last executing test programs: 3.862435084s ago: executing program 1 (id=3947): sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)={0x40, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x500000005}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b80)={{0xffffffffffffffff, &(0x7f00000003c0)='wlan1\x00', 0x200100, &(0x7f0000000400)={@_ha_fsid={[0x1, 0xa]}, {0x8, 0x2, 0x7, 0x5}}, 0x7806, &(0x7f0000000440), &(0x7f0000000480)}, 0x7, &(0x7f0000000a80)=[{0x1, 0x8, &(0x7f00000004c0)='wpan3\x00', &(0x7f0000000500)="c3ec830678c544d8c8be22c05b08ce8c6e538514604a553cd98680691ecc750a629f18482c60a4086ce763fcc6895ba4068ff0bb93c254b5943d42ce066dc2e3ce67ff8da6163f1b51b6bf2ab234c5e864b95f77720af4219af668c6591bb901c16ae4d3dec886a27cafb0206205eec24cf44f62043c579173d1efd4c40d1ac6ce28fd3ddfe103fc4047e916", 0x8c}, {0x2, 0xf, &(0x7f00000005c0)='nl80211\x00', &(0x7f0000000600)="20dcd7437b2f85a5be8a6714568d1bdbf8d2d428e2ee2e37f940e00b9cad3161e6cc3bc7c9dbaef2320a3ebb3b52f187e274", 0x32, 0x38}, {0x2, 0x80000000, &(0x7f0000000640)='wlan1\x00', &(0x7f0000000680)="011a30ea1b0b80925850023335b9ffc7412ec5cbdfea693a3aef3f22eecd4af1f88c0a33d235f470f2256869a9d86c506531cda0eab6855cf0e634c03d131d415f41081c71fc700c8e09451ac73ba222f0b8186bb10440f8e53cf0d5c7bdc1739a5a9159ed80e194c8c85e62562acb2a23a215dd1b89e7b6022dd11d63", 0x7d, 0x10}, {0x1, 0x3a22d2ca, &(0x7f0000000700)='}@\x00', &(0x7f0000000740)="6ea17f66ab72501927df69f23e9ff479bcc7fdf1b9aee93da23636ec36c84f1cd2ad11f6e44d76132391a21fb1f36b8e76648cd4e84513b39d92595a1cfad67ee194fc1d2b22cd0f", 0x48, 0xa}, {0x1, 0x6, &(0x7f00000007c0)='wlan1\x00', &(0x7f0000000900)='?N', 0x2, 0x8}, {0x3, 0x1, &(0x7f0000000940)='wlan1\x00', &(0x7f0000000980)="454073e2f866a118fa0655943c502176472a412568257d03b3d5d0d1ad2f5b84a3aa830c92ee8f95b03d5092ded1bf0d2ea7ec2ef1413bce74e1e7ba7204115314c50272f59a5db196", 0x49, 0x2}, {0x2, 0xb, &(0x7f0000000a00)='*^{/\x00', &(0x7f0000000a40)="8e1c739fd4e3b4385a6857213e4e576dcb37183ae7390b", 0x17, 0x12}]}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000c00)={0x0, 0x1000, "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"}, &(0x7f0000001c40)=0x1008) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000001c80)={r2, 0x5, 0xb}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e83e6a0af1563bf3b021ec13c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb988eeb8fee205f4c", 0x56}, {&(0x7f0000000280)="af4c42680bee64c57b0c7748a3924e8e5599e0238057", 0x16}, {&(0x7f0000000140)="d6f12351876d5702fb64018cc67dcb307616eafb60", 0x15}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bind$alg(r3, &(0x7f0000001d00)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(ctr-serpent-avx2,des3_ede)\x00'}, 0x58) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x5) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept(r5, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xfd}], 0x1, 0x41, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = socket$inet(0xa, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x11, 0x63, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000001c0)=0xfffffc2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r10, 0x1ef5489840893acf, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r10, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0x2, {0x2}}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xff}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x42}, 0x81) 3.237382852s ago: executing program 4 (id=3954): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x11}, 0x60) listen(r0, 0xf5f) r3 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r4, 0x7) listen(r3, 0x0) accept(r0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) close(r1) 3.051026143s ago: executing program 1 (id=3957): r0 = socket(0x2, 0x80805, 0x0) recvmsg$can_raw(r0, &(0x7f0000001440)={&(0x7f00000010c0)=@ax25={{0x3, @netrom}, [@rose, @rose, @bcast, @remote, @default, @remote, @netrom, @null]}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001140)=""/89, 0x59}, {&(0x7f00000011c0)=""/215, 0xd7}, {&(0x7f00000012c0)=""/5, 0x5}], 0x3, &(0x7f0000001340)=""/252, 0xfc}, 0x40012040) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) 2.955488678s ago: executing program 1 (id=3958): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x20000044) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x40) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) pread64(r5, &(0x7f0000001840)=""/4096, 0x1003, 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054"], 0x184}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) 2.242459447s ago: executing program 4 (id=3969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20044040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xd, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES8=r0, @ANYRES8=r0, @ANYRES16=0x0, @ANYRESHEX=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000000540004803c0001800e000100696d6d656469617465000000280002801c0002801800028008000180fffffffd090002007379fa32000000000800014000000000140001800a00010071756f746100e6ff030002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000005c0)={&(0x7f0000000280), 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x288, 0x2, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_MASTER={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0x60, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2d}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xaf}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASTER={0x70, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xab}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x13}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000600)={0x0, 'wg2\x00', {0x3}, 0x2}) 2.038720473s ago: executing program 0 (id=3971): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b405000000000000711092000000000018410000ffffffff0000001bd0b7c6d04d6a080000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000884) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000500)={0x1000000c}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400440d9}, 0x4040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0xffffffffffffff48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0xfff2}, {0x4}, {0xd, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r11 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd2b, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0xfffffffe}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40820) 2.037494677s ago: executing program 4 (id=3973): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x7c, &(0x7f00000002c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0x5a, 0x0, @opaque="73fcef82af523f8fe2745e02fea43d1d055bd1555972cfde7d8334c068580d22100fb00b6d3e753d0d001eff15c4edb65d19dfb46049be159a030e0b99d995cf9e24b4537e9bffa3c80416a5d81611f3c102"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="000000000000000009000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x34, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x15, 0x9, 0x0, 0x1, [@nested={0xc, 0xff, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @fd}]}, @generic="1ebadb1f5e"]}, @typed={0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="850000002d0000001818fe3f1980b210036bab413165885eebf391dd28a100000000000000a935a4a7e921968df9783a7d0c21bb49f967641f38a0262cf652fc4367cd902a1b0e0741f958b98570beef41611af248ca9c2bc228b3d423788bd3770e9761bc219bb29159b772ceb9a55c8e862e57bcb5a9fad435ac6350e623733c8e4cdfc1ce8980bc72533b5c7df6230d943dffb82ec50f213815ed462fb46396f4b6855a857d9748d7b7d6262d9caea1eefe8129cbb49a5bba31526c9094881db18fd0c15e0809f5d94a24a61ebdf4", @ANYRES32=0x1, @ANYBLOB="000000000000000018000000000000e00000000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.970851379s ago: executing program 1 (id=3974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0xa, 0x5dad) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050027bd7000fbdbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="000001007918ff564a8682b8b79bbdd328db4b43ebfb0ac01efcc06a8f56e4c3fdf456629316713715b4ecc64339e75fd04d7f40b01a11a8ef8148667328c66e4e1d4cdb4e75a191dacbfed01c38370a0b000000789fdf8cf5c08bf6a8338cfd7dcafa900a91e012f571bd590be8ccab49b748deaa25a1fb46d76b04aa92b1c82ec3d285a2"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r7, 0x200, 0x1, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3ff, 0x42}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.930415607s ago: executing program 3 (id=3975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f0000000180)) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0x0, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) syz_emit_ethernet(0x0, 0x0, 0x0) 1.766882611s ago: executing program 4 (id=3977): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a80)={0x84, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x4000) recvmsg$can_raw(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000180)=""/27, 0x1b}], 0x2}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x10, '\x00', @mcast1}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xe4, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xae, 0xa8, @random="67c0d7aa510cd79f9c6c12a1d9cbd68866d5edb5a9231813ad1e9c1c1afc035e28e00ec13ec350314eca72f7bd3b91bc2f30a9fd1205fcc702ad9184372939189d298156e7e0ab3d6c3720000cbc56bd7fc59e73c4f7addb5a83b8bddc8be8770b6cb11d7ec38bca517d77eb9f81fc66ab80f59b9e657adc674fc440047ea579860df81a78a5b1046e69ff6f71068cdf67d08a466903131c50e0aeca35242f687c2fc9b869999645c48b"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x5, 0x90, [0x200000004bc0, 0x0, 0x0, 0x200000004dbe, 0x200000005172], 0x0, 0x0, &(0x7f0000004bc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x108) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)={0x250, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "e270fd16397b287738dd0f98a37b8f612f8b85e9f86af1efe231c3134a43e09d4da81f5923c6943720a9521e197af74783ef9840e3aeae69fd6173"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x43}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6557}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfb9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff42}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x611}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x36}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20000001}, 0x8080) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000010c0)=@filter={'filter\x00', 0xe, 0x2, 0xc8c, [0x0, 0x200000000400, 0x200000000e86, 0x20000000105c], 0x0, &(0x7f0000000000), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x9, 0x6000, 'wg2\x00', 'vlan0\x00', 'macvtap0\x00', 'geneve0\x00', @local, [0xff, 0x9255129ee601a8ff, 0xff, 0x0, 0xff], @multicast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x8c6, 0x926, 0xa56, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_team\x00', 'dvmrp1\x00', 0x1, 0x2, 0x80000000, 0xd, 0x4, 0x7, {0x2}, {0x3}}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x2, 0xab785acc95b2253e}, {0x9, 0x1}, {0x9, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x2, 0x3}, {0x5f, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x1000, 0x2}, {0xb16b}], [{0x8, 0x400}, {0x8, 0x8}, {0x6, 0x3}, {0x6, 0x9}, {0x700, 0x8}, {0x7, 0x1}, {0x9, 0xf}, {0x1, 0x4}, {0x8, 0x7}, {0xdd, 0x2}, {0x6}], 0x6, 0x9}, {[{0x4}, {0x8, 0x3}, {0x6}, {0x31000, 0x3}, {0xb5cb63e, 0x2}, {0x4, 0x2}, {0x9, 0x2}, {0x7, 0x3}, {0xebbd, 0x2}, {0x0, 0x1}, {0xf, 0x3}], [{0x6, 0x1}, {0x588, 0x8}, {0x4, 0x5}, {0x8001, 0x3ff}, {0x9, 0x3}, {0xfff, 0x8}, {0x7ff, 0x8}, {0x9, 0x100}, {0x5, 0x9}, {0x7fa, 0x9}, {0x0, 0xff}], 0x6, 0x7}, {[{0x7ff, 0x3}, {0x7, 0x2}, {0x2a6, 0x3}, {0x14, 0x3}, {0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x2}, {0x101, 0x1}, {0x9, 0x3}, {0x8000, 0x2}], [{0x9, 0x6}, {0xffffd9da, 0x100}, {0xb, 0x9}, {0x5, 0x13}, {0xc0000000}, {0x0, 0xf681}, {0x2, 0x7}, {0x7, 0x800}, {0x1, 0x721}, {0x0, 0x1}, {0xfc7a, 0x1}], 0x1, 0x3}, {[{0x3ff, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x8001}, {0x0, 0x2}, {0xfffffff9, 0x2}, {0x401}, {0x1d3}, {0x1}, {0x3, 0x2}, {0x7ff, 0x1}], [{0x2b, 0x1}, {0x7, 0x7}, {0x5, 0x1}, {0x7, 0xceea}, {0x7}, {0x6, 0x1}, {0x5f80000, 0x188d}, {0x4, 0xffffffff}, {0x2, 0x5}, {0x6, 0x7}, {0x4, 0x1}], 0x6, 0x7}, {[{0x4}, {0x4, 0x2}, {0x7}, {0x62e9}, {0x2, 0x1}, {0x7}, {0xba25, 0x2}, {0x6}, {0x8, 0x1}, {0xfffffffa}, {0x3}], [{0x8, 0x800}, {0x4, 0x2}, {0x0, 0x4}, {0x3}, {0xf25, 0x2}, {0xcb5, 0x2a4}, {0x8, 0x800}, {0xdee, 0xd}, {0x23177e6f, 0x526}, {0xfff, 0xf3}, {0x9, 0xe}], 0x8, 0xa}, {[{0x3ff, 0x3}, {0x80000001, 0x1}, {0x2, 0x3}, {0x2, 0x3}, {0x80000001, 0x3}, {0x2}, {0x2, 0x3}, {0x3, 0x2}, {0x8000, 0x1}, {0x3, 0x3}, {0x200, 0x2}], [{0x3, 0x4}, {0x8f3, 0x3}, {0xf, 0x2}, {0x2, 0x79d4ab1c}, {0x8, 0x7fffffff}, {0xc, 0x4}, {0x7, 0x6}, {0xf65}, {0x80, 0xd146}, {0x9, 0x80000000}, {0x4180, 0x1b9c}], 0x1, 0x9}, {[{0x10001}, {0x7, 0x1}, {0x4}, {0xe, 0x1}, {0x5, 0x1}, {0x6}, {0x7fffffff, 0x2}, {0x2}, {0x31}, {0xc, 0x1}, {0x6, 0x2}], [{0x6, 0xe08}, {0x9, 0xffff941f}, {0x4, 0x8}, {0x2, 0x3}, {0x9, 0xffffff00}, {0x1, 0x7}, {0x8, 0x7}, {0x9, 0x1}, {0x0, 0xfffffff7}, {0x5, 0x8}, {0x0, 0x7}], 0xa, 0x3}, {[{0x7, 0x1}, {0xffffffc0, 0x3}, {0xac4, 0x2}, {0xaa2, 0x2}, {0x1, 0x1}, {0xffffffff, 0x1}, {0x8, 0x3}, {0x4, 0x3}, {0x4}, {0xf, 0x2}, {0x4, 0x1}], [{0x1, 0x7}, {0x81, 0x9}, {0x4, 0x2}, {0x7, 0x8}, {0x4, 0x74}, {0x4, 0x4}, {0x7, 0x8001}, {0x8, 0xf}, {0x9, 0x8}, {0x1, 0x7fff}, {0x6, 0x4}], 0x9}, {[{0xffffffff}, {0xe, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x1, 0x2}, {0x9, 0x1}, {0x48, 0x3}, {0x9, 0x3}, {0x5, 0x2}, {0x7, 0x3}, {0x8, 0x1}], [{0x5, 0x7d}, {0x0, 0x2}, {0x9, 0xc6}, {0x6, 0xca69}, {0x1e}, {0x1, 0xfffffffe}, {0xfffffffb, 0x2}, {0x0, 0x4}, {0x1, 0x5}, {0x18, 0xe}, {0x1, 0x6}], 0x9, 0xb}, {[{0x101, 0x2}, {0x7, 0x3}, {0x1, 0x2}, {0x1000, 0x2}, {0x8, 0x1}, {0x81, 0x1}, {0x4, 0x1}, {0x6, 0x3}, {0x10, 0x1}, {0xfc, 0x3}, {0x9, 0x1}], [{0x8, 0x5}, {0x8, 0xd0}, {0x7fff, 0x1}, {0x0, 0x92}, {0x349a3e20, 0x5}, {0x9, 0xff}, {0x650, 0x7}, {0x6, 0x101}, {0xc, 0x4}, {0x8, 0x7ff}, {0x3, 0x930}], 0x6, 0x5}, {[{0x6, 0x1}, {0x9, 0x3}, {0x3}, {0x4, 0x2}, {0x7, 0x2}, {0x18335b60, 0x3}, {0xffffff80, 0x3}, {0x6}, {0x5, 0x2}, {0x10001, 0x3}, {0x10000, 0x2}], [{0xa}, {0x2, 0x80000001}, {0x81, 0x101}, {0x80, 0x800}, {0x4, 0x9}, {0x5}, {0x400, 0x2c7}, {0x0, 0xa5}, {0x4, 0xfffffffb}, {0x0, 0xffffffff}, {0xf6c, 0x27b5}], 0x0, 0xb}], 0x6, 0x1}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xc, 'system_u:object_r:ppp_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0x8000000000000003, 0x1, [{0x3, 0x74, 0x890d, 'xfrm0\x00', 'vlan0\x00', 'veth0_virt_wifi\x00', 'batadv_slave_0\x00', @local, [0xff, 0xff, 0x19b44dc84b241dd1, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff], 0xde, 0x176, 0x1a6, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth0_to_bridge\x00', 'pim6reg0\x00', 0x36, 0x3, 0x773da715, 0x94, 0xfffffffc, 0x1000, {0x8}, {0x8000000000000000}}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xc6, 0x0, {0x9}}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x8, {0xe5}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0xd04) socket$alg(0x26, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) accept4(r0, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a80)={0x84, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x4000) (async) recvmsg$can_raw(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000180)=""/27, 0x1b}], 0x2}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x10, '\x00', @mcast1}}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) (async) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xe4, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xae, 0xa8, @random="67c0d7aa510cd79f9c6c12a1d9cbd68866d5edb5a9231813ad1e9c1c1afc035e28e00ec13ec350314eca72f7bd3b91bc2f30a9fd1205fcc702ad9184372939189d298156e7e0ab3d6c3720000cbc56bd7fc59e73c4f7addb5a83b8bddc8be8770b6cb11d7ec38bca517d77eb9f81fc66ab80f59b9e657adc674fc440047ea579860df81a78a5b1046e69ff6f71068cdf67d08a466903131c50e0aeca35242f687c2fc9b869999645c48b"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x5, 0x90, [0x200000004bc0, 0x0, 0x0, 0x200000004dbe, 0x200000005172], 0x0, 0x0, &(0x7f0000004bc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x108) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)={0x250, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "e270fd16397b287738dd0f98a37b8f612f8b85e9f86af1efe231c3134a43e09d4da81f5923c6943720a9521e197af74783ef9840e3aeae69fd6173"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x43}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6557}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfb9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff42}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x611}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x36}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20000001}, 0x8080) (async) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000010c0)=@filter={'filter\x00', 0xe, 0x2, 0xc8c, [0x0, 0x200000000400, 0x200000000e86, 0x20000000105c], 0x0, &(0x7f0000000000), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x9, 0x6000, 'wg2\x00', 'vlan0\x00', 'macvtap0\x00', 'geneve0\x00', @local, [0xff, 0x9255129ee601a8ff, 0xff, 0x0, 0xff], @multicast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x8c6, 0x926, 0xa56, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1_to_team\x00', 'dvmrp1\x00', 0x1, 0x2, 0x80000000, 0xd, 0x4, 0x7, {0x2}, {0x3}}}}, @u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x2, 0xab785acc95b2253e}, {0x9, 0x1}, {0x9, 0x2}, {0x4, 0x2}, {0x3, 0x3}, {0x2, 0x3}, {0x5f, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x1000, 0x2}, {0xb16b}], [{0x8, 0x400}, {0x8, 0x8}, {0x6, 0x3}, {0x6, 0x9}, {0x700, 0x8}, {0x7, 0x1}, {0x9, 0xf}, {0x1, 0x4}, {0x8, 0x7}, {0xdd, 0x2}, {0x6}], 0x6, 0x9}, {[{0x4}, {0x8, 0x3}, {0x6}, {0x31000, 0x3}, {0xb5cb63e, 0x2}, {0x4, 0x2}, {0x9, 0x2}, {0x7, 0x3}, {0xebbd, 0x2}, {0x0, 0x1}, {0xf, 0x3}], [{0x6, 0x1}, {0x588, 0x8}, {0x4, 0x5}, {0x8001, 0x3ff}, {0x9, 0x3}, {0xfff, 0x8}, {0x7ff, 0x8}, {0x9, 0x100}, {0x5, 0x9}, {0x7fa, 0x9}, {0x0, 0xff}], 0x6, 0x7}, {[{0x7ff, 0x3}, {0x7, 0x2}, {0x2a6, 0x3}, {0x14, 0x3}, {0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x2}, {0x101, 0x1}, {0x9, 0x3}, {0x8000, 0x2}], [{0x9, 0x6}, {0xffffd9da, 0x100}, {0xb, 0x9}, {0x5, 0x13}, {0xc0000000}, {0x0, 0xf681}, {0x2, 0x7}, {0x7, 0x800}, {0x1, 0x721}, {0x0, 0x1}, {0xfc7a, 0x1}], 0x1, 0x3}, {[{0x3ff, 0x1}, {0x6, 0x3}, {0x6, 0x2}, {0x8001}, {0x0, 0x2}, {0xfffffff9, 0x2}, {0x401}, {0x1d3}, {0x1}, {0x3, 0x2}, {0x7ff, 0x1}], [{0x2b, 0x1}, {0x7, 0x7}, {0x5, 0x1}, {0x7, 0xceea}, {0x7}, {0x6, 0x1}, {0x5f80000, 0x188d}, {0x4, 0xffffffff}, {0x2, 0x5}, {0x6, 0x7}, {0x4, 0x1}], 0x6, 0x7}, {[{0x4}, {0x4, 0x2}, {0x7}, {0x62e9}, {0x2, 0x1}, {0x7}, {0xba25, 0x2}, {0x6}, {0x8, 0x1}, {0xfffffffa}, {0x3}], [{0x8, 0x800}, {0x4, 0x2}, {0x0, 0x4}, {0x3}, {0xf25, 0x2}, {0xcb5, 0x2a4}, {0x8, 0x800}, {0xdee, 0xd}, {0x23177e6f, 0x526}, {0xfff, 0xf3}, {0x9, 0xe}], 0x8, 0xa}, {[{0x3ff, 0x3}, {0x80000001, 0x1}, {0x2, 0x3}, {0x2, 0x3}, {0x80000001, 0x3}, {0x2}, {0x2, 0x3}, {0x3, 0x2}, {0x8000, 0x1}, {0x3, 0x3}, {0x200, 0x2}], [{0x3, 0x4}, {0x8f3, 0x3}, {0xf, 0x2}, {0x2, 0x79d4ab1c}, {0x8, 0x7fffffff}, {0xc, 0x4}, {0x7, 0x6}, {0xf65}, {0x80, 0xd146}, {0x9, 0x80000000}, {0x4180, 0x1b9c}], 0x1, 0x9}, {[{0x10001}, {0x7, 0x1}, {0x4}, {0xe, 0x1}, {0x5, 0x1}, {0x6}, {0x7fffffff, 0x2}, {0x2}, {0x31}, {0xc, 0x1}, {0x6, 0x2}], [{0x6, 0xe08}, {0x9, 0xffff941f}, {0x4, 0x8}, {0x2, 0x3}, {0x9, 0xffffff00}, {0x1, 0x7}, {0x8, 0x7}, {0x9, 0x1}, {0x0, 0xfffffff7}, {0x5, 0x8}, {0x0, 0x7}], 0xa, 0x3}, {[{0x7, 0x1}, {0xffffffc0, 0x3}, {0xac4, 0x2}, {0xaa2, 0x2}, {0x1, 0x1}, {0xffffffff, 0x1}, {0x8, 0x3}, {0x4, 0x3}, {0x4}, {0xf, 0x2}, {0x4, 0x1}], [{0x1, 0x7}, {0x81, 0x9}, {0x4, 0x2}, {0x7, 0x8}, {0x4, 0x74}, {0x4, 0x4}, {0x7, 0x8001}, {0x8, 0xf}, {0x9, 0x8}, {0x1, 0x7fff}, {0x6, 0x4}], 0x9}, {[{0xffffffff}, {0xe, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x1, 0x2}, {0x9, 0x1}, {0x48, 0x3}, {0x9, 0x3}, {0x5, 0x2}, {0x7, 0x3}, {0x8, 0x1}], [{0x5, 0x7d}, {0x0, 0x2}, {0x9, 0xc6}, {0x6, 0xca69}, {0x1e}, {0x1, 0xfffffffe}, {0xfffffffb, 0x2}, {0x0, 0x4}, {0x1, 0x5}, {0x18, 0xe}, {0x1, 0x6}], 0x9, 0xb}, {[{0x101, 0x2}, {0x7, 0x3}, {0x1, 0x2}, {0x1000, 0x2}, {0x8, 0x1}, {0x81, 0x1}, {0x4, 0x1}, {0x6, 0x3}, {0x10, 0x1}, {0xfc, 0x3}, {0x9, 0x1}], [{0x8, 0x5}, {0x8, 0xd0}, {0x7fff, 0x1}, {0x0, 0x92}, {0x349a3e20, 0x5}, {0x9, 0xff}, {0x650, 0x7}, {0x6, 0x101}, {0xc, 0x4}, {0x8, 0x7ff}, {0x3, 0x930}], 0x6, 0x5}, {[{0x6, 0x1}, {0x9, 0x3}, {0x3}, {0x4, 0x2}, {0x7, 0x2}, {0x18335b60, 0x3}, {0xffffff80, 0x3}, {0x6}, {0x5, 0x2}, {0x10001, 0x3}, {0x10000, 0x2}], [{0xa}, {0x2, 0x80000001}, {0x81, 0x101}, {0x80, 0x800}, {0x4, 0x9}, {0x5}, {0x400, 0x2c7}, {0x0, 0xa5}, {0x4, 0xfffffffb}, {0x0, 0xffffffff}, {0xf6c, 0x27b5}], 0x0, 0xb}], 0x6, 0x1}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xc, 'system_u:object_r:ppp_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0x8000000000000003, 0x1, [{0x3, 0x74, 0x890d, 'xfrm0\x00', 'vlan0\x00', 'veth0_virt_wifi\x00', 'batadv_slave_0\x00', @local, [0xff, 0xff, 0x19b44dc84b241dd1, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff], 0xde, 0x176, 0x1a6, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth0_to_bridge\x00', 'pim6reg0\x00', 0x36, 0x3, 0x773da715, 0x94, 0xfffffffc, 0x1000, {0x8}, {0x8000000000000000}}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xc6, 0x0, {0x9}}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x8, {0xe5}}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0xd04) (async) 1.656584958s ago: executing program 0 (id=3978): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000100"/33], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda108000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001801000020786c250000000000202020db1af8ff41000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp=0x25, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 1.598146169s ago: executing program 2 (id=3979): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002007379"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@gettaction={0x2c, 0x32, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000010000000102000000ffdbcf25187c0000"], 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000013c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4855}, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x9}, {0x9, 0xf}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x48212b8952c3aff5, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x700) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.458861449s ago: executing program 0 (id=3980): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@fallback=r1, 0x11, 0x0, 0x8001, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0]}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x3, 0x6, 0x86}, 0x65}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'veth0_to_hsr\x00', @broadcast}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r2, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00000000", 0x31}, {&(0x7f0000001300)="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", 0xcde}, {&(0x7f0000000440)="c91d588b87bd12b736780a766e3ebca34836bf87f46f8027511d29f92e1a4e8bd5fb5367cef57a6d8db59a972c54efc7ece9c07cb4a0921d4a2320d73ff2d3c54d7af0deecef81ce277562dde92e480b2cf42e52cc039c43fea94e730feb6f5cad427446e7357d255248ab48a0b733cc2c7541488d63b8f6d2c4f0e03ac8faecc74486b2cfb59a28d701271dc07ef9d82e0ce78bca83048caf47fedf4f4df5863a2f849b5fc6ef0b49bf7a26954143da754b6b15", 0xb4}, {&(0x7f0000000640)="a5ca8683d601768d303ca112b53e7aa9b7692478467c2525cc9ceb426e1c40e3b29380122d838019715ede6740900e4a5b9097b6713ba207b45f64e07e8d44f24c842b84e2c5c3d4175f2c59ef949b2cfb2b1722cf08388fed3e7ff321bda9f2a0744407b6a38593ab8ff05b41a7bc10f7424c9da00d3b2dea193936dbae3b28e7f3ab2ec79d512847fce7d00e40c1e127d871123a121c8c684d714b81314f94d74e8dd61d5bff0f7a86dc7452ce6fcdb767dc9953058022e5f082d4024350a9e1d65f80844770359a06b0554bd065b79ede8b2138a0eda7a68ba7fd4240630196a25d1f5f1e15a09f29d7eb0203d30f03d926b6d87dd44a55d4794bcc7f6157b9376d046f30af1ac7464b32a655976a27d8baebcb440d211d60baa353b30fc2a967c9827f4fe99c20abfdbff7b2c090ece74acb8e286dc583d0b86fe35e8871164b76e5f17461533959cb2e8516c119112bbf8e7262c0c832593c0f8b75d0bccf88b73433c4a3236455b3941e18378bc11a236b8f82a546e8eaaa6b9f9cbf743e11859eca79a9930c748551db30c8197ff8fdc17da89b97ef13d91daa0c4fb542341af6efb8ee4b44fb6d7601cbb5639b8954cabc5758973f5a66d5403d5944de6bca1498cf6f9ea1850d6423895684bb4a229b14e0801ac4d9fa018e9544c5003f066b4df45a7b01f00eaa6a1e77586209b0ccb9700c2a0eef8cca34f58808e58bc8", 0x203}, {&(0x7f00000008c0)="f60f27117e4a8ca5f38ea69db4650925c916adc0dd9095173532452d876e9f077dddbfab219f37cc4d529aff0800000000000000", 0x34}], 0x5}, 0x4005) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r0, @ANYBLOB="0600000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="03000000000000000400"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0xb, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x37}, 0x94) 1.404519423s ago: executing program 4 (id=3981): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0xc3355000) socket(0x29, 0x2, 0x3) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7}, 0x0) 1.29412917s ago: executing program 3 (id=3982): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x3d0, 0x1398, 0x1398, 0x3d0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x2b8, 0x2e0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x8, 0x7c7, 0x5d, 0x2, 0x4, 0x2, 0x99, 0x0, 0x80, 0x78}, {0x8000000000000001}}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0xff000000, 0xffff00], 0x0, 0x8, 0x89, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0010000000c4705d150a63cd414297e6", @ANYRES32, @ANYBLOB="080003001900000008001b0000000000"], 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x3d0, 0x1398, 0x1398, 0x3d0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x2b8, 0x2e0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x8, 0x7c7, 0x5d, 0x2, 0x4, 0x2, 0x99, 0x0, 0x80, 0x78}, {0x8000000000000001}}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0xff000000, 0xffff00], 0x0, 0x8, 0x89, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0010000000c4705d150a63cd414297e6", @ANYRES32, @ANYBLOB="080003001900000008001b0000000000"], 0x3c}}, 0x0) (async) 1.140390301s ago: executing program 2 (id=3983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1100, 0x2}}]}, 0x24}}, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'lo\x00', 0x3}, 0x18) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800612061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 1.06913033s ago: executing program 3 (id=3984): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0x10010, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xe, &(0x7f0000002200)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls=0x2e, r0, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0xfffffffe, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) accept4(r0, &(0x7f00000010c0)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000001140)=0x80, 0x80400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="12c3f3900a1487888800db27801ce461cd69c5aa0eebd0e719d338085784c0f9453d9127db7ef0041747", 0x2a}, {&(0x7f0000000300)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51", 0x17}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0, 0x0}}, 0x10) connect$vsock_stream(r2, &(0x7f0000001080)={0x28, 0x0, 0x2711, @local}, 0x10) 951.609894ms ago: executing program 1 (id=3985): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0xb}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000005}, 0x4000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='.\'{\xc4}(W()::\x00', 0x0, &(0x7f0000000200)={@align=0x7fffffff, {0x6, 0x316, 0xfffffffd, 0xfd}}, 0x10000, &(0x7f0000000240), &(0x7f0000000280)=0x3}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x12c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8004}, 0x20048041) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x290, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6ee1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @empty, 0x469}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcc4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xd5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf161}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x40}, 0x4000881) syz_80211_inject_frame(&(0x7f00000008c0)=@device_b, &(0x7f0000000900)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x2}, @random="7cdfb6de0805", @broadcast, @random="ea2b44c5b9d7", {0x5, 0x8}, "", @void, @value=@ver_80211n={0x0, 0x5, 0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0xbe, "d1cfb87981ae8029bd3cf0f94288986e55dca153c145b8400b9fccd22745a1c696bd0459de60bdcb8691c85439e797cca9803b2f6aae7af6375d9caa7e8c9d8228ac4147820303bc23a97048a271a70f5011dbb773206b5f16877e299092acd227611e1940e60cb27bff93d0f37364ed4128cdb1726e2f38bf9c2e2565aa78e215198af362204b66552ce707d4350981c553dcbaf93c949f37fe66f1caad364fe96417c0cc969d8d56c5686489e1d5cb2e0081f16b2e576cda5b13aba1fb"}, {@device_a, @broadcast, 0x27, "4617aea2cd9854fdf49ee9f265a280ccd1acce9b2fb482090c74e825fd0e79ee8d735e718b93cc"}, {@device_b, @device_a, 0x2b, "dc8d71f3ecad27d5da7b29fafd9bb61ce9e97c7871747ef7596f43f8035cbcb61c9e6af0e0841adb14ddc3"}]}, 0x15c) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000ac0), r3) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x22841854e8806988}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x40c0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r3) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x70, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x48880}, 0x85) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r3) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r9, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xa0}, 0x40850) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001100)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x10, 0x8, 0x5, 0x8, {{0x2d, 0x4, 0x3, 0x9, 0xb4, 0x65, 0x0, 0x7f, 0x29, 0x0, @remote, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xa1, 0x3, 0xe, [{@remote, 0x5}, {@local, 0x40}]}, @timestamp={0x44, 0x2c, 0x3e, 0x0, 0x6, [0x8, 0x6, 0x10000, 0x3, 0x8, 0x8, 0x6, 0x74d3cf27, 0xff000000, 0x69]}, @timestamp_addr={0x44, 0x24, 0x61, 0x1, 0x2, [{@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x2}, {@multicast1, 0x5d59}, {@private=0xa010101, 0x3}]}, @generic={0x83, 0x8, "20404cbd53ee"}, @generic={0x82, 0x2}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x23, 0x0, [{0x0, 0x9, "1268e891f40fb7"}, {0x7, 0x3, "92"}, {0x2, 0xa, "f46f4f54960d7f6a"}, {0x7, 0x7, "383ce74cd1"}]}]}}}}}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x20, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xd4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @jmp={0x5, 0x1, 0x6, 0xa, 0xa, 0xfffffffffffffff0, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000f80)='GPL\x00', 0x3ff, 0x3f, &(0x7f0000000fc0)=""/63, 0x41100, 0x32, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001180)={0x3, 0x9, 0xa, 0x4}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000011c0)=[r3, r3, r3, r3, r3, r3, r3], &(0x7f0000001200)=[{0x2, 0x2, 0xf, 0x4}, {0x0, 0x5, 0x9, 0x1}, {0x5, 0x4, 0xa, 0x1}, {0x4, 0x5, 0xc, 0x6}, {0x3, 0x5, 0x4}, {0x1, 0x4, 0xf, 0xb}, {0x2, 0x5, 0x8, 0x4}, {0x2, 0x5, 0x10}], 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(r12, 0x1, 0x53, &(0x7f0000001380)={0x7, 0x7, 0x3}, &(0x7f00000013c0)=0x28) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000001680)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001640)={&(0x7f0000001440)={0x1c4, r8, 0x20, 0x70bd25, 0x5, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001700)=@o_path={&(0x7f00000016c0)='./file0\x00', 0x0, 0x10, r4}, 0x18) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001740)={0x0, 0x80000001, 0x8, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r11, 0xc4009420, &(0x7f0000001b40)={0x0, 0x7, {0x4, @struct={0x5, 0x80000001}, 0x0, 0xfffffffffffffc23, 0x3, 0x6, 0x8000, 0x4a82a5d9, 0x41a, @struct={0x10001, 0x6f44}, 0x4, 0x9, [0xe, 0x6, 0xfffffffffffffff8, 0x5, 0x5c9, 0x1]}, {0x7fff, @usage=0xffff, 0x0, 0x6, 0x6, 0x9, 0xf, 0x9, 0x1, @struct={0x0, 0x800}, 0x0, 0x7, [0xfffffffffffff000, 0x5, 0xffffffff, 0x200, 0x7, 0x1e]}, {0x4, @struct={0x3f0c, 0x4}, 0x0, 0x1000, 0x5, 0xe3d0, 0x8, 0x5, 0x830, @struct={0x3, 0x2}, 0x8, 0x2, [0x9, 0xa44, 0x2, 0x2, 0x7f, 0x7]}, {0xe8e0, 0x3, 0x7fff}}) ioctl$BTRFS_IOC_BALANCE_V2(r13, 0xc4009420, &(0x7f0000001f40)={0x8, 0x7, {0x65, @struct={0x80, 0xfffffff9}, 0x0, 0x7, 0x3, 0x3, 0x6, 0x10001, 0x60, @struct={0x4, 0x8}, 0x200, 0x3, [0xffffffffffff0001, 0x200, 0x4ba6, 0x11, 0x6d0bd427, 0x2]}, {0x71, @struct={0x4, 0x4}, r14, 0x9, 0x3, 0x5, 0x0, 0x0, 0x80, @struct={0x6, 0x1}, 0x400, 0x1ff, [0x5, 0x0, 0xffffffffffff8000, 0x4, 0x3, 0xc]}, {0xffffffff80000001, @struct={0xfffffffb, 0xa5d4}, r15, 0x8, 0x76, 0x7, 0x5, 0x6, 0x0, @usage=0x1, 0xff, 0xd9e, [0x8, 0x3, 0x4, 0x1, 0x3, 0x6]}, {0x1, 0x9, 0x1}}) r16 = socket(0x17, 0x800, 0x0) sendmsg$inet(r3, &(0x7f00000026c0)={&(0x7f0000002340)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002640)=[{&(0x7f0000002380)="7ed8db539cd064d32e390c48b35228441d8fe7e22aa5a1c3def1bfe1a3b2ea4b350b6bacc817979f0b49a3b01e07fea0eb7a66ce6a612c41ece66e07baafa969b0a67e6b55093c6517d94fed32f109b031bdb54cb3", 0x55}, {&(0x7f0000002400)}, {&(0x7f0000002440)="22f72f8e57b2676096ff816d3fef5d3877072d42b34e9cd0b8d39818c79a27abdbb1f68b39c90e9bb3e551bb755fa1994158abfda7507e214fc4e424021739bdb84b530d9cc6b9c715e1b9f5585d57861f8ac78b321394128091b6e7869c61afef64862d8d0a7b1710b43450f13b7b09889b5e89466e25420175a1c9d3f42d6d21eaddca10b650db8c0d3ae7faabed3837a18094f585e2390b73c6c287a3f956", 0xa0}, {&(0x7f0000002500)="41f237cd76881c536383a9adabd27983eaa5b5c8726f239fb1abd899a3eb3c3c87fbe4e643526a291a13b104760558dbc88073fb12d82454b116275bd5b07cb7689bc770fcf48e0ec6d022352bbd3e64d271d89ec33baec5838df10757d47c3c5c0ae07c708d30f4aade36012da59145ac9580e3b97c22e606ec2942e793", 0x7e}, {&(0x7f0000002580)="ea2fb6285a8437c3b2eeca54da0bddef7cc8b90546a0cf243e9c74fee22b6702fad44c99e3b4c1fc5b5461204988272df5e7bc00922e35b6297d909f8e168cdd9d04d9d0d21b81869f8a937291efdd9ca0654fb02aab21e31fc858243d30ad14448d471277ce719fee0e0a61a9c69c33cbf73150306a46c8bfa9e36413dcc44aa5eed5", 0x83}], 0x5}, 0x14) getsockopt$bt_BT_DEFER_SETUP(r16, 0x112, 0x7, &(0x7f0000002700)=0x1, &(0x7f0000002740)=0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x44, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x80000000}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x30040004) 818.228902ms ago: executing program 3 (id=3986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0xfffffffd}, 0x48) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000390426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x9a}}, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup(r3, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) 816.398285ms ago: executing program 0 (id=3987): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r4, r4, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) accept4$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r6, &(0x7f00000000c0)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x2}}}, 0x5) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811207000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 815.483468ms ago: executing program 2 (id=3988): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xfffffd98, &(0x7f0000000140)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c0000002500090122bd7000fcffdfff5e0000000800030048"], 0x1c}, 0x1, 0x0, 0x0, 0xc0147}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="d11d92b3200dd64c61ce83ff32b20e433ec93ff2391cfa19bade25fc65bbf1bd1cba280f722e8fbf2444c7e98e52359d20495620258823724fc1f4d489be8affd513317d0a50ace5e7b72ce131cc1050168ac5bcf24e48d396f934eb6eef4de43f", @ANYRES64=r0], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) listen(r2, 0x0) (async) listen(r2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r5, &(0x7f0000003040)={&(0x7f0000001a00)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80, 0x0}, 0x0) recvmsg(r5, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40) (async) recvmsg(r5, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) recvmmsg(r1, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/239, 0xef}, {&(0x7f0000002180)=""/84, 0x54}, {&(0x7f0000002200)=""/85, 0x55}], 0x5, &(0x7f0000002300)=""/223, 0xdf}, 0x40}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002400)=""/53, 0x35}, {&(0x7f0000002440)=""/210, 0xd2}, {&(0x7f0000002540)=""/167, 0xa7}, {&(0x7f0000002600)=""/152, 0x98}, {&(0x7f00000026c0)=""/172, 0xac}], 0x5, &(0x7f0000002800)=""/85, 0x55}, 0x5}, {{&(0x7f0000002880)=@ll, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002900)=""/169, 0xa9}], 0x1, &(0x7f0000002a00)=""/84, 0x54}, 0x80000000}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1, &(0x7f0000003ac0)=""/94, 0x5e}, 0x5}, {{&(0x7f0000003b40)=@nfc, 0x80, &(0x7f0000005000)=[{&(0x7f0000003bc0)=""/80, 0x50}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/132, 0x84}, {&(0x7f0000004d00)=""/109, 0x6d}, {&(0x7f0000004d80)=""/208, 0xd0}, {&(0x7f0000004e80)=""/204, 0xcc}, {&(0x7f0000004f80)=""/89, 0x59}], 0x7}, 0x71}], 0x5, 0x120, &(0x7f00000051c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 632.696875ms ago: executing program 3 (id=3989): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000002200)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@empty]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x6}}}], 0x40}, 0x4000000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003300)={0x6, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000cd335b29000000008100000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000000000000000185a000009000000000000000000000059000000000000000000205b0001fcffffff8520000005000000852000000100000018250000", @ANYRES32=r2, @ANYBLOB="000000000900000070860900000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000002240)=""/4096, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003240)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000003280)={0x1, 0xf, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000032c0)=[r2], 0x0, 0x10, 0x8}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000580)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x5, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYRES32=r0], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) r8 = openat$cgroup_ro(r7, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), r8) sendmsg$FOU_CMD_GET(r7, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r10, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24044018) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x1, 0x0, &(0x7f0000000140)) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x1, &(0x7f0000000c00)=""/4096, &(0x7f0000001c00)=0x1000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_eeprom={0xb, 0x4c5, 0xfd, 0x9b, "bc41a604eecde02112d90d60942b9a3465dfc8eb8dd2ff5754d33d9f3dc622687c7c9c732acbad1aa6482790ae86e7bed56abcde9bfe52dcae2ef87c76e71cbcf554cc943447eba355b4d7926089351328b7aadec603ef968ad758d42eddb06bde497a19422ae5575fcc7b3906d80febadbff45a773821b289720567863abc174f20921c3e85b3539d1d91bdf2e19cc4b8bacf1e1d469db935e0c8"}}) 498.680772ms ago: executing program 2 (id=3990): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x9592, 0x400, 0x9, 0x0, 0x21, 0x80, 0x5}, &(0x7f00000000c0)=0x9c) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, r3, 0x2, {0x2, 0x0, 0x6}, 0xfd}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r3, 0x2, {0x1, 0xff, 0x1}}, 0x18) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x2, 'syz1\x00', @bcast, 0x40005, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) 354.184485ms ago: executing program 0 (id=3991): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r2, 0x25, 0x4, @void}, 0x10) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r4, 0x4, r4}, 0x5) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, 0x0, 0x0, 0xe8469dacf6017451}, 0x20) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, 0x0, 0x0, 0x0) (async) connect$rose(r9, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r9) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr, @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 242.536098ms ago: executing program 2 (id=3992): r0 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2b70696473202d726c696d697420f4cf070cbaff729f6ce3553f728817196a5d8c126f0120a94e383a94d6c889f9b9e2596f94b1f5083ca485b3f5a2eff59500677ff549b62e907decc9dffe43f43b52e7bb45e051abea1aeca8be3aa819f0801d718325efde34b9164a5cc83578c631603ecb95dc45d5fc30c7c0ffbb053f509675965dd9257a8ff83de3b7f49bd07c52150cdc5316852974002197f60881b80dbc88f92ac59d771bff80d540156954b059"], 0xe) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x16, 0x2, 0x1, 0x40000000}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200db9f0000000000000800450000240100000000119078e000000100004e200010907862c0000180000000000000001baa8bb18adc06bccb05083f606e8eb717ad475b3691670719e299272206b4b628c8140f0387f476e1fb45a4e6"], 0x0) 148.616864ms ago: executing program 3 (id=3993): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 94.780714ms ago: executing program 0 (id=3994): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x0, 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f00000013c0)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x700, 0x80, 0x2, 0x40, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x68, 0x0, 0x8c, 0x29, 0x0, @loopback, @remote, {[@generic={0xc7, 0x11, "998dfae43f1706e0ed76fe4ca8398b"}]}}}}}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x6}, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000015000100000000000000000002000000", @ANYRES32, @ANYBLOB="1400030076657468315f746f5fb0e7e13ed58465"], 0x2c}}, 0x0) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0xb2, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, r2, 0x5, 0x3, 0x1}, 0x50) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r14, 0x0) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xd4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0x12, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd420}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0xfff, 0xcb, &(0x7f0000000440)=""/203, 0x40f00, 0x0, '\x00', r6, @fallback=0xe, r2, 0x8, &(0x7f0000000600)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x8, 0x8, 0x10001}, 0x10, r3, 0xffffffffffffffff, 0x5, &(0x7f0000000940)=[r7, r8, r11, r12, 0x1, r13, r14, r15, r16], &(0x7f0000000980)=[{0x5, 0x2, 0xa, 0x7de9cdb5e0f8cadc}, {0x4, 0x1, 0x6, 0x4}, {0x4, 0x1, 0x10, 0x7}, {0x2, 0x1, 0x7, 0x9}, {0x2, 0x5, 0x1, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000", @ANYRESOCT=r2, @ANYRESOCT=r3, @ANYRESDEC=r3], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94) 94.260107ms ago: executing program 2 (id=3995): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xecdadbed8235cf72, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) 22.918787ms ago: executing program 4 (id=3996): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='}&\x00', 0x101000, &(0x7f0000000040)={@align=0xfffffffffffffffa, {0x1, 0x9, 0x5, 0xebf2}}, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x9}) sendto$ax25(r1, &(0x7f0000000140)="ddd16e328ebf28f867fc81a39fbfd5192b35c5c0d0c0cfa41b5f51e4c3a1d4868ae9da76402cee8780ae17a2ac9333b0db5144850893328cf2386b5bec60b4589500be8f682c99c55fbfc557e3ebdb1c72f51a65221debcc0cc7a0e5bedd319989ed1ef6eacf11176f23e9f06e85e4f53267add0847d2fe983d93185c3f10d4571955ef56f7321024987f9f42cc93e39c3239a4eb8cd92ae41864791ebcc96b9f7dbe5fc4e1a78c61bea700ca16633", 0xaf, 0x40000, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0xa0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) shutdown(r3, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x40000000, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000001180)={{r0}, "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"}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 0s ago: executing program 1 (id=3997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x100a00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x203) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af000000180100002020702500000000002020207b1af8ff00000000dba100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) kernel console output (not intermixed with test programs): 0): Setting fail_over_mac to active for active-backup mode [ 345.882950][T15624] bond11: (slave vti0): making interface the new active one [ 345.909193][T15624] vti0: entered promiscuous mode [ 345.924984][T15624] bond11: (slave vti0): Enslaving as an active interface with an up link [ 346.124897][T15647] __nla_validate_parse: 46 callbacks suppressed [ 346.124919][T15647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2561'. [ 346.605619][T15671] syzkaller0: entered promiscuous mode [ 346.627319][T15671] syzkaller0: entered allmulticast mode [ 346.947665][T15689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2575'. [ 347.005101][T15683] xt_CT: No such helper "snmp_trap" [ 347.186862][T15698] wg0: mtu less than device minimum [ 347.257846][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2580'. [ 347.485810][T15719] sctp: [Deprecated]: syz.2.2585 (pid 15719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.485810][T15719] Use struct sctp_sack_info instead [ 347.605689][T15724] vlan2: entered promiscuous mode [ 347.626397][T15724] vlan2: entered allmulticast mode [ 347.655355][T15724] hsr_slave_1: entered allmulticast mode [ 347.895574][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2590'. [ 348.126600][T15749] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2594'. [ 348.226453][T15752] sctp: [Deprecated]: syz.3.2593 (pid 15752) Use of int in max_burst socket option. [ 348.226453][T15752] Use struct sctp_assoc_value instead [ 348.342434][T15757] syzkaller0: entered promiscuous mode [ 348.360215][T15757] syzkaller0: entered allmulticast mode [ 348.837625][T15774] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2603'. [ 348.859449][T15774] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.2603'. [ 349.179145][T15785] netlink: 'syz.2.2606': attribute type 1 has an invalid length. [ 349.311487][T15791] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 349.331480][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2606'. [ 349.366636][T15785] bond9 (unregistering): (slave ip6gretap1): Releasing backup interface [ 349.381358][T15785] bond9 (unregistering): Released all slaves [ 349.383108][T15778] nbd2: detected capacity change from 0 to 63 [ 349.416660][ T5855] block nbd2: Receive control failed (result -32) [ 349.419204][T10437] block nbd2: Send control failed (result -32) [ 349.426922][ T5849] block nbd2: Receive control failed (result -32) [ 349.441533][T10437] block nbd2: Request send failed, requeueing [ 349.457423][ T1647] block nbd2: Dead connection, failed to find a fallback [ 349.467109][ T1647] block nbd2: shutting down sockets [ 349.472905][ T1647] blk_print_req_error: 138 callbacks suppressed [ 349.472924][ T1647] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.488572][ T1647] buffer_io_error: 138 callbacks suppressed [ 349.488590][ T1647] Buffer I/O error on dev nbd2, logical block 0, async page read [ 349.503360][T10437] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.527403][T10437] Buffer I/O error on dev nbd2, logical block 1, async page read [ 349.537337][T10437] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.546551][T10437] Buffer I/O error on dev nbd2, logical block 2, async page read [ 349.555266][T10437] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.580913][T10437] Buffer I/O error on dev nbd2, logical block 3, async page read [ 349.607730][T10437] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.660848][T10437] Buffer I/O error on dev nbd2, logical block 0, async page read [ 349.700641][T10437] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.719901][T10437] Buffer I/O error on dev nbd2, logical block 1, async page read [ 349.722190][T15798] veth0_to_bond: entered allmulticast mode [ 349.738814][T10437] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.765514][T10437] Buffer I/O error on dev nbd2, logical block 2, async page read [ 349.781340][T10437] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.801764][T10437] Buffer I/O error on dev nbd2, logical block 3, async page read [ 349.810029][T10437] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.823014][T14477] bond8: (slave veth0_to_bond): link status definitely down, disabling slave [ 349.856606][T14477] bond8: now running without any active interface! [ 349.863810][T10437] Buffer I/O error on dev nbd2, logical block 0, async page read [ 349.873006][T10437] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.895235][T10437] Buffer I/O error on dev nbd2, logical block 1, async page read [ 349.924173][T10437] ldm_validate_partition_table(): Disk read failed. [ 349.945285][T10437] Dev nbd2: unable to read RDB block 0 [ 349.962761][T15807] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.2610'. [ 349.979672][T10437] nbd2: unable to read partition table [ 350.008644][T10437] ldm_validate_partition_table(): Disk read failed. [ 350.019231][T10437] Dev nbd2: unable to read RDB block 0 [ 350.028212][T10437] nbd2: unable to read partition table [ 350.074572][T15809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2611'. [ 350.088365][T15809] tipc: Started in network mode [ 350.095344][T15809] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 350.105436][T15809] tipc: Enabling of bearer rejected, failed to enable media [ 350.703312][T15823] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 350.731346][T15823] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 350.792897][T15823] tipc: Started in network mode [ 350.810328][T15823] tipc: Node identity 080211000001, cluster identity 4711 [ 350.819002][T15823] tipc: Enabled bearer , priority 0 [ 350.869367][T15835] netlink: 'syz.4.2619': attribute type 1 has an invalid length. [ 350.896733][T15835] netlink: 'syz.4.2619': attribute type 2 has an invalid length. [ 351.146208][T15849] netlink: 'syz.3.2624': attribute type 11 has an invalid length. [ 351.157390][ T1103] tipc: Resetting bearer [ 351.186840][T15849] netlink: 'syz.3.2624': attribute type 11 has an invalid length. [ 351.203437][T15849] __nla_validate_parse: 3 callbacks suppressed [ 351.203459][T15849] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2624'. [ 351.463536][T15866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.648297][T15877] openvswitch: netlink: IPv4 tunnel dst address is zero [ 351.735708][T15881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2635'. [ 351.790085][T15883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2636'. [ 351.804787][T15883] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2636'. [ 351.881780][ T5903] tipc: Node number set to 134418688 [ 352.020793][T15886] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2637'. [ 352.058020][T15888] lo speed is unknown, defaulting to 1000 [ 352.112346][T15888] lo speed is unknown, defaulting to 1000 [ 352.125243][T15896] netlink: 212332 bytes leftover after parsing attributes in process `syz.2.2640'. [ 352.200833][T15900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'. [ 352.634634][T15918] bridge_slave_0 (unregistering): left allmulticast mode [ 352.642364][T15918] bridge_slave_0 (unregistering): left promiscuous mode [ 352.653978][T15918] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.729334][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'. [ 352.801933][T15926] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2648'. [ 352.999584][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 353.199257][T15948] bridge0: port 3(team0) entered blocking state [ 353.205816][T15948] bridge0: port 3(team0) entered forwarding state [ 353.212831][T15948] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.220218][T15948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.227722][T15948] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.235927][T15948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.293009][T15948] bridge0: port 3(team0) entered disabled state [ 353.299597][T15948] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.307273][T15948] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.366090][T16005] netlink: 'syz.4.2671': attribute type 29 has an invalid length. [ 354.375519][T16005] netlink: 'syz.4.2671': attribute type 29 has an invalid length. [ 354.521806][T16015] x_tables: duplicate underflow at hook 1 [ 354.695237][T16027] netlink: 'syz.3.2677': attribute type 1 has an invalid length. [ 354.707153][T16027] netlink: 'syz.3.2677': attribute type 2 has an invalid length. [ 354.727570][T16027] netlink: 'syz.3.2677': attribute type 1 has an invalid length. [ 355.010826][T16043] netlink: 'syz.1.2682': attribute type 1 has an invalid length. [ 355.091785][T16043] 8021q: adding VLAN 0 to HW filter on device bond12 [ 355.117371][T16047] bond4: (slave veth0_to_bond): Releasing active interface [ 355.205099][T16047] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 355.245972][T16043] bond12: entered promiscuous mode [ 355.267295][T16043] bond12: entered allmulticast mode [ 355.367570][T16067] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 355.645712][T16084] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 355.657549][T16080] syzkaller1: entered promiscuous mode [ 355.665768][T16080] syzkaller1: entered allmulticast mode [ 355.695569][T16084] netlink: 'syz.2.2691': attribute type 4 has an invalid length. [ 356.197379][T16117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.305039][T16123] __nla_validate_parse: 51 callbacks suppressed [ 356.305061][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2700'. [ 356.326848][T16123] validate_nla: 2 callbacks suppressed [ 356.326866][T16123] netlink: 'syz.4.2700': attribute type 7 has an invalid length. [ 356.344325][T16123] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2700'. [ 356.472304][T16134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2700'. [ 358.734712][ T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.937922][T16094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.162875][T16145] xt_hashlimit: size too large, truncated to 1048576 [ 359.300560][T16162] netlink: 'syz.3.2708': attribute type 1 has an invalid length. [ 359.387981][T16162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2708'. [ 359.818096][T16183] netlink: 'syz.2.2716': attribute type 4 has an invalid length. [ 359.852366][T16183] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2716'. [ 359.992760][T16190] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 360.566147][T16212] netlink: 'syz.4.2724': attribute type 1 has an invalid length. [ 360.590988][T16216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.618601][T16216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.643659][T16216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.659540][T16212] 8021q: adding VLAN 0 to HW filter on device bond11 [ 360.735564][T16223] vlan1: entered promiscuous mode [ 360.747597][T16216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.752301][T16223] bond11: entered promiscuous mode [ 360.762741][T16223] vlan1: entered allmulticast mode [ 360.766796][T16216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.781322][T16223] bond11: entered allmulticast mode [ 360.869229][T16226] bond11: (slave bridge7): making interface the new active one [ 360.887900][T16226] bridge7: entered promiscuous mode [ 360.903983][T16226] bridge7: entered allmulticast mode [ 360.937072][T16226] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 361.361698][T16250] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2731'. [ 361.364413][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2732'. [ 361.400222][T16250] nbd: illegal input index -8454144 [ 361.682374][T16262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2735'. [ 362.240860][T16277] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 362.272484][T16277] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 362.273997][T16249] infiniband syz1: set down [ 362.306548][T16249] infiniband syz1: added bond_slave_1 [ 362.315818][T16277] netlink: 'syz.3.2738': attribute type 5 has an invalid length. [ 362.367388][T16249] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 362.383683][T16249] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 362.401735][T16249] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 362.461925][T16249] RDS/IB: syz1: added [ 362.472960][T16249] smc: adding ib device syz1 with port count 1 [ 362.488981][T16249] smc: ib device syz1 port 1 has no pnetid [ 362.654867][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2743'. [ 362.744934][ T5855] block nbd3: Receive control failed (result -32) [ 362.936444][T16307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2745'. [ 362.963691][T16309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2744'. [ 363.322002][T16327] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2752'. [ 363.734590][T16339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2757'. [ 363.910873][T16339] 8021q: adding VLAN 0 to HW filter on device bond12 [ 364.069482][T16339] 8021q: adding VLAN 0 to HW filter on device bond12 [ 364.107201][T16339] bond12: (slave vti0): The slave device specified does not support setting the MAC address [ 364.136202][T16339] bond12: (slave vti0): Error -95 calling set_mac_address [ 364.152410][T16350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2760'. [ 364.257778][T16353] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2759'. [ 364.501876][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.609973][T16369] netlink: 'syz.3.2765': attribute type 5 has an invalid length. [ 364.793753][T16377] netlink: 'syz.3.2768': attribute type 14 has an invalid length. [ 364.804078][T16372] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.810438][T16377] netlink: 'syz.3.2768': attribute type 13 has an invalid length. [ 364.828791][T16372] netlink: 'syz.0.2767': attribute type 1 has an invalid length. [ 364.982041][T16380] netlink: 'syz.3.2769': attribute type 21 has an invalid length. [ 364.990824][T16380] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.062786][T16382] netlink: 'syz.0.2770': attribute type 2 has an invalid length. [ 365.081506][T16382] netlink: 'syz.0.2770': attribute type 1 has an invalid length. [ 365.097181][T16382] netlink: 'syz.0.2770': attribute type 1 has an invalid length. [ 365.233833][T16382] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.297573][T16388] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.332760][T16388] bond5: (slave vcan2): The slave device specified does not support setting the MAC address [ 365.351364][T16388] bond5: (slave vcan2): Error -95 calling set_mac_address [ 366.257779][T16430] netlink: 'syz.3.2782': attribute type 10 has an invalid length. [ 366.355278][T16430] bridge_slave_1: left allmulticast mode [ 366.390094][T16430] bridge_slave_1: left promiscuous mode [ 366.402661][T16430] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.659220][T16448] __nla_validate_parse: 4 callbacks suppressed [ 366.659243][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2787'. [ 366.831080][T16448] bond10: option xmit_hash_policy: invalid value (64) [ 366.852373][T16448] bond10 (unregistering): Released all slaves [ 367.345608][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2795'. [ 367.389591][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2795'. [ 367.540926][T16489] vlan6: entered promiscuous mode [ 367.561395][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2800'. [ 367.616024][T16492] netlink: 'syz.3.2800': attribute type 11 has an invalid length. [ 367.644549][T16492] netlink: 'syz.3.2800': attribute type 11 has an invalid length. [ 367.658945][T16492] netlink: 'syz.3.2800': attribute type 11 has an invalid length. [ 367.671257][T16492] netlink: 199700 bytes leftover after parsing attributes in process `syz.3.2800'. [ 367.703777][T16491] netlink: 'syz.3.2800': attribute type 11 has an invalid length. [ 367.723070][T16491] netlink: 'syz.3.2800': attribute type 11 has an invalid length. [ 367.742954][T16491] netlink: 'syz.3.2800': attribute type 11 has an invalid length. [ 367.769614][T16491] netlink: 199700 bytes leftover after parsing attributes in process `syz.3.2800'. [ 367.872322][T16508] openvswitch: netlink: Multiple metadata blocks provided [ 368.022267][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2807'. [ 368.358595][T16525] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.2811'. [ 368.487394][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.518115][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.529565][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.544416][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.553430][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.741916][T16529] lo speed is unknown, defaulting to 1000 [ 368.781332][T16529] lo speed is unknown, defaulting to 1000 [ 368.975180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.028456][ T5845] bond0: (slave syz_tun): Releasing backup interface [ 369.066318][ T5845] syz_tun (unregistering): left allmulticast mode [ 369.091242][T16553] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2817'. [ 369.614560][T16573] syzkaller1: entered promiscuous mode [ 369.639025][T16573] syzkaller1: entered allmulticast mode [ 370.002712][T16589] netlink: 'syz.3.2825': attribute type 4 has an invalid length. [ 370.256164][ T123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.650831][ T5849] Bluetooth: hci5: command tx timeout [ 370.766682][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2837'. [ 371.433933][T16645] netlink: 'syz.0.2843': attribute type 1 has an invalid length. [ 371.469534][T16529] chnl_net:caif_netlink_parms(): no params data found [ 371.479075][T16645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 371.486410][T16645] IPv6: NLM_F_CREATE should be set when creating new route [ 371.961488][T16671] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 371.985834][T16673] pimreg: entered allmulticast mode [ 372.005658][T16529] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.014668][T16529] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.022609][T16529] bridge_slave_0: entered allmulticast mode [ 372.033382][T16529] bridge_slave_0: entered promiscuous mode [ 372.043263][T16529] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.051048][T16529] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.058439][T16529] bridge_slave_1: entered allmulticast mode [ 372.084167][T16529] bridge_slave_1: entered promiscuous mode [ 372.099064][T16671] netlink: 'syz.0.2851': attribute type 1 has an invalid length. [ 372.141332][T16671] netlink: 'syz.0.2851': attribute type 4 has an invalid length. [ 372.180968][T16671] __nla_validate_parse: 3 callbacks suppressed [ 372.180989][T16671] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2851'. [ 372.222603][T16529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.256370][T16529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.286598][T16687] GUP no longer grows the stack in syz.3.2856 (16687): 200000003000-20000000a000 (200000001000) [ 372.322911][T16687] CPU: 1 UID: 0 PID: 16687 Comm: syz.3.2856 Not tainted syzkaller #0 PREEMPT(full) [ 372.322942][T16687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.322955][T16687] Call Trace: [ 372.322964][T16687] [ 372.322973][T16687] dump_stack_lvl+0xe8/0x150 [ 372.323015][T16687] __get_user_pages+0x2378/0x2720 [ 372.323055][T16687] ? __gup_longterm_locked+0xc4e/0x1630 [ 372.323096][T16687] ? __gup_longterm_locked+0xc4e/0x1630 [ 372.323118][T16687] ? down_read_killable+0x1bb/0x340 [ 372.323146][T16687] __gup_longterm_locked+0xdcf/0x1630 [ 372.323174][T16687] ? lock_acquire+0x106/0x350 [ 372.323227][T16687] gup_fast_fallback+0x1d84/0x20d0 [ 372.323296][T16687] ? __pfx_gup_fast_fallback+0x10/0x10 [ 372.323321][T16687] ? is_valid_gup_args+0x11f/0x200 [ 372.323345][T16687] ? get_user_pages_fast+0x4d/0xb0 [ 372.323371][T16687] __iov_iter_get_pages_alloc+0x370/0xa10 [ 372.323405][T16687] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 372.323438][T16687] iov_iter_get_pages2+0x5e/0xa0 [ 372.323467][T16687] __se_sys_vmsplice+0x7c7/0x1620 [ 372.323516][T16687] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 372.323545][T16687] ? __pfx_futex_wake+0x10/0x10 [ 372.323580][T16687] ? lockdep_hardirqs_on+0x7a/0x110 [ 372.323669][T16687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.323694][T16687] do_syscall_64+0x15f/0xf80 [ 372.323722][T16687] ? trace_irq_disable+0x3b/0x140 [ 372.323749][T16687] ? clear_bhb_loop+0x40/0x90 [ 372.323777][T16687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.323798][T16687] RIP: 0033:0x7f172df9cdd9 [ 372.323819][T16687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.323837][T16687] RSP: 002b:00007f172ee55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 372.323859][T16687] RAX: ffffffffffffffda RBX: 00007f172e215fa0 RCX: 00007f172df9cdd9 [ 372.323875][T16687] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 372.323889][T16687] RBP: 00007f172e032d69 R08: 0000000000000000 R09: 0000000000000000 [ 372.323901][T16687] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 372.323913][T16687] R13: 00007f172e216038 R14: 00007f172e215fa0 R15: 00007ffd1af64508 [ 372.323949][T16687] [ 372.602781][T16529] team0: Port device team_slave_0 added [ 372.618099][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2858'. [ 372.672056][T16702] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2859'. [ 372.681355][T16702] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2859'. [ 372.701536][T16694] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2857'. [ 372.703655][T16529] team0: Port device team_slave_1 added [ 372.740761][ T5849] Bluetooth: hci5: command tx timeout [ 372.749050][T16529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.757173][T16529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.783958][T16529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.797054][T16529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.804342][T16529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.831478][T16529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.989821][T16529] hsr_slave_0: entered promiscuous mode [ 373.002209][T16529] hsr_slave_1: entered promiscuous mode [ 373.017702][T16529] debugfs: 'hsr0' already exists in 'hsr' [ 373.061520][T16529] Cannot create hsr debugfs directory [ 373.080589][T16708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2862'. [ 373.215030][T16714] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 373.262416][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2864'. [ 373.321803][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2864'. [ 373.398195][T16724] netlink: 'syz.3.2864': attribute type 10 has an invalid length. [ 373.401490][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2864'. [ 373.527422][T16715] 8021q: adding VLAN 0 to HW filter on device bond10 [ 373.597161][T16714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.624388][T16714] bond10: (slave bond0): Enslaving as an active interface with a down link [ 373.775851][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2870'. [ 373.957696][T16738] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 373.998854][T16738] bond13 (unregistering): Released all slaves [ 374.344850][T16768] IPVS: set_ctl: invalid protocol: 51 172.20.20.31:20000 [ 374.505143][T16529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.813850][ T5849] Bluetooth: hci5: command tx timeout [ 374.819316][T16529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.881406][T16779] netlink: 'syz.3.2882': attribute type 1 has an invalid length. [ 374.948751][T16529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.243815][T16780] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 375.261149][T16780] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 375.375660][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.692720][T16799] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 375.701028][T16799] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 376.890601][ T5849] Bluetooth: hci5: command tx timeout [ 378.184230][T16790] lo speed is unknown, defaulting to 1000 [ 378.205566][T16790] lo speed is unknown, defaulting to 1000 [ 378.391124][T16824] __nla_validate_parse: 5 callbacks suppressed [ 378.391145][T16824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2891'. [ 378.431774][T16825] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2891'. [ 378.483926][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 378.664856][T16829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.808238][T16851] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2896'. [ 378.984391][T16529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 379.048707][T16529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.151635][T16529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 379.215298][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.227491][ T1317] clip:clip_start_xmit: skb_dst(skb) == NULL [ 379.235901][T16529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.311510][T16529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 379.324124][T16529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 379.332213][T16529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 379.351275][T16529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 379.613209][T16529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.650343][T16883] delete_channel: no stack [ 379.658136][T16529] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.695617][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.702905][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.742108][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.749339][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.543669][T16917] nbd: socks must be embedded in a SOCK_ITEM attr [ 380.698895][T16529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.724719][ T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9 [ 380.837282][T16529] veth0_vlan: entered promiscuous mode [ 380.852311][T16529] veth1_vlan: entered promiscuous mode [ 380.939686][T16938] pim6reg1: entered promiscuous mode [ 380.946059][T16938] pim6reg1: entered allmulticast mode [ 380.964445][T16529] veth0_macvtap: entered promiscuous mode [ 381.096407][T16529] veth1_macvtap: entered promiscuous mode [ 381.133191][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.188317][T16529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.188478][T16941] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2913'. [ 381.229002][T16529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.245605][ T123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.256069][ T123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.267619][ T123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.279120][ T123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.562266][T16946] netlink: 'syz.0.2914': attribute type 1 has an invalid length. [ 381.586922][T16946] bond7: entered promiscuous mode [ 381.592913][T16946] 8021q: adding VLAN 0 to HW filter on device bond7 [ 381.620242][T16946] bond7: (slave bridge10): making interface the new active one [ 381.628334][T16946] bridge10: entered promiscuous mode [ 381.635573][T16946] bond7: (slave bridge10): Enslaving as an active interface with an up link [ 381.739461][T16951] netlink: 'syz.0.2916': attribute type 3 has an invalid length. [ 381.775494][T16951] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2916'. [ 381.899061][T16954] ipt_REJECT: ECHOREPLY no longer supported. [ 381.944359][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2918'. [ 383.572033][T16927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.755502][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.787431][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.864383][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.883657][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.293130][T17012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2932'. [ 384.551066][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2936'. [ 385.000816][T17061] netlink: 'syz.2.2939': attribute type 1 has an invalid length. [ 385.555281][T17073] bond13: entered promiscuous mode [ 385.560856][T17073] bond13: entered allmulticast mode [ 385.567086][T17073] 8021q: adding VLAN 0 to HW filter on device bond13 [ 385.635873][T17074] bond14: entered promiscuous mode [ 385.641938][T17074] bond14: entered allmulticast mode [ 385.647707][T17074] 8021q: adding VLAN 0 to HW filter on device bond14 [ 385.656656][T17075] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.2940'. [ 385.715981][T17080] bond12: entered promiscuous mode [ 385.722018][T17080] 8021q: adding VLAN 0 to HW filter on device bond12 [ 386.040782][T17102] netlink: 'syz.2.2947': attribute type 83 has an invalid length. [ 386.086583][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'. [ 386.253061][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.319620][T17114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2952'. [ 386.394515][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.415252][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.428254][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.438197][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.459636][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.671890][T17111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2951'. [ 386.685650][T17113] tipc: Resetting bearer [ 386.702753][T17111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.836318][T17111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.847606][T17131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2955'. [ 386.881193][T17131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2955'. [ 387.026908][T17135] netlink: 'syz.2.2957': attribute type 1 has an invalid length. [ 387.162051][T17113] lo speed is unknown, defaulting to 1000 [ 387.193585][T17113] lo speed is unknown, defaulting to 1000 [ 387.360178][T17149] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2961'. [ 387.380572][T17149] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 387.395735][T17149] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2961'. [ 387.553751][T17155] netlink: 'syz.2.2964': attribute type 10 has an invalid length. [ 387.565062][T17155] syz_tun: entered promiscuous mode [ 387.617953][T17155] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 387.765769][T17160] batman_adv: batadv0: Adding interface: dummy0 [ 387.792714][T17160] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.820162][T17160] batman_adv: batadv0: Interface activated: dummy0 [ 387.885722][T17170] batadv0: mtu less than device minimum [ 387.934449][T17170] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.948900][T17170] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.961496][T17170] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.973544][T17170] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.985738][T17170] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 387.997594][T17170] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.009676][T17170] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.021904][T17170] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 388.393465][T17187] netlink: 'syz.4.2975': attribute type 10 has an invalid length. [ 388.447611][T17190] netlink: 'syz.4.2975': attribute type 10 has an invalid length. [ 388.467112][T17187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.501879][T17187] .`: (slave batadv0): Enslaving as an active interface with an up link [ 388.524522][T17189] syzkaller1: entered promiscuous mode [ 388.537034][T17189] syzkaller1: entered allmulticast mode [ 388.549190][T17190] batadv0: entered promiscuous mode [ 388.555862][T17190] batadv0: entered allmulticast mode [ 388.564411][T17190] .`: (slave batadv0): Releasing backup interface [ 388.578499][T17190] bridge0: port 3(batadv0) entered blocking state [ 388.585290][ T5855] Bluetooth: hci2: command tx timeout [ 388.592785][T17190] bridge0: port 3(batadv0) entered disabled state [ 388.604612][T17193] tipc: Enabling of bearer rejected, failed to enable media [ 389.100062][ T1097] batman_adv: batadv0: IGMP Querier appeared [ 389.107755][ T1097] batman_adv: batadv0: MLD Querier appeared [ 389.265309][T17214] tipc: Resetting bearer [ 389.372250][T17227] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.410936][T17113] chnl_net:caif_netlink_parms(): no params data found [ 389.844146][T17246] __nla_validate_parse: 5 callbacks suppressed [ 389.844168][T17246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2989'. [ 389.882572][T17113] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.901630][T17113] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.920515][T17113] bridge_slave_0: entered allmulticast mode [ 389.949061][T17113] bridge_slave_0: entered promiscuous mode [ 389.983145][T17113] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.992572][T17113] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.001213][T17113] bridge_slave_1: entered allmulticast mode [ 390.018499][T17113] bridge_slave_1: entered promiscuous mode [ 390.113753][T17259] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2992'. [ 390.126235][T17259] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2992'. [ 390.133231][T17113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.166193][T17113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.188671][T17260] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2992'. [ 390.299511][T17113] team0: Port device team_slave_0 added [ 390.319455][T17113] team0: Port device team_slave_1 added [ 390.463844][T17263] syzkaller0: entered promiscuous mode [ 390.470787][T17263] syzkaller0: entered allmulticast mode [ 390.501802][T17113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.519134][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.553285][T17113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.650713][ T5855] Bluetooth: hci2: command tx timeout [ 390.788609][T17113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.795974][T17113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.823920][T17113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.836247][T17280] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 390.994194][T17298] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.024599][ T37] net_ratelimit: 13 callbacks suppressed [ 392.024623][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.744290][ T5855] Bluetooth: hci2: command tx timeout [ 393.454020][T17290] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 393.638830][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3004'. [ 393.696602][T17113] hsr_slave_0: entered promiscuous mode [ 393.718801][T17113] hsr_slave_1: entered promiscuous mode [ 393.754804][T17113] debugfs: 'hsr0' already exists in 'hsr' [ 393.765901][T17113] Cannot create hsr debugfs directory [ 393.813108][T17322] bridge7: entered promiscuous mode [ 393.866933][T17326] bridge8: entered promiscuous mode [ 394.292039][T17339] can: request_module (can-proto-0) failed. [ 394.324407][T17339] netlink: 'syz.4.3011': attribute type 3 has an invalid length. [ 394.363086][T17339] netlink: 'syz.4.3011': attribute type 1 has an invalid length. [ 394.387577][T17339] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3011'. [ 394.478228][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'. [ 394.522791][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'. [ 394.776025][T17113] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.787884][T17113] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.811757][ T5855] Bluetooth: hci2: command tx timeout [ 394.956017][T17113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.966646][T17113] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.161635][T17113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.214354][T17113] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.280215][T17391] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3024'. [ 395.485185][T17399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3027'. [ 395.485586][T17401] netlink: 'syz.3.3028': attribute type 44 has an invalid length. [ 395.505278][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'. [ 395.505431][T17113] batman_adv: batadv0: Removing interface: netdevsim0 [ 395.524293][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'. [ 395.533865][T17402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3027'. [ 395.534550][T17401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3028'. [ 395.555830][T17113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.556019][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'. [ 395.578969][T17113] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.701469][T17405] netlink: 'syz.2.3029': attribute type 5 has an invalid length. [ 395.727892][T17410] veth0: entered promiscuous mode [ 395.828383][T17410] veth0: left promiscuous mode [ 395.858181][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3031'. [ 395.878597][T17416] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 395.898792][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'. [ 396.034513][T17418] bond13: option min_links: invalid value (18446744073709551614) [ 396.042921][T17418] bond13: option min_links: allowed values 0 - 2147483647 [ 396.051888][T17418] bond13 (unregistering): Released all slaves [ 396.073104][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3031'. [ 396.088224][T17419] netlink: 'syz.2.3031': attribute type 1 has an invalid length. [ 396.543968][T17113] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 396.623234][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.639694][T17113] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 396.665743][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.682140][T17113] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 396.709424][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.745476][T17113] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 396.791389][T17113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.131707][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.184849][T17113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.214989][T17113] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.245807][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.253132][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.279515][T17465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.302275][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.309507][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.328724][T17471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.715067][T17489] 8021q: VLANs not supported on wg1 [ 398.125082][T17503] bridge0: port 1(ipvlan2) entered blocking state [ 398.142545][T17503] bridge0: port 1(ipvlan2) entered disabled state [ 398.150269][T17503] ipvlan2: entered allmulticast mode [ 398.155787][T17503] bridge0: entered allmulticast mode [ 398.164487][T17503] ipvlan2: left allmulticast mode [ 398.177226][T17503] bridge0: left allmulticast mode [ 398.275416][T17113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.453183][T17113] veth0_vlan: entered promiscuous mode [ 398.541703][T17526] netlink: 'syz.2.3059': attribute type 2 has an invalid length. [ 398.549397][T17516] netlink: 'syz.3.3058': attribute type 1 has an invalid length. [ 398.569499][T17527] netlink: 'syz.2.3059': attribute type 2 has an invalid length. [ 398.586543][T17113] veth1_vlan: entered promiscuous mode [ 398.813141][T17113] veth0_macvtap: entered promiscuous mode [ 398.885485][T17113] veth1_macvtap: entered promiscuous mode [ 398.996742][T17541] syz_tun: entered allmulticast mode [ 399.019973][T17113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.047162][T17541] syz_tun: left allmulticast mode [ 399.073803][T17113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.122750][ T1097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.152536][ T1097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.176193][ T1097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.186599][ T1097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.291434][T17557] netlink: 'syz.3.3068': attribute type 24 has an invalid length. [ 399.553183][T17565] netlink: 'syz.4.3069': attribute type 2 has an invalid length. [ 399.565742][T17053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.586212][T17053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.666902][T17053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.690505][T17053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.394039][T17587] __nla_validate_parse: 11 callbacks suppressed [ 400.394059][T17587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3077'. [ 400.502735][T17587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3077'. [ 400.563382][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.583820][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.594010][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.604628][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.612694][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.723643][T17594] lo speed is unknown, defaulting to 1000 [ 400.748379][T17594] lo speed is unknown, defaulting to 1000 [ 400.912901][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3081'. [ 400.937523][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3081'. [ 401.007075][T17602] macvtap0: entered promiscuous mode [ 401.028546][T17602] vlan0: entered promiscuous mode [ 401.054616][T17602] macvtap0: entered allmulticast mode [ 401.080054][T17602] vlan0: entered allmulticast mode [ 401.085709][T17602] veth0_vlan: entered allmulticast mode [ 401.356104][T17618] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3085'. [ 401.396029][T17615] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3085'. [ 401.402916][T17618] openvswitch: netlink: Missing key (keys=40, expected=100) [ 401.419133][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3086'. [ 402.320414][T17652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.510587][T17665] netlink: 'syz.0.3094': attribute type 3 has an invalid length. [ 402.527140][T17665] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3094'. [ 402.650935][ T5849] Bluetooth: hci4: command tx timeout [ 402.670716][T17671] syzkaller0: entered promiscuous mode [ 402.693325][T17671] syzkaller0: entered allmulticast mode [ 402.785644][T17677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3097'. [ 402.874795][T17683] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3099'. [ 402.892914][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.124649][T17692] netlink: 'syz.2.3103': attribute type 1 has an invalid length. [ 403.188275][T17594] chnl_net:caif_netlink_parms(): no params data found [ 403.398132][T17594] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.408758][T17594] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.416489][T17594] bridge_slave_0: entered allmulticast mode [ 403.425373][T17594] bridge_slave_0: entered promiscuous mode [ 403.434840][T17594] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.444255][T17594] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.452701][T17594] bridge_slave_1: entered allmulticast mode [ 403.461117][T17594] bridge_slave_1: entered promiscuous mode [ 403.517759][T17594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.531559][T17594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.606765][T17594] team0: Port device team_slave_0 added [ 403.643677][T17594] team0: Port device team_slave_1 added [ 403.717742][T17714] netlink: 'syz.1.3108': attribute type 1 has an invalid length. [ 403.744804][T17594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.752723][ T8416] IPVS: starting estimator thread 0... [ 403.752744][T17594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.785349][T17594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.810824][T17716] erspan0: entered promiscuous mode [ 403.816653][T17716] erspan0: entered allmulticast mode [ 403.829435][T17721] veth1_macvtap: left promiscuous mode [ 403.870839][T17719] IPVS: using max 26 ests per chain, 62400 per kthread [ 403.945299][T17594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.952538][T17594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.979221][T17594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.149286][T17714] bond13: option resend_igmp: invalid value (32767) [ 404.173051][T17714] bond13: option resend_igmp: allowed values 0 - 255 [ 404.189086][T17714] bond13 (unregistering): Released all slaves [ 404.274426][T17594] hsr_slave_0: entered promiscuous mode [ 404.284880][T17594] hsr_slave_1: entered promiscuous mode [ 404.297147][T17594] debugfs: 'hsr0' already exists in 'hsr' [ 404.330493][T17594] Cannot create hsr debugfs directory [ 404.664240][T17744] netlink: 'syz.2.3114': attribute type 1 has an invalid length. [ 404.733526][ T5849] Bluetooth: hci4: command tx timeout [ 404.823875][T17744] wireguard0: entered promiscuous mode [ 404.832323][T17744] wireguard0: entered allmulticast mode [ 404.997605][T17594] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 405.021665][T17594] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.094465][T17762] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 405.139660][T17594] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 405.168214][T17594] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.312687][T17594] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 405.336036][T17594] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.497504][T17594] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 405.507983][T17594] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.789273][T17790] netlink: 'syz.4.3126': attribute type 64 has an invalid length. [ 405.838766][T17790] __nla_validate_parse: 7 callbacks suppressed [ 405.838788][T17790] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3126'. [ 406.037104][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3129'. [ 406.050240][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3129'. [ 406.141061][T17594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 406.155967][T17594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.173990][T17594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 406.198362][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'. [ 406.198928][T17594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.219152][T17594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 406.241406][T17594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.254748][T17811] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3131'. [ 406.266191][T17594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 406.268035][T17811] netlink: Unknown conntrack attr (0) [ 406.288719][T17594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 406.504790][T17827] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3137'. [ 406.588121][T17594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.644635][T17830] netlink: 'syz.0.3138': attribute type 10 has an invalid length. [ 406.666411][T17830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3138'. [ 406.671260][T17594] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.723421][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.730808][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.798145][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.805495][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.823546][ T5849] Bluetooth: hci4: command tx timeout [ 406.965391][T17841] netlink: 'syz.0.3142': attribute type 2 has an invalid length. [ 407.428329][T17858] syzkaller0: entered promiscuous mode [ 407.443711][T17858] syzkaller0: entered allmulticast mode [ 407.717265][T17875] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3150'. [ 407.742995][T17867] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3149'. [ 407.780003][T17867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3149'. [ 407.795868][T17594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.838803][T17867] netlink: 'syz.1.3149': attribute type 2 has an invalid length. [ 408.050405][T17594] veth0_vlan: entered promiscuous mode [ 408.103266][T17594] veth1_vlan: entered promiscuous mode [ 408.174637][T17892] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.190262][T17895] netlink: 'syz.0.3155': attribute type 4 has an invalid length. [ 408.243417][T17594] veth0_macvtap: entered promiscuous mode [ 408.267982][T17594] veth1_macvtap: entered promiscuous mode [ 408.383300][T17594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.425534][T17900] syzkaller0: entered allmulticast mode [ 408.450282][T17594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.564914][T17053] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.660445][ T1097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.681083][T17053] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.686539][T17915] x_tables: duplicate underflow at hook 3 [ 408.713017][T17053] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.772063][T17053] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.900579][ T5849] Bluetooth: hci4: command tx timeout [ 409.074188][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.104723][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.414642][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.437351][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.298940][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 410.317225][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 410.329666][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 410.347056][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 410.357493][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.661329][T17973] lo speed is unknown, defaulting to 1000 [ 410.669347][T17973] lo speed is unknown, defaulting to 1000 [ 410.849587][T17992] netlink: 'syz.1.3187': attribute type 1 has an invalid length. [ 410.867476][T17994] netlink: 'syz.3.3186': attribute type 2 has an invalid length. [ 410.904560][T17994] netlink: 'syz.3.3186': attribute type 2 has an invalid length. [ 410.931253][T17994] netlink: 'syz.3.3186': attribute type 2 has an invalid length. [ 410.979687][T17992] 8021q: adding VLAN 0 to HW filter on device bond13 [ 411.064354][T17998] bond13: (slave geneve2): making interface the new active one [ 411.081761][T17998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.103793][T17998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.121624][T17998] bond13: (slave geneve2): Enslaving as an active interface with an up link [ 411.156640][ T1107] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.265162][T17992] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 411.312581][T17992] bond14 (unregistering): Released all slaves [ 411.457933][T18016] __nla_validate_parse: 4 callbacks suppressed [ 411.457956][T18016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3192'. [ 411.474439][T18015] openvswitch: netlink: IP tunnel dst address not specified [ 411.483702][ T1107] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.518856][ T1107] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.540902][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.564475][ T1107] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.960395][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.122374][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.265118][T17053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.407321][T18025] x_tables: duplicate underflow at hook 2 [ 412.420116][ T5855] Bluetooth: hci1: command tx timeout [ 412.627147][T18062] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3204'. [ 412.688394][T17973] chnl_net:caif_netlink_parms(): no params data found [ 412.842822][T17973] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.850709][T17973] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.858216][T17973] bridge_slave_0: entered allmulticast mode [ 412.866695][T17973] bridge_slave_0: entered promiscuous mode [ 412.877202][T17973] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.886452][T17973] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.894914][T17973] bridge_slave_1: entered allmulticast mode [ 412.903855][T17973] bridge_slave_1: entered promiscuous mode [ 412.955543][T17973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.970763][T17973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.058963][T17973] team0: Port device team_slave_0 added [ 413.087502][T17973] team0: Port device team_slave_1 added [ 413.209345][T17973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.235193][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.267423][T17973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.282768][T17973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.300242][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.327452][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.388469][T18092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3212'. [ 413.398617][T17973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.443677][T17053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.599818][T18103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'. [ 413.633742][T17973] hsr_slave_0: entered promiscuous mode [ 413.649629][T17973] hsr_slave_1: entered promiscuous mode [ 413.667662][T17973] debugfs: 'hsr0' already exists in 'hsr' [ 413.681967][T17973] Cannot create hsr debugfs directory [ 413.747193][T18111] netlink: 'syz.1.3219': attribute type 16 has an invalid length. [ 413.769459][T18111] netlink: 'syz.1.3219': attribute type 17 has an invalid length. [ 413.819376][T18111] net_ratelimit: 1 callbacks suppressed [ 413.819387][T18111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.415523][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.450046][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.490651][ T5855] Bluetooth: hci1: command tx timeout [ 414.504983][T11772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.517219][T18135] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3225'. [ 414.546805][T18137] netlink: 'syz.1.3226': attribute type 11 has an invalid length. [ 414.553050][T17973] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.566431][T18137] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3226'. [ 414.571785][T18140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.610146][T18137] netlink: 'syz.1.3226': attribute type 21 has an invalid length. [ 414.633415][T18137] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3226'. [ 414.748339][T17973] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.928806][T17973] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.975708][T18152] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 415.034071][T17973] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.381426][T18167] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3238'. [ 415.384372][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3239'. [ 415.563595][T18169] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 415.577331][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.613362][T18169] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 415.628171][T18169] gretap1: entered promiscuous mode [ 415.634335][T18169] gretap1: entered allmulticast mode [ 415.718767][T18174] only policy match revision 0 supported [ 415.718791][T18174] unable to load match [ 415.735972][T18179] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3242'. [ 415.976901][T17973] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.006080][T17973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.019610][T18191] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 416.068373][T18193] geneve2: entered promiscuous mode [ 416.085631][T17973] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.162841][T17973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.185231][T17973] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.210128][T18200] xt_ecn: cannot match TCP bits for non-tcp packets [ 416.235532][T17973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.261281][T17973] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.283090][T17973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.332469][T18203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.388604][T18212] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.498812][T18216] netlink: 'syz.3.3254': attribute type 44 has an invalid length. [ 416.527698][T18216] __nla_validate_parse: 3 callbacks suppressed [ 416.527717][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3254'. [ 416.570665][ T5855] Bluetooth: hci1: command tx timeout [ 416.623046][T18222] netlink: 'syz.0.3256': attribute type 1 has an invalid length. [ 416.743024][T18222] bond1: entered promiscuous mode [ 416.748758][T18222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.779966][T17973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.849642][T18232] netlink: set zone limit has 8 unknown bytes [ 416.875138][T18232] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.3259'. [ 416.898471][T17973] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.957402][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.964844][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.043200][T17053] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.050577][T17053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.444518][T18248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3263'. [ 417.685563][T18260] netlink: 'syz.3.3265': attribute type 58 has an invalid length. [ 417.740546][T18260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3265'. [ 417.848621][T17973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.112862][T18281] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3269'. [ 418.205522][T18287] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3271'. [ 418.284913][T18288] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3271'. [ 418.444178][T18297] delete_channel: no stack [ 418.456714][T18298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3275'. [ 418.650935][ T5855] Bluetooth: hci1: command tx timeout [ 418.665043][T17973] veth0_vlan: entered promiscuous mode [ 418.685725][T17973] veth1_vlan: entered promiscuous mode [ 418.748164][T18308] netlink: 'syz.2.3277': attribute type 9 has an invalid length. [ 418.844755][T17973] veth0_macvtap: entered promiscuous mode [ 418.863946][T17973] veth1_macvtap: entered promiscuous mode [ 418.889167][T17973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.923081][T17973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.958278][ T1097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.997564][ T1097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.042699][ T1097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.060748][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.373818][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.395713][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.491535][ T123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.510982][ T123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.541991][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.642216][T18331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3285'. [ 419.653351][T18332] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3284'. [ 420.200487][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 420.216541][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 420.230026][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 420.248551][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 420.264351][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 420.322117][T18344] lo speed is unknown, defaulting to 1000 [ 420.331812][T18344] lo speed is unknown, defaulting to 1000 [ 420.814284][ T123] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.095400][ T123] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.216696][T18374] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 421.249910][T18374] bond1 (unregistering): Released all slaves [ 421.372192][ T5855] Bluetooth: hci1: command tx timeout [ 421.402901][ T123] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.549528][ T123] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.736395][T18401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 421.773471][T18401] netlink: 'syz.3.3302': attribute type 21 has an invalid length. [ 421.796298][T18401] __nla_validate_parse: 5 callbacks suppressed [ 421.796320][T18401] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3302'. [ 422.336353][ T5855] Bluetooth: hci3: command tx timeout [ 424.409968][ T5855] Bluetooth: hci3: command tx timeout [ 424.917815][T18401] netlink: 'syz.3.3302': attribute type 5 has an invalid length. [ 424.926678][T18401] netlink: 'syz.3.3302': attribute type 6 has an invalid length. [ 424.935545][T18401] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3302'. [ 425.300786][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.688240][ T123] bridge_slave_1: left allmulticast mode [ 425.701802][ T123] bridge_slave_1: left promiscuous mode [ 425.725994][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.827321][ T123] dvmrp0: left allmulticast mode [ 425.883125][T18451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3313'. [ 426.334443][T18465] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.3315'. [ 426.388791][T18468] netlink: 'syz.2.3317': attribute type 32 has an invalid length. [ 426.397385][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3317'. [ 426.419667][ T123] bond11 (unregistering): (slave vti0): Releasing backup interface [ 426.431345][ T123] vti0 (unregistering): left promiscuous mode [ 426.456771][T18470] netlink: 'syz.2.3317': attribute type 9 has an invalid length. [ 426.490195][ T5855] Bluetooth: hci3: command tx timeout [ 426.515956][ T123] bond5 (unregistering): (slave gretap2): Releasing active interface [ 426.565596][ T123] bond10 (unregistering): (slave gretap4): Releasing active interface [ 426.639408][ T123] bond13 (unregistering): (slave geneve2): Releasing active interface [ 426.718428][ T123] bond5 (unregistering): (slave bridge1): Releasing active interface [ 427.104775][ T123] bond0 (unregistering): Released all slaves [ 427.120752][ T123] bond1 (unregistering): Released all slaves [ 427.143318][ T123] bond2 (unregistering): Released all slaves [ 427.158925][ T123] bond3 (unregistering): Released all slaves [ 427.182932][ T123] bond4 (unregistering): Released all slaves [ 427.198717][ T123] bond5 (unregistering): Released all slaves [ 427.227326][ T123] bond6 (unregistering): Released all slaves [ 427.249419][ T123] bond7 (unregistering): Released all slaves [ 427.265613][ T123] bond8 (unregistering): Released all slaves [ 427.281824][ T123] bond9 (unregistering): Released all slaves [ 427.298408][ T123] bond10 (unregistering): Released all slaves [ 427.316365][ T123] bond11 (unregistering): Released all slaves [ 427.337048][ T123] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 427.353665][ T123] bond12 (unregistering): Released all slaves [ 427.380169][ T123] bond13 (unregistering): Released all slaves [ 427.400228][T18446] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3311'. [ 427.434848][T18468] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 427.876057][ T123] tipc: Disabling bearer [ 427.951341][ T123] tipc: Left network mode [ 427.988744][T18489] syzkaller0: entered promiscuous mode [ 428.002564][T18489] syzkaller0: entered allmulticast mode [ 428.074771][T18344] chnl_net:caif_netlink_parms(): no params data found [ 428.582289][ T5855] Bluetooth: hci3: command tx timeout [ 429.030952][T18344] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.058104][T18344] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.084641][T18344] bridge_slave_0: entered allmulticast mode [ 429.108280][T18344] bridge_slave_0: entered promiscuous mode [ 429.134971][T18344] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.143920][T18344] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.152984][T18344] bridge_slave_1: entered allmulticast mode [ 429.163208][T18344] bridge_slave_1: entered promiscuous mode [ 429.361391][T18344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.362397][T18532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3327'. [ 429.374916][T18344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.405002][T18531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3328'. [ 429.507827][ T5507] 8021q: adding VLAN 0 to HW filter on device eth1 [ 429.518872][T18344] team0: Port device team_slave_0 added [ 429.536067][T18344] team0: Port device team_slave_1 added [ 429.649274][T18344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.657128][T18344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.694781][T18344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.743296][T18344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.751719][T18344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.783198][T18344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.818472][T18541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3330'. [ 429.847157][T18541] macvlan2: entered promiscuous mode [ 429.853381][T18541] macvlan2: entered allmulticast mode [ 429.933965][T18344] hsr_slave_0: entered promiscuous mode [ 429.942017][T18344] hsr_slave_1: entered promiscuous mode [ 429.948399][T18344] debugfs: 'hsr0' already exists in 'hsr' [ 429.954595][T18344] Cannot create hsr debugfs directory [ 430.255528][T18550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3333'. [ 430.788485][ T123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.797341][ T123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.809397][T18489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.064090][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.605074][T18586] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 431.628799][ T123] team0 (unregistering): Port device team_slave_1 removed [ 431.664496][ T123] team0 (unregistering): Port device team_slave_0 removed [ 431.765753][T18591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3342'. [ 431.782805][ T1115] smc: removing ib device syz1 [ 431.800979][T18589] netlink: 'syz.4.3341': attribute type 1 has an invalid length. [ 431.854177][T18595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3341'. [ 432.104263][T18567] bond0: entered promiscuous mode [ 432.109627][T18567] bond_slave_0: entered promiscuous mode [ 432.118808][T18567] bond_slave_1: entered promiscuous mode [ 432.486624][ T1115] smbdirect: ib_dev[syz1] removed [ 432.610971][T18613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3345'. [ 433.816148][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3352'. [ 433.855117][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3352'. [ 433.979005][T18666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 434.026600][T18666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3354'. [ 434.039480][T18666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3354'. [ 434.208964][T18670] xt_TCPMSS: Only works on TCP SYN packets [ 434.232726][T18670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3355'. [ 434.285021][T18670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3355'. [ 434.858085][T18690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3362'. [ 435.126860][T18344] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 435.192974][T18699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.201209][T18344] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.231868][T18344] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 435.289633][T18344] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.327479][T18344] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 435.420137][T18344] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.448177][T18344] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 435.513407][T18344] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.577027][T18726] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3371'. [ 436.130782][T18344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.166420][T18729] syzkaller1: entered promiscuous mode [ 436.197291][T18729] syzkaller1: entered allmulticast mode [ 436.676108][T18344] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.737937][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.745474][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.821020][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.858479][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.866092][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.965187][T18770] netlink: 'syz.4.3379': attribute type 1 has an invalid length. [ 437.251522][T18774] bond1: entered promiscuous mode [ 437.285403][T18774] bond1: entered allmulticast mode [ 437.310609][T18774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.663283][T18779] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 437.697077][T18779] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 437.874625][T18781] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 438.105881][T18786] bond1: (slave gretap1): making interface the new active one [ 438.138775][T18786] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 438.368983][T18791] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 438.995571][T18839] __nla_validate_parse: 4 callbacks suppressed [ 438.995592][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3390'. [ 439.214078][ T123] IPVS: stop unused estimator thread 0... [ 439.215632][T18846] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3391'. [ 439.275895][T18846] openvswitch: netlink: Missing key (keys=40, expected=100) [ 439.854764][T18344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.097585][T18344] veth0_vlan: entered promiscuous mode [ 440.135141][T18876] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3399'. [ 440.144753][T18344] veth1_vlan: entered promiscuous mode [ 440.281162][T18881] syzkaller0: entered promiscuous mode [ 440.304074][T18881] syzkaller0: entered allmulticast mode [ 440.388858][T18885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3401'. [ 440.402520][T18344] veth0_macvtap: entered promiscuous mode [ 440.423584][T18885] bridge_slave_1: left allmulticast mode [ 440.432342][T18885] bridge_slave_1: left promiscuous mode [ 440.444232][T18885] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.456268][T18885] bridge_slave_0: left allmulticast mode [ 440.465165][T18885] bridge_slave_0: left promiscuous mode [ 440.475500][T18885] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.618395][T18344] veth1_macvtap: entered promiscuous mode [ 440.664829][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.679873][T18344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.682126][ T1317] clip:clip_start_xmit: skb_dst(skb) == NULL [ 440.729216][T18344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.795205][ T1103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.835395][ T1103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.857632][ T1103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.896728][ T1103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.157429][T18908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3409'. [ 441.184708][ T123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.202872][ T123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.314810][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.337370][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.371228][T18917] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 441.467777][T18917] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 441.497941][T18917] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 441.543787][T18924] xt_hashlimit: size too large, truncated to 1048576 [ 441.612493][T18929] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3415'. [ 441.710148][T18922] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 442.063491][T18928] bond2: (slave gretap1): making interface the new active one [ 442.086765][T18928] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 442.116318][T18935] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3286'. [ 442.226314][T18941] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 442.577841][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.972051][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3425'. [ 443.139671][T18987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3430'. [ 443.201273][T18989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3431'. [ 443.252874][T18993] netlink: 'syz.0.3431': attribute type 4 has an invalid length. [ 443.313045][T18995] netlink: 'syz.0.3431': attribute type 4 has an invalid length. [ 443.395244][T18989] team0: Port device team_slave_0 removed [ 443.413999][T19002] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 2, id = 0 [ 443.635370][T19009] block nbd4: Unsupported socket: should be TCP or UNIX. [ 443.841910][T19021] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002 [ 443.905622][T19019] syzkaller1: entered promiscuous mode [ 443.933745][T19019] syzkaller1: entered allmulticast mode [ 444.173240][T19038] __nla_validate_parse: 6 callbacks suppressed [ 444.173265][T19038] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3442'. [ 444.476205][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'. [ 444.711716][T19066] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 444.755253][T19068] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3451'. [ 444.839005][T19068] netlink: 'syz.3.3451': attribute type 12 has an invalid length. [ 445.174233][T19085] netlink: 'syz.3.3455': attribute type 10 has an invalid length. [ 445.216488][T19085] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3455'. [ 445.323753][T19064] FAULT_INJECTION: forcing a failure. [ 445.323753][T19064] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 445.354492][T19064] CPU: 1 UID: 0 PID: 19064 Comm: syz.0.3450 Not tainted syzkaller #0 PREEMPT(full) [ 445.354523][T19064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 445.354535][T19064] Call Trace: [ 445.354543][T19064] [ 445.354552][T19064] dump_stack_lvl+0xe8/0x150 [ 445.354590][T19064] should_fail_ex+0x412/0x560 [ 445.354626][T19064] _copy_from_user+0x2d/0xb0 [ 445.354652][T19064] __copy_msghdr+0x3c5/0x5b0 [ 445.354681][T19064] ___sys_sendmsg+0x213/0x360 [ 445.354704][T19064] ? __lock_acquire+0x6b5/0x2cf0 [ 445.354739][T19064] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.354800][T19064] ? __fget_files+0x2a/0x420 [ 445.354821][T19064] ? __fget_files+0x3a0/0x420 [ 445.354853][T19064] __x64_sys_sendmsg+0x1bd/0x2a0 [ 445.354879][T19064] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.354911][T19064] ? __pfx_ksys_write+0x10/0x10 [ 445.354945][T19064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.354967][T19064] do_syscall_64+0x15f/0xf80 [ 445.354994][T19064] ? trace_irq_disable+0x3b/0x140 [ 445.355021][T19064] ? clear_bhb_loop+0x40/0x90 [ 445.355046][T19064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.355065][T19064] RIP: 0033:0x7fcad619cdd9 [ 445.355086][T19064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.355103][T19064] RSP: 002b:00007fcad6fef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.355127][T19064] RAX: ffffffffffffffda RBX: 00007fcad6415fa0 RCX: 00007fcad619cdd9 [ 445.355142][T19064] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 445.355155][T19064] RBP: 00007fcad6fef090 R08: 0000000000000000 R09: 0000000000000000 [ 445.355166][T19064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.355177][T19064] R13: 00007fcad6416038 R14: 00007fcad6415fa0 R15: 00007fff3ba7e008 [ 445.355210][T19064] [ 445.355298][T19095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3457'. [ 445.826495][T19104] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3461'. [ 445.949342][T19110] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3463'. [ 446.408397][T19137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3471'. [ 446.596268][T19142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3472'. [ 446.870198][T19154] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3476'. [ 446.881130][T19162] netlink: 'syz.2.3478': attribute type 8 has an invalid length. [ 446.902721][T19154] bridge0: entered promiscuous mode [ 446.911846][T19154] ip6gretap0: entered promiscuous mode [ 446.972429][T19163] sctp: [Deprecated]: syz.3.3479 (pid 19163) Use of int in maxseg socket option. [ 446.972429][T19163] Use struct sctp_assoc_value instead [ 447.084784][T19167] Cannot find del_set index 4 as target [ 447.736987][T19191] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.822095][ T24] IPVS: starting estimator thread 0... [ 447.832358][T19201] openvswitch: netlink: IP tunnel dst address not specified [ 447.930250][T19202] IPVS: using max 27 ests per chain, 64800 per kthread [ 447.941349][T19205] syzkaller0: entered promiscuous mode [ 447.989191][T19205] syzkaller0: entered allmulticast mode [ 448.030272][T19214] tunl0: entered promiscuous mode [ 448.047442][T19214] netlink: 'syz.0.3499': attribute type 3 has an invalid length. [ 448.410954][T19228] FAULT_INJECTION: forcing a failure. [ 448.410954][T19228] name failslab, interval 1, probability 0, space 0, times 0 [ 448.426338][T19228] CPU: 0 UID: 0 PID: 19228 Comm: syz.1.3503 Not tainted syzkaller #0 PREEMPT(full) [ 448.426368][T19228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.426382][T19228] Call Trace: [ 448.426390][T19228] [ 448.426400][T19228] dump_stack_lvl+0xe8/0x150 [ 448.426440][T19228] should_fail_ex+0x412/0x560 [ 448.426481][T19228] should_failslab+0xa8/0x100 [ 448.426508][T19228] ? skb_clone+0x212/0x3a0 [ 448.426529][T19228] kmem_cache_alloc_noprof+0x87/0x650 [ 448.426560][T19228] ? dev_queue_xmit_nit+0x2d/0xad0 [ 448.426589][T19228] skb_clone+0x212/0x3a0 [ 448.426609][T19228] ? dev_queue_xmit_nit+0x27d/0xad0 [ 448.426631][T19228] dev_queue_xmit_nit+0x29a/0xad0 [ 448.426650][T19228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.426669][T19228] ? dev_queue_xmit_nit+0x2d/0xad0 [ 448.426701][T19228] dev_hard_start_xmit+0x1c1/0x830 [ 448.426742][T19228] sch_direct_xmit+0x251/0x4c0 [ 448.426778][T19228] ? __pfx_sch_direct_xmit+0x10/0x10 [ 448.426817][T19228] __dev_queue_xmit+0x180f/0x3950 [ 448.426849][T19228] ? __dev_queue_xmit+0x2b6/0x3950 [ 448.426887][T19228] ? __might_fault+0xaf/0x130 [ 448.426910][T19228] ? __pfx___dev_queue_xmit+0x10/0x10 [ 448.426935][T19228] ? _copy_from_iter+0x2d3/0x1670 [ 448.426982][T19228] ? dev_getfirstbyhwtype+0x24/0x280 [ 448.427011][T19228] ? dev_getfirstbyhwtype+0x24/0x280 [ 448.427036][T19228] ? dev_getfirstbyhwtype+0x24/0x280 [ 448.427070][T19228] dgram_sendmsg+0x746/0xe80 [ 448.427110][T19228] ? __pfx_dgram_sendmsg+0x10/0x10 [ 448.427138][T19228] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 448.427170][T19228] ? aa_sock_msg_perm+0xf1/0x1b0 [ 448.427193][T19228] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.427222][T19228] ____sys_sendmsg+0x972/0x9f0 [ 448.427256][T19228] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.427292][T19228] ? import_iovec+0x73/0xa0 [ 448.427320][T19228] ___sys_sendmsg+0x2a5/0x360 [ 448.427340][T19228] ? __lock_acquire+0x6b5/0x2cf0 [ 448.427377][T19228] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.427444][T19228] ? __fget_files+0x2a/0x420 [ 448.427465][T19228] ? __fget_files+0x3a0/0x420 [ 448.427499][T19228] __x64_sys_sendmsg+0x1bd/0x2a0 [ 448.427526][T19228] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.427572][T19228] ? __pfx_ksys_write+0x10/0x10 [ 448.427608][T19228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.427631][T19228] do_syscall_64+0x15f/0xf80 [ 448.427657][T19228] ? trace_irq_disable+0x3b/0x140 [ 448.427685][T19228] ? clear_bhb_loop+0x40/0x90 [ 448.427710][T19228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.427730][T19228] RIP: 0033:0x7f513bb9cdd9 [ 448.427752][T19228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.427769][T19228] RSP: 002b:00007f513ca08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.427793][T19228] RAX: ffffffffffffffda RBX: 00007f513be15fa0 RCX: 00007f513bb9cdd9 [ 448.427807][T19228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 448.427820][T19228] RBP: 00007f513ca08090 R08: 0000000000000000 R09: 0000000000000000 [ 448.427832][T19228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.427844][T19228] R13: 00007f513be16038 R14: 00007f513be15fa0 R15: 00007ffecf88eb98 [ 448.427881][T19228] [ 450.095898][T19290] __nla_validate_parse: 2 callbacks suppressed [ 450.095921][T19290] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3520'. [ 450.185108][T19290] Bluetooth: MGMT ver 1.23 [ 450.823924][T19323] netlink: 'syz.0.3524': attribute type 83 has an invalid length. [ 450.947238][T19323] netlink: 'syz.0.3524': attribute type 13 has an invalid length. [ 450.991825][T19283] FAULT_INJECTION: forcing a failure. [ 450.991825][T19283] name failslab, interval 1, probability 0, space 0, times 0 [ 451.000643][T19323] netlink: 'syz.0.3524': attribute type 58 has an invalid length. [ 451.005298][T19283] CPU: 1 UID: 0 PID: 19283 Comm: syz.4.3519 Not tainted syzkaller #0 PREEMPT(full) [ 451.005333][T19283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.005345][T19283] Call Trace: [ 451.005353][T19283] [ 451.005361][T19283] dump_stack_lvl+0xe8/0x150 [ 451.005397][T19283] should_fail_ex+0x412/0x560 [ 451.005434][T19283] should_failslab+0xa8/0x100 [ 451.005459][T19283] ? skb_clone+0x212/0x3a0 [ 451.005481][T19283] kmem_cache_alloc_noprof+0x87/0x650 [ 451.005502][T19283] ? dev_queue_xmit_nit+0x2d/0xad0 [ 451.005528][T19283] skb_clone+0x212/0x3a0 [ 451.005548][T19283] ? dev_queue_xmit_nit+0x27d/0xad0 [ 451.005569][T19283] dev_queue_xmit_nit+0x29a/0xad0 [ 451.005586][T19283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.005606][T19283] ? dev_queue_xmit_nit+0x2d/0xad0 [ 451.005635][T19283] dev_hard_start_xmit+0x1c1/0x830 [ 451.005675][T19283] sch_direct_xmit+0x251/0x4c0 [ 451.005708][T19283] ? __pfx_sch_direct_xmit+0x10/0x10 [ 451.005746][T19283] __dev_queue_xmit+0x180f/0x3950 [ 451.005777][T19283] ? __dev_queue_xmit+0x2b6/0x3950 [ 451.005811][T19283] ? __might_fault+0xaf/0x130 [ 451.005832][T19283] ? __pfx___dev_queue_xmit+0x10/0x10 [ 451.005855][T19283] ? _copy_from_iter+0x2d3/0x1670 [ 451.005899][T19283] ? dev_getfirstbyhwtype+0x24/0x280 [ 451.005923][T19283] ? dev_getfirstbyhwtype+0x24/0x280 [ 451.005945][T19283] ? dev_getfirstbyhwtype+0x24/0x280 [ 451.005976][T19283] dgram_sendmsg+0x746/0xe80 [ 451.006012][T19283] ? __pfx_dgram_sendmsg+0x10/0x10 [ 451.006038][T19283] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 451.006066][T19283] ? aa_sock_msg_perm+0xf1/0x1b0 [ 451.006093][T19283] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.006119][T19283] ____sys_sendmsg+0x972/0x9f0 [ 451.006150][T19283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.006181][T19283] ? import_iovec+0x73/0xa0 [ 451.006206][T19283] ___sys_sendmsg+0x2a5/0x360 [ 451.006225][T19283] ? __lock_acquire+0x6b5/0x2cf0 [ 451.006257][T19283] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.006323][T19283] ? __fget_files+0x2a/0x420 [ 451.006342][T19283] ? __fget_files+0x3a0/0x420 [ 451.006373][T19283] __x64_sys_sendmsg+0x1bd/0x2a0 [ 451.006396][T19283] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.006427][T19283] ? __pfx_ksys_write+0x10/0x10 [ 451.006460][T19283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.006480][T19283] do_syscall_64+0x15f/0xf80 [ 451.006505][T19283] ? trace_irq_disable+0x3b/0x140 [ 451.006529][T19283] ? clear_bhb_loop+0x40/0x90 [ 451.006553][T19283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.006571][T19283] RIP: 0033:0x7fd7b5d9cdd9 [ 451.006591][T19283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.006607][T19283] RSP: 002b:00007fd7b6d01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.006628][T19283] RAX: ffffffffffffffda RBX: 00007fd7b6015fa0 RCX: 00007fd7b5d9cdd9 [ 451.006642][T19283] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 451.006653][T19283] RBP: 00007fd7b6d01090 R08: 0000000000000000 R09: 0000000000000000 [ 451.006665][T19283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.006675][T19283] R13: 00007fd7b6016038 R14: 00007fd7b6015fa0 R15: 00007ffc3769cfc8 [ 451.006714][T19283] [ 451.369216][T19342] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3529'. [ 451.457907][T19323] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3524'. [ 451.464740][T19347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3529'. [ 451.812414][T19355] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 452.228948][T19361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.801132][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3541'. [ 454.804542][T19402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3541'. [ 454.920867][T19401] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 455.194025][T19420] tipc: Started in network mode [ 455.208036][T19420] tipc: Node identity 364bf1e94d7e, cluster identity 4711 [ 455.225921][T19420] tipc: Enabled bearer , priority 0 [ 455.278423][T19419] tipc: Enabling of bearer rejected, already enabled [ 455.289408][T19394] FAULT_INJECTION: forcing a failure. [ 455.289408][T19394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.332384][T19394] CPU: 0 UID: 0 PID: 19394 Comm: syz.3.3540 Not tainted syzkaller #0 PREEMPT(full) [ 455.332414][T19394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 455.332426][T19394] Call Trace: [ 455.332434][T19394] [ 455.332443][T19394] dump_stack_lvl+0xe8/0x150 [ 455.332481][T19394] should_fail_ex+0x412/0x560 [ 455.332520][T19394] _copy_from_user+0x2d/0xb0 [ 455.332555][T19394] kstrtouint_from_user+0xd6/0x180 [ 455.332589][T19394] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 455.332641][T19394] proc_fail_nth_write+0x8e/0x210 [ 455.332663][T19394] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 455.332693][T19394] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 455.332717][T19394] vfs_write+0x29a/0xb90 [ 455.332754][T19394] ? __pfx_vfs_write+0x10/0x10 [ 455.332783][T19394] ? __fget_files+0x2a/0x420 [ 455.332811][T19394] ? __fget_files+0x3a0/0x420 [ 455.332831][T19394] ? __fget_files+0x2a/0x420 [ 455.332862][T19394] ksys_write+0x150/0x270 [ 455.332896][T19394] ? __pfx_ksys_write+0x10/0x10 [ 455.332932][T19394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.332955][T19394] do_syscall_64+0x15f/0xf80 [ 455.332985][T19394] ? clear_bhb_loop+0x40/0x90 [ 455.333011][T19394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.333031][T19394] RIP: 0033:0x7f049b35d60e [ 455.333051][T19394] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 455.333068][T19394] RSP: 002b:00007f049c2e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 455.333090][T19394] RAX: ffffffffffffffda RBX: 00007f049c2e26c0 RCX: 00007f049b35d60e [ 455.333106][T19394] RDX: 0000000000000001 RSI: 00007f049c2e20a0 RDI: 0000000000000005 [ 455.333117][T19394] RBP: 00007f049c2e2090 R08: 0000000000000000 R09: 0000000000000000 [ 455.333128][T19394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.333139][T19394] R13: 00007f049b616038 R14: 00007f049b615fa0 R15: 00007ffc6a81d348 [ 455.333176][T19394] [ 455.338215][T19418] tipc: Disabling bearer [ 455.355555][T19432] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3549'. [ 455.599881][T19432] netlink: ct family unspecified [ 455.611955][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.690225][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.796565][T19439] netlink: 'syz.1.3551': attribute type 1 has an invalid length. [ 455.824048][T19441] IPv6: addrconf: prefix option has invalid lifetime [ 455.844104][T19439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 455.861394][T19439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3551'. [ 455.998469][T19450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3556'. [ 456.023320][T19448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3553'. [ 456.033888][T19452] xt_l2tp: invalid flags combination: 8 [ 456.324015][T19457] bond3: option fail_over_mac: invalid value (16) [ 456.368940][T19457] bond3 (unregistering): Released all slaves [ 456.665289][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.746021][T19489] sctp: [Deprecated]: syz.2.3564 (pid 19489) Use of int in max_burst socket option deprecated. [ 456.746021][T19489] Use struct sctp_assoc_value instead [ 457.593877][T19528] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3576'. [ 457.619839][T19532] netlink: 'syz.3.3577': attribute type 32 has an invalid length. [ 457.643053][T19532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3577'. [ 457.686313][T19532] bond1: Setting coupled_control to off (0) [ 457.701896][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.054123][T19548] netlink: 'syz.1.3583': attribute type 5 has an invalid length. [ 458.232341][T19552] syzkaller1: entered promiscuous mode [ 458.260249][T19552] syzkaller1: entered allmulticast mode [ 458.274026][T19558] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 458.284120][T19554] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3584'. [ 458.576147][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.731129][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.740850][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.108709][T19589] bridge_slave_0: default FDB implementation only supports local addresses [ 459.183709][T19589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3592'. [ 459.736468][T19621] IPv6: addrconf: prefix option has invalid lifetime [ 459.767342][T19618] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 459.996379][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3603'. [ 460.024461][T19638] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3604'. [ 460.098916][T19638] syzkaller0: entered promiscuous mode [ 460.114457][T19638] syzkaller0: entered allmulticast mode [ 460.160085][T19647] netlink: 'syz.2.3604': attribute type 1 has an invalid length. [ 460.296621][T19647] bond3: entered promiscuous mode [ 460.312219][T19647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.406919][T19655] bond3: (slave bridge3): making interface the new active one [ 460.418449][T19655] bridge3: entered promiscuous mode [ 460.426836][T19655] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 460.678386][T19665] bridge0: port 3(vlan2) entered blocking state [ 460.696818][T19670] netlink: 'syz.0.3613': attribute type 1 has an invalid length. [ 460.710059][T19665] bridge0: port 3(vlan2) entered disabled state [ 460.724858][T19665] vlan2: entered allmulticast mode [ 460.737119][T19665] geneve0: entered allmulticast mode [ 460.775584][T19665] vlan2: entered promiscuous mode [ 460.793936][T19665] geneve0: entered promiscuous mode [ 460.830236][ T10] net_ratelimit: 3 callbacks suppressed [ 460.830257][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.167054][T19688] __nla_validate_parse: 3 callbacks suppressed [ 461.167078][T19688] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3618'. [ 461.254934][T19693] syzkaller0: entered promiscuous mode [ 461.284858][T19693] syzkaller0: entered allmulticast mode [ 461.421291][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3619'. [ 461.472466][T19701] netlink: 'syz.2.3620': attribute type 1 has an invalid length. [ 461.766847][T19713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3624'. [ 461.780888][ T1097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.791910][ T8415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.864933][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.026845][T19724] netlink: 'syz.4.3627': attribute type 1 has an invalid length. [ 462.466204][T19751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3635'. [ 462.479417][T19754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3634'. [ 462.496397][T19753] ipt_REJECT: TCP_RESET invalid for non-tcp [ 462.566942][T19757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3638'. [ 462.738858][T19767] Cannot find set identified by id 0 to match [ 462.890115][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.178388][T19794] syzkaller1: entered promiscuous mode [ 463.198328][T19794] syzkaller1: entered allmulticast mode [ 463.301178][T19795] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 463.315120][T19795] bond3 (unregistering): Released all slaves [ 463.336894][T19811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3650'. [ 463.340401][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3647'. [ 463.389279][T19797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3647'. [ 463.406330][T19813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3651'. [ 463.459637][T19811] bond2: entered promiscuous mode [ 463.473184][T19811] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.495339][T19813] chnl_net:caif_netlink_parms(): no params data found [ 463.524785][T19807] netlink: 'syz.1.3650': attribute type 1 has an invalid length. [ 463.653664][T19807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.675140][T19807] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 463.713709][T19807] bond2: (slave sit1): Error -95 calling set_mac_address [ 463.794333][T19833] openvswitch: netlink: IP tunnel dst address not specified [ 463.843204][T19833] openvswitch: netlink: Unknown key attributes 2 [ 463.919000][T19837] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 463.933649][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.014086][T19838] xt_hashlimit: size too large, truncated to 1048576 [ 464.216561][T19857] syzkaller1: entered promiscuous mode [ 464.222551][T19857] syzkaller1: entered allmulticast mode [ 464.334496][T14477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.707682][ T30] audit: type=1107 audit(1777070851.934:6): pid=19874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 465.112114][T19897] netlink: 'syz.3.3679': attribute type 1 has an invalid length. [ 465.678304][T19929] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 465.985761][T19946] sctp: [Deprecated]: syz.2.3692 (pid 19946) Use of int in max_burst socket option deprecated. [ 465.985761][T19946] Use struct sctp_assoc_value instead [ 466.007019][T19936] nbd: device at index 64 is going down [ 466.015265][ T5578] net_ratelimit: 7 callbacks suppressed [ 466.015285][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.327802][T19957] xt_hashlimit: size too large, truncated to 1048576 [ 466.406542][T18443] udevd[18443]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 467.060119][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.173910][T19997] __nla_validate_parse: 12 callbacks suppressed [ 467.173933][T19997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3706'. [ 467.222704][T19997] veth0_macvtap: left promiscuous mode [ 467.255275][T20004] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3708'. [ 467.377944][T20015] sctp: [Deprecated]: syz.4.3706 (pid 20015) Use of int in max_burst socket option. [ 467.377944][T20015] Use struct sctp_assoc_value instead [ 467.486577][T20010] syzkaller1: entered promiscuous mode [ 467.492880][T20010] syzkaller1: entered allmulticast mode [ 467.541416][T14477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.709334][T20028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.762571][T20028] xt_connbytes: Forcing CT accounting to be enabled [ 467.843929][T20028] xt_CT: No such helper "netbios-ns" [ 468.010961][T11783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.101405][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.153453][T20055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3723'. [ 468.237644][T20055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3723'. [ 468.247314][T20056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3723'. [ 468.508688][T20064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.026030][T20097] netlink: 'syz.1.3736': attribute type 9 has an invalid length. [ 469.096019][T20100] netlink: 'syz.2.3737': attribute type 10 has an invalid length. [ 469.130416][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.150309][T20100] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.184232][T20100] bridge_slave_1: left allmulticast mode [ 469.208799][T20100] bridge_slave_1: left promiscuous mode [ 469.256554][T20100] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.309527][T20100] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 469.364249][T20108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3739'. [ 469.393436][T20107] netlink: 'syz.4.3738': attribute type 1 has an invalid length. [ 469.453416][T14477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.463278][T11783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.498181][T20113] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 469.530000][T20113] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 469.754071][T20123] xt_TCPMSS: Only works on TCP SYN packets [ 469.945334][T20131] netlink: 'syz.1.3748': attribute type 10 has an invalid length. [ 469.991742][T20131] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.025092][T20131] bridge_slave_1: left allmulticast mode [ 470.039952][T20131] bridge_slave_1: left promiscuous mode [ 470.046073][T20131] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.063586][T20131] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 470.426692][T20159] veth0: entered promiscuous mode [ 470.453694][T20159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3758'. [ 470.789344][T20173] x_tables: unsorted underflow at hook 1 [ 470.808716][T20173] netlink: 'syz.0.3762': attribute type 24 has an invalid length. [ 470.809401][T20174] vlan2: entered promiscuous mode [ 470.822827][T20174] vlan2: entered allmulticast mode [ 470.828203][T20174] hsr_slave_1: entered allmulticast mode [ 471.210403][ T5578] net_ratelimit: 8 callbacks suppressed [ 471.210424][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.548932][T20209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3770'. [ 472.085383][T20234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3779'. [ 472.253159][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.389004][T20256] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 472.516596][T20256] bond3 (unregistering): Released all slaves [ 473.014915][T20288] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3792'. [ 473.110919][T20292] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3793'. [ 473.243173][T20296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'. [ 473.280464][T20296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3795'. [ 473.290688][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.299541][T14477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.412872][T20302] syzkaller1: entered promiscuous mode [ 473.438617][T20302] syzkaller1: entered allmulticast mode [ 473.466302][T20302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3794'. [ 473.554204][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3798'. [ 473.569118][T20314] xt_l2tp: v2 doesn't support IP mode [ 473.584676][T20316] xt_l2tp: v2 doesn't support IP mode [ 473.585620][T20310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3798'. [ 473.630262][T20312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.665369][T20320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3799'. [ 473.730851][T20323] netlink: 'syz.3.3799': attribute type 1 has an invalid length. [ 473.786993][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.838632][T20320] macvtap1: entered allmulticast mode [ 473.851948][T20320] veth0_macvtap: entered allmulticast mode [ 474.239193][T20339] mac80211_hwsim hwsim45 : renamed from wlan1 [ 474.330177][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.396027][T20344] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3807'. [ 474.522346][T20350] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 474.555199][T20350] tipc: Started in network mode [ 474.583821][T20350] tipc: Node identity 5e21bfb90d7a, cluster identity 4711 [ 474.595547][T20357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3811'. [ 474.611257][T20352] netlink: 'syz.3.3810': attribute type 58 has an invalid length. [ 474.618627][T20350] tipc: Enabled bearer , priority 0 [ 474.662650][T20358] openvswitch: netlink: Flow actions attr not present in new flow. [ 474.702422][T20357] bond2: entered promiscuous mode [ 474.708327][T20357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 474.747237][T20359] syzkaller0: entered promiscuous mode [ 474.754062][T20359] syzkaller0: entered allmulticast mode [ 474.780524][T20365] tipc: Resetting bearer [ 474.895342][T20348] tipc: Resetting bearer [ 474.994625][T20348] tipc: Disabling bearer [ 475.211924][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.273048][T11783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.301711][T20394] netlink: 'syz.3.3821': attribute type 51 has an invalid length. [ 475.353753][T20392] tipc: New replicast peer: 172.20.20.187 [ 475.370245][T20392] tipc: Enabled bearer , priority 10 [ 475.386475][T20394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.407253][T20394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.458284][T20394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.474573][T20394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.877054][T20419] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 475.891894][T20412] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 476.143335][T20433] netlink: 'syz.1.3832': attribute type 1 has an invalid length. [ 476.248160][T20433] 8021q: adding VLAN 0 to HW filter on device bond5 [ 476.374000][ C0] net_ratelimit: 249 callbacks suppressed [ 476.374021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.391199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.403659][ T5903] tipc: Node number set to 1398521785 [ 476.504531][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.804398][T20477] netlink: 'syz.4.3844': attribute type 2 has an invalid length. [ 476.814638][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.830087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.843501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.938286][ T24] IPVS: starting estimator thread 0... [ 476.945322][T20480] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 477.028550][T20487] openvswitch: netlink: Actions may not be safe on all matching packets [ 477.054311][T20484] IPVS: using max 26 ests per chain, 62400 per kthread [ 477.094248][T20489] bridge0: entered promiscuous mode [ 477.120487][T20489] bridge0: entered allmulticast mode [ 477.533962][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.856319][T20526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 478.204836][T20554] __nla_validate_parse: 7 callbacks suppressed [ 478.204860][T20554] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3864'. [ 478.241195][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3864'. [ 478.295622][T20558] bond0: (slave bond_slave_1): Releasing backup interface [ 478.411918][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.942137][T20587] netlink: 'syz.1.3876': attribute type 10 has an invalid length. [ 479.002648][T20587] syz_tun: entered promiscuous mode [ 479.074858][T20587] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 479.112829][T20593] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3878'. [ 479.267912][T20612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.373342][T20622] netlink: 'syz.0.3886': attribute type 10 has an invalid length. [ 479.393919][T20612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.521257][T20622] veth0_macvtap: left promiscuous mode [ 479.631119][T20628] lo speed is unknown, defaulting to 1000 [ 479.644289][T20628] lo speed is unknown, defaulting to 1000 [ 479.720843][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 480.022349][T20646] netlink: 'syz.0.3892': attribute type 83 has an invalid length. [ 480.192633][T20659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3895'. [ 480.312187][T20662] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3896'. [ 480.382351][T20662] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.389843][T20662] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.608729][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3900'. [ 481.069521][T20694] block nbd4: server does not support multiple connections per device. [ 481.107621][T20694] block nbd4: shutting down sockets [ 481.111416][T20689] bond6: option mode: invalid value (133) [ 481.143072][T20689] bond6 (unregistering): Released all slaves [ 481.505806][T20710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3909'. [ 481.691543][ T10] net_ratelimit: 4 callbacks suppressed [ 481.691566][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.948865][T20740] "syz.3.3917" (20740) uses obsolete ecb(arc4) skcipher [ 481.969500][T20740] "syz.3.3917" (20740) uses obsolete ecb(arc4) skcipher [ 481.982951][T20740] "syz.3.3917" (20740) uses obsolete ecb(arc4) skcipher [ 481.999987][T20740] "syz.3.3917" (20740) uses obsolete ecb(arc4) skcipher [ 482.021930][T20740] "syz.3.3917" (20740) uses obsolete ecb(arc4) skcipher [ 482.042752][T20740] "syz.3.3917" (20740) uses obsolete ecb(arc4) skcipher [ 482.062146][T20740] "syz.3.3917" (20740) uses obsolete ecb(arc4) skcipher [ 482.342388][T20765] netlink: 'syz.1.3924': attribute type 2 has an invalid length. [ 482.365717][T20765] netlink: 'syz.1.3924': attribute type 2 has an invalid length. [ 482.378237][T20762] netlink: 'syz.1.3924': attribute type 2 has an invalid length. [ 482.386555][T20762] netlink: 'syz.1.3924': attribute type 2 has an invalid length. [ 482.400500][T20762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.690921][T20789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3929'. [ 482.730939][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.812435][T20804] syzkaller1: entered promiscuous mode [ 482.836442][T20804] syzkaller1: entered allmulticast mode [ 482.890681][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.021491][T20793] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3930'. [ 483.084499][T20821] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 483.126821][T20792] vlan2: entered allmulticast mode [ 483.157364][T20792] bond0: entered allmulticast mode [ 483.177618][T20792] bond_slave_0: entered allmulticast mode [ 483.183959][T20792] bond_slave_1: entered allmulticast mode [ 483.240640][T20793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.254407][T20793] bond_slave_0: left promiscuous mode [ 483.261552][T20793] bond_slave_0: left allmulticast mode [ 483.278587][T20793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.298225][T20793] bond_slave_1: left promiscuous mode [ 483.305182][T20793] bond_slave_1: left allmulticast mode [ 483.315331][T20793] bond0 (unregistering): Released all slaves [ 483.355335][T20833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3937'. [ 483.398472][T20833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3937'. [ 483.532544][ T8415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.552692][T20840] syzkaller0: entered allmulticast mode [ 483.683311][T20850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.697138][T20850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.775957][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.013511][T20868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.176123][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.207636][T20884] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3950'. [ 484.891585][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e3bd000: rx timeout, send abort [ 484.906886][T20926] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 485.064979][T20930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.082898][T20932] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3958'. [ 485.169275][T20937] nbd: must specify a size in bytes for the device [ 485.231496][T20939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3963'. [ 485.254283][T20939] macvlan2: entered allmulticast mode [ 485.260430][T20939] dummy0: entered allmulticast mode [ 485.274346][T20939] dummy0: entered promiscuous mode [ 485.391783][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e3bcc00: rx timeout, send abort [ 485.400930][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e3bd000: abort rx timeout. Force session deactivation [ 485.473965][T20945] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 485.562417][T20947] tipc: Started in network mode [ 485.571169][T20947] tipc: Node identity 4, cluster identity 4711 [ 485.600109][T20947] tipc: Node number set to 4 [ 485.622314][T20954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3969'. [ 485.636054][T20954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3969'. [ 485.650780][T20954] 8021q: VLANs not supported on wg2 [ 485.873907][T20959] netlink: 'syz.4.3973': attribute type 1 has an invalid length. [ 485.900841][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807e3bcc00: abort rx timeout. Force session deactivation [ 485.911534][T20959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3973'. [ 486.078434][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3974'. [ 486.544341][T21000] xt_hashlimit: invalid interval [ 486.565666][T21000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3982'. [ 486.623724][T21004] xt_hashlimit: invalid interval [ 486.778768][T21010] netlink: 'syz.2.3983': attribute type 2 has an invalid length. [ 486.846335][T21013] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 486.971728][ T5903] net_ratelimit: 3 callbacks suppressed [ 486.971753][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.992739][T21016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.084982][T21026] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 487.128250][T21026] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 487.163548][T21026] gretap2: entered promiscuous mode [ 487.186137][T21026] gretap2: entered allmulticast mode [ 487.735983][T21054] [ 487.739339][T21054] ====================================================== [ 487.747690][T21054] WARNING: possible circular locking dependency detected [ 487.754844][T21054] syzkaller #0 Not tainted [ 487.760162][T21054] ------------------------------------------------------ [ 487.767825][T21054] syz.0.3994/21054 is trying to acquire lock: [ 487.774732][T21054] ffffffff8ea853e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 487.784572][T21054] [ 487.784572][T21054] but task is already holding lock: [ 487.792834][T21054] ffff88807d560338 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 487.803521][T21054] [ 487.803521][T21054] which lock already depends on the new lock. [ 487.803521][T21054] [ 487.814913][T21054] [ 487.814913][T21054] the existing dependency chain (in reverse order) is: [ 487.826421][T21054] [ 487.826421][T21054] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 487.835666][T21054] __might_fault+0xcb/0x130 [ 487.840819][T21054] _copy_from_user+0x28/0xb0 [ 487.846710][T21054] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 487.853439][T21054] ip_generic_getfrag+0x149/0x2d0 [ 487.859194][T21054] __ip6_append_data+0x3902/0x3e90 [ 487.865500][T21054] ip6_append_data+0x10f/0x280 [ 487.870989][T21054] rawv6_sendmsg+0x12d3/0x18e0 [ 487.876729][T21054] ____sys_sendmsg+0x80a/0x9f0 [ 487.882474][T21054] ___sys_sendmsg+0x2a5/0x360 [ 487.888063][T21054] __x64_sys_sendmsg+0x1bd/0x2a0 [ 487.894407][T21054] do_syscall_64+0x15f/0xf80 [ 487.899642][T21054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.906808][T21054] [ 487.906808][T21054] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 487.915938][T21054] lock_sock_nested+0x41/0x100 [ 487.921848][T21054] inet_shutdown+0x6a/0x390 [ 487.927598][T21054] nbd_mark_nsock_dead+0x2e9/0x560 [ 487.934419][T21054] sock_shutdown+0x15e/0x260 [ 487.940002][T21054] nbd_clear_sock+0x24/0x170 [ 487.946127][T21054] nbd_config_put+0x2dd/0x580 [ 487.951896][T21054] nbd_genl_connect+0x19d5/0x1cf0 [ 487.960003][T21054] genl_family_rcv_msg_doit+0x22a/0x330 [ 487.967058][T21054] genl_rcv_msg+0x61c/0x7a0 [ 487.973109][T21054] netlink_rcv_skb+0x232/0x4b0 [ 487.979406][T21054] genl_rcv+0x28/0x40 [ 487.984717][T21054] netlink_unicast+0x75c/0x8e0 [ 487.991056][T21054] netlink_sendmsg+0x813/0xb40 [ 487.997763][T21054] ____sys_sendmsg+0x972/0x9f0 [ 488.003921][T21054] ___sys_sendmsg+0x2a5/0x360 [ 488.009857][T21054] __x64_sys_sendmsg+0x1bd/0x2a0 [ 488.016523][T21054] do_syscall_64+0x15f/0xf80 [ 488.022470][T21054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.029662][T21054] [ 488.029662][T21054] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 488.039374][T21054] __mutex_lock+0x1a3/0x1550 [ 488.044998][T21054] nbd_queue_rq+0x37b/0x1100 [ 488.050438][T21054] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 488.057300][T21054] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 488.064552][T21054] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 488.071351][T21054] blk_mq_run_hw_queue+0x348/0x4f0 [ 488.077258][T21054] blk_mq_dispatch_list+0xd16/0xe10 [ 488.083176][T21054] blk_mq_flush_plug_list+0x48d/0x570 [ 488.090040][T21054] __blk_flush_plug+0x3ed/0x4d0 [ 488.095635][T21054] __submit_bio+0x28d/0x580 [ 488.100875][T21054] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 488.107432][T21054] block_read_full_folio+0x599/0x830 [ 488.113527][T21054] filemap_read_folio+0x137/0x3b0 [ 488.119195][T21054] do_read_cache_folio+0x358/0x590 [ 488.125137][T21054] read_part_sector+0xb6/0x2b0 [ 488.130592][T21054] adfspart_check_ICS+0xb1/0x960 [ 488.136268][T21054] bdev_disk_changed+0x817/0x1770 [ 488.142181][T21054] blkdev_get_whole+0x380/0x510 [ 488.148290][T21054] bdev_open+0x31e/0xd30 [ 488.153080][T21054] blkdev_open+0x470/0x610 [ 488.158042][T21054] do_dentry_open+0x785/0x14e0 [ 488.163789][T21054] vfs_open+0x3b/0x340 [ 488.168765][T21054] path_openat+0x2e08/0x3860 [ 488.174057][T21054] do_file_open+0x23e/0x4a0 [ 488.179591][T21054] do_sys_openat2+0x113/0x200 [ 488.185290][T21054] __x64_sys_openat+0x138/0x170 [ 488.191299][T21054] do_syscall_64+0x15f/0xf80 [ 488.196699][T21054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.203921][T21054] [ 488.203921][T21054] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 488.211891][T21054] __mutex_lock+0x1a3/0x1550 [ 488.217500][T21054] nbd_queue_rq+0xc6/0x1100 [ 488.222911][T21054] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 488.229496][T21054] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 488.236832][T21054] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 488.243975][T21054] blk_mq_run_hw_queue+0x348/0x4f0 [ 488.249929][T21054] blk_mq_dispatch_list+0xd16/0xe10 [ 488.255962][T21054] blk_mq_flush_plug_list+0x48d/0x570 [ 488.262861][T21054] __blk_flush_plug+0x3ed/0x4d0 [ 488.269692][T21054] __submit_bio+0x28d/0x580 [ 488.276250][T21054] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 488.283339][T21054] block_read_full_folio+0x599/0x830 [ 488.290535][T21054] filemap_read_folio+0x137/0x3b0 [ 488.297079][T21054] do_read_cache_folio+0x358/0x590 [ 488.303097][T21054] read_part_sector+0xb6/0x2b0 [ 488.309306][T21054] adfspart_check_ICS+0xb1/0x960 [ 488.314901][T21054] bdev_disk_changed+0x817/0x1770 [ 488.321609][T21054] blkdev_get_whole+0x380/0x510 [ 488.327363][T21054] bdev_open+0x31e/0xd30 [ 488.332324][T21054] blkdev_open+0x470/0x610 [ 488.337536][T21054] do_dentry_open+0x785/0x14e0 [ 488.342969][T21054] vfs_open+0x3b/0x340 [ 488.348985][T21054] path_openat+0x2e08/0x3860 [ 488.354474][T21054] do_file_open+0x23e/0x4a0 [ 488.359796][T21054] do_sys_openat2+0x113/0x200 [ 488.365338][T21054] __x64_sys_openat+0x138/0x170 [ 488.371190][T21054] do_syscall_64+0x15f/0xf80 [ 488.377830][T21054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.385416][T21054] [ 488.385416][T21054] -> #3 (set->srcu){.+.+}-{0:0}: [ 488.393451][T21054] __synchronize_srcu+0xca/0x300 [ 488.401422][T21054] elevator_switch+0x1e8/0x7a0 [ 488.406997][T21054] elevator_change+0x2cc/0x450 [ 488.412766][T21054] elevator_set_default+0x36c/0x430 [ 488.419079][T21054] blk_register_queue+0x3e9/0x4e0 [ 488.424854][T21054] __add_disk+0x677/0xd50 [ 488.430005][T21054] add_disk_fwnode+0xfb/0x480 [ 488.436391][T21054] nbd_dev_add+0x72c/0xb50 [ 488.442218][T21054] nbd_init+0x168/0x1f0 [ 488.447619][T21054] do_one_initcall+0x250/0x870 [ 488.453028][T21054] do_initcall_level+0x104/0x190 [ 488.458531][T21054] do_initcalls+0x59/0xa0 [ 488.463672][T21054] kernel_init_freeable+0x2a6/0x3e0 [ 488.469874][T21054] kernel_init+0x1d/0x1d0 [ 488.475616][T21054] ret_from_fork+0x514/0xb70 [ 488.480959][T21054] ret_from_fork_asm+0x1a/0x30 [ 488.486731][T21054] [ 488.486731][T21054] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 488.495816][T21054] __mutex_lock+0x1a3/0x1550 [ 488.501111][T21054] elevator_change+0x1b3/0x450 [ 488.506889][T21054] elevator_set_none+0xb5/0x140 [ 488.512723][T21054] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 488.519358][T21054] nbd_start_device+0x17f/0xb10 [ 488.524854][T21054] nbd_genl_connect+0x165b/0x1cf0 [ 488.531034][T21054] genl_family_rcv_msg_doit+0x22a/0x330 [ 488.538184][T21054] genl_rcv_msg+0x61c/0x7a0 [ 488.543854][T21054] netlink_rcv_skb+0x232/0x4b0 [ 488.549609][T21054] genl_rcv+0x28/0x40 [ 488.555027][T21054] netlink_unicast+0x75c/0x8e0 [ 488.561339][T21054] netlink_sendmsg+0x813/0xb40 [ 488.566862][T21054] ____sys_sendmsg+0x972/0x9f0 [ 488.572658][T21054] ___sys_sendmsg+0x2a5/0x360 [ 488.578954][T21054] __x64_sys_sendmsg+0x1bd/0x2a0 [ 488.584467][T21054] do_syscall_64+0x15f/0xf80 [ 488.589880][T21054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.596719][T21054] [ 488.596719][T21054] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 488.606321][T21054] blk_alloc_queue+0x546/0x680 [ 488.612000][T21054] __blk_mq_alloc_disk+0x197/0x390 [ 488.618052][T21054] nbd_dev_add+0x499/0xb50 [ 488.623389][T21054] nbd_init+0x168/0x1f0 [ 488.628536][T21054] do_one_initcall+0x250/0x870 [ 488.634299][T21054] do_initcall_level+0x104/0x190 [ 488.640148][T21054] do_initcalls+0x59/0xa0 [ 488.645285][T21054] kernel_init_freeable+0x2a6/0x3e0 [ 488.651452][T21054] kernel_init+0x1d/0x1d0 [ 488.656436][T21054] ret_from_fork+0x514/0xb70 [ 488.662270][T21054] ret_from_fork_asm+0x1a/0x30 [ 488.668368][T21054] [ 488.668368][T21054] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 488.676834][T21054] __lock_acquire+0x15a5/0x2cf0 [ 488.683577][T21054] lock_acquire+0x106/0x350 [ 488.688657][T21054] fs_reclaim_acquire+0x71/0x100 [ 488.694315][T21054] prepare_alloc_pages+0x152/0x650 [ 488.700510][T21054] __alloc_frozen_pages_noprof+0x12f/0x380 [ 488.707315][T21054] alloc_pages_mpol+0x235/0x490 [ 488.713467][T21054] alloc_pages_noprof+0xac/0x2a0 [ 488.719662][T21054] __pud_alloc+0x3a/0x460 [ 488.724637][T21054] handle_mm_fault+0x2046/0x3170 [ 488.730459][T21054] do_user_addr_fault+0x75b/0x1340 [ 488.736672][T21054] exc_page_fault+0x6a/0xc0 [ 488.742546][T21054] asm_exc_page_fault+0x26/0x30 [ 488.748397][T21054] rep_movs_alternative+0x30/0x90 [ 488.754140][T21054] _copy_from_user+0x7a/0xb0 [ 488.760004][T21054] ax25_ioctl+0x8fe/0xd40 [ 488.765421][T21054] sock_do_ioctl+0x101/0x320 [ 488.770713][T21054] sock_ioctl+0x5c6/0x7f0 [ 488.776585][T21054] __se_sys_ioctl+0xfc/0x170 [ 488.781879][T21054] do_syscall_64+0x15f/0xf80 [ 488.787090][T21054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.794651][T21054] [ 488.794651][T21054] other info that might help us debug this: [ 488.794651][T21054] [ 488.806141][T21054] Chain exists of: [ 488.806141][T21054] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 488.806141][T21054] [ 488.819458][T21054] Possible unsafe locking scenario: [ 488.819458][T21054] [ 488.827332][T21054] CPU0 CPU1 [ 488.832820][T21054] ---- ---- [ 488.838444][T21054] rlock(&mm->mmap_lock); [ 488.843751][T21054] lock(sk_lock-AF_INET6); [ 488.851562][T21054] lock(&mm->mmap_lock); [ 488.859096][T21054] lock(fs_reclaim); [ 488.863619][T21054] [ 488.863619][T21054] *** DEADLOCK *** [ 488.863619][T21054] [ 488.873295][T21054] 2 locks held by syz.0.3994/21054: [ 488.880000][T21054] #0: ffff88804a759260 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_ioctl+0xc5/0xd40 [ 488.890494][T21054] #1: ffff88807d560338 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 488.901178][T21054] [ 488.901178][T21054] stack backtrace: [ 488.907376][T21054] CPU: 1 UID: 0 PID: 21054 Comm: syz.0.3994 Not tainted syzkaller #0 PREEMPT(full) [ 488.907403][T21054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 488.907414][T21054] Call Trace: [ 488.907423][T21054] [ 488.907432][T21054] dump_stack_lvl+0xe8/0x150 [ 488.907464][T21054] print_circular_bug+0x2e1/0x300 [ 488.907485][T21054] check_noncircular+0x12e/0x150 [ 488.907506][T21054] __lock_acquire+0x15a5/0x2cf0 [ 488.907535][T21054] ? __lock_acquire+0x6b5/0x2cf0 [ 488.907561][T21054] ? prepare_alloc_pages+0x152/0x650 [ 488.907582][T21054] lock_acquire+0x106/0x350 [ 488.907604][T21054] ? prepare_alloc_pages+0x152/0x650 [ 488.907627][T21054] ? __lock_acquire+0x6b5/0x2cf0 [ 488.907652][T21054] fs_reclaim_acquire+0x71/0x100 [ 488.907671][T21054] ? prepare_alloc_pages+0x152/0x650 [ 488.907691][T21054] prepare_alloc_pages+0x152/0x650 [ 488.907714][T21054] __alloc_frozen_pages_noprof+0x12f/0x380 [ 488.907739][T21054] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 488.907762][T21054] ? __pfx_policy_nodemask+0x10/0x10 [ 488.907785][T21054] ? unwind_next_frame+0xa6/0x2550 [ 488.907804][T21054] alloc_pages_mpol+0x235/0x490 [ 488.907826][T21054] alloc_pages_noprof+0xac/0x2a0 [ 488.907849][T21054] __pud_alloc+0x3a/0x460 [ 488.907867][T21054] handle_mm_fault+0x2046/0x3170 [ 488.907886][T21054] ? __pfx_mt_find+0x10/0x10 [ 488.907910][T21054] ? handle_mm_fault+0xee/0x3170 [ 488.907928][T21054] ? __pfx_handle_mm_fault+0x10/0x10 [ 488.907949][T21054] ? __lock_acquire+0x6b5/0x2cf0 [ 488.907974][T21054] ? lock_mm_and_find_vma+0xa7/0x340 [ 488.907994][T21054] do_user_addr_fault+0x75b/0x1340 [ 488.908023][T21054] exc_page_fault+0x6a/0xc0 [ 488.908117][T21054] asm_exc_page_fault+0x26/0x30 [ 488.908139][T21054] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 488.908160][T21054] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 488.908174][T21054] RSP: 0018:ffffc90005f2fb38 EFLAGS: 00050212 [ 488.908191][T21054] RAX: 00007ffffffff001 RBX: 0000000000000010 RCX: 0000000000000010 [ 488.908203][T21054] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: ffffc90005f2fba0 [ 488.908224][T21054] RBP: ffffc90005f2fcb0 R08: ffffc90005f2fbaf R09: 1ffff92000be5f75 [ 488.908238][T21054] R10: dffffc0000000000 R11: fffff52000be5f76 R12: ffffc90005f2fba0 [ 488.908250][T21054] R13: 1ffff92000be5f70 R14: ffffc90005f2fba0 R15: 00002000000013c0 [ 488.908271][T21054] _copy_from_user+0x7a/0xb0 [ 488.908291][T21054] ax25_ioctl+0x8fe/0xd40 [ 488.908310][T21054] ? __pfx_ax25_ioctl+0x10/0x10 [ 488.908326][T21054] ? tomoyo_path_number_perm+0x219/0x630 [ 488.908351][T21054] ? tomoyo_path_number_perm+0x219/0x630 [ 488.908379][T21054] ? do_vfs_ioctl+0x1166/0x1530 [ 488.908401][T21054] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 488.908426][T21054] sock_do_ioctl+0x101/0x320 [ 488.908451][T21054] ? __pfx_sock_do_ioctl+0x10/0x10 [ 488.908471][T21054] ? do_futex+0x395/0x420 [ 488.908492][T21054] sock_ioctl+0x5c6/0x7f0 [ 488.908515][T21054] ? __pfx_sock_ioctl+0x10/0x10 [ 488.908536][T21054] ? __fget_files+0x2a/0x420 [ 488.908553][T21054] ? __fget_files+0x3a0/0x420 [ 488.908569][T21054] ? __fget_files+0x2a/0x420 [ 488.908586][T21054] ? bpf_lsm_file_ioctl+0x9/0x20 [ 488.908609][T21054] ? __pfx_sock_ioctl+0x10/0x10 [ 488.908629][T21054] __se_sys_ioctl+0xfc/0x170 [ 488.908650][T21054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.908668][T21054] do_syscall_64+0x15f/0xf80 [ 488.908690][T21054] ? trace_irq_disable+0x3b/0x140 [ 488.908713][T21054] ? clear_bhb_loop+0x40/0x90 [ 488.908731][T21054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.908747][T21054] RIP: 0033:0x7fcad619cdd9 [ 488.908764][T21054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.908779][T21054] RSP: 002b:00007fcad6fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.908796][T21054] RAX: ffffffffffffffda RBX: 00007fcad6415fa0 RCX: 00007fcad619cdd9 [ 488.908808][T21054] RDX: 00002000000013c0 RSI: 00000000000089e0 RDI: 0000000000000004 [ 488.908819][T21054] RBP: 00007fcad6232d69 R08: 0000000000000000 R09: 0000000000000000 [ 488.908829][T21054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.908839][T21054] R13: 00007fcad6416038 R14: 00007fcad6415fa0 R15: 00007fff3ba7e008 [ 488.908858][T21054] [ 489.401332][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.409769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.448063][T21060] __nla_validate_parse: 2 callbacks suppressed [ 489.448085][T21060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3995'. [ 489.461406][T21061] syzkaller0: entered allmulticast mode [ 489.611778][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.937281][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.422027][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.450772][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.500892][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.650891][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.530738][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.770216][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.570169][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.610394][ T5578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.690796][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.650549][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.811366][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.690860][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog