T17688] ethnl_default_set_doit+0x6a5/0xad0 [ 349.470244][T17688] genl_family_rcv_msg_doit+0x22a/0x330 [ 349.470285][T17688] ? __asan_memcpy+0x40/0x70 [ 349.470305][T17688] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 349.470332][T17688] ? bpf_lsm_capable+0x9/0x20 [ 349.470371][T17688] ? security_capable+0x7e/0x2c0 [ 349.470464][T17688] genl_rcv_msg+0x61c/0x7a0 [ 349.470489][T17688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.470506][T17688] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 349.470532][T17688] ? __lock_acquire+0x6b5/0x2cf0 [ 349.470564][T17688] netlink_rcv_skb+0x232/0x4b0 [ 349.470612][T17688] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.470632][T17688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.470672][T17688] ? down_read+0x272/0x2e0 [ 349.470744][T17688] ? genl_rcv+0xd/0x40 [ 349.470763][T17688] genl_rcv+0x28/0x40 [ 349.470778][T17688] netlink_unicast+0x80f/0x9b0 [ 349.470808][T17688] ? __pfx_netlink_unicast+0x10/0x10 [ 349.470830][T17688] ? netlink_sendmsg+0x650/0xb40 [ 349.470851][T17688] ? skb_put+0x11b/0x210 [ 349.470914][T17688] netlink_sendmsg+0x813/0xb40 [ 349.470946][T17688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.470972][T17688] ? aa_sock_msg_perm+0xf1/0x1b0 [ 349.471024][T17688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.471046][T17688] ____sys_sendmsg+0x972/0x9f0 [ 349.471097][T17688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.471123][T17688] ? import_iovec+0x73/0xa0 [ 349.471206][T17688] ___sys_sendmsg+0x2a5/0x360 [ 349.471229][T17688] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.471282][T17688] ? __fget_files+0x2a/0x420 [ 349.471319][T17688] ? __fget_files+0x3a0/0x420 [ 349.471352][T17688] __x64_sys_sendmsg+0x1bd/0x2a0 [ 349.471370][T17688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.471398][T17688] ? __pfx_ksys_write+0x10/0x10 [ 349.471437][T17688] do_syscall_64+0x14d/0xf80 [ 349.471483][T17688] ? trace_irq_disable+0x3b/0x150 [ 349.471515][T17688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.471549][T17688] ? clear_bhb_loop+0x40/0x90 [ 349.471570][T17688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.471587][T17688] RIP: 0033:0x7f3b4339c799 [ 349.471611][T17688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.471626][T17688] RSP: 002b:00007f3b44234028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.471650][T17688] RAX: ffffffffffffffda RBX: 00007f3b43615fa0 RCX: 00007f3b4339c799 [ 349.471662][T17688] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000008 [ 349.471673][T17688] RBP: 00007f3b44234090 R08: 0000000000000000 R09: 0000000000000000 [ 349.471684][T17688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.471694][T17688] R13: 00007f3b43616038 R14: 00007f3b43615fa0 R15: 00007ffda19ff4a8 [ 349.471723][T17688] [ 349.929870][T17690] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3559'. [ 350.909862][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 350.937541][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3567'. [ 350.940590][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 350.978545][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3567'. [ 351.122917][T17719] lo speed is unknown, defaulting to 1000 [ 351.146781][T17719] wlan1 speed is unknown, defaulting to 1000 [ 351.164096][T17724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3570'. [ 351.191708][T17719] lo speed is unknown, defaulting to 1000 [ 351.501299][T17732] siw: device registration error -23 [ 351.949712][T17761] netlink: 'syz.2.3579': attribute type 11 has an invalid length. [ 352.486199][T17773] bond4: (slave bond_slave_1): Device is not our slave [ 352.517956][T17773] bond4: option active_slave: invalid value (bond_slave_1) [ 352.556693][T17773] bond4 (unregistering): Released all slaves [ 352.615148][T17786] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3586'. [ 352.757340][T17786] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.800439][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 352.808495][ C0] lec:lec_tx_timeout: lec0 [ 352.810920][T17786] bridge_slave_0 (unregistering): left allmulticast mode [ 352.813354][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 352.826246][T17786] bridge_slave_0 (unregistering): left promiscuous mode [ 352.868500][T17786] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.124743][T17790] syzkaller1: entered promiscuous mode [ 353.166902][T17790] syzkaller1: entered allmulticast mode [ 353.221774][T17787] lo speed is unknown, defaulting to 1000 [ 353.257684][T17787] wlan1 speed is unknown, defaulting to 1000 [ 353.277783][T17787] lo speed is unknown, defaulting to 1000 [ 353.984424][T17845] __nla_validate_parse: 2 callbacks suppressed [ 353.984444][T17845] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3595'. [ 354.121798][T17850] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3600'. [ 354.194531][T17853] openvswitch: netlink: Multiple metadata blocks provided [ 354.235333][T17855] IPv6: addrconf: prefix option has invalid lifetime [ 354.341894][T17860] netlink: 'syz.4.3603': attribute type 1 has an invalid length. [ 354.521337][T17872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.805015][T17897] hsr0: entered promiscuous mode [ 354.813172][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3613'. [ 354.846799][T17897] hsr_slave_0: left promiscuous mode [ 354.860591][T17897] hsr_slave_1: left promiscuous mode [ 354.898459][T17897] hsr0 (unregistering): left promiscuous mode [ 354.928945][T17899] netlink: 'syz.0.3614': attribute type 3 has an invalid length. [ 355.095143][T17908] syzkaller0: entered promiscuous mode [ 355.121092][T17908] syzkaller0: entered allmulticast mode [ 355.156316][T17913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3619'. [ 355.199054][T17913] macvtap1: entered promiscuous mode [ 355.205778][T17913] macvtap1: entered allmulticast mode [ 355.212342][T17913] dummy0: entered promiscuous mode [ 355.218821][T17913] dummy0: entered allmulticast mode [ 355.227109][T17913] team0: Device macvtap1 failed to register rx_handler [ 355.256400][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3621'. [ 355.266137][T17913] dummy0: left allmulticast mode [ 355.272137][T17913] dummy0: left promiscuous mode [ 355.302889][T17925] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3622'. [ 355.329959][T17918] hsr0: entered promiscuous mode [ 355.356019][T17920] hsr_slave_0: left promiscuous mode [ 355.364884][T17920] hsr_slave_1: left promiscuous mode [ 355.376265][T17920] hsr0 (unregistering): left promiscuous mode [ 355.749558][T17959] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3632'. [ 356.350545][T17991] netlink: 'syz.1.3638': attribute type 8 has an invalid length. [ 356.535444][T17998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3642'. [ 356.561049][T17998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3642'. [ 356.570022][T17998] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3642'. [ 356.621137][ T51] Bluetooth: hci4: link tx timeout [ 356.628136][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 356.639453][ T51] Bluetooth: hci4: link tx timeout [ 356.646617][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 356.875824][T18021] syzkaller1: entered promiscuous mode [ 356.875943][T18026] siw: device registration error -23 [ 356.881438][T18021] syzkaller1: entered allmulticast mode [ 357.192744][T18049] syzkaller0: entered promiscuous mode [ 357.211548][T18049] syzkaller0: entered allmulticast mode [ 357.249228][T18051] netlink: 'syz.3.3657': attribute type 4 has an invalid length. [ 357.459282][T18066] siw: device registration error -23 [ 357.541192][T18062] pim6reg1: entered promiscuous mode [ 357.549630][T18062] pim6reg1: entered allmulticast mode [ 357.819598][T18092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.830315][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 357.838351][ C0] lec:lec_tx_timeout: lec0 [ 357.843013][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 358.239461][T18119] siw: device registration error -23 [ 358.300475][T18121] netlink: 'syz.4.3679': attribute type 11 has an invalid length. [ 358.723728][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 358.982559][T18167] siw: device registration error -23 [ 359.009463][T18166] netlink: 'syz.4.3690': attribute type 13 has an invalid length. [ 359.018009][T18166] netlink: 'syz.4.3690': attribute type 17 has an invalid length. [ 359.061864][T18172] netlink: 'syz.4.3690': attribute type 8 has an invalid length. [ 359.308553][T18161] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.315972][T18161] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.335543][T18180] __nla_validate_parse: 19 callbacks suppressed [ 359.335562][T18180] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3693'. [ 359.609533][T18161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.641341][T18161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.022842][T18191] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3695'. [ 360.084820][T18166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.093835][T18166] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.118012][T18166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.153916][T14514] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.189120][T14514] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.255230][T14514] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.271963][T14514] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.293052][T14514] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.312191][T14514] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.333887][T14514] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.356618][T14514] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.647482][T18231] lo speed is unknown, defaulting to 1000 [ 360.656855][T18231] wlan1 speed is unknown, defaulting to 1000 [ 360.695098][T18231] lo speed is unknown, defaulting to 1000 [ 360.713661][T18236] geneve2: entered allmulticast mode [ 360.813915][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 360.878542][T18194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.090978][T18250] siw: device registration error -23 [ 361.127276][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'. [ 361.314930][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3706'. [ 361.366446][T18260] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 361.400397][T18260] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 361.434052][T18260] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 362.854939][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 362.863118][ C0] lec:lec_tx_timeout: lec0 [ 362.867926][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 363.603074][T18307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3715'. [ 363.615326][T18302] lo speed is unknown, defaulting to 1000 [ 363.630929][T18307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3715'. [ 363.650719][T18307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3715'. [ 363.659624][T18307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3715'. [ 363.685449][T18302] wlan1 speed is unknown, defaulting to 1000 [ 363.748836][T18302] lo speed is unknown, defaulting to 1000 [ 363.992384][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3721'. [ 364.022172][T18353] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3721'. [ 364.045405][T18353] netlink: 'syz.4.3721': attribute type 13 has an invalid length. [ 364.076354][T18353] netlink: 'syz.4.3721': attribute type 17 has an invalid length. [ 364.103477][T18353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.187098][T18366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.252384][T18341] siw: device registration error -23 [ 364.300965][T14514] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.794438][T18400] IPVS: length: 132 != 8 [ 364.929926][T18403] pimreg: entered allmulticast mode [ 365.284584][T18421] __nla_validate_parse: 1 callbacks suppressed [ 365.284602][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3736'. [ 365.806888][T18439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3740'. [ 366.018784][T18456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3742'. [ 366.198086][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3742'. [ 366.215575][T18465] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3742'. [ 367.456715][T18421] geneve3: entered promiscuous mode [ 367.485842][T18446] bridge2: port 1(veth7) entered blocking state [ 367.495251][T18446] bridge2: port 1(veth7) entered disabled state [ 367.502085][T18446] veth7: entered allmulticast mode [ 367.509826][T18446] veth7: entered promiscuous mode [ 367.517808][T18446] bridge2: port 1(veth7) entered blocking state [ 367.524239][T18446] bridge2: port 1(veth7) entered forwarding state [ 367.552820][T18450] bridge2: port 2(geneve3) entered blocking state [ 367.559370][T18450] bridge2: port 2(geneve3) entered disabled state [ 367.611975][ T5178] block nbd2: Possible stuck request ffff888026d08000: control (read@0,1024B). Runtime 150 seconds [ 367.612414][T18450] geneve3: entered allmulticast mode [ 367.624665][ T5178] block nbd2: Possible stuck request ffff888026d08200: control (read@1024,1024B). Runtime 150 seconds [ 367.639917][ T5178] block nbd2: Possible stuck request ffff888026d08400: control (read@2048,1024B). Runtime 150 seconds [ 367.648866][T18450] geneve3: entered promiscuous mode [ 367.651415][ T5178] block nbd2: Possible stuck request ffff888026d08600: control (read@3072,1024B). Runtime 150 seconds [ 367.689015][T14515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.753018][T14515] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.810688][T14515] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.819424][T14515] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.880292][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 367.881582][T18505] netlink: 'syz.4.3750': attribute type 29 has an invalid length. [ 367.888311][ C0] lec:lec_tx_timeout: lec0 [ 367.888540][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 367.920636][T18505] netlink: 'syz.4.3750': attribute type 29 has an invalid length. [ 367.998775][T18515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3752'. [ 368.024824][T18515] syzkaller1: entered promiscuous mode [ 368.050406][T18515] syzkaller1: entered allmulticast mode [ 368.339539][T18534] netlink: 'syz.0.3756': attribute type 10 has an invalid length. [ 368.464614][T18543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3760'. [ 368.483344][T14509] bridge2: port 1(veth7) entered disabled state [ 368.496384][T18543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3760'. [ 368.505683][T18543] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3760'. [ 368.661892][T18556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3758'. [ 368.724227][ T5835] block nbd4: Receive control failed (result -107) [ 369.709879][T18616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.821649][T18616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.962880][T18631] IPVS: set_ctl: invalid protocol: 164 255.255.255.255:20000 [ 370.093986][T18639] dvmrp1: entered allmulticast mode [ 370.154490][T18640] lo speed is unknown, defaulting to 1000 [ 370.178226][T18640] wlan1 speed is unknown, defaulting to 1000 [ 370.189295][T18640] lo speed is unknown, defaulting to 1000 [ 370.295172][T18648] __nla_validate_parse: 4 callbacks suppressed [ 370.295190][T18648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3793'. [ 370.319752][T18648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3793'. [ 370.487262][T18653] lo speed is unknown, defaulting to 1000 [ 370.495265][T18653] wlan1 speed is unknown, defaulting to 1000 [ 370.510779][T18653] lo speed is unknown, defaulting to 1000 [ 370.582206][T18655] lo speed is unknown, defaulting to 1000 [ 370.622294][T18655] wlan1 speed is unknown, defaulting to 1000 [ 370.913839][T18655] lo speed is unknown, defaulting to 1000 [ 370.969156][T18668] lo speed is unknown, defaulting to 1000 [ 370.976745][T18668] wlan1 speed is unknown, defaulting to 1000 [ 371.233797][T18668] lo speed is unknown, defaulting to 1000 [ 371.305394][T18692] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3803'. [ 371.446757][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3805'. [ 371.479259][T18698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3805'. [ 372.144290][T18705] netlink: 'syz.2.3808': attribute type 3 has an invalid length. [ 372.409901][T18709] lo speed is unknown, defaulting to 1000 [ 372.418664][T18709] wlan1 speed is unknown, defaulting to 1000 [ 372.452422][T18713] syz.1.3810: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 372.474395][T18709] lo speed is unknown, defaulting to 1000 [ 372.500610][T18713] CPU: 0 UID: 0 PID: 18713 Comm: syz.1.3810 Not tainted syzkaller #0 PREEMPT(full) [ 372.500645][T18713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.500662][T18713] Call Trace: [ 372.500670][T18713] [ 372.500679][T18713] dump_stack_lvl+0xe8/0x150 [ 372.500713][T18713] warn_alloc+0x249/0x340 [ 372.500755][T18713] ? stack_trace_save+0xa9/0x100 [ 372.500779][T18713] ? __pfx_warn_alloc+0x10/0x10 [ 372.500809][T18713] ? kasan_save_track+0x4f/0x80 [ 372.500828][T18713] ? kasan_save_track+0x3e/0x80 [ 372.500848][T18713] ? __kasan_kmalloc+0x93/0xb0 [ 372.500869][T18713] ? __kmalloc_cache_noprof+0x31c/0x660 [ 372.500890][T18713] ? xskq_create+0x56/0x170 [ 372.501005][T18713] ? xsk_setsockopt+0x54c/0x990 [ 372.501027][T18713] ? do_sock_setsockopt+0x17c/0x1b0 [ 372.501086][T18713] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 372.501115][T18713] ? do_syscall_64+0x14d/0xf80 [ 372.501146][T18713] __vmalloc_node_range_noprof+0x132/0x1730 [ 372.501199][T18713] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 372.501227][T18713] ? __kasan_kmalloc+0x93/0xb0 [ 372.501255][T18713] vmalloc_user_noprof+0xad/0xe0 [ 372.501276][T18713] ? xskq_create+0xbf/0x170 [ 372.501303][T18713] xskq_create+0xbf/0x170 [ 372.501331][T18713] xsk_init_queue+0x8a/0xe0 [ 372.501359][T18713] xsk_setsockopt+0x54c/0x990 [ 372.501386][T18713] ? __pfx_xsk_setsockopt+0x10/0x10 [ 372.501410][T18713] ? __pfx_aa_sk_perm+0x10/0x10 [ 372.501464][T18713] ? aa_sock_opt_perm+0xff/0x1a0 [ 372.501493][T18713] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 372.501515][T18713] ? __pfx_xsk_setsockopt+0x10/0x10 [ 372.501541][T18713] do_sock_setsockopt+0x17c/0x1b0 [ 372.501577][T18713] __x64_sys_setsockopt+0x13d/0x1b0 [ 372.501622][T18713] do_syscall_64+0x14d/0xf80 [ 372.501650][T18713] ? trace_irq_disable+0x3b/0x150 [ 372.501679][T18713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.501699][T18713] ? clear_bhb_loop+0x40/0x90 [ 372.501723][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.501748][T18713] RIP: 0033:0x7f974199c799 [ 372.501767][T18713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.501784][T18713] RSP: 002b:00007f974286c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 372.501807][T18713] RAX: ffffffffffffffda RBX: 00007f9741c15fa0 RCX: 00007f974199c799 [ 372.501822][T18713] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 372.501834][T18713] RBP: 00007f9741a32c99 R08: 0000000000000004 R09: 0000000000000000 [ 372.501846][T18713] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.501860][T18713] R13: 00007f9741c16038 R14: 00007f9741c15fa0 R15: 00007ffed862cd38 [ 372.501892][T18713] [ 372.504337][T18713] Mem-Info: [ 372.730408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.781014][T18717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3811'. [ 372.782152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.842998][T18717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3811'. [ 372.845944][T18713] active_anon:6655 inactive_anon:0 isolated_anon:0 [ 372.845944][T18713] active_file:2706 inactive_file:40650 isolated_file:0 [ 372.845944][T18713] unevictable:768 dirty:196 writeback:0 [ 372.845944][T18713] slab_reclaimable:13185 slab_unreclaimable:149753 [ 372.845944][T18713] mapped:30833 shmem:1364 pagetables:1593 [ 372.845944][T18713] sec_pagetables:0 bounce:0 [ 372.845944][T18713] kernel_misc_reclaimable:0 [ 372.845944][T18713] free:1267117 free_pcp:12497 free_cma:0 [ 372.902674][T18713] Node 0 active_anon:26620kB inactive_anon:0kB active_file:10824kB inactive_file:162404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123332kB dirty:784kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18612kB pagetables:6236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 372.934527][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 372.934557][ C0] lec:lec_tx_timeout: lec0 [ 372.943295][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 372.984200][T18713] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 373.050288][T18713] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 373.123576][T18722] netlink: 'syz.4.3812': attribute type 11 has an invalid length. [ 373.140378][T18722] netlink: 'syz.4.3812': attribute type 23 has an invalid length. [ 373.159257][T18722] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3812'. [ 373.178730][T18713] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 373.219285][T18713] Node 0 DMA32 free:1116436kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27120kB inactive_anon:0kB active_file:10824kB inactive_file:162404kB unevictable:1536kB writepending:784kB zspages:0kB present:3129332kB managed:2552572kB mlocked:0kB bounce:0kB free_pcp:44652kB local_pcp:22832kB free_cma:0kB [ 373.246450][T18722] [ 373.255020][T18722] ====================================================== [ 373.260281][T18713] lowmem_reserve[]: [ 373.262047][T18722] WARNING: possible circular locking dependency detected [ 373.262127][T18722] syzkaller #0 Not tainted [ 373.266004][T18713] 0 [ 373.272866][T18722] ------------------------------------------------------ [ 373.272877][T18722] syz.4.3812/18722 is trying to acquire lock: [ 373.272887][T18722] ffff88801b6dda20 [ 373.277717][T18713] 0 [ 373.279810][T18722] (&root->kernfs_iattr_rwsem [ 373.287050][T18713] 0 [ 373.292876][T18722] ){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 373.296786][T18713] 0 [ 373.299098][T18722] [ 373.299098][T18722] but task is already holding lock: [ 373.322798][T18722] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 373.333058][T18722] [ 373.333058][T18722] which lock already depends on the new lock. [ 373.333058][T18722] [ 373.343439][T18722] [ 373.343439][T18722] the existing dependency chain (in reverse order) is: [ 373.352434][T18722] [ 373.352434][T18722] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 373.360610][T18722] down_write+0x96/0x200 [ 373.365366][T18722] kernfs_add_one+0x41/0x5c0 [ 373.370474][T18722] kernfs_create_dir_ns+0xde/0x130 [ 373.376087][T18722] internal_create_group+0x425/0x1180 [ 373.381968][T18722] cpuhp_invoke_callback+0x445/0x860 [ 373.387795][T18722] cpuhp_issue_call+0x430/0x7a0 [ 373.393153][T18722] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 373.399814][T18722] __cpuhp_setup_state+0x3f/0x60 [ 373.405266][T18722] do_one_initcall+0x250/0x8d0 [ 373.410551][T18722] do_initcall_level+0x104/0x190 [ 373.416100][T18722] do_initcalls+0x59/0xa0 [ 373.420932][T18722] kernel_init_freeable+0x2a6/0x3e0 [ 373.426657][T18722] kernel_init+0x1d/0x1d0 [ 373.431554][T18722] ret_from_fork+0x51e/0xb90 [ 373.436675][T18722] ret_from_fork_asm+0x1a/0x30 [ 373.441968][T18722] [ 373.441968][T18722] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 373.449885][T18722] [ 373.449885][T18722] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 373.457646][T18722] cpus_read_lock+0x42/0x160 [ 373.462774][T18722] static_key_slow_inc+0x12/0x30 [ 373.468264][T18722] ipv6_flowlabel_opt+0x1b94/0x28e0 [ 373.474086][T18722] do_ipv6_setsockopt+0xd9f/0x3150 [ 373.479751][T18722] ipv6_setsockopt+0x59/0x170 [ 373.484984][T18722] do_sock_setsockopt+0x17c/0x1b0 [ 373.490531][T18722] __x64_sys_setsockopt+0x13d/0x1b0 [ 373.496772][T18722] do_syscall_64+0x14d/0xf80 [ 373.501876][T18722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.508277][T18722] [ 373.508277][T18722] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 373.515995][T18722] lock_sock_nested+0x41/0x100 [ 373.521291][T18722] inet_shutdown+0x6a/0x390 [ 373.526399][T18722] nbd_mark_nsock_dead+0x2e9/0x560 [ 373.532108][T18722] recv_work+0x1c7f/0x1d90 [ 373.537029][T18722] process_scheduled_works+0xb02/0x1830 [ 373.543082][T18722] worker_thread+0xa50/0xfc0 [ 373.548182][T18722] kthread+0x388/0x470 [ 373.552777][T18722] ret_from_fork+0x51e/0xb90 [ 373.557883][T18722] ret_from_fork_asm+0x1a/0x30 [ 373.563689][T18722] [ 373.563689][T18722] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 373.571410][T18722] __mutex_lock+0x19f/0x1300 [ 373.576515][T18722] nbd_queue_rq+0x37b/0x1100 [ 373.581623][T18722] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 373.587761][T18722] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 373.594678][T18722] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 373.601175][T18722] blk_mq_run_hw_queue+0x348/0x4f0 [ 373.606859][T18722] blk_mq_dispatch_list+0xd16/0xe10 [ 373.612561][T18722] blk_mq_flush_plug_list+0x48d/0x570 [ 373.618447][T18722] __blk_flush_plug+0x3ed/0x4d0 [ 373.623875][T18722] __submit_bio+0x28d/0x580 [ 373.628889][T18722] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 373.635026][T18722] block_read_full_folio+0x599/0x830 [ 373.640842][T18722] filemap_read_folio+0x137/0x3b0 [ 373.646378][T18722] do_read_cache_folio+0x358/0x590 [ 373.652009][T18722] read_part_sector+0xb6/0x2b0 [ 373.657457][T18722] adfspart_check_ICS+0xa5/0xa40 [ 373.662911][T18722] bdev_disk_changed+0x7ba/0x1550 [ 373.668541][T18722] blkdev_get_whole+0x380/0x510 [ 373.674237][T18722] bdev_open+0x31e/0xd30 [ 373.679269][T18722] blkdev_open+0x470/0x610 [ 373.684204][T18722] do_dentry_open+0x785/0x14e0 [ 373.689501][T18722] vfs_open+0x3b/0x340 [ 373.694172][T18722] path_openat+0x2e08/0x3860 [ 373.699270][T18722] do_file_open+0x23e/0x4a0 [ 373.704279][T18722] do_sys_openat2+0x113/0x200 [ 373.709490][T18722] __x64_sys_openat+0x138/0x170 [ 373.714857][T18722] do_syscall_64+0x14d/0xf80 [ 373.720043][T18722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.726445][T18722] [ 373.726445][T18722] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 373.733650][T18722] __mutex_lock+0x19f/0x1300 [ 373.738757][T18722] nbd_queue_rq+0xc6/0x1100 [ 373.743787][T18722] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 373.749860][T18722] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 373.756897][T18722] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 373.764017][T18722] blk_mq_run_hw_queue+0x348/0x4f0 [ 373.769672][T18722] blk_mq_dispatch_list+0xd16/0xe10 [ 373.775402][T18722] blk_mq_flush_plug_list+0x48d/0x570 [ 373.781290][T18722] __blk_flush_plug+0x3ed/0x4d0 [ 373.786651][T18722] __submit_bio+0x28d/0x580 [ 373.791660][T18722] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 373.797810][T18722] block_read_full_folio+0x599/0x830 [ 373.803608][T18722] filemap_read_folio+0x137/0x3b0 [ 373.809159][T18722] do_read_cache_folio+0x358/0x590 [ 373.814779][T18722] read_part_sector+0xb6/0x2b0 [ 373.820068][T18722] adfspart_check_ICS+0xa5/0xa40 [ 373.825510][T18722] bdev_disk_changed+0x7ba/0x1550 [ 373.831039][T18722] blkdev_get_whole+0x380/0x510 [ 373.836391][T18722] bdev_open+0x31e/0xd30 [ 373.841148][T18722] blkdev_open+0x470/0x610 [ 373.846068][T18722] do_dentry_open+0x785/0x14e0 [ 373.851343][T18722] vfs_open+0x3b/0x340 [ 373.855926][T18722] path_openat+0x2e08/0x3860 [ 373.861111][T18722] do_file_open+0x23e/0x4a0 [ 373.866127][T18722] do_sys_openat2+0x113/0x200 [ 373.871320][T18722] __x64_sys_openat+0x138/0x170 [ 373.876710][T18722] do_syscall_64+0x14d/0xf80 [ 373.881812][T18722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.888212][T18722] [ 373.888212][T18722] -> #4 (set->srcu){.+.+}-{0:0}: [ 373.895327][T18722] __synchronize_srcu+0xca/0x3e0 [ 373.900873][T18722] elevator_switch+0x1e8/0x7a0 [ 373.906143][T18722] elevator_change+0x2cc/0x450 [ 373.911453][T18722] elevator_set_default+0x36c/0x430 [ 373.917330][T18722] blk_register_queue+0x366/0x430 [ 373.922863][T18722] __add_disk+0x677/0xd50 [ 373.927702][T18722] add_disk_fwnode+0xfb/0x480 [ 373.933008][T18722] nbd_dev_add+0x72c/0xb50 [ 373.937944][T18722] nbd_init+0x168/0x1f0 [ 373.942720][T18722] do_one_initcall+0x250/0x8d0 [ 373.948001][T18722] do_initcall_level+0x104/0x190 [ 373.953446][T18722] do_initcalls+0x59/0xa0 [ 373.958283][T18722] kernel_init_freeable+0x2a6/0x3e0 [ 373.964004][T18722] kernel_init+0x1d/0x1d0 [ 373.968844][T18722] ret_from_fork+0x51e/0xb90 [ 373.973948][T18722] ret_from_fork_asm+0x1a/0x30 [ 373.979319][T18722] [ 373.979319][T18722] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 373.987127][T18722] __mutex_lock+0x19f/0x1300 [ 373.992233][T18722] elevator_change+0x1b3/0x450 [ 373.997502][T18722] elevator_set_none+0xb5/0x140 [ 374.003297][T18722] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 374.009628][T18722] nbd_start_device+0x17f/0xb10 [ 374.014999][T18722] nbd_genl_connect+0x165b/0x1cf0 [ 374.020657][T18722] genl_family_rcv_msg_doit+0x22a/0x330 [ 374.026718][T18722] genl_rcv_msg+0x61c/0x7a0 [ 374.031900][T18722] netlink_rcv_skb+0x232/0x4b0 [ 374.037199][T18722] genl_rcv+0x28/0x40 [ 374.041695][T18722] netlink_unicast+0x80f/0x9b0 [ 374.046970][T18722] netlink_sendmsg+0x813/0xb40 [ 374.052273][T18722] ____sys_sendmsg+0x972/0x9f0 [ 374.057542][T18722] ___sys_sendmsg+0x2a5/0x360 [ 374.062722][T18722] __x64_sys_sendmsg+0x1bd/0x2a0 [ 374.068181][T18722] do_syscall_64+0x14d/0xf80 [ 374.073284][T18722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.079710][T18722] [ 374.079710][T18722] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 374.088308][T18722] blk_alloc_queue+0x546/0x680 [ 374.093709][T18722] __blk_mq_alloc_disk+0x197/0x390 [ 374.099330][T18722] nbd_dev_add+0x499/0xb50 [ 374.104263][T18722] nbd_init+0x168/0x1f0 [ 374.108929][T18722] do_one_initcall+0x250/0x8d0 [ 374.114209][T18722] do_initcall_level+0x104/0x190 [ 374.119654][T18722] do_initcalls+0x59/0xa0 [ 374.124498][T18722] kernel_init_freeable+0x2a6/0x3e0 [ 374.130207][T18722] kernel_init+0x1d/0x1d0 [ 374.135135][T18722] ret_from_fork+0x51e/0xb90 [ 374.140243][T18722] ret_from_fork_asm+0x1a/0x30 [ 374.145525][T18722] [ 374.145525][T18722] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 374.152730][T18722] fs_reclaim_acquire+0x71/0x100 [ 374.158194][T18722] kmem_cache_alloc_noprof+0x40/0x650 [ 374.164073][T18722] __kernfs_iattrs+0xdf/0x340 [ 374.169264][T18722] kernfs_iop_setattr+0xea/0x3f0 [ 374.174715][T18722] notify_change+0xc1a/0xf40 [ 374.179832][T18722] do_truncate+0x1c2/0x250 [ 374.184782][T18722] path_openat+0x2f89/0x3860 [ 374.189879][T18722] do_file_open+0x23e/0x4a0 [ 374.194894][T18722] do_sys_openat2+0x113/0x200 [ 374.200083][T18722] __x64_sys_openat+0x138/0x170 [ 374.205454][T18722] do_syscall_64+0x14d/0xf80 [ 374.210644][T18722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.217070][T18722] [ 374.217070][T18722] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 374.225584][T18722] __lock_acquire+0x15a5/0x2cf0 [ 374.230953][T18722] lock_acquire+0xf0/0x2e0 [ 374.235886][T18722] down_write+0x96/0x200 [ 374.240650][T18722] kernfs_unlink_sibling+0x71/0x180 [ 374.246405][T18722] __kernfs_remove+0x3e7/0x660 [ 374.251699][T18722] kernfs_remove_by_name_ns+0xaf/0x130 [ 374.257797][T18722] device_release_driver_internal+0x387/0x860 [ 374.264510][T18722] mac80211_hwsim_new_radio+0x45d4/0x5b60 [ 374.270795][T18722] hwsim_new_radio_nl+0xf6a/0x1c00 [ 374.276422][T18722] genl_family_rcv_msg_doit+0x22a/0x330 [ 374.282493][T18722] genl_rcv_msg+0x61c/0x7a0 [ 374.287505][T18722] netlink_rcv_skb+0x232/0x4b0 [ 374.292779][T18722] genl_rcv+0x28/0x40 [ 374.297265][T18722] netlink_unicast+0x80f/0x9b0 [ 374.302538][T18722] netlink_sendmsg+0x813/0xb40 [ 374.307816][T18722] ____sys_sendmsg+0x972/0x9f0 [ 374.313096][T18722] ___sys_sendmsg+0x2a5/0x360 [ 374.318277][T18722] __x64_sys_sendmsg+0x1bd/0x2a0 [ 374.323721][T18722] do_syscall_64+0x14d/0xf80 [ 374.328823][T18722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.335221][T18722] [ 374.335221][T18722] other info that might help us debug this: [ 374.335221][T18722] [ 374.345446][T18722] Chain exists of: [ 374.345446][T18722] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 374.345446][T18722] [ 374.359870][T18722] Possible unsafe locking scenario: [ 374.359870][T18722] [ 374.367329][T18722] CPU0 CPU1 [ 374.372673][T18722] ---- ---- [ 374.378089][T18722] lock(&root->kernfs_rwsem); [ 374.382841][T18722] lock(cpuhp_state_mutex); [ 374.389950][T18722] lock(&root->kernfs_rwsem); [ 374.397396][T18722] lock(&root->kernfs_iattr_rwsem); [ 374.402673][T18722] [ 374.402673][T18722] *** DEADLOCK *** [ 374.402673][T18722] [ 374.410808][T18722] 4 locks held by syz.4.3812/18722: [ 374.415985][T18722] #0: ffffffff8fc35490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 374.424159][T18722] #1: ffffffff8fc352c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 374.433111][T18722] #2: ffff88803136d0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 374.443628][T18722] #3: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 374.454318][T18722] [ 374.454318][T18722] stack backtrace: [ 374.460190][T18722] CPU: 0 UID: 0 PID: 18722 Comm: syz.4.3812 Not tainted syzkaller #0 PREEMPT(full) [ 374.460210][T18722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.460221][T18722] Call Trace: [ 374.460229][T18722] [ 374.460238][T18722] dump_stack_lvl+0xe8/0x150 [ 374.460263][T18722] print_circular_bug+0x2e1/0x300 [ 374.460288][T18722] check_noncircular+0x12e/0x150 [ 374.460321][T18722] __lock_acquire+0x15a5/0x2cf0 [ 374.460343][T18722] ? __lock_acquire+0x6b5/0x2cf0 [ 374.460368][T18722] lock_acquire+0xf0/0x2e0 [ 374.460385][T18722] ? kernfs_unlink_sibling+0x71/0x180 [ 374.460405][T18722] down_write+0x96/0x200 [ 374.460420][T18722] ? kernfs_unlink_sibling+0x71/0x180 [ 374.460435][T18722] ? __pfx_down_write+0x10/0x10 [ 374.460448][T18722] ? kernfs_root+0x1c/0x230 [ 374.460468][T18722] ? kernfs_root+0x1c/0x230 [ 374.460488][T18722] ? kernfs_root+0x1c/0x230 [ 374.460508][T18722] ? kernfs_root+0x1ea/0x230 [ 374.460529][T18722] kernfs_unlink_sibling+0x71/0x180 [ 374.460545][T18722] __kernfs_remove+0x3e7/0x660 [ 374.460561][T18722] kernfs_remove_by_name_ns+0xaf/0x130 [ 374.460581][T18722] device_release_driver_internal+0x387/0x860 [ 374.460602][T18722] mac80211_hwsim_new_radio+0x45d4/0x5b60 [ 374.460624][T18722] ? _printk+0xdd/0x130 [ 374.460659][T18722] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 374.460680][T18722] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 374.460699][T18722] ? do_trace_netlink_extack+0x80/0x200 [ 374.460719][T18722] hwsim_new_radio_nl+0xf6a/0x1c00 [ 374.460743][T18722] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 374.460761][T18722] ? rcu_is_watching+0x15/0xb0 [ 374.460782][T18722] ? trace_kmalloc+0x2a/0x110 [ 374.460800][T18722] ? __nla_parse+0x40/0x60 [ 374.460874][T18722] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 374.460891][T18722] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 374.460911][T18722] genl_family_rcv_msg_doit+0x22a/0x330 [ 374.460929][T18722] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 374.460950][T18722] ? bpf_lsm_capable+0x9/0x20 [ 374.460971][T18722] ? security_capable+0x7e/0x2c0 [ 374.460992][T18722] genl_rcv_msg+0x61c/0x7a0 [ 374.461010][T18722] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.461024][T18722] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 374.461039][T18722] ? __lock_acquire+0x6b5/0x2cf0 [ 374.461062][T18722] netlink_rcv_skb+0x232/0x4b0 [ 374.461082][T18722] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.461097][T18722] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.461123][T18722] ? down_read+0x272/0x2e0 [ 374.461136][T18722] ? genl_rcv+0xd/0x40 [ 374.461150][T18722] genl_rcv+0x28/0x40 [ 374.461164][T18722] netlink_unicast+0x80f/0x9b0 [ 374.461185][T18722] ? __pfx_netlink_unicast+0x10/0x10 [ 374.461203][T18722] ? netlink_sendmsg+0x650/0xb40 [ 374.461223][T18722] ? skb_put+0x11b/0x210 [ 374.461247][T18722] netlink_sendmsg+0x813/0xb40 [ 374.461271][T18722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.461292][T18722] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.461312][T18722] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.461330][T18722] ____sys_sendmsg+0x972/0x9f0 [ 374.461348][T18722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.461367][T18722] ? import_iovec+0x73/0xa0 [ 374.461392][T18722] ___sys_sendmsg+0x2a5/0x360 [ 374.461408][T18722] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.461425][T18722] ? futex_wake+0x4ac/0x580 [ 374.461461][T18722] ? __fget_files+0x2a/0x420 [ 374.461483][T18722] ? __fget_files+0x3a0/0x420 [ 374.461508][T18722] __x64_sys_sendmsg+0x1bd/0x2a0 [ 374.461523][T18722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.461541][T18722] ? rcu_is_watching+0x15/0xb0 [ 374.461567][T18722] do_syscall_64+0x14d/0xf80 [ 374.461590][T18722] ? trace_irq_disable+0x3b/0x150 [ 374.461611][T18722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.461627][T18722] ? clear_bhb_loop+0x40/0x90 [ 374.461644][T18722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.461659][T18722] RIP: 0033:0x7f762219c799 [ 374.461675][T18722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.461689][T18722] RSP: 002b:00007f7622f99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.461706][T18722] RAX: ffffffffffffffda RBX: 00007f7622416090 RCX: 00007f762219c799 [ 374.461717][T18722] RDX: 0000000004008080 RSI: 00002000000001c0 RDI: 000000000000000c [ 374.461728][T18722] RBP: 00007f7622232c99 R08: 0000000000000000 R09: 0000000000000000 [ 374.461737][T18722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.461747][T18722] R13: 00007f7622416128 R14: 00007f7622416090 R15: 00007ffee83e1078 [ 374.461764][T18722] [ 374.478175][T18713] 0 [ 374.911573][T18713] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 374.941015][T18713] lowmem_reserve[]: 0 0 0 0 0 [ 374.945750][T18713] Node 1 Normal free:3940368kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:1760kB free_cma:0kB [ 374.977972][T18713] lowmem_reserve[]: 0 0 0 0 0 [ 374.982719][T18713] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 374.996821][T18713] Node 0 DMA32: 4092*4kB (UME) 3697*8kB (UME) 399*16kB (UME) 374*32kB (UME) 127*64kB (UME) 164*128kB (UME) 381*256kB (UME) 272*512kB (UM) 194*1024kB (UE) 88*2048kB (UM) 100*4096kB (M) = 1118696kB [ 375.016336][T18713] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 375.028252][T18713] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3940420kB [ 375.050314][T18713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.059885][T18713] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 375.073666][T18713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.084298][T18713] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 375.097459][T18713] 44716 total pagecache pages [ 375.102392][T18713] 0 pages in swap cache [ 375.106573][T18713] Free swap = 124996kB [ 375.112040][T18713] Total swap = 124996kB [ 375.116230][T18713] 2097051 pages RAM [ 375.120569][T18713] 0 pages HighMem/MovableOnly [ 375.125255][T18713] 427072 pages reserved [ 375.129483][T18713] 0 pages cma reserved [ 377.950427][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 377.958523][ C0] lec:lec_tx_timeout: lec0 [ 377.963175][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 378.219001][ T5194] udevd[5194]: worker [9200] /devices/virtual/block/nbd2 is taking a long time [ 382.970313][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 382.978331][ C0] lec:lec_tx_timeout: lec0 [ 382.982845][ C0] lec:lec_start_xmit: lec0:No lecd attached