last executing test programs: 2.628190926s ago: executing program 2 (id=10395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8084) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000ff0f00000700000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000008000000000000000000000000000000000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a3100000000140005"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000840, &(0x7f0000000500)={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_proto_private(r6, 0x89e9, &(0x7f0000000a40)="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") 2.562918592s ago: executing program 3 (id=10398): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4}}, &(0x7f0000000100)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a0008615000008009f000d000000080026000816"], 0x40}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a0b02050000002581000000d9df25030017"], 0x28}}, 0x20008004) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xc41, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r7, &(0x7f0000000000)=""/31, 0x1f) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, 0x0) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r8, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) 2.478164248s ago: executing program 2 (id=10399): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) connect(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x35}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/249, 0xf9}, 0x5}], 0x2, 0x820b, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000edffffff0b0000000400009d486581ba4f9a5f130200000000002e0097accf394f1709adf7957615cbcadf48ee39e3e83c73fccd05b6fb6be0a6f9f345bfec4249bc0f9484113c99ffe5cc169acee9eecfa28df216f6af17a05053abc399125be527704ed9"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000009dac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000440), &(0x7f00000005c0)="e39168b62269c0c3a3dcacf704dab5b04d913aea2863f174b3ecaedba2ee0e8cff0f0000eda8bf309664bbc9352b5724a3c90befc5a627bc70a4ade8d1b166fdcb3d41e91f37670b3b97641c5478d43dc06ea6928713b9a1ebf25ea65bbfc8c3db00c5ffc10196e9ac3a29028087b15fe7a1eb63065f00d9bc1487619502b688fc4576247682614680257970e81b", 0x802, r5}, 0x38) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069114e0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.188260091s ago: executing program 4 (id=10405): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100050c100000000000204e0000", 0x7e}], 0x1) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "ec0f94df139179fed3faff3af613f0787022d14b64ab74e996699a8ec06ed4a6", "6c0fae93b198ad6a9d6023de0d216e81ead2cd8e209691e23224b64c01241b44", "47ba22bac56189e28398c1553557db8b7b98b9a66bc90c965338d9f570fce542", "cced961adca433189a395209dfda4e9a23ac0f1344e180e513ddb1e71f4909c6", "db02a1d5a71410c8e56240bee8c203b3db25ba48d7d28fea586cc597a4aac89f", "d2f5c256a0c14fc7fcecf5d0", 0x8000, 0x4, 0x5, 0x4, 0x6}}) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, 0x0) r5 = accept4$unix(r2, 0x0, 0x0, 0x800) recvfrom$unix(r5, &(0x7f0000000240)=""/258, 0x102, 0x0, 0x0, 0x0) 2.163594472s ago: executing program 3 (id=10406): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$sock(r2, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)='3', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x24, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmmsg(r3, &(0x7f00000011c0)=[{{&(0x7f0000000180)=@nfc={0x27, r4, 0x3, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="9bc4f1d102ff3b3d6a8561706b0c", 0xe}, {&(0x7f0000000200)="69cb5c13b504a1819db8c2afa9a92b8d263cc1b2699b895fec3f99534e2b55f51ca0b6f8d17fd45462207a973708b90a685a453e168d969509f043c8381f369f71ba475d45cf1cbf72d772bc8a86d0a06d07aedf4375d7b53856729c9e1a590f30cb2e75033e8826053ebdfaff7c872ea955e0afeed1a4018746a2a5a8dd048870a89a7e3f2a074d60ece6a30b14577a0a3c07a3382ebd7e129908fba18b531f12007db985fbabc7d395423f1a0a4147b436060ab6f29cf0cd0f", 0xba}], 0x2, &(0x7f0000000380)=[{0xa0, 0x113, 0x72, "fa65b981aa44fc11e1a4c6c4dfbdf16d54aef51fac547d3ca79786286f5e94d139100c47c9883714087619176bf4a4d5a4c8b281a9075de56f0d517f45d971becd4ea285b54d183640df6b0f425c4a5f6f76013c9985f76e9c6d26c77c2f221d98358862299b778200c195a98603abb86600b44c4dfced3543d325db9fcb53b28fb1996c79402640d1d2e0b787e9e2"}, {0x30, 0x104, 0x0, "e8c44c805f2a4557c78f6ea1444349a4b66aaa133736212d6c"}, {0xa0, 0x103, 0x1, "f55d6452f74d741f4f9a211c76b074011f90498b755087ee272bfade40dae0926520fa7f1657ed7b9f213f103b628a83775a2a9441581c10fbc6ee78dc83e6ab9040781e7c0d1afffc44b3da715e4e3342d879606310983b16de1274e02cbea2c90b4205127a4b0a9fe45a365bc0b65bc58ff8a22e0a79bd1c4fe0c740b6dcebd349f572e9c2761470ba86"}, {0xc0, 0x109, 0x1000, "d28874d042ba8eac2300dfc25116e6df4be1fb234c8560aaf07d1aef017113f188f0d84b3f878487405f5be6dd8360a0c55be8c0df0645d361190a51b522fabdff0534a9f29de487e45908869a2eaac5169f89f64a11cc515fd5e04b6adfab15bac49761e3009d87ea7f6899569bc5a41989691923f000e32b218a665595bf859456ee0bdc64d3f5431dde0320fd32da0dbfc799028d201e556a1a5951f2b3f507d5af520a3fb165c80c9e5f"}, {0x70, 0x10f, 0x8, "8b72b75091c8bec021b5f80384b45b75ef9e793a8f386546061bac9391e94f7c8464ed60481ddc0e0d1bd75ebef75bb41446b1078c638de46d2484ff640417ce4b6dce88c31704eb91f106c8da24caaea02a2ca09cd5a85981"}, {0x108, 0xff, 0x40, "4c17ff0b058ca05e37cbe40c891a4e12eb28117e5aba1127ed54b6a19cf33504318ba536e24accb8ce2fed58c5193b8bc81e03c47f734c1e6aead108f3ca41a468f61130e65e9b96f792b73793cd8ef8fde39f670d3f563b1962a495460eed2a20ff574f11f115769e5df616dc83f7753cf5062f2cffd47c2fdcae458b7c2dff4afd3c6ba6d6ddcd17b2ea516d9eb59460b0188121964c18f8f6c0a95c79ff42bf8dd5630bb64a60d53110f7166714b4e4bf0c3540049225a02b0ceaf1bd0a841baeb5cef543d78e702a2a5d16ca0d5ac73433fb89bbf89dcf32be3e98bd0c3221a5e5017e204aeddce09bb4f7fd0f00e2"}], 0x3a8}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000740)="7cb49629fdd46d0419fd39b8f1bc19362afa66dea4231c9722f75f914b16a470fb95928b9a684eaa46b41a338b3c760af2ef2d0a928d6f3d2a771a4d1b4a53045322fa419352845fe87f91", 0x4b}, {&(0x7f00000007c0)="08e71d6025787e2bf3a904f57edcf07bc759bfe27df3622711e87ef96ff691f0fd17a27ba1e62cd6a569d408a460f7156cdad656a5a3c977f58d482a5ef0c42e31347e6eccc0362ae485b39a79a80181465fd417287e3bb1437f00fe3f5b2e3ce62dadfcf9944893dbe198995b52797d941f6483c531f32237f17b0a7a7e91c996f39e0205fe012e0e9c0da419e090dcb40b7190fd4a", 0x96}, {&(0x7f0000000880)="e467abb9e828025e6a4ba80ee32407a45c6c9b73e13d99164bbb31366c0d6b478fd7bfa3b4c7fe947100d72a85c7760ffd3d7f4440d49e50aa1f7976ea43918364b5fe056cad227463675649a7d14c70da0dd39988580f3bda0f0abd7877611533542f62ac3f22132d291ed19b6cbff2213490d912a107ae8e6ecf46a6cc090ce4", 0x81}, {&(0x7f0000000940)="8ae17c1c26918ac6897c7c7523d4a70bee514b022504f6314283200ba99b5fadda4241e225a80643fe69e3b28156662d2270377a4f9e6840d4b3006b88eda9aca98e601cdc5666cf5f1209403b7de49ea7686d9221470fa18eda5681060198f0aa646b920bbec27adb0d761aad2d7111a9ab919e13227ab14b8a7e5b0ee70be1848766ba8122237b4eb8e768154518c33a0abf4f77624268b73f9d07e71bfa70d6ecf3e47620ec412e827480fb7396cbd8f5cc91ba122be3157685819318eb3413361776de1a49a3d4010d9fdd2be93201f5681b12329a15883f8f58a2fbb3b99a06795a29b7f0a5717075711515e841683d2c6e8f", 0xf5}, {&(0x7f0000000a40)="ce6fdac40c1e6e49cbcfbb3dd888d5aeebc9e8a12fdb55ad40a086ed17bc241561f1ca26bbd8eedb962bc756f4153201c4cff35e3620b6adc82595463548a248d650ed429b00e7", 0x47}, {&(0x7f0000000ac0)="791f97b0c4e1be00a7aa6f7e6c859d2556b9dbbfd45a318623f1be35ecdb2f976685359ce8f6ce6580c0550ea6f8e7c0d145696264654453030462d78b61d5d7dcc51c82ee3be7756e040ea960b4e206cdc68e984aa2b6fffb6669148473f276f0edfc735cd6b04b1a7fa080764cea53811348fae51e3550ba65fb05ed155da28bc02fbc1829e54385228e3832ccc5efea22e76f1894eb8782f20688e5d25b0454d366ba417d3990e4ebc53d6e94f6341cc4155aee5cb2ddb7", 0xb9}, {&(0x7f0000000b80)="b99c0866d29e6e670c450f457ed7028b63ae1d691f655d51ffbff17d4d4d562ee1c25b6315e9556e06cbe7ad61a5348f717633a666a265fed3ab7826e426b3668362eceb38c26f54193db496430f772cdafaa8e467078e67f66aadc80d8ba08b73f7671a417d4b66865dd6adfc47c56640db2d7b998c892bce2b79ef71295bb5bb803b29a2f6ed6fa562cf2706845bc904aed20d522c6484c3c3eee8e0f7f2b85609424322aa1df567a9b4c03f37e34eb32bdc5f0912350c15eab007cc2081387021b155e68dd20a75c12cac6b67926c1797c0ef", 0xd4}, {&(0x7f0000000c80)="a96d63b3649f94099a19b6532caa6c450bea664cd2ef98371e4c20dc1b53cb36a822f9bdd797cb07bfad4581ea1893e4029c1cdf265db377e0a09191d5f78db1994b22bc95c611f0edc076e435dffd80a7f5d3c1ff1c2b794060e2b8c47e271cef848e0b770603a0e7490b7dad01905a56a3451bee97fa3c9ba7eba01959c8a52f9ce7ac8e5b4f2de575a5c963213f8f6315e23495693c67f538b498ed0759396f7be74fa1d4b81fb441d706f4d18ea1bc2d93fa6c4da74a116284a6d06fd83f8fb77cb2bc6aa18543d0e1674b2deadc286581c4969250755f3ef32e99fdfe69f14f", 0xe2}, {&(0x7f0000000d80)="b2fe6cd02ae2c343e43fae1e03e35031c7222f273158e1829a50ef3670ba1430b1cd3f1eceec6f9db45c21d1e455d82269ae3e694efcbc20f238058fada166483959adbb923e97cc08503f927ed344d856374b7e0c989902fe608eca20d16d9a8b59b965f5fd331d95264ac9c3316542b7554922b98565cf58c66c983be15a44f123b35e12bbe70c97e4e15d6dbd1eef62cb410f7c3f3f997116ea48b25622d2f2e0cef537b05273b7c730b174ab2c2b665dda9094920ee8c97f918e23075f82e2bf6a49b79317add75dc83f3b6394b0460948902b757e6d", 0xd8}], 0x9}}, {{&(0x7f0000000f40)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x8001, @loopback, 0x6}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000fc0)="d12132dbe956a50e70164864f04e26472d1f7765adab575d5dcf6e6a7d497cd3c15a22d7eaa86c81837987bf94993fe11bb40c9743cca0fac1ca19e1e595d33db9195b669473913fdfcb", 0x4a}, {&(0x7f0000001040)="396261a67f1ca760e76f9ea0de3e5c547c2fdb11f9d770bc9fbeed7f8fd06b038b4d7ed8011ec5d0fcb6ec74bd78d0b82c779604d7c0ef63d90db10f3c9dd256ff88b44adc2842007eeed63ad7cd8c04562a95b6bb6a8bee54fd2a582d56198764917c80856ac06f87c9864900", 0x6d}], 0x2, &(0x7f0000001100)=[{0x90, 0x10a, 0x0, "c7eee649268762e4067cad5cffca2b6f5895d5f44c4cce46da9ab4e6f1919ca8227ffdf18d30b9829451d9d09cb5b81567c9a7380ec9407afb6e45f9c7430506dce80ee11f67b5c8a8b30d8928149def9316c94fb8e0d89dc71ce53f2ba684b14c2feb712a971043e92169a534396e4e3df15cb91777104bfc"}], 0x90}}], 0x3, 0x4004) 1.931550436s ago: executing program 4 (id=10408): unshare(0x28000600) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x4}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\f'}]}], {0x14}}, 0x84}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) ppoll(&(0x7f0000000280)=[{r2, 0x701}], 0x1, &(0x7f00000003c0), 0x0, 0x0) 1.388494377s ago: executing program 4 (id=10411): mmap(&(0x7f0000c01000/0x4000)=nil, 0x4000, 0x2000007, 0x10, 0xffffffffffffffff, 0x1ff87000) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @local}], 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x1e232cb5d399186d, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000090) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24000001) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000009c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x195b01, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) read$rfkill(r0, &(0x7f0000001780), 0x8) 1.38808561s ago: executing program 1 (id=10412): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x48}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.386378572s ago: executing program 1 (id=10415): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}, 0x1, 0x0, 0x0, 0x44040}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x20}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffec, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x19a}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x80000001}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000300)={r9, 0x64, "b7f1d91148af1cf251d4fb01acba4b1ed8c9090a7aa5d4728bf6792cf9f8ec8c4e15a7d650f41aaa7dfe639ce90bf7304c15587bb67ce59364fb073b43fc62e84681201aaf139b8b3a15c74c31b72cc45f3459a4822aca9ccba8e444804b6f0de3273a53"}, &(0x7f0000000380)=0x6c) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getnexthop={0x40, 0x6a, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r7}, @NHA_OIF={0x8, 0x5, r7}, @NHA_OIF={0x8, 0x5, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.385722744s ago: executing program 2 (id=10416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000101050000000000000000000a000004300002802c000180140003"], 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) close(r1) 1.297849091s ago: executing program 0 (id=10417): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x64}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040810}, 0x4850) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x2, 0x9, {{0x6, 0x4, 0x1, 0x26, 0x18, 0x68, 0x0, 0x81, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x17}, {[@end, @noop, @noop]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r5, @ANYBLOB="02007e51a2192321149841d783dd3653f00e2dbd7000ffdbdf250300130090000180080003000200000008000100", @ANYRES32=r6, @ANYBLOB="080003000000000014000200766972745f7769666930000000000000080003000300000014000200697036746e6c30000000000000000000140002006d616376746170300000000000000000140002006d6163766c616e3100000000000000001400020069703667726574617030000000000000080003000100000005000300b8000000050002000600000005000200d0000000340001800800030003000000140002007465616d5f736c6176655f3100000000140002006970365f767469300000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) (async) listen(r4, 0x0) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @remote}, 0x28, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)='wg0\x00', 0x1, 0x2, 0x7}) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) r7 = accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @private=0xa010101, @loopback}, 0xc) 1.2973325s ago: executing program 2 (id=10418): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x340, 0x11, 0x148, 0x340, 0x0, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0xc0) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000140), 0xfffffdef) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) read$rfkill(r6, &(0x7f0000001780), 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="f700000000005f3af8000000000400"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800bd7000fcdbc84be6f20000000000000000b448b6d24b423c00", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) poll(&(0x7f0000000300), 0x29, 0x200) 1.243554735s ago: executing program 3 (id=10419): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) close(0x3) (async, rerun: 64) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)}, 0x62) (async) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x101, 0xa) (async) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x322, &(0x7f0000001300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "bc9e88", 0x2ec, 0x6, 0x0, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x3c, 0xe, 0x1, 0x81, 0x0, [@rand_addr=' \x01\x00', @remote, @dev={0xfe, 0x80, '\x00', 0x3e}, @private1, @private0, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @srh={0x0, 0x12, 0x4, 0x9, 0x4, 0x40, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @dev={0xfe, 0x80, '\x00', 0x3f}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, @private0, @remote, @remote, @mcast1]}, @hopopts={0x51, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x6730}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x23}}, @jumbo={0xc2, 0x4, 0x10000}, @ra={0x5, 0x2, 0x3ff}, @ra={0x5, 0x2, 0x2}]}, @hopopts={0x8, 0xe, '\x00', [@generic={0x4, 0x5e, "0381b6622b9e86887f9a8613ccd42f0510745d40395dd7f3f3a118fe740e7dd87de08ce545af5f76f66b9c912589d591bbae364cc452e9d9ccdd6ef5782e66edc9001982315ce0ce5894cb5c802fff5cf86aebf52a12be018ac163bc16bf"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra]}, @routing={0x11, 0x6, 0x0, 0xf2, 0x0, [@empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x2, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}], {{0x4e23, 0x4e24, r1, r2, 0x1, 0x0, 0x12, 0xc7, 0x8, 0x0, 0x3, {[@eol, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0xa, [0x0, 0x7ff]}, @window={0x3, 0x3, 0x54}, @md5sig={0x13, 0x12, "ace484435f478effa1eb88b78affb0b2"}, @timestamp={0x8, 0xa, 0xd, 0x580b}, @nop, @nop]}}, {"3ceefe5e1c4dda4258ca3bed9cbe642d734cf6956e2ac49f8f988e07568b3f225f1ce86b5ade31c79c84d737f7e2d9dca6e5d024dc2ba61bc3c8f6e7bd5dc1bf03845ab1169ae33ec6fbf2424ce42c90748ec6eefa8b3a1d45bdf5eccafe9612c6bcd6a4c5586de25f39c8c8158572a0624b6d14f34e68ad908afa88cf1e903ca80ea06add3716b5993c377a"}}}}}}}, 0x0) 1.176084972s ago: executing program 1 (id=10420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x702, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r3 = socket(0x2, 0x2, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r4) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000400)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e23, @multicast1}, 0x0, 0x0, 0x3}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)="a0696833a3062a8104ac7f3917795eee7ce09181bdce0b20322be3f784f26c92ac3d01b058", 0x25}, {&(0x7f00000002c0)="c331eedf247983f049113171aa1e1cc27e98c7a760fd7893dbb5d63003130fdcd89b718966f77402c2d0dfc976a1764ef2187c67b26cf11c9f26d068238e1c8e86fa2b6c5d13600ed200c7242873edb6ea1671ca4635f67aa684133f5cd2d71ba180207574f7f87a6ef31e404f9ee142128025b13156b04264df6fe0d1b79db29f65f320cfc56f449482f7845136c5717449b1a8de95357f856debef3e9ae55da7718f0487c690cfa8be2432aa5b54cca19e63df55bfa42ffefac61998da8e7630a58b06656f60b766aebbc9afd6", 0xce}], 0x2}, 0x40488c4) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8b}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x50f}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040005}, 0x4000084) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x101}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004084}, 0x0) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000740)={0xd86c, 0x6, 0xe, 0x8}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001900)={'syztnl2\x00', &(0x7f0000001800)={'erspan0\x00', 0x0, 0x10, 0x10, 0x7, 0x7, {{0x35, 0x4, 0x3, 0x2d, 0xd4, 0x65, 0x0, 0x10, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x4c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0x27fd, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0xb}]}, @timestamp_addr={0x44, 0x24, 0x7, 0x1, 0x1, [{@broadcast, 0x8}, {@multicast1, 0xbd}, {@local, 0x2}, {@loopback, 0x8}]}, @timestamp_prespec={0x44, 0x34, 0x70, 0x3, 0x1, [{@private=0xa010101, 0xe256}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x3}, {@rand_addr=0x64010100, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x800}, {@multicast1, 0xa}]}, @lsrr={0x83, 0x1b, 0x21, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x82, 0x6, "21ebd796"}, @end, @rr={0x7, 0x23, 0x78, [@private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, @remote, @loopback, @multicast2, @loopback]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000019c0)={0x6, 0x0}, 0x8) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d80)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ldst={0x2, 0x3, 0x3, 0x0, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff}]}, &(0x7f0000001b00)='syzkaller\x00', 0x44da, 0xd5, &(0x7f0000001b40)=""/213, 0x41000, 0x6, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000001c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000001cc0)=[{0x1, 0x4, 0xd, 0xc}, {0x0, 0x4, 0xe, 0x4}, {0x2, 0x2, 0xd}, {0x3, 0x3, 0x1, 0x2}, {0x3, 0x4, 0xd, 0xb}, {0x4, 0x2, 0xf, 0x8}, {0x1, 0x3, 0xe, 0x5}, {0x5, 0x3, 0x4, 0xa}, {0x0, 0x2, 0xe, 0xc}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x1a, 0x1, &(0x7f0000000780)=@raw=[@alu={0x4, 0x1, 0xc, 0x9, 0xa, 0xffffffffffffffd5, 0xfffffffffffffff0}], &(0x7f00000007c0)='syzkaller\x00', 0xd, 0x1000, &(0x7f0000000800)=""/4096, 0x41100, 0x0, '\x00', r9, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001980)={0x5, 0xa, 0x10000, 0x4}, 0x10, r10, r11, 0x2, 0x0, &(0x7f0000001e40)=[{0x4, 0x3, 0x0, 0x9}, {0x3, 0x3, 0xc, 0x1}], 0x10, 0x1}, 0x94) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r12, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6c}, @void, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000020c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002100)=0x0) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f00000022c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002280)={&(0x7f0000002140)={0x120, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0xf4, 0x1f, "e1395723894192570154b0475c9b6b9d8f9ed0e7432726843bc244ce89e42af0656583852bb5ca5bc4e5cfa224904dede6def814914dbf3467512b5535ab86cb235a97360dbafed0756ee0358ed69d8e51fa0122f9e9f7b2c1bebad5bb3467c488018ecf19c402408f4a6df545987b2c354f733ceefaf390cc9c6ff56882dd4982eefe3d54a57fb3b3635857adb842d3dae7b429b5be2528ddfa2495a373ba4f5584e8b00f6252a54c706bf52c89479ae29c919a2338c79678b9a05b054179dc3f56ffebcf5a953f20c6f43bdf986612c9f9d904b8e224e4e2a3e1684486976afd1b473429a551d9b34885cb5849ec12"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xa}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002340), r0) sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000002480)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002440)={&(0x7f0000002380)={0xb4, r16, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffe21}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3cc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x996}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80a0}, 0xc0) sendmsg$unix(r3, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000024c0)="232fccea68c90e2e051137dad7eb2f15644ac01c137e528411ccec30204e52997959d7fab8354c2cd80a2d4d3d9556f313dfff6c826592046d6c76aaf2515acec87d439694bf0aa4d3b904ae420cb5ac3c8bae284d14d6626808c9308ff6b9e9ace9ca1487e2495ed1505baaed1207e65eebb8cb4594b3fe4891ad829c69d23191b63af128398c0a3151bca8e182", 0x8e}, {&(0x7f0000002580)="3c812ebfbdfcbf813c615422699b025e186588e7fe5acce6149e365607f100ded5099cc398d4fd5d3f62a8bd779959efed0e3b03a0fbdf96301a5cf4bab0f9efd53b32848ed01ca46c997c7cc08195ebf6774632d0c6454faba83c76b7a3f34fab28b04e2ac5239c56e32c3ab771efa7fc511b140581ee6694dd1919e468fc2183965c93f818083238b0d5503b89351c7531e8d50a03eeb33dc8d970a96e93040aaaf3db312b4695b762d3ec38f1b8023e757b197253bb82aaee6c28a27c74096625d83c7099c6a5020a24bafed9c85f9ea0", 0xd2}, {&(0x7f0000002680)="456ec0c28b89322e6ef0c8bcaa4c9ff5007dd0ea252d78e09817cc076bdeceff94292f5a08d1a61bbe13852d576a30309d50a65eb680db9fbf61d8550ae352bfcdacdbfa89843324615b17b47a20f44bab15841e4860e8b87e2ca947c8f8035075707d", 0x63}, {&(0x7f0000002700)="985277b570a84eb14f5431f197fd98c0311b8d01acc4feba0d7c1bd19e6028f04e8445954292b991be5bd5739fff6a46", 0x30}, {&(0x7f0000002740)="44d3461de7d00301382dfc2648d301b510f278398a726b4fcb0072c89d6f3157452891ecda35b09cdf4be79fe463a6d87f5eadc7ac67915538d23f042f643fd05dbab3c32294f76c660e887be56a", 0x4e}, {&(0x7f00000027c0)="a13d1fd5528b4610872378bd4f8b319fa4d6518da14b9f9ed7dddde10fea143e1220bab4db57e7563aacf3acd885c7e74aa0b76381ec21d988fd3862c3ced4abf6cc74ee4460030296a605fb2200e98790c9c3eb293ad4710aab0df98c904cfced867d57f8292136b5a52b187aec0e0e44e1c802023da97d65e0c83673f09fdc1861120d8cb64fbe012bd730996a83096cab9a77eadc5f634254a67a42459a603e2ef3bd780a3c9d0effb44a59ea87a4aea71ba0901928bc873d35c14d215b2d19dde3e080a5015e788fa4e3c06d5aa4", 0xd0}, {&(0x7f00000028c0)="3d2a6e4be6fc1acfbc571f2b471a64c3706805cc414ce4641ca5e43cc475d5f3fa7c2dd7a5e37b7c7ae607321f09e364124c591b09bcf2b4b69cdbe041ccf25833dad479ada5653d91a1b78852223b32e585ba53d2d787b22d1d991f30b344098fbede469b93028663554618ccf2f4949294ad32b790ebd0259bb487d7ea6b488d60971c86ad84122d9e9e75f3edb5a2005cc301797414cfc8f86658ac9a8ee382bb3d97e2f8402e5d46e8ddd6cbef2d67f803", 0xb3}, {&(0x7f0000002980)="8b0d41160b076ce4843fe00c21e07e190afc7e4b587d0936c415caa7882c06c2f9d4811901a772b54812457c46b617989784e76ebb459e5829c70feb3c2eacdad09e1d7acb4d0474e1d5e631f5157eb40cc03c363722cb4d4db103915c60e3e394da00d8e421d8", 0x67}, {&(0x7f0000002a00)="d0ed84d66ba174d4b3a0eb7a7e572e67b15552a176a44ec1acd5344b0665", 0x1e}, {&(0x7f0000002a40)="154e924905e33a88b751ecd2b9067dcb9f2a9f79206d02acc3f9fcb0e30e156795229a9fba766c15d4f5197ddd7af07021141718db", 0x35}], 0xa, &(0x7f0000002b40), 0x0, 0x4009}, 0x8880) 1.102609536s ago: executing program 3 (id=10421): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000190001090000000000000100021800000000fd0000000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0016800800030064010173"], 0x40}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="91107f000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x814) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000580)='syzkaller\x00', 0x1, 0xbf, &(0x7f00000005c0)=""/191, 0x41100, 0x3a, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000900)=[r10, r11, r12], &(0x7f0000000940)=[{0x4, 0x3, 0xc, 0xb}, {0x3, 0x2, 0x3, 0xc}, {0x5, 0x4, 0xc, 0x3}, {0x5, 0x5, 0xe, 0x4}, {0x2, 0x5, 0xc, 0xb}, {0x2, 0x4, 0xf, 0x8}], 0x10, 0x5}, 0x94) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r6, 0x11, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x38}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x20044084) 1.102275787s ago: executing program 0 (id=10422): unshare(0x28000600) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711097000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) ppoll(&(0x7f0000000280)=[{r1, 0x701}], 0x1, &(0x7f00000003c0), 0x0, 0x0) 1.002090858s ago: executing program 3 (id=10423): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d703315a0d1d3a6d143575da2604e54bb1ddb295e590a1392770befa52aaf1651d375682bcf94e5da4ea37e1cde1d2a80890d896cfe4d08801bc50d9bc08480de2b2710b694ff7fb5bda12cd8a8cb8dc18bf0c265b71aef50ec0ee22e1968a4f3487d8487026bc2b721692064dcfdd1b6b6aec3e8da3d0ab7d3cc51e2db33c169e6354ea425fbfc1bc39057e64d3aff3749d60edcf0a50fe0e973b5ee3a7cd45ad967564fdbc9832869346037dabe420448b5089ab553c2c87e94befac8d3a0c2a56ca2ab778c2f34f571217c837580e8a524db35baea8024482bb32306182faaf39bb1c4e992c4440889e274952ed3d17d5e87224fec8048e6b7344270e046ab2fdda270ad4e5f651fd6eede5d42d9599265520d45d6f500fd733372a62ab4f496b56839b0d6418961a3b6016c26409daba4f2beeceeb38cc6ba75f57e8ee45d8a6c2ecc031c9469d937b9d7db91ded158ebd7f7d512d445f4104130a429ce7fce52d3fec37df953fc6e6adaa781b820b4bb6d4ffd2c10a16f9583890118793bae09157d3ac5625ad8e66a367488e2722bb82161661711d91a5540a92e3de7506861875575d40465cda28989cbc46fb3d80c2bc7e96afbde1cbd2e89103c55bde669c77b774ea570b26e93a1be5e50269ea5f3355869ac5a9701ac0e7d8f69b0a3186e118c6e2ce8e946c95bd729d94d237e5915e2711cc82826f147176a8a0555b9e11fb9a8ad736d016d202cea43b10a5102e48387ab70069b876051ac0557528c14748aa9cc0e0d9bf512533bdc83610d9f801ec4ed512a4a877e2f45b0cbe87ee25a314d481153eefe8643fb2f3e0478353552b0ae863635ab12e7bf0e4f046e8ba9cb7ce3189d52b2a27ff9e4eb5bf8b12d09d610705eec149589bdd38c951de63de4e3065e45eeb261a72c980349387514cb42467e1fe5812abaf4670e993c6fb561e5cccf7a472ee874bbfe73412bc63f706424f174afd1a3f16fb8b8305d932d33ab211d473d210b87e2f20b6ba951a2b98206793c04516fd57fc7365cec4a1831548470ebefe7f9487cc7b287b2f45eb69b4e165b9f3404d8ac84b2b57ace34de669a85fd885ecb055a6fd2ba5d5396737c702c082bfb35f3ccace91eacfc7a71b2bca1e228170ad6d194aa7c2dc2cf5f0bce153ac1befb2b82e6cf1f12d28812e309f5da0dbe1cad03172d296fa13247b1952ec988316f668aa65e1ca7e9e383b115ce5c25130955c118a0b4567bd180c07ce18bd0c459cc33ed7ba1c43262034a60711315ed81bbc95b7e3088dbd22b976fcd18bae330f08c89236f770478305fac20b5d9bd5cbc98c5c0f9713345c7362bc0e0bc78d212433bcdc6142989bc6ab82160df897825aa906d739dac905a434c90b2cbc72223011ea11480278b681cdcdf5fa63ac5f8b8f1f3ef7d4eb02f422e9fc52b98163630cd2f130f076a33bb011bb8e42800c9475f5cbee042b79fda44b6432b126f085a17553b82d9cae519ec239a9cccb99444f24b8f11e255e31e0d53a28e36949a3f8238c2ea3f4e3d8cf3b85b031c962504d00a4e7928b5fa2fab311bcc54d68738086ce70a8e5bdaf425033036a85e59aa3bb1b01f8b6c6a2e221c69e48565b55a196b2dc9cb067b4ccf8a7c81e31795a8b74e8940455126f19c8bbb9b941cc66c9443fd13e20c2074a9c3bc1740262c1fcb8e9ca5ac5729dfe6e25561eba41ccae8ca2e851affc1ab4ec912925ef7ccf72e97c577413260ccda170d75741336f837258a59da907460a2917f652c6e4ebc0467da8a95f2ceae9afcc4e0d1f4b95fc68b2f5e32af96fb12a8e7f3140dd235a30e5ad94e78cf58ad75ca8a871a70820090ba510e7563c0f78cf364369a51fa6683ff8d24924ceb922927eb0ba1395b7a4f37d92913a9688ef8428a887f1161f10aeab749f5ea8ca24e579008f542a9b785841dae071b94b5a8ba79985930f60ac2c93aa002d84b212e2e2b6c9c2a0694595dad99fd1f27d0044481ef5b364a059599ef982a114a61094b3b7d0f9a7b78d7615cc8573430e676987ab7421fde9abeb29e4529beb6a2724bed86a7b1d27ee73585892f083fad4307696a4166356b9c20a9579bbf3e8cda9ad7ec2b2bb973d05cf8d9457dc03eee2cfbf630dd917768ae652c0627e32ebb4c62951dfbd8e074dfdf02c5517ace50d5813c8d8d7f1fc0fc63a4fae5c2bcf26560c627500e03692384630be287790d545403adc500ef732d66e269b8b051aa57bb865a9b709c7a0426188daf29caf1d062b104592b4f6acc86895956d8085424dba0bfafdf900419f2227db1eca75b338091d23da2067566c6d54de1604bf8d4cce8a0b4484c4645a305861bc46ebccafbe500e01d51236b40027d1b2c7a72937b15899bb982c880d83ed6b70502bd0d68d2a2146a85c6518a11c386df610243ec513e7a284a81c841f9201ee3b9d3a8f44cdf52ec842e07c1f2f35e2a5b17278dce1f9b7fa09866ecb0d2e78fc8095b7dee81d3e308fd10a1490036194bfa89c118bd9c72d4747b90724d7bd0a7ead28c89c23cc6667c1a8b362ca5385d24b2c1265957764a4e46176365a5348bcf85c457921e7fa6c9e165b6c4d8bd9e8782c96839a5fd2679cd08f656ca5b41d00f8429d517a0d776049918e73b4a258fd2a1576b6420b67fc9ff3520556881ef4838e973f552edebde686af1d55e6172e5bb9b01543d32c0c7753b380dd9ed3f5c0b663a9b1bcb4bd36a365172aeee96a8d69c1e5c5b6c88fc9453ace6aa24bdfc1cfa27ea8cc36c80cace296259545a4e155d154ccbf00ae4ff912c583c871b7cdb46813584ea14bb6943d16b3f12e8fe149076e5e646e1dca0bf121a2e2fa09816e9056aa1143988ff17c21c49981445d98d88fd4bba6a59d9f97d301d90e3754103389b36308713c1ba31031e42f2d759343a95bbae9c01a3bb3e6b537b658d1c028c8ec3126bf79db223a3320e25a671ef834c924f02c1bbab338517accb8378f945cb1d65d4dff90f1e3af8168e33a5a124aef715b656075f6a62099afa110f2fe5eb83e0b3e36df91be2125be6500e5f3a81f8bc116f42734c784f6bb6c7e968610243b06026a9def4e85f8344fae36602aa3795cf71ecf7e57a3da0bef859daf649abc6390e86edaa84eefe48999ddba9067b90dd5ea2477f150ab588dadfe79ab7524157d1b94c738ca3345ce8657bfac981cb30b7c0f05f96dafcdce3e41471943609b121de1eda3e95a1c31bada084beec699512c7d5cec71e06a57c177ca1f383120bf46a9c805c9220d3d0c6807d60e6b7f9c80de1d815bdf1ebe62338862719eab55ef4971a69c76aa2f25c3c9d0c2e5c7857a86f9ab26c3c6aa395f2c366548f60a40abbe14dd011358d9b3695b8a091e16552478aeee1e2e91abd67deeb15732f428c3304a2bf2e4cbb3768875b35d126ca46d29e506ee1e0aba7a17eba27c19d7626064c0a17d7ee7f2f220e5e28bd7d691dffa84f2a2f92c924b87da382ae9a688ad4322fa0cc72604fc43e17002b8f3844a7431205de46818310d0fcf4676f45c9941dde767c9a4376e13cd7e91308cc0df25a4c79e390674fa0161695cc9e9bee12620d8571a4b3800370cd01bf0546758a048563539edf15d58b108159ea5fe0f038281c7855bbd92cc86de38df60b8597f4bce4ae9cae1647b5024bfb73630cdf4d1827a5f0ff779a1e6c6efbc6561d06b249986703b9dc61a63e2068e4786e6a8be34a808143301ef00f21bee8399d88ecffddb4867790d4d1cbe827a5a220834ba831d3ba424ff8fc9a99b175d2feca9f581e24bb69bdc4f64a6ea0c9c37d6976d15e9388519a2bed100a2a8358215a8b63b6e25a677875ee2bc3fd9c77783b39a166b863376b496775b83804a2c7f5363cca9ade819034afc2f7b40ffc316089556dec2e55e1bd92c9b905d6b1b9160d6c492d4384acd7e380874939b1ab02dbbacfbedd74cd524b4eab643e8b92d38d9fae446afd8d774d1c933bce8c341f0ff283acec3bbbbfdb06a15eb88ca6600542dda45334a374e31bae", 0xba7}], 0x5}}], 0x300, 0x0) 964.440164ms ago: executing program 1 (id=10424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000040000000000000090000008500000011000000850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x1, 0x7, 0x1ff, 0xf7e0, 0x7fffffff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xc, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x3372}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 882.839347ms ago: executing program 0 (id=10425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a00)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWOBJ={0x90, 0x12, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x7c, 0x4, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xbbd0}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xb3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6a}]}}, @NFT_MSG_NEWSET={0xbc, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x6c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x60, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1074}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x359}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4d53}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x27e26a07}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xbf}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffeff}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x8, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0xe8, 0x8, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e5}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_USERDATA={0x8d, 0x7, 0x1, 0x0, "e0ced9805ada298cb37244f29a81531d5a0c870ae6c19c8ab2bbaa706a8a77c39f2cb386001d788d7f28c0c2bd9b268fbb73c9af0d5b9fbd182243e7e0993f5c06c0b9c164948dfad65e294221f4636f5bc90cb1df49b68e2d09eedf1d56e4d13a1d8afd98de5c31c37e36119d3bd7f157d87682fc92def9fd7049ad2f5cb10f883ecb71f67a754aff"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x188, 0x9, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x140, 0x12, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}]}}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWSETELEM={0x1170, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1118, 0x3, 0x0, 0x1, [{0x1114, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1054, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "6eea0bcf22747bf27f83db467d4da6685968b9f4b42f"}, @NFTA_DATA_VALUE={0x21, 0x1, "e2e2bc39186ea986b8a18d7be269df7f1aa0fca8a99966b9b52aa1c6f5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0xaf, 0x6, 0x1, 0x0, "65a746ec4e597e0a78ca5c645d83de35e97077a8336b1eb04c68641bb879b95da8a211988cc3076250f7f0b70b3080a226e9bb63a5fc9a32913b72238252006a08daa38caed7f46e03b2532fe1b67b44380f51e2f97a757e617530f6c5e0451f2e8a4a5ef68eeee3bbb5c79de7da83d4781fafbeb98471f191e50f6ec30eb7f67929338e0522ec16fb94e3343e4adfa742b88e86e35b1281f43c98f0e3b4a460d74f82802f647cfac76188"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x330, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x12c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1dc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfe7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x727}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'veth0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0xd0, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x27389bc0}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'sit0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4f04bbe2}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x14, 0xc, "828b1e4f9bb608f1b6efe2ecc680ee1f"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x19a0}, 0x1, 0x0, 0x0, 0x44000}, 0x40090) socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) 880.864651ms ago: executing program 4 (id=10426): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettaction={0x0, 0x32, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xfff}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xfffffff9}}, {0x0, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x10001}}, {0x0, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x10001}}, {0x0, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}, {0x0, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'mirred\x00'}}, {0x0, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x8}}, {0x0, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'xt\x00'}}, {0x0, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7}}, {0x0, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'xt\x00'}}, {0x0, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ipt\x00'}}, {0x0, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'gact\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7ff}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) unshare(0x2c020400) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000240)={'vlan0\x00', 0x626}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socketpair(0x2e, 0x80804, 0xfffffffc, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 774.262224ms ago: executing program 0 (id=10427): socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x850}, 0x20040014) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r6, r8, 0x25, 0x0, @void}, 0x10) getpeername$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x20) pwrite64(r6, &(0x7f0000000340)="1a6ad5af5a08cee8f37e9d49c018297707e0dffd210cc374760c7fe2bbbc8844bcb511546eaf0fe5f1a625ba5d9f68c5316934dfe065ae60110f15f24e2f982f4bbb81fb2336a79d620203a01ed7a0443b0a42cc569051e2876f46c5c702432ddb63a9bcdc50080683ef98bcc55124e85a1f3a0c34be09ffc98280638047e4bb1d19639b99b15e72dc1830acc55298d8895670c260dfb6b43c1bdc01bbe505ce27bd9d1810299408789a9e6583a25a79576eb39ec97483a86feddae38caba16d3a89c94e54d6f4208f23ddbac6be62a5d6a0e83454a4344008a2a33f36b3e298e9b1eafa07", 0xe5, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 570.705509ms ago: executing program 1 (id=10428): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xf}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 540.65122ms ago: executing program 3 (id=10429): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@empty, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e20, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3b}, {0x0, 0x192, 0x6, 0xffff, 0x400, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="0001000018000100feffffff0001000020010000000000000000000000000000fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000ac14143f"], 0x100}, 0x1, 0x0, 0x0, 0x8801}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) 443.347786ms ago: executing program 4 (id=10430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000240)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="00000000005d711e648387000000b7080000010000007b8af8ff00000000bca200000200fa00ac020000f8ffffffb703000008000000b70400000200000085000000330000009500db876e3cf2804c0ebf21bf46d73ca546d373e69fea449f37fafbbb83281c37a1b4577dd37e3e83049af398dbd54f38e30158d1ad0227a9b4cdca9f479c41f27bf49643ba1bb6ce35f5518c6f9e489e0d05f73f03dcd805d5d21f14ba4c31e18346676cd9ab41c915a96764d1b39bccb7c7ef2014aef0ae0400176a8e9c8ef3c8b04298570c1e9e53a42e2d00e10d49cb744b0b1f10"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000040)=""/197, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x67, 0x5f}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x24ed}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4004810) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000240)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="00000000005d711e648387000000b7080000010000007b8af8ff00000000bca200000200fa00ac020000f8ffffffb703000008000000b70400000200000085000000330000009500db876e3cf2804c0ebf21bf46d73ca546d373e69fea449f37fafbbb83281c37a1b4577dd37e3e83049af398dbd54f38e30158d1ad0227a9b4cdca9f479c41f27bf49643ba1bb6ce35f5518c6f9e489e0d05f73f03dcd805d5d21f14ba4c31e18346676cd9ab41c915a96764d1b39bccb7c7ef2014aef0ae0400176a8e9c8ef3c8b04298570c1e9e53a42e2d00e10d49cb744b0b1f10"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000040)=""/197, 0x41000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x67, 0x5f}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x24ed}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4004810) (async) 317.014223ms ago: executing program 0 (id=10431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000005140100fffffffffaffffff080001"], 0x30}, 0x1, 0x0, 0x0, 0x48090}, 0x2400c094) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x1, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_GROUP={0x8, 0x1b, 0x96d}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e7b0602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 297.858326ms ago: executing program 2 (id=10432): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "1d3a"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x4040) 206.111213ms ago: executing program 4 (id=10433): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="200002020000000a000400280000000b000002", @ANYRES32=r2], 0x20, 0x2400e044}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x40, 0x1}, 0x50) 205.745399ms ago: executing program 1 (id=10434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000002}, 0x20004000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 139.559895ms ago: executing program 2 (id=10435): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680)='@|', &(0x7f0000000400)=@tcp6=r2, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r6 = socket(0x2d, 0x2, 0x0) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xf57ba906eb09d28b}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000fbdbdf251810c6b7aaad0556000008000300c6fd0969aa87ebd884caf546f2b18b9dbed2e5237afbe0aa4997a18cf91b47", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20040080) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000880) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000000005000400000000000500050002000000050001000600000014000780080006400000000208000c"], 0x58}}, 0x20000000) 0s ago: executing program 0 (id=10436): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000db7438b900"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/174, 0xae, 0x0, &(0x7f00000000c0)=""/96, 0x60}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ve_0) entered blocking state [ 1071.164474][T17638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.226644][T17638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.233987][T17638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.274415][T10457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1071.285392][T10457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1071.499095][T10648] netlink: 92 bytes leftover after parsing attributes in process `syz.0.9138'. [ 1071.512326][T10653] netlink: 'syz.1.9139': attribute type 1 has an invalid length. [ 1071.586685][T10662] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9141'. [ 1071.614975][T10662] Bluetooth: MGMT ver 1.23 [ 1071.827994][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9142'. [ 1071.852130][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9142'. [ 1071.984533][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9143'. [ 1072.033872][T10688] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9145'. [ 1072.045496][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9143'. [ 1072.097760][T10457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.133589][T10685] netlink: 'syz.0.9143': attribute type 19 has an invalid length. [ 1072.229017][T10688] tipc: Enabled bearer , priority 0 [ 1072.242590][T10685] netlink: 'syz.0.9143': attribute type 20 has an invalid length. [ 1072.298322][T10688] syzkaller0: entered promiscuous mode [ 1072.313531][T10688] syzkaller0: entered allmulticast mode [ 1072.360934][T10683] netlink: 'syz.0.9143': attribute type 12 has an invalid length. [ 1072.379032][T10683] netlink: 'syz.0.9143': attribute type 29 has an invalid length. [ 1072.492944][T10707] tipc: Resetting bearer [ 1072.513382][T10684] tipc: Resetting bearer [ 1072.564743][T10684] tipc: Disabling bearer [ 1073.680315][T10737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.687796][T10737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.052737][T10741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.060131][T10741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.067896][T10741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.075143][T10741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.160422][T10741] __nla_validate_parse: 7 callbacks suppressed [ 1074.160448][T10741] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9153'. [ 1074.268751][T10457] veth0_vlan: entered promiscuous mode [ 1074.304025][T10741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.311340][T10741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.398947][T10457] veth1_vlan: entered promiscuous mode [ 1074.556245][T10457] veth0_macvtap: entered promiscuous mode [ 1074.599388][T10767] netlink: 'syz.3.9160': attribute type 1 has an invalid length. [ 1074.623443][T10457] veth1_macvtap: entered promiscuous mode [ 1074.678406][T10767] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1074.688236][T10457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.736539][T10457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.900906][ T8648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.956740][ T8648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.997875][ T8648] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.013924][ T8648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.105453][T10780] bond1 (unregistering): Released all slaves [ 1075.161626][ T7691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.195387][ T7691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.251067][ T7691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1075.260305][ T7691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1075.823592][T10809] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1075.850861][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9170'. [ 1075.885264][T10819] netlink: 180 bytes leftover after parsing attributes in process `syz.2.9172'. [ 1075.966214][T10821] netlink: 180 bytes leftover after parsing attributes in process `syz.2.9172'. [ 1075.972675][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1075.981297][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9172'. [ 1075.988316][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1076.004065][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1076.012182][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1076.020358][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1076.074838][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9172'. [ 1076.310975][T10843] geneve1: entered promiscuous mode [ 1076.423302][T10857] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.9179'. [ 1076.436037][T10816] lo speed is unknown, defaulting to 1000 [ 1076.550871][T10850] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.672516][T10868] netlink: 'syz.3.9181': attribute type 21 has an invalid length. [ 1076.678957][T10869] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9183'. [ 1076.680814][T10850] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.765675][T10850] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.794043][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9183'. [ 1076.846569][T10850] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.897117][T10816] chnl_net:caif_netlink_parms(): no params data found [ 1077.060764][T17638] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.109335][T17654] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.123100][T10816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.130411][T10816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.139450][T10816] bridge_slave_0: entered allmulticast mode [ 1077.154417][T10816] bridge_slave_0: entered promiscuous mode [ 1077.164792][T10816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.172274][T10816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.180867][T10816] bridge_slave_1: entered allmulticast mode [ 1077.188693][T10816] bridge_slave_1: entered promiscuous mode [ 1077.202845][T17654] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.315677][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1077.331198][T10887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1077.578530][T10894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9187'. [ 1077.621677][T17638] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.631238][T17638] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.674144][T10899] netlink: 'syz.3.9188': attribute type 1 has an invalid length. [ 1077.681980][T10899] netlink: 'syz.3.9188': attribute type 2 has an invalid length. [ 1077.703551][T10899] netlink: 'syz.3.9188': attribute type 1 has an invalid length. [ 1077.729937][T10902] netlink: 'syz.2.9189': attribute type 58 has an invalid length. [ 1077.738427][T17638] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.751859][T17638] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.768447][T10816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.813590][T17638] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.826429][T10816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.955879][T10816] team0: Port device team_slave_0 added [ 1077.997395][T10816] team0: Port device team_slave_1 added [ 1077.997812][T10916] netlink: 'syz.2.9193': attribute type 1 has an invalid length. [ 1078.039673][T10816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.049188][T10816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.088450][T10816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.125498][T10816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.132475][T10816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.133132][ T5837] Bluetooth: hci4: command tx timeout [ 1078.173572][T10918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1078.190539][T10816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.235982][T10923] sctp: [Deprecated]: syz.4.9195 (pid 10923) Use of int in max_burst socket option. [ 1078.235982][T10923] Use struct sctp_assoc_value instead [ 1078.280600][T10916] siw: device registration error -23 [ 1078.365325][T10816] hsr_slave_0: entered promiscuous mode [ 1078.372451][T10816] hsr_slave_1: entered promiscuous mode [ 1078.380350][T10816] debugfs: 'hsr0' already exists in 'hsr' [ 1078.392324][T10816] Cannot create hsr debugfs directory [ 1078.399286][T10930] syzkaller0: entered promiscuous mode [ 1078.408696][T10934] netlink: 'syz.4.9198': attribute type 21 has an invalid length. [ 1078.409268][T10930] syzkaller0: entered allmulticast mode [ 1078.419240][T10934] IPv6: NLM_F_CREATE should be specified when creating new route [ 1078.432130][T10934] netlink: 'syz.4.9198': attribute type 1 has an invalid length. [ 1078.596142][T10936] nbd1: detected capacity change from 0 to 127 [ 1078.642132][ T5837] block nbd1: Receive control failed (result -104) [ 1078.832334][T10939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.839889][T10939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.967822][T10939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.981221][T10939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1079.088658][T10955] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1079.124176][ T6466] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.135355][ T6466] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.159674][T10816] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.200516][ T6466] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.226120][ T6466] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.238035][T10816] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.298687][T10816] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.356268][T10972] __nla_validate_parse: 5 callbacks suppressed [ 1079.356290][T10972] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9210'. [ 1079.374676][T10974] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9210'. [ 1079.399773][T10816] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.485004][T10978] tipc: Failed to remove unknown binding: 66,1,1/0:434071362/434071364 [ 1079.498521][T10978] tipc: Failed to remove unknown binding: 66,1,1/0:434071362/434071364 [ 1079.507410][T10978] tipc: Failed to remove unknown binding: 66,1,1/0:434071362/434071364 [ 1080.089905][T11012] No such timeout policy "syz0" [ 1080.213070][ T5837] Bluetooth: hci4: command tx timeout [ 1080.230708][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9222'. [ 1082.293344][ T5837] Bluetooth: hci4: command tx timeout [ 1082.693342][T10991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1082.731649][T10816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1082.758712][T10816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1082.818951][T10816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1082.877667][T10816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1082.898141][T11023] syzkaller1: entered promiscuous mode [ 1082.904678][T11023] syzkaller1: entered allmulticast mode [ 1082.928120][T11029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9225'. [ 1083.060458][T10816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.089330][T10816] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.099541][T11043] netlink: 'syz.3.9227': attribute type 11 has an invalid length. [ 1083.122884][ T7691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.130111][ T7691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.179198][T11048] Cannot find set identified by id 0 to match [ 1083.179487][ T7691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.192478][ T7691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.262728][T11048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1083.375479][T11060] netlink: 184 bytes leftover after parsing attributes in process `syz.3.9232'. [ 1083.454327][T11064] netlink: 'syz.2.9234': attribute type 16 has an invalid length. [ 1083.462385][T11064] netlink: 'syz.2.9234': attribute type 17 has an invalid length. [ 1083.557470][T11064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.576859][T11064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1083.606935][T11068] vlan3: entered promiscuous mode [ 1083.613443][T11068] geneve1: entered promiscuous mode [ 1083.620774][T11068] vlan3: entered allmulticast mode [ 1083.629586][T11068] geneve1: entered allmulticast mode [ 1083.879122][T10816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.887152][T11085] lo speed is unknown, defaulting to 1000 [ 1084.087083][T10816] veth0_vlan: entered promiscuous mode [ 1084.108402][T10816] veth1_vlan: entered promiscuous mode [ 1084.114030][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9245'. [ 1084.194777][T10816] veth0_macvtap: entered promiscuous mode [ 1084.225650][T10816] veth1_macvtap: entered promiscuous mode [ 1084.259313][T10816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.291167][T10816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.312424][ T7691] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.345094][ T7691] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.356161][ T7691] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.369142][ T7691] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.375288][ T5837] Bluetooth: hci4: command tx timeout [ 1084.498462][ T7691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.511701][ T7691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.776277][T11127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9251'. [ 1084.795728][T11127] IPv6: NLM_F_CREATE should be specified when creating new route [ 1084.884033][ T7691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.891891][ T7691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.168877][T11134] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.9255'. [ 1085.194330][T11139] netlink: 312 bytes leftover after parsing attributes in process `syz.2.9256'. [ 1085.320839][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9258'. [ 1085.338762][T11147] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1085.574918][T11166] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9265'. [ 1085.600858][T11167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9265'. [ 1085.778785][T11175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9268'. [ 1085.959048][T11191] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9273'. [ 1085.975742][T11177] syzkaller0: entered promiscuous mode [ 1085.981271][T11177] syzkaller0: entered allmulticast mode [ 1086.007447][T11192] vlan2: entered allmulticast mode [ 1086.012770][T11192] veth0_to_bond: entered allmulticast mode [ 1086.023451][T11192] team0: Port device vlan2 added [ 1086.103649][T11195] block nbd2: server does not support multiple connections per device. [ 1086.106854][T11198] Cannot find set identified by id 0 to match [ 1086.112697][T11195] block nbd2: shutting down sockets [ 1086.125062][T11197] Cannot find set identified by id 0 to match [ 1086.295157][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9276'. [ 1087.662786][ T25] block nbd1: Possible stuck request ffff888025612800: control (read@0,1024B). Runtime 9 seconds [ 1087.692075][ T25] block nbd1: Possible stuck request ffff888025612a00: control (read@1024,1024B). Runtime 9 seconds [ 1087.703200][ T25] block nbd1: Possible stuck request ffff888025612c00: control (read@2048,1024B). Runtime 9 seconds [ 1087.714700][ T25] block nbd1: Possible stuck request ffff888025612e00: control (read@3072,1024B). Runtime 9 seconds [ 1089.101029][T11179] lo speed is unknown, defaulting to 1000 [ 1089.269800][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9281'. [ 1089.467628][T11224] team_slave_0: entered promiscuous mode [ 1089.474158][T11224] team_slave_1: entered promiscuous mode [ 1089.484510][T11224] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1089.573777][T11237] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1089.625699][T11237] bond1 (unregistering): Released all slaves [ 1090.074746][T11263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9293'. [ 1090.160561][T11261] bond1: Removing last arp target with arp_interval on [ 1090.251119][T11268] lo speed is unknown, defaulting to 1000 [ 1090.641961][T11275] gtp0: entered promiscuous mode [ 1090.653257][T11275] gtp0: entered allmulticast mode [ 1091.094246][T11293] tipc: Started in network mode [ 1091.099171][T11293] tipc: Node identity fedeac2120ac, cluster identity 4711 [ 1091.143400][T11293] tipc: Enabled bearer , priority 0 [ 1091.167439][T11295] syzkaller0: entered promiscuous mode [ 1091.173425][T11295] syzkaller0: entered allmulticast mode [ 1091.195564][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9303'. [ 1091.204971][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9303'. [ 1091.227588][T11293] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9301'. [ 1091.246249][T11299] nlmon0: Master is either lo or non-ether device [ 1091.253733][T11298] nlmon0: Master is either lo or non-ether device [ 1091.278859][T11293] tipc: Resetting bearer [ 1091.303565][T11296] netlink: 120 bytes leftover after parsing attributes in process `syz.2.9302'. [ 1091.338609][T11292] tipc: Resetting bearer [ 1091.373789][T11292] tipc: Disabling bearer [ 1091.779495][T11314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9310'. [ 1091.847727][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9311'. [ 1091.896791][T11318] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9311'. [ 1092.053484][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9312'. [ 1092.104145][ T5141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1092.118144][ T5141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1092.128281][ T5141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1092.147238][ T5141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1092.159387][ T5141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1092.244602][T11323] lo speed is unknown, defaulting to 1000 [ 1092.424410][T11329] netlink: 'syz.2.9313': attribute type 10 has an invalid length. [ 1092.655883][T11337] netlink: 'syz.2.9313': attribute type 1 has an invalid length. [ 1092.677249][T11337] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9313'. [ 1093.080049][T11329] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1093.095889][T11328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1093.132815][T11332] ipvlan3: entered allmulticast mode [ 1093.139393][T11332] veth0_vlan: entered allmulticast mode [ 1093.297837][T11323] chnl_net:caif_netlink_parms(): no params data found [ 1093.466435][T11359] gre1: entered allmulticast mode [ 1093.569659][T11323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.591240][T11323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.610731][T11323] bridge_slave_0: entered allmulticast mode [ 1093.620276][T11323] bridge_slave_0: entered promiscuous mode [ 1093.709093][T11323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.725484][T11323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.746868][T11323] bridge_slave_1: entered allmulticast mode [ 1093.770483][T11323] bridge_slave_1: entered promiscuous mode [ 1093.807989][T17638] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.823428][T17638] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.850795][ T8651] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.859007][T11367] netlink: 'syz.0.9320': attribute type 1 has an invalid length. [ 1093.892502][T11323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.908532][T11323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.965255][ T8651] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.203512][ T5141] Bluetooth: hci1: command tx timeout [ 1094.270914][T11372] atomic_op ffff888031b4c998 conn xmit_atomic 0000000000000000 [ 1094.390679][ T8648] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1095.016572][ T8648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.029337][ T8648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.042937][ T8648] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1095.061906][ T8648] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1095.072030][ T8648] bond0 (unregistering): Released all slaves [ 1095.096932][ T8648] bond1 (unregistering): Released all slaves [ 1095.131536][ T8648] bond2 (unregistering): Released all slaves [ 1095.161321][ T8648] bond3 (unregistering): (slave veth3): Releasing active interface [ 1095.175892][ T8648] bond3 (unregistering): (slave veth5): Releasing active interface [ 1095.189305][ T8648] bond3 (unregistering): Released all slaves [ 1095.207820][ T8648] bond4 (unregistering): Released all slaves [ 1095.225262][ T8648] bond5 (unregistering): Released all slaves [ 1095.252661][ T8648] bond6 (unregistering): Released all slaves [ 1095.273869][ T8648] bond7 (unregistering): Released all slaves [ 1095.292581][ T8648] bond8 (unregistering): Released all slaves [ 1095.318789][ T8648] bond9 (unregistering): Released all slaves [ 1095.336190][ T8648] bond10 (unregistering): Released all slaves [ 1095.362363][ T8648] bond11 (unregistering): Released all slaves [ 1095.487714][T11323] team0: Port device team_slave_0 added [ 1095.515359][T11323] team0: Port device team_slave_1 added [ 1095.688717][ T8648] tipc: Disabling bearer [ 1095.697053][ T8648] tipc: Left network mode [ 1095.728542][T11323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.756953][T11323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.860878][T11323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.911660][ T7691] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.935257][ T7691] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.954073][ T7691] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.993333][T11388] tipc: Enabled bearer , priority 0 [ 1096.032902][T11389] syzkaller0: entered promiscuous mode [ 1096.042007][T11400] __nla_validate_parse: 1 callbacks suppressed [ 1096.042027][T11400] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9330'. [ 1096.043383][T11389] syzkaller0: entered allmulticast mode [ 1096.078658][T11400] ksmbd: Unknown IPC event: 1, ignore. [ 1096.105262][T11405] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 1096.151566][T11405] : renamed from bond_slave_0 (while UP) [ 1096.189112][T11323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.199827][T11323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.246008][T11323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.307425][ T5141] Bluetooth: hci1: command tx timeout [ 1096.366824][T11397] tipc: Resetting bearer [ 1096.450493][ T7691] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.574051][T11385] tipc: Resetting bearer [ 1096.633819][T11385] tipc: Disabling bearer [ 1096.685773][ T25] block nbd1: Possible stuck request ffff888025612800: control (read@0,1024B). Runtime 18 seconds [ 1096.696813][ T25] block nbd1: Possible stuck request ffff888025612a00: control (read@1024,1024B). Runtime 18 seconds [ 1096.724645][ T25] block nbd1: Possible stuck request ffff888025612c00: control (read@2048,1024B). Runtime 18 seconds [ 1096.735623][ T25] block nbd1: Possible stuck request ffff888025612e00: control (read@3072,1024B). Runtime 18 seconds [ 1096.789739][T11323] hsr_slave_0: entered promiscuous mode [ 1096.851178][T11323] hsr_slave_1: entered promiscuous mode [ 1096.897740][T11323] debugfs: 'hsr0' already exists in 'hsr' [ 1096.956924][T11323] Cannot create hsr debugfs directory [ 1097.172524][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9336'. [ 1097.461835][T11444] syzkaller1: entered promiscuous mode [ 1097.471847][T11444] syzkaller1: entered allmulticast mode [ 1097.507665][T11444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9338'. [ 1097.591187][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9339'. [ 1097.619745][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9339'. [ 1097.653784][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9339'. [ 1097.665695][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9339'. [ 1097.704548][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9339'. [ 1097.726990][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9339'. [ 1097.743161][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9339'. [ 1097.937737][T11462] netlink: 'syz.0.9341': attribute type 4 has an invalid length. [ 1097.967557][T11455] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1098.031240][T11466] gretap1: entered promiscuous mode [ 1098.087939][T11451] lo speed is unknown, defaulting to 1000 [ 1098.196304][ T8648] team0: left promiscuous mode [ 1098.201229][ T8648] team_slave_0: left promiscuous mode [ 1098.210730][ T8648] team_slave_1: left promiscuous mode [ 1098.315153][ T8648] hsr_slave_0: left promiscuous mode [ 1098.346550][ T8648] hsr_slave_1: left promiscuous mode [ 1098.367497][ T5141] Bluetooth: hci1: command tx timeout [ 1098.373289][ T8648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.391895][T24707] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1098.415455][ T8648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.500385][T11490] netlink: 'syz.1.9347': attribute type 13 has an invalid length. [ 1098.640777][T11484] fido_id[11484]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory [ 1099.072859][ T8648] team0 (unregistering): Port device team_slave_1 removed [ 1099.102738][ T8648] team0 (unregistering): Port device team_slave_0 removed [ 1099.336711][T11480] gretap1: entered promiscuous mode [ 1099.364664][T11490] gretap0: refused to change device tx_queue_len [ 1099.393641][T11490] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1099.498180][T11323] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.862697][T11506] netlink: 'syz.0.9350': attribute type 10 has an invalid length. [ 1099.894579][T11323] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.947341][T11506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.958619][T11506] bond0: (slave team0): Enslaving as an active interface with an up link [ 1100.185876][T11323] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.224359][T11515] bond0: (slave gre0): Error: Device type is different from other slaves [ 1100.238133][T11519] netlink: 'syz.2.9353': attribute type 1 has an invalid length. [ 1100.427481][T11516] syzkaller0: entered promiscuous mode [ 1100.446527][ T5141] Bluetooth: hci1: command tx timeout [ 1100.452913][T11516] syzkaller0: entered allmulticast mode [ 1100.526056][T11323] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.775985][ T8648] IPVS: stop unused estimator thread 0... [ 1104.071756][T17637] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.103319][T17637] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.161045][T17637] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.207560][T17637] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1104.368225][T11582] netlink: 'syz.2.9367': attribute type 2 has an invalid length. [ 1104.501122][T11323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1104.526094][T11323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1104.554829][T11323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1104.587188][T11323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1104.660974][T11602] __nla_validate_parse: 75 callbacks suppressed [ 1104.660994][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9370'. [ 1104.694686][T11602] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1104.727073][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9370'. [ 1104.755051][T11601] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1104.786834][T11323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.828481][T11323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.859963][T17637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.867184][T17637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.878900][T17637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.886109][T17637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.999781][T11615] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9372'. [ 1105.057925][T11615] veth2: entered allmulticast mode [ 1105.082172][T11618] tipc: Enabling of bearer rejected, failed to enable media [ 1105.228799][T11627] netlink: 'syz.0.9374': attribute type 1 has an invalid length. [ 1105.364108][T11627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1105.382285][T11635] macvlan2: entered promiscuous mode [ 1105.448212][T11635] macvlan2: entered allmulticast mode [ 1105.474174][T11635] bond1: entered allmulticast mode [ 1105.484454][T11635] bond1: entered promiscuous mode [ 1105.490257][T11635] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1105.518409][T11635] team0: Port device macvlan2 added [ 1105.648974][T11627] bond1: (slave ip6gretap1): making interface the new active one [ 1105.673206][T11627] ip6gretap1: entered promiscuous mode [ 1105.678996][T11627] ip6gretap1: entered allmulticast mode [ 1105.692796][T11627] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1105.808177][T11323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.863102][T11652] lo speed is unknown, defaulting to 1000 [ 1105.894691][ T25] block nbd1: Possible stuck request ffff888025612800: control (read@0,1024B). Runtime 27 seconds [ 1105.905760][ T25] block nbd1: Possible stuck request ffff888025612a00: control (read@1024,1024B). Runtime 27 seconds [ 1105.917043][ T25] block nbd1: Possible stuck request ffff888025612c00: control (read@2048,1024B). Runtime 27 seconds [ 1105.928528][ T25] block nbd1: Possible stuck request ffff888025612e00: control (read@3072,1024B). Runtime 27 seconds [ 1105.987050][T11667] tipc: Started in network mode [ 1105.992101][T11667] tipc: Node identity 3e9c1bee1ba5, cluster identity 4711 [ 1105.999789][T11667] tipc: Enabled bearer , priority 0 [ 1106.018259][T11667] syzkaller0: entered promiscuous mode [ 1106.045747][T11671] xt_TCPMSS: Only works on TCP SYN packets [ 1106.051438][T11667] syzkaller0: entered allmulticast mode [ 1106.212472][T11680] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9385'. [ 1106.237646][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9381'. [ 1106.276458][T11677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1106.326204][T11674] tipc: Resetting bearer [ 1106.356516][T11662] tipc: Resetting bearer [ 1106.426332][T11662] tipc: Disabling bearer [ 1106.497256][T11323] veth0_vlan: entered promiscuous mode [ 1106.583524][T11323] veth1_vlan: entered promiscuous mode [ 1106.676404][T11323] veth0_macvtap: entered promiscuous mode [ 1106.707635][T11323] veth1_macvtap: entered promiscuous mode [ 1106.748485][T11323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.796718][T11323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.856822][T17637] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.876277][T17637] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.949234][T17637] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.011666][T17637] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.129781][T17648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.160105][T17648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.292245][T17648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.311005][T17648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.412366][T11688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9386'. [ 1107.470383][T11688] netlink: 'syz.4.9386': attribute type 2 has an invalid length. [ 1107.488293][T11688] !©9: entered promiscuous mode [ 1107.518208][T11688] netlink: 'syz.4.9386': attribute type 2 has an invalid length. [ 1107.543414][T11688] !©9: left promiscuous mode [ 1107.564489][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9386'. [ 1108.046615][T11746] lo speed is unknown, defaulting to 1000 [ 1108.506653][T11768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9401'. [ 1108.582142][T11771] nbd: must specify at least one socket [ 1108.977021][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9409'. [ 1109.112259][T11805] tipc: Enabled bearer , priority 14 [ 1109.153298][T11808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9413'. [ 1109.248787][T11813] FAULT_INJECTION: forcing a failure. [ 1109.248787][T11813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.297502][T11813] CPU: 0 UID: 0 PID: 11813 Comm: syz.4.9416 Not tainted syzkaller #0 PREEMPT(full) [ 1109.297532][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1109.297545][T11813] Call Trace: [ 1109.297554][T11813] [ 1109.297563][T11813] dump_stack_lvl+0xe8/0x150 [ 1109.297599][T11813] should_fail_ex+0x412/0x560 [ 1109.297628][T11813] _copy_from_user+0x2d/0xb0 [ 1109.297656][T11813] ___sys_sendmsg+0x1c6/0x360 [ 1109.297681][T11813] ? __lock_acquire+0x6b5/0x2cf0 [ 1109.297711][T11813] ? __pfx____sys_sendmsg+0x10/0x10 [ 1109.297767][T11813] ? __fget_files+0x2a/0x420 [ 1109.297789][T11813] ? __fget_files+0x3a0/0x420 [ 1109.297817][T11813] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1109.297842][T11813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1109.297874][T11813] ? __pfx_ksys_write+0x10/0x10 [ 1109.297909][T11813] do_syscall_64+0xe2/0xf80 [ 1109.297935][T11813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.297953][T11813] ? trace_irq_disable+0x37/0x100 [ 1109.297970][T11813] ? clear_bhb_loop+0x60/0xb0 [ 1109.297991][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.298008][T11813] RIP: 0033:0x7f1b9959aeb9 [ 1109.298025][T11813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.298041][T11813] RSP: 002b:00007f1b9a4b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1109.298061][T11813] RAX: ffffffffffffffda RBX: 00007f1b99815fa0 RCX: 00007f1b9959aeb9 [ 1109.298079][T11813] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1109.298090][T11813] RBP: 00007f1b9a4b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.298100][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.298110][T11813] R13: 00007f1b99816038 R14: 00007f1b99815fa0 R15: 00007ffcc0792908 [ 1109.298139][T11813] [ 1109.574417][T11819] netlink: 'syz.0.9417': attribute type 1 has an invalid length. [ 1109.641771][T11819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1109.650458][T11815] lo speed is unknown, defaulting to 1000 [ 1109.670561][T11830] bond2: (slave geneve3): making interface the new active one [ 1109.717325][T11831] __nla_validate_parse: 1 callbacks suppressed [ 1109.717350][T11831] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9419'. [ 1109.764105][T11830] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1109.816004][ T8648] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.824727][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9419'. [ 1109.841233][ T8648] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.917851][ T8648] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.932840][ T8648] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.962508][T11838] lo speed is unknown, defaulting to 1000 [ 1110.067543][T11857] netlink: 'syz.0.9429': attribute type 8 has an invalid length. [ 1110.156397][T11865] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9431'. [ 1110.231210][ T8426] tipc: Node number set to 624499694 [ 1110.853778][T11891] netlink: 428 bytes leftover after parsing attributes in process `syz.0.9436'. [ 1111.034282][T11891] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9436'. [ 1111.111693][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9439'. [ 1111.130780][T11900] ip6gretap2: entered promiscuous mode [ 1111.156915][T11900] ip6gretap2: entered allmulticast mode [ 1111.188601][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9439'. [ 1111.424651][T11907] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1111.471677][T11907] bond1 (unregistering): Released all slaves [ 1111.780921][T11928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9447'. [ 1112.015543][T11943] netlink: 'syz.3.9451': attribute type 10 has an invalid length. [ 1112.042006][T11943] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.081768][T11946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9451'. [ 1112.104871][T11943] bond0: (slave team0): Enslaving as an active interface with an up link [ 1112.115418][T11946] netlink: 'syz.3.9451': attribute type 1 has an invalid length. [ 1112.143864][T11948] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9452'. [ 1112.344244][T11956] netlink: 'syz.4.9456': attribute type 9 has an invalid length. [ 1112.716372][T11971] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1112.722537][T11971] syzkaller1: linktype set to 260 [ 1112.863866][T11986] FAULT_INJECTION: forcing a failure. [ 1112.863866][T11986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1112.943371][T11986] CPU: 1 UID: 0 PID: 11986 Comm: syz.4.9465 Not tainted syzkaller #0 PREEMPT(full) [ 1112.943399][T11986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1112.943411][T11986] Call Trace: [ 1112.943419][T11986] [ 1112.943428][T11986] dump_stack_lvl+0xe8/0x150 [ 1112.943458][T11986] should_fail_ex+0x412/0x560 [ 1112.943486][T11986] _copy_from_iter+0x1d3/0x1670 [ 1112.943517][T11986] ? rcu_is_watching+0x15/0xb0 [ 1112.943536][T11986] ? __pfx__copy_from_iter+0x10/0x10 [ 1112.943555][T11986] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 1112.943673][T11986] ? netlink_sendmsg+0x650/0xb40 [ 1112.943693][T11986] ? skb_put+0x11b/0x210 [ 1112.943719][T11986] netlink_sendmsg+0x6c0/0xb40 [ 1112.943747][T11986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1112.943770][T11986] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1112.943794][T11986] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1112.943817][T11986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1112.943835][T11986] ____sys_sendmsg+0xa68/0xad0 [ 1112.943859][T11986] ? __might_fault+0xaf/0x130 [ 1112.943888][T11986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1112.943919][T11986] ? import_iovec+0x73/0xa0 [ 1112.943944][T11986] ___sys_sendmsg+0x2a5/0x360 [ 1112.943965][T11986] ? __lock_acquire+0x6b5/0x2cf0 [ 1112.943993][T11986] ? __pfx____sys_sendmsg+0x10/0x10 [ 1112.944086][T11986] ? __fget_files+0x2a/0x420 [ 1112.944103][T11986] ? __fget_files+0x3a0/0x420 [ 1112.944131][T11986] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1112.944155][T11986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1112.944190][T11986] ? __pfx_ksys_write+0x10/0x10 [ 1112.944224][T11986] do_syscall_64+0xe2/0xf80 [ 1112.944247][T11986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.944265][T11986] ? trace_irq_disable+0x37/0x100 [ 1112.944281][T11986] ? clear_bhb_loop+0x60/0xb0 [ 1112.944302][T11986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.944320][T11986] RIP: 0033:0x7f1b9959aeb9 [ 1112.944337][T11986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.944351][T11986] RSP: 002b:00007f1b9a4b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1112.944369][T11986] RAX: ffffffffffffffda RBX: 00007f1b99815fa0 RCX: 00007f1b9959aeb9 [ 1112.944386][T11986] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1112.944397][T11986] RBP: 00007f1b9a4b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.944409][T11986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.944419][T11986] R13: 00007f1b99816038 R14: 00007f1b99815fa0 R15: 00007ffcc0792908 [ 1112.944448][T11986] [ 1113.365875][T11988] batadv_slave_0: entered promiscuous mode [ 1113.400957][T11987] batadv_slave_0: left promiscuous mode [ 1113.408473][ T30] audit: type=1804 audit(1770533595.630:39): pid=11988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9467" name="/newroot/51/memory.events" dev="tmpfs" ino=276 res=1 errno=0 [ 1113.705613][T11996] netlink: 'syz.1.9470': attribute type 13 has an invalid length. [ 1114.003747][T11996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.011640][T11996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.116315][T11996] team_slave_0: left promiscuous mode [ 1114.122555][T11996] team_slave_1: left promiscuous mode [ 1114.298808][T11996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.319806][T11996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.583536][T17648] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.602896][T17648] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.613531][T17648] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.622432][T17648] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.663464][T17648] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.700052][T17648] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.726671][T17648] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1114.748762][T12031] FAULT_INJECTION: forcing a failure. [ 1114.748762][T12031] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.767658][T17648] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.797309][T12031] CPU: 1 UID: 0 PID: 12031 Comm: syz.4.9477 Not tainted syzkaller #0 PREEMPT(full) [ 1114.797338][T12031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1114.797349][T12031] Call Trace: [ 1114.797358][T12031] [ 1114.797366][T12031] dump_stack_lvl+0xe8/0x150 [ 1114.797395][T12031] should_fail_ex+0x412/0x560 [ 1114.797423][T12031] should_failslab+0xa8/0x100 [ 1114.797444][T12031] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1114.797478][T12031] ? __netlink_lookup+0xc6/0x8b0 [ 1114.797499][T12031] ? skb_clone+0x212/0x3a0 [ 1114.797525][T12031] skb_clone+0x212/0x3a0 [ 1114.797552][T12031] __netlink_deliver_tap+0x404/0x850 [ 1114.797583][T12031] ? netlink_deliver_tap+0x2e/0x1b0 [ 1114.797605][T12031] netlink_deliver_tap+0x19c/0x1b0 [ 1114.797625][T12031] netlink_unicast+0x7e3/0x9b0 [ 1114.797651][T12031] ? __pfx_netlink_unicast+0x10/0x10 [ 1114.797671][T12031] ? netlink_sendmsg+0x650/0xb40 [ 1114.797689][T12031] ? skb_put+0x11b/0x210 [ 1114.797713][T12031] netlink_sendmsg+0x813/0xb40 [ 1114.797741][T12031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1114.797763][T12031] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1114.797786][T12031] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1114.797808][T12031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1114.797826][T12031] ____sys_sendmsg+0xa68/0xad0 [ 1114.797850][T12031] ? __might_fault+0xaf/0x130 [ 1114.797879][T12031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1114.797910][T12031] ? import_iovec+0x73/0xa0 [ 1114.797938][T12031] ___sys_sendmsg+0x2a5/0x360 [ 1114.797960][T12031] ? __lock_acquire+0x6b5/0x2cf0 [ 1114.797987][T12031] ? __pfx____sys_sendmsg+0x10/0x10 [ 1114.798038][T12031] ? __fget_files+0x2a/0x420 [ 1114.798056][T12031] ? __fget_files+0x3a0/0x420 [ 1114.798084][T12031] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1114.798109][T12031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1114.798141][T12031] ? __pfx_ksys_write+0x10/0x10 [ 1114.798175][T12031] do_syscall_64+0xe2/0xf80 [ 1114.798205][T12031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.798222][T12031] ? trace_irq_disable+0x37/0x100 [ 1114.798239][T12031] ? clear_bhb_loop+0x60/0xb0 [ 1114.798260][T12031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.798277][T12031] RIP: 0033:0x7f1b9959aeb9 [ 1114.798295][T12031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.798310][T12031] RSP: 002b:00007f1b9a4b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1114.798329][T12031] RAX: ffffffffffffffda RBX: 00007f1b99815fa0 RCX: 00007f1b9959aeb9 [ 1114.798341][T12031] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1114.798352][T12031] RBP: 00007f1b9a4b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.798362][T12031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.798371][T12031] R13: 00007f1b99816038 R14: 00007f1b99815fa0 R15: 00007ffcc0792908 [ 1114.798398][T12031] [ 1114.877803][T12040] netlink: 'syz.2.9478': attribute type 2 has an invalid length. [ 1115.098351][ T25] block nbd1: Possible stuck request ffff888025612800: control (read@0,1024B). Runtime 36 seconds [ 1115.109870][ T25] block nbd1: Possible stuck request ffff888025612a00: control (read@1024,1024B). Runtime 36 seconds [ 1115.121456][ T25] block nbd1: Possible stuck request ffff888025612c00: control (read@2048,1024B). Runtime 36 seconds [ 1115.137069][ T25] block nbd1: Possible stuck request ffff888025612e00: control (read@3072,1024B). Runtime 36 seconds [ 1115.139950][T12032] __nla_validate_parse: 5 callbacks suppressed [ 1115.139972][T12032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9478'. [ 1115.688454][T12074] FAULT_INJECTION: forcing a failure. [ 1115.688454][T12074] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.702041][T12074] CPU: 0 UID: 0 PID: 12074 Comm: syz.3.9491 Not tainted syzkaller #0 PREEMPT(full) [ 1115.702068][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1115.702079][T12074] Call Trace: [ 1115.702087][T12074] [ 1115.702094][T12074] dump_stack_lvl+0xe8/0x150 [ 1115.702124][T12074] should_fail_ex+0x412/0x560 [ 1115.702149][T12074] ? xfrm_policy_inexact_alloc_bin+0x147/0x1c50 [ 1115.702306][T12074] should_failslab+0xa8/0x100 [ 1115.702329][T12074] __kmalloc_cache_noprof+0x83/0x6e0 [ 1115.702355][T12074] ? xfrm_policy_inexact_alloc_bin+0x993/0x1c50 [ 1115.702373][T12074] ? xfrm_policy_inexact_alloc_bin+0x147/0x1c50 [ 1115.702392][T12074] ? xfrm_policy_inexact_alloc_bin+0x147/0x1c50 [ 1115.702410][T12074] xfrm_policy_inexact_alloc_bin+0x993/0x1c50 [ 1115.702430][T12074] ? xfrm_policy_inexact_alloc_bin+0x147/0x1c50 [ 1115.702450][T12074] ? do_raw_spin_lock+0x12b/0x2f0 [ 1115.702466][T12074] ? xfrm_policy_insert+0xa2/0x940 [ 1115.702485][T12074] ? policy_hash_bysel+0x22c/0x950 [ 1115.702503][T12074] xfrm_policy_inexact_insert+0x1e/0x180 [ 1115.702522][T12074] xfrm_policy_insert+0x116/0x940 [ 1115.702545][T12074] xfrm_add_policy+0x30f/0x820 [ 1115.702608][T12074] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1115.702622][T12074] ? apparmor_capable+0x137/0x1a0 [ 1115.702650][T12074] ? __nla_parse+0x40/0x60 [ 1115.702674][T12074] xfrm_user_rcv_msg+0x746/0xb20 [ 1115.702696][T12074] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1115.702742][T12074] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1115.702775][T12074] ? rcu_is_watching+0x15/0xb0 [ 1115.702792][T12074] ? trace_contention_end+0x39/0x100 [ 1115.702810][T12074] ? __mutex_lock+0x319/0x1300 [ 1115.702873][T12074] netlink_rcv_skb+0x232/0x4b0 [ 1115.702895][T12074] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1115.702915][T12074] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1115.702948][T12074] ? netlink_deliver_tap+0x2e/0x1b0 [ 1115.702965][T12074] ? netlink_deliver_tap+0x2e/0x1b0 [ 1115.702984][T12074] xfrm_netlink_rcv+0x79/0x90 [ 1115.702999][T12074] netlink_unicast+0x80f/0x9b0 [ 1115.703023][T12074] ? __pfx_netlink_unicast+0x10/0x10 [ 1115.703040][T12074] ? netlink_sendmsg+0x650/0xb40 [ 1115.703054][T12074] ? skb_put+0x11b/0x210 [ 1115.703076][T12074] netlink_sendmsg+0x813/0xb40 [ 1115.703100][T12074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1115.703121][T12074] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1115.703142][T12074] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1115.703162][T12074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1115.703184][T12074] ____sys_sendmsg+0xa68/0xad0 [ 1115.703203][T12074] ? __might_fault+0xaf/0x130 [ 1115.703230][T12074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1115.703260][T12074] ? import_iovec+0x73/0xa0 [ 1115.703288][T12074] ___sys_sendmsg+0x2a5/0x360 [ 1115.703305][T12074] ? __lock_acquire+0x6b5/0x2cf0 [ 1115.703329][T12074] ? __pfx____sys_sendmsg+0x10/0x10 [ 1115.703386][T12074] ? __fget_files+0x2a/0x420 [ 1115.703418][T12074] ? __fget_files+0x3a0/0x420 [ 1115.703447][T12074] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1115.703472][T12074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1115.703502][T12074] ? __pfx_ksys_write+0x10/0x10 [ 1115.703539][T12074] do_syscall_64+0xe2/0xf80 [ 1115.703561][T12074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.703576][T12074] ? trace_irq_disable+0x37/0x100 [ 1115.703592][T12074] ? clear_bhb_loop+0x60/0xb0 [ 1115.703610][T12074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.703634][T12074] RIP: 0033:0x7f5e24f9aeb9 [ 1115.703650][T12074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.703664][T12074] RSP: 002b:00007f5e25d92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1115.703683][T12074] RAX: ffffffffffffffda RBX: 00007f5e25215fa0 RCX: 00007f5e24f9aeb9 [ 1115.703694][T12074] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1115.703705][T12074] RBP: 00007f5e25d92090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.703715][T12074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.703723][T12074] R13: 00007f5e25216038 R14: 00007f5e25215fa0 R15: 00007ffed21fed98 [ 1115.703749][T12074] [ 1116.132070][T12078] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1116.164159][T12078] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1116.361346][T12091] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.9496'. [ 1116.375016][T12090] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9494'. [ 1116.387477][T12090] syzkaller0: entered promiscuous mode [ 1116.393068][T12090] syzkaller0: entered allmulticast mode [ 1116.409059][T12091] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1116.638437][T12107] bridge0: entered promiscuous mode [ 1116.746303][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1116.787922][T12113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1116.816354][T12113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1116.857855][T12113] erspan0: entered promiscuous mode [ 1117.286540][T12143] netlink: 112 bytes leftover after parsing attributes in process `syz.1.9513'. [ 1117.358294][T12155] netlink: 'syz.1.9516': attribute type 10 has an invalid length. [ 1117.360084][T12156] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9515'. [ 1117.379361][T12155] team0: Port device netdevsim0 added [ 1117.417324][ T8592] lec:lec_start_xmit: lec0:No lecd attached [ 1117.426021][T12156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.535469][T12156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.645164][T12156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.739315][T12156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.774311][T12166] vxcan1: entered promiscuous mode [ 1117.892398][T17637] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.943714][ T8648] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1117.990712][T17637] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.009466][T17637] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1118.862677][T12212] vlan3: entered promiscuous mode [ 1118.883148][T12212] bond0: entered promiscuous mode [ 1118.898178][T12212] bond_slave_0: entered promiscuous mode [ 1118.904677][T12212] bond_slave_1: entered promiscuous mode [ 1118.911270][T12212] team0: entered promiscuous mode [ 1118.917032][T12212] team_slave_0: entered promiscuous mode [ 1118.923408][T12212] team_slave_1: entered promiscuous mode [ 1119.094420][T12226] openvswitch: netlink: Key 6 has unexpected len 212 expected 2 [ 1119.707429][T12259] rdma_op ffff8880562901f0 conn xmit_rdma 0000000000000000 [ 1120.863413][T12286] dvmrp0: entered allmulticast mode [ 1121.003977][T12302] SET target dimension over the limit! [ 1121.006313][T12303] __nla_validate_parse: 5 callbacks suppressed [ 1121.006334][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9560'. [ 1121.138074][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9562'. [ 1121.153866][T12303] veth3: entered allmulticast mode [ 1121.159343][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9562'. [ 1121.185553][T12310] tipc: Invalid UDP bearer configuration [ 1121.185609][T12310] tipc: Enabling of bearer rejected, failed to enable media [ 1121.300020][T12313] netlink: 176 bytes leftover after parsing attributes in process `syz.3.9562'. [ 1121.309328][T12312] netlink: 176 bytes leftover after parsing attributes in process `syz.3.9562'. [ 1121.464324][T12337] netlink: 'syz.2.9572': attribute type 1 has an invalid length. [ 1121.521011][T12337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1121.562377][T12337] bond4: (slave geneve2): making interface the new active one [ 1121.594289][T12341] netlink: 'syz.4.9573': attribute type 32 has an invalid length. [ 1121.606837][T12337] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1121.640293][T17637] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.663370][T17637] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.679963][T17637] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.693145][T17637] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.741507][T12346] xt_TCPMSS: Only works on TCP SYN packets [ 1121.807219][T12353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9577'. [ 1121.999732][T12363] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9581'. [ 1122.019517][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9582'. [ 1122.121058][T12372] netlink: 672 bytes leftover after parsing attributes in process `syz.1.9584'. [ 1122.293868][T12380] bond3: option ad_select: invalid value (34) [ 1122.301906][T12380] bond3 (unregistering): Released all slaves [ 1122.432996][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1122.441195][ C0] lec:lec_tx_timeout: lec0 [ 1122.447695][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1124.123560][ T25] block nbd1: Possible stuck request ffff888025612800: control (read@0,1024B). Runtime 45 seconds [ 1124.134458][ T25] block nbd1: Possible stuck request ffff888025612a00: control (read@1024,1024B). Runtime 45 seconds [ 1124.155065][ T25] block nbd1: Possible stuck request ffff888025612c00: control (read@2048,1024B). Runtime 45 seconds [ 1124.166899][ T25] block nbd1: Possible stuck request ffff888025612e00: control (read@3072,1024B). Runtime 45 seconds [ 1125.023945][T12367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1125.216187][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9590'. [ 1125.352548][T12394] lo speed is unknown, defaulting to 1000 [ 1125.656153][T12413] netlink: 'syz.2.9596': attribute type 1 has an invalid length. [ 1126.046600][T12420] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.220797][T12428] syzkaller0: entered promiscuous mode [ 1126.235588][T12428] syzkaller0: entered allmulticast mode [ 1126.319602][T12420] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.471652][T12444] lo speed is unknown, defaulting to 1000 [ 1126.520074][T12447] __nla_validate_parse: 1 callbacks suppressed [ 1126.520093][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9605'. [ 1126.769557][T12420] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.804704][T12463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9609'. [ 1126.847015][T12458] netlink: 136 bytes leftover after parsing attributes in process `syz.3.9608'. [ 1126.864955][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9609'. [ 1126.873249][T12458] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1126.996626][T12420] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.400639][T17648] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.448624][ T8648] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.463060][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1127.471697][ C0] lec:lec_tx_timeout: lec0 [ 1127.496579][T17648] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.518744][ T6466] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.846273][T12500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9622'. [ 1128.157019][T12515] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9625'. [ 1128.426855][T12539] netlink: 'syz.3.9634': attribute type 1 has an invalid length. [ 1128.615376][T12553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1128.714769][T12539] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1128.813826][T12555] syzkaller0: entered promiscuous mode [ 1128.883166][T12555] syzkaller0: entered allmulticast mode [ 1129.009241][T12568] netlink: 'syz.2.9641': attribute type 13 has an invalid length. [ 1129.051136][T12570] tipc: Started in network mode [ 1129.056366][T12570] tipc: Node identity 4634e5bc34b4, cluster identity 4711 [ 1129.078847][T12570] tipc: Enabled bearer , priority 0 [ 1129.106555][T12574] netlink: 'syz.1.9644': attribute type 4 has an invalid length. [ 1129.231525][T12588] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9648'. [ 1129.241859][T12589] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9648'. [ 1129.251523][T12590] netlink: 'syz.1.9644': attribute type 4 has an invalid length. [ 1132.094012][T12569] tipc: Disabling bearer [ 1132.123895][T30608] tipc: Node number set to 1921050044 [ 1132.338138][T12599] syzkaller0: entered promiscuous mode [ 1132.343868][T12599] syzkaller0: entered allmulticast mode [ 1133.433057][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 1133.440296][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 1133.448617][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 1133.456435][ T25] block nbd1: Connection timed out, retrying (0/1 alive) [ 1133.463963][ T25] block nbd1: Dead connection, failed to find a fallback [ 1133.471110][ T25] block nbd1: shutting down sockets [ 1133.480713][ T25] blk_print_req_error: 138 callbacks suppressed [ 1133.480798][ T25] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.503035][ T25] buffer_io_error: 138 callbacks suppressed [ 1133.503126][ T25] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1133.519193][ T25] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.529094][ T25] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1133.538449][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.548421][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1133.556624][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.566523][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1133.574998][T10076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.594153][T10076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1133.610081][T10076] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.653338][T10076] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1133.661198][T10076] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.673681][T10076] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1133.701397][T10076] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.711116][T10076] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1133.719182][T10076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.735812][T10076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1133.775340][T10076] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1133.787626][T10076] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1133.820874][T10076] ldm_validate_partition_table(): Disk read failed. [ 1133.828524][T10076] Dev nbd1: unable to read RDB block 0 [ 1133.835053][T10076] nbd1: unable to read partition table [ 1133.863491][T10076] ldm_validate_partition_table(): Disk read failed. [ 1133.870635][T10076] Dev nbd1: unable to read RDB block 0 [ 1133.877141][T10076] nbd1: unable to read partition table [ 1136.370252][T12642] pim6reg: entered allmulticast mode [ 1136.376633][T12638] pim6reg: left allmulticast mode [ 1136.564743][T12674] xt_policy: output policy not valid in PREROUTING and INPUT [ 1136.602127][T12674] netlink: 'syz.3.9666': attribute type 4 has an invalid length. [ 1136.621114][T12674] netlink: 17 bytes leftover after parsing attributes in process `syz.3.9666'. [ 1136.644543][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9668'. [ 1136.813153][ T30] audit: type=1804 audit(1770533619.040:40): pid=12689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9670" name="memory.events" dev="tmpfs" ino=710 res=1 errno=0 [ 1136.856853][ T30] audit: type=1800 audit(1770533619.040:41): pid=12689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9670" name="memory.events" dev="tmpfs" ino=710 res=0 errno=0 [ 1136.995990][T12699] pim6reg1: entered promiscuous mode [ 1137.003096][T12699] pim6reg1: entered allmulticast mode [ 1137.086939][T17651] nci: nci_rx_work: unknown MT 0x7 [ 1137.103497][T12708] tipc: Enabled bearer , priority 0 [ 1137.111397][T12708] syzkaller0: entered promiscuous mode [ 1137.128933][T12708] syzkaller0: entered allmulticast mode [ 1137.226675][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9676'. [ 1137.266422][T12708] tipc: Resetting bearer [ 1137.274160][T12721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1137.600778][T12729] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9682'. [ 1137.672489][T12704] tipc: Resetting bearer [ 1137.701020][T12704] tipc: Disabling bearer [ 1137.736282][T12729] netlink: 'syz.4.9682': attribute type 1 has an invalid length. [ 1137.804541][T12746] bond0: entered promiscuous mode [ 1137.809824][T12746] bond_slave_0: entered promiscuous mode [ 1137.816766][T12746] bond_slave_1: entered promiscuous mode [ 1137.832912][T12744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9686'. [ 1137.856927][T12746] team0: entered promiscuous mode [ 1137.862006][T12746] team_slave_0: entered promiscuous mode [ 1137.912681][T12746] team_slave_1: entered promiscuous mode [ 1137.977245][T12746] batadv0: entered promiscuous mode [ 1138.009704][T12746] debugfs: 'hsr1' already exists in 'hsr' [ 1138.016743][T12746] Cannot create hsr debugfs directory [ 1138.108873][T12755] lo speed is unknown, defaulting to 1000 [ 1138.166190][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9691'. [ 1138.186451][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9691'. [ 1138.516543][T12786] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9697'. [ 1138.623807][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9697'. [ 1138.625801][T12790] SET target dimension over the limit! [ 1138.823408][T12798] netlink: 'syz.3.9705': attribute type 15 has an invalid length. [ 1139.008349][T12817] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9707'. [ 1139.145941][T12823] batman_adv: batadv0: Adding interface: dummy0 [ 1139.155328][T12823] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.185242][T12823] batman_adv: batadv0: Interface activated: dummy0 [ 1139.210742][T12823] batadv0: mtu less than device minimum [ 1139.219354][T12823] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1139.231885][T12823] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1139.243682][T12823] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1139.254883][T12823] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1139.266596][T12823] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1139.278462][T12823] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1139.290292][T12823] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1139.302073][T12823] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1139.446323][T12833] pim6reg: entered allmulticast mode [ 1139.454864][T12833] pim6reg: left allmulticast mode [ 1139.509473][T12839] netlink: 'syz.3.9715': attribute type 3 has an invalid length. [ 1139.539363][T12839] netlink: 'syz.3.9715': attribute type 3 has an invalid length. [ 1139.644506][T12848] netlink: 'syz.4.9716': attribute type 1 has an invalid length. [ 1139.652632][T12848] netlink: 'syz.4.9716': attribute type 7 has an invalid length. [ 1139.662663][T12848] netlink: 'syz.4.9716': attribute type 8 has an invalid length. [ 1139.957111][T12867] lo speed is unknown, defaulting to 1000 [ 1140.055852][T12870] netlink: 'syz.1.9725': attribute type 7 has an invalid length. [ 1140.079442][T12870] netlink: 'syz.1.9725': attribute type 8 has an invalid length. [ 1140.271574][T12884] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1140.284149][T12887] lo speed is unknown, defaulting to 1000 [ 1140.420671][T12892] syzkaller0: entered promiscuous mode [ 1140.463152][T12892] syzkaller0: entered allmulticast mode [ 1142.194387][T12934] Bluetooth: MGMT ver 1.23 [ 1144.236866][T12911] lo speed is unknown, defaulting to 1000 [ 1144.321356][T12939] sctp: [Deprecated]: syz.4.9744 (pid 12939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1144.321356][T12939] Use struct sctp_sack_info instead [ 1144.351448][T12939] __nla_validate_parse: 7 callbacks suppressed [ 1144.351467][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9744'. [ 1144.398774][T12944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9746'. [ 1144.423820][T12939] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1144.550568][T12949] netlink: 'syz.3.9747': attribute type 1 has an invalid length. [ 1144.573864][T12949] netlink: 'syz.3.9747': attribute type 2 has an invalid length. [ 1144.604909][T12953] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9748'. [ 1144.621817][T12958] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9748'. [ 1144.692118][T12966] netlink: 'syz.3.9747': attribute type 1 has an invalid length. [ 1144.700393][T12966] netlink: 'syz.3.9747': attribute type 2 has an invalid length. [ 1145.119681][T12978] netlink: 'syz.0.9754': attribute type 62 has an invalid length. [ 1145.174801][T12977] netlink: 'syz.3.9755': attribute type 2 has an invalid length. [ 1145.186999][T12981] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9754'. [ 1145.207601][T12977] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9755'. [ 1145.464740][ T5900] IPVS: starting estimator thread 0... [ 1145.563477][T12998] IPVS: using max 35 ests per chain, 84000 per kthread [ 1146.333585][T13055] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9776'. [ 1146.424141][T13061] netlink: 'syz.0.9775': attribute type 1 has an invalid length. [ 1146.705187][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9778'. [ 1146.781535][T17637] bond0: (slave bond_slave_0): interface is now down [ 1146.926420][T13088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1147.283142][T17637] bond0: (slave bond_slave_1): interface is now down [ 1147.295484][T17637] bond0: (slave wlan1): interface is now down [ 1147.315308][T13095] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9787'. [ 1147.331627][T13088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.360806][T13095] net_ratelimit: 11 callbacks suppressed [ 1147.360829][T13095] openvswitch: netlink: Flow key attr not present in new flow. [ 1147.453085][T17637] bond0: (slave bond_slave_0): interface is now down [ 1147.460010][T17637] bond0: (slave bond_slave_1): interface is now down [ 1147.473101][T17637] bond0: (slave wlan1): interface is now down [ 1147.512346][T17637] bond0: now running without any active interface! [ 1147.599414][ T5900] IPVS: starting estimator thread 0... [ 1147.753200][T13104] IPVS: using max 34 ests per chain, 81600 per kthread [ 1147.945614][T13122] x_tables: duplicate underflow at hook 1 [ 1147.974907][T13114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9795'. [ 1148.312411][T13137] bond5: entered promiscuous mode [ 1148.360833][T13137] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1148.446138][T13144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1148.461269][T13144] bond5: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 1148.476050][T13144] bond5: (slave ip6tnl1): Error -95 calling set_mac_address [ 1148.527456][T13152] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1148.668311][T13153] syzkaller0: entered promiscuous mode [ 1148.719064][T13153] syzkaller0: entered allmulticast mode [ 1148.773440][T13162] openvswitch: netlink: Message has 8 unknown bytes. [ 1148.820447][T17637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.848894][T17637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.934688][T13167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1149.249417][T13177] sctp: [Deprecated]: syz.3.9807 (pid 13177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1149.249417][T13177] Use struct sctp_sack_info instead [ 1151.030283][T13078] Set syz1 is full, maxelem 65536 reached [ 1151.231119][T13180] sctp: [Deprecated]: syz.1.9809 (pid 13180) Use of int in max_burst socket option deprecated. [ 1151.231119][T13180] Use struct sctp_assoc_value instead [ 1153.201697][T13183] __nla_validate_parse: 1 callbacks suppressed [ 1153.201722][T13183] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9810'. [ 1153.203383][ T8426] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1153.244089][T17637] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1153.309021][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9814'. [ 1153.389509][T13189] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1153.411094][T13187] netlink: 'syz.0.9813': attribute type 7 has an invalid length. [ 1153.423101][T13187] netlink: 'syz.0.9813': attribute type 8 has an invalid length. [ 1153.423403][T24707] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1153.437584][T13190] netlink: 'syz.0.9813': attribute type 7 has an invalid length. [ 1153.453046][T13190] netlink: 'syz.0.9813': attribute type 8 has an invalid length. [ 1153.611780][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9816'. [ 1153.660549][T13206] netlink: 'syz.3.9816': attribute type 3 has an invalid length. [ 1153.703276][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9816'. [ 1154.076010][T13229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.089969][T13229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1154.107315][T13233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9825'. [ 1154.252660][T13243] tipc: Started in network mode [ 1154.257845][T13243] tipc: Node identity , cluster identity 4711 [ 1154.264494][T13243] tipc: Failed to obtain node identity [ 1154.270368][T13243] tipc: Enabling of bearer rejected, failed to enable media [ 1154.297164][T17648] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1154.311481][T17648] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1154.321398][T13247] netlink: 'syz.1.9832': attribute type 4 has an invalid length. [ 1154.330703][T13247] netlink: 'syz.1.9832': attribute type 17 has an invalid length. [ 1154.347951][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9830'. [ 1154.363322][T13247] netlink: 'syz.1.9832': attribute type 27 has an invalid length. [ 1154.402559][T13256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9833'. [ 1154.412450][T13254] batadv0: entered promiscuous mode [ 1154.421411][T13254] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1154.438470][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9830'. [ 1154.448383][ T5900] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1154.469156][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9830'. [ 1154.486162][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9830'. [ 1154.518665][T13254] ip6gretap1: entered allmulticast mode [ 1154.587161][T13258] bridge_slave_1: left allmulticast mode [ 1154.592860][T13258] bridge_slave_1: left promiscuous mode [ 1154.619122][T13258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.638204][T13258] bridge_slave_0: left allmulticast mode [ 1154.644121][T13264] netlink: 'syz.2.9836': attribute type 10 has an invalid length. [ 1154.658039][T13258] bridge_slave_0: left promiscuous mode [ 1154.699442][T13258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.927704][T13264] team0: Port device dummy0 added [ 1155.037416][T13281] bond5: entered promiscuous mode [ 1155.131355][T13290] tipc: Enabled bearer , priority 0 [ 1155.165643][T13290] syzkaller0: entered promiscuous mode [ 1155.213193][T13290] syzkaller0: entered allmulticast mode [ 1155.323885][T11213] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1155.386941][T13298] tipc: Resetting bearer [ 1155.521436][T13301] syzkaller0: entered promiscuous mode [ 1155.604511][T13301] syzkaller0: entered allmulticast mode [ 1155.672678][T13291] tipc: Resetting bearer [ 1155.767363][T13291] tipc: Disabling bearer [ 1156.024148][T13339] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1156.046220][T13324] xt_hashlimit: size too large, truncated to 1048576 [ 1156.053602][T13324] xt_hashlimit: max too large, truncated to 1048576 [ 1156.278682][T13330] syzkaller0: entered promiscuous mode [ 1156.285693][T13330] syzkaller0: entered allmulticast mode [ 1156.648125][T13352] lo speed is unknown, defaulting to 1000 [ 1158.244450][T13379] Cannot find add_set index 2 as target [ 1158.363184][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1158.393282][T13383] netlink: 'syz.4.9866': attribute type 1 has an invalid length. [ 1158.442008][T13383] netlink: 'syz.4.9866': attribute type 2 has an invalid length. [ 1158.766086][T13394] syzkaller0: entered allmulticast mode [ 1158.891924][T13402] tipc: Enabled bearer , priority 0 [ 1158.915026][T13402] syzkaller0: entered promiscuous mode [ 1158.931029][T13402] syzkaller0: entered allmulticast mode [ 1159.038630][T13400] tipc: Resetting bearer [ 1159.049750][T13405] __nla_validate_parse: 75 callbacks suppressed [ 1159.049778][T13405] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9871'. [ 1159.135896][T13400] tipc: Disabling bearer [ 1159.160337][T13406] syzkaller1: entered promiscuous mode [ 1159.167999][T13406] syzkaller1: entered allmulticast mode [ 1159.740034][T13442] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.835459][T13444] siw: device registration error -23 [ 1160.060425][T13442] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.181839][T13442] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.345429][T13442] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.585305][ T7691] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.603061][ T7691] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.664545][ T8651] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.714450][ T8651] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.750546][T13462] ip6gretap3: entered allmulticast mode [ 1161.043234][T13475] netlink: 'syz.3.9892': attribute type 1 has an invalid length. [ 1161.105656][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9892'. [ 1161.149100][T13486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9894'. [ 1161.194208][T13487] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 1161.582489][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9900'. [ 1162.272769][T13531] syzkaller0: entered promiscuous mode [ 1162.298879][T13531] syzkaller0: entered allmulticast mode [ 1162.354550][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9909'. [ 1162.447494][T13537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9906'. [ 1162.797059][T13550] netlink: 'syz.4.9913': attribute type 13 has an invalid length. [ 1162.805102][T13548] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20001 [ 1163.175876][T13564] syz.2.9916: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1163.218431][T13564] CPU: 0 UID: 0 PID: 13564 Comm: syz.2.9916 Not tainted syzkaller #0 PREEMPT(full) [ 1163.218465][T13564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1163.218479][T13564] Call Trace: [ 1163.218489][T13564] [ 1163.218499][T13564] dump_stack_lvl+0xe8/0x150 [ 1163.218534][T13564] warn_alloc+0x249/0x340 [ 1163.218556][T13564] ? stack_trace_save+0xa9/0x100 [ 1163.218684][T13564] ? __pfx_warn_alloc+0x10/0x10 [ 1163.218709][T13564] ? kasan_save_track+0x4f/0x80 [ 1163.218725][T13564] ? kasan_save_track+0x3e/0x80 [ 1163.218740][T13564] ? __kasan_kmalloc+0x93/0xb0 [ 1163.218758][T13564] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1163.218778][T13564] ? xskq_create+0x56/0x170 [ 1163.218830][T13564] ? xsk_setsockopt+0x54c/0x990 [ 1163.218851][T13564] ? do_sock_setsockopt+0x17c/0x1b0 [ 1163.218876][T13564] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1163.218899][T13564] ? do_syscall_64+0xe2/0xf80 [ 1163.218926][T13564] __vmalloc_node_range_noprof+0x132/0x1730 [ 1163.218968][T13564] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1163.218993][T13564] ? __kasan_kmalloc+0x93/0xb0 [ 1163.219016][T13564] vmalloc_user_noprof+0xad/0xe0 [ 1163.219035][T13564] ? xskq_create+0xbf/0x170 [ 1163.219057][T13564] xskq_create+0xbf/0x170 [ 1163.219081][T13564] xsk_init_queue+0xad/0x110 [ 1163.219104][T13564] xsk_setsockopt+0x54c/0x990 [ 1163.219127][T13564] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1163.219147][T13564] ? __pfx_aa_sk_perm+0x10/0x10 [ 1163.219236][T13564] ? aa_sock_opt_perm+0xff/0x1a0 [ 1163.219263][T13564] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1163.219283][T13564] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1163.219305][T13564] do_sock_setsockopt+0x17c/0x1b0 [ 1163.219335][T13564] __x64_sys_setsockopt+0x13d/0x1b0 [ 1163.219364][T13564] do_syscall_64+0xe2/0xf80 [ 1163.219396][T13564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.219420][T13564] ? trace_irq_disable+0x37/0x100 [ 1163.219441][T13564] ? clear_bhb_loop+0x60/0xb0 [ 1163.219463][T13564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1163.219481][T13564] RIP: 0033:0x7fe716f9aeb9 [ 1163.219501][T13564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1163.219519][T13564] RSP: 002b:00007fe7151f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1163.219540][T13564] RAX: ffffffffffffffda RBX: 00007fe717215fa0 RCX: 00007fe716f9aeb9 [ 1163.219554][T13564] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1163.219565][T13564] RBP: 00007fe717008c1f R08: 0000000000000004 R09: 0000000000000000 [ 1163.219576][T13564] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1163.219587][T13564] R13: 00007fe717216038 R14: 00007fe717215fa0 R15: 00007ffe77bc1ce8 [ 1163.219612][T13564] [ 1163.492620][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9916'. [ 1163.503337][T13564] Mem-Info: [ 1163.506536][T13564] active_anon:12789 inactive_anon:8 isolated_anon:0 [ 1163.506536][T13564] active_file:2503 inactive_file:41330 isolated_file:0 [ 1163.506536][T13564] unevictable:768 dirty:176 writeback:0 [ 1163.506536][T13564] slab_reclaimable:13872 slab_unreclaimable:196013 [ 1163.506536][T13564] mapped:31713 shmem:1383 pagetables:1552 [ 1163.506536][T13564] sec_pagetables:0 bounce:0 [ 1163.506536][T13564] kernel_misc_reclaimable:0 [ 1163.506536][T13564] free:1109045 free_pcp:23648 free_cma:0 [ 1163.552343][T13564] Node 0 active_anon:51244kB inactive_anon:32kB active_file:10012kB inactive_file:165120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40896kB dirty:768kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14872kB pagetables:6040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1163.584891][T13564] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86012kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1163.615912][T13564] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1163.646819][T13564] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 1163.652726][T13564] Node 0 DMA32 free:1200944kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51244kB inactive_anon:32kB active_file:10012kB inactive_file:165120kB unevictable:1536kB writepending:768kB zspages:0kB present:3129332kB managed:2554036kB mlocked:0kB bounce:0kB free_pcp:29488kB local_pcp:9792kB free_cma:0kB [ 1163.686879][T13564] lowmem_reserve[]: 0 0 1 1 1 [ 1163.692045][T13564] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1163.722249][T13564] lowmem_reserve[]: 0 0 0 0 0 [ 1163.727590][T13564] Node 1 Normal free:3256348kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:64516kB local_pcp:34356kB free_cma:0kB [ 1163.760185][T13564] lowmem_reserve[]: 0 0 0 0 0 [ 1163.765027][T13564] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11248kB [ 1163.811493][T13564] Node 0 DMA32: 7325*4kB (UME) 8607*8kB (UME) 5400*16kB (UME) 844*32kB (UME) 641*64kB (UME) 475*128kB (UE) 375*256kB (UME) 388*512kB (UME) 307*1024kB (UME) 136*2048kB (UM) 0*4096kB = 1200940kB [ 1163.929272][T13564] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1164.016817][T13564] Node 1 Normal: 171*4kB (UE) 57*8kB (UME) 42*16kB (UME) 126*32kB (UME) 40*64kB (UME) 12*128kB (UME) 9*256kB (UME) 9*512kB (UME) 5*1024kB (UM) 5*2048kB (UE) 797*4096kB (UM) = 3296724kB [ 1164.096981][T13564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1164.153413][T13564] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1164.187613][T13564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1164.205551][T13564] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1164.215622][T13564] 45212 total pagecache pages [ 1164.220334][T13564] 0 pages in swap cache [ 1164.227097][T13564] Free swap = 124996kB [ 1164.237121][T13550] batman_adv: batadv0: Interface deactivated: dummy0 [ 1164.256051][T13564] Total swap = 124996kB [ 1164.260402][T13564] 2097051 pages RAM [ 1164.264699][T13564] 0 pages HighMem/MovableOnly [ 1164.270538][T13564] 426644 pages reserved [ 1164.280674][T13564] 0 pages cma reserved [ 1164.714289][T13550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.748759][T13550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.003159][ T5837] Bluetooth: hci1: command 0x0405 tx timeout [ 1165.187098][T13580] syzkaller0: entered promiscuous mode [ 1165.193949][T13580] syzkaller0: entered allmulticast mode [ 1165.201486][ T8648] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.239781][ T8648] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.260743][ T8648] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.289036][ T8648] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.304083][T13589] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9919'. [ 1165.316764][T13589] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1165.348134][T13589] IPv6: Can't replace route, no match found [ 1165.649531][T13612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9927'. [ 1165.673442][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9928'. [ 1165.694108][T13616] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 1165.707509][T13612] netlink: 'syz.2.9927': attribute type 1 has an invalid length. [ 1165.737919][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9929'. [ 1165.794734][T13627] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9930'. [ 1165.833622][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9927'. [ 1165.843671][T13627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9930'. [ 1165.896183][T13634] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1165.932676][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9931'. [ 1165.942484][T13634] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9927'. [ 1165.955919][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9930'. [ 1166.214146][T13646] netlink: 'syz.4.9935': attribute type 13 has an invalid length. [ 1166.255042][T13646] gretap0: refused to change device tx_queue_len [ 1166.280340][T13646] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1166.297867][T13646] IPVS: set_ctl: invalid protocol: 0 172.20.20.56:20003 [ 1166.310057][T13650] netlink: 'syz.2.9936': attribute type 3 has an invalid length. [ 1167.323359][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1167.483433][ T5141] Bluetooth: hci0: command 0x0406 tx timeout [ 1167.491736][T13706] hsr_slave_1 (unregistering): left promiscuous mode [ 1167.963893][T13731] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1168.037375][T13731] bond2 (unregistering): Released all slaves [ 1168.262770][T13733] bond0: (slave team0): Releasing backup interface [ 1168.324699][T13733] team0 (unregistering): left promiscuous mode [ 1168.343615][T13733] team_slave_0: left promiscuous mode [ 1168.349608][T13733] team_slave_1: left promiscuous mode [ 1168.408216][T13733] team0 (unregistering): Port device team_slave_0 removed [ 1168.419576][T13733] team0 (unregistering): Port device team_slave_1 removed [ 1168.443896][T13733] bond1: left allmulticast mode [ 1168.453358][T13733] ip6gretap1: left allmulticast mode [ 1168.456073][T13763] netlink: zone id is out of range [ 1168.463828][T13733] bond1: left promiscuous mode [ 1168.464541][T13733] ip6gretap1: left promiscuous mode [ 1168.486444][T13763] netlink: zone id is out of range [ 1168.491614][T13763] netlink: zone id is out of range [ 1168.507892][T13763] netlink: zone id is out of range [ 1168.515342][T13733] team0 (unregistering): Port device macvlan2 removed [ 1168.525473][T13763] netlink: zone id is out of range [ 1168.530634][T13763] netlink: zone id is out of range [ 1168.559383][T13763] netlink: zone id is out of range [ 1168.566060][T13763] netlink: zone id is out of range [ 1169.023692][T13794] syzkaller0: entered promiscuous mode [ 1169.029218][T13794] syzkaller0: entered allmulticast mode [ 1169.269832][T13810] geneve2: entered promiscuous mode [ 1169.282079][T13810] geneve2: entered allmulticast mode [ 1169.301253][T17654] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.333527][T17654] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.362293][T17654] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.375544][T13820] netlink: 'syz.2.9977': attribute type 58 has an invalid length. [ 1169.390007][T17654] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.547556][T13821] lo speed is unknown, defaulting to 1000 [ 1169.567897][T13822] lo speed is unknown, defaulting to 1000 [ 1169.765276][T13839] pim6reg: entered allmulticast mode [ 1170.027693][T13852] pim6reg1: entered promiscuous mode [ 1170.035082][T13852] pim6reg1: entered allmulticast mode [ 1170.041831][T13838] pim6reg: left allmulticast mode [ 1170.614171][T13885] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1170.625290][T13885] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20004 [ 1170.635039][T13885] net_ratelimit: 37 callbacks suppressed [ 1170.635051][T13885] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1172.854956][T13843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1173.032808][T13898] syzkaller0: entered promiscuous mode [ 1173.048649][T13905] __nla_validate_parse: 10 callbacks suppressed [ 1173.048670][T13905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9999'. [ 1173.063231][T13898] syzkaller0: entered allmulticast mode [ 1173.066271][T13907] netlink: 'syz.2.9999': attribute type 5 has an invalid length. [ 1173.087579][T13898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9995'. [ 1173.093157][T13905] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9999'. [ 1173.121886][T13905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9999'. [ 1173.132380][T13905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9999'. [ 1173.160715][T13905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9999'. [ 1173.296212][T13916] team0: Port device dummy0 removed [ 1173.309257][T13916] batman_adv: batadv0: Adding interface: dummy0 [ 1173.324961][T13916] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1173.374171][T13916] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1173.709948][T13945] netlink: 'syz.0.10009': attribute type 4 has an invalid length. [ 1173.722089][T13945] netlink: 'syz.0.10009': attribute type 1 has an invalid length. [ 1173.731616][T13945] netlink: 228 bytes leftover after parsing attributes in process `syz.0.10009'. [ 1173.781890][T13945] lo speed is unknown, defaulting to 1000 [ 1173.872868][T13951] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10009'. [ 1174.121761][T13967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10015'. [ 1174.175633][T13971] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1176.572082][T13936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1176.919622][T13997] lo speed is unknown, defaulting to 1000 [ 1177.254144][T14015] netlink: 'syz.1.10030': attribute type 1 has an invalid length. [ 1177.318337][T14021] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10032'. [ 1177.350606][T14015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1177.445998][T14022] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1177.471385][T14022] bond2: (slave batadv1): making interface the new active one [ 1177.482358][T14022] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 1177.497391][T14016] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1177.509439][T14016] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 1177.641028][T14038] bond6: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1177.672557][T14041] netlink: 'syz.1.10037': attribute type 1 has an invalid length. [ 1177.723148][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 1177.733074][T14038] bond6 (unregistering): Released all slaves [ 1177.889588][T13999] IPVS: length: 132 != 8 [ 1177.979398][T14041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.286734][T14041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.314349][T14063] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10041'. [ 1178.437983][T14041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.611172][T14041] team0: Port device netdevsim0 removed [ 1178.619716][T14077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10046'. [ 1178.623437][T14041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.700934][T14084] netlink: 'syz.2.10048': attribute type 13 has an invalid length. [ 1178.781674][T14084] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1178.790122][T14084] syzkaller0: entered promiscuous mode [ 1178.796513][T14084] syzkaller0: entered allmulticast mode [ 1178.821224][T14086] netlink: 164 bytes leftover after parsing attributes in process `syz.4.10049'. [ 1178.846932][T14084] tipc: Started in network mode [ 1178.851844][T14084] tipc: Node identity 0a0e7bfdb18f, cluster identity 4711 [ 1178.860169][T14084] tipc: Enabled bearer , priority 0 [ 1178.890232][T14083] tipc: Resetting bearer [ 1178.916045][T14083] tipc: Disabling bearer [ 1178.945249][ T8651] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.971065][ T8651] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.992323][ T8651] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.037870][ T8651] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.315569][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10052'. [ 1179.493836][T14108] netlink: 'syz.1.10056': attribute type 1 has an invalid length. [ 1179.503671][T14108] lo: entered promiscuous mode [ 1179.699888][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10057'. [ 1180.020303][T14138] lo speed is unknown, defaulting to 1000 [ 1180.075579][T14136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10062'. [ 1180.718250][T13700] udevd[13700]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1180.776450][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1180.805429][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10068'. [ 1181.326778][T14198] lo speed is unknown, defaulting to 1000 [ 1181.378690][T14203] netlink: 10 bytes leftover after parsing attributes in process `syz.4.10074'. [ 1181.451241][T14202] vlan2: entered promiscuous mode [ 1181.457071][T14202] batadv0: entered promiscuous mode [ 1181.612360][T14214] lo speed is unknown, defaulting to 1000 [ 1181.793441][T14224] syzkaller0: entered promiscuous mode [ 1181.798975][T14224] syzkaller0: entered allmulticast mode [ 1181.862141][T14238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10080'. [ 1182.096326][T14249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10082'. [ 1182.200945][T14257] openvswitch: netlink: IPv4 tun info is not correct [ 1182.222518][T14245] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1182.256456][T14245] bond4 (unregistering): Released all slaves [ 1182.408734][T14267] wg1: entered promiscuous mode [ 1182.666487][T14275] IPv6: sit1: Disabled Multicast RS [ 1183.075717][T14293] siw: device registration error -23 [ 1183.076805][T14291] syzkaller0: entered promiscuous mode [ 1183.090492][T14295] netlink: 'syz.2.10097': attribute type 1 has an invalid length. [ 1183.090744][T14291] syzkaller0: entered allmulticast mode [ 1183.250054][T14295] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1183.331801][T14301] __nla_validate_parse: 8 callbacks suppressed [ 1183.331817][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10099'. [ 1183.404906][T14295] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1183.449540][T14306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1183.669967][T14326] lo speed is unknown, defaulting to 1000 [ 1183.860688][T14334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10107'. [ 1183.903320][T14337] block nbd2: server does not support multiple connections per device. [ 1183.922291][T14337] block nbd2: shutting down sockets [ 1183.943890][T14345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.954135][T14345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.967723][T14345] tipc: Resetting bearer [ 1184.016720][T14345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1184.228191][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10112'. [ 1184.418878][T14365] netlink: 'syz.2.10115': attribute type 2 has an invalid length. [ 1184.546797][T14365] syzkaller0: entered promiscuous mode [ 1184.552444][T14365] syzkaller0: entered allmulticast mode [ 1184.579725][T14365] tipc: Enabled bearer , priority 0 [ 1184.603153][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1184.624537][T14378] netlink: 'syz.2.10115': attribute type 2 has an invalid length. [ 1184.693984][T14365] tipc: Resetting bearer [ 1185.176375][T14413] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10125'. [ 1186.367106][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5590 ms [ 1186.375214][ C0] lec:lec_tx_timeout: lec0 [ 1186.379971][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1187.976240][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 1188.300911][T14365] tipc: Disabling bearer [ 1188.357816][T30608] tipc: Node number set to 3145825277 [ 1188.519265][T14432] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10127'. [ 1188.626832][T14432] netlink: 'syz.3.10127': attribute type 1 has an invalid length. [ 1188.645099][T14432] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10127'. [ 1188.657006][T14428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10126'. [ 1188.839947][T14456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10132'. [ 1189.039332][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10132'. [ 1189.111741][T14456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1189.188101][T14469] netlink: 'syz.0.10136': attribute type 1 has an invalid length. [ 1189.443305][T14469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10136'. [ 1189.476835][T14471] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1189.498786][T14471] bond6: (slave bond7): making interface the new active one [ 1189.524845][T14471] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1189.619343][T14461] syzkaller0: entered promiscuous mode [ 1189.626889][T14461] syzkaller0: entered allmulticast mode [ 1189.650528][T14474] bond6: (slave gretap2): Enslaving as a backup interface with an up link [ 1189.670514][T14469] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1190.073739][T14500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1191.393181][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1191.401382][ C0] lec:lec_tx_timeout: lec0 [ 1193.249427][T14501] pim6reg: entered allmulticast mode [ 1193.258939][T14505] pim6reg: left allmulticast mode [ 1193.464663][T14517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10142'. [ 1193.486510][T14509] netlink: 6 bytes leftover after parsing attributes in process `syz.3.10141'. [ 1193.499121][T14516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10143'. [ 1193.709672][T14531] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10147'. [ 1194.073560][T14547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10152'. [ 1194.082638][T14547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10152'. [ 1194.548390][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10159'. [ 1194.580387][T14564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10160'. [ 1194.631052][T14565] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10160'. [ 1194.714967][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10164'. [ 1194.906444][T14585] xt_l2tp: wrong L2TP version: 0 [ 1194.950235][T14590] FAULT_INJECTION: forcing a failure. [ 1194.950235][T14590] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.994807][T14590] CPU: 0 UID: 0 PID: 14590 Comm: syz.4.10167 Not tainted syzkaller #0 PREEMPT(full) [ 1194.994835][T14590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1194.994846][T14590] Call Trace: [ 1194.994855][T14590] [ 1194.994864][T14590] dump_stack_lvl+0xe8/0x150 [ 1194.994896][T14590] should_fail_ex+0x412/0x560 [ 1194.994925][T14590] should_failslab+0xa8/0x100 [ 1194.994946][T14590] __kmalloc_noprof+0xde/0x7e0 [ 1194.994963][T14590] ? tls_get_rec+0xbf/0x670 [ 1194.995113][T14590] tls_get_rec+0xbf/0x670 [ 1194.995143][T14590] tls_sw_sendmsg+0x4ce/0x2360 [ 1194.995204][T14590] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 1194.995229][T14590] ? __pfx_aa_sk_perm+0x10/0x10 [ 1194.995248][T14590] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1194.995321][T14590] ? sock_rps_record_flow+0x19/0x400 [ 1194.995388][T14590] ? inet_send_prepare+0x57/0x270 [ 1194.995414][T14590] ? inet6_sendmsg+0x101/0x120 [ 1194.995460][T14590] __sys_sendto+0x4a7/0x7a0 [ 1194.995485][T14590] ? __pfx___sys_sendto+0x10/0x10 [ 1194.995503][T14590] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1194.995539][T14590] ? __fget_files+0x3a0/0x420 [ 1194.995570][T14590] ? ksys_write+0x242/0x270 [ 1194.995596][T14590] ? __pfx_ksys_write+0x10/0x10 [ 1194.995623][T14590] __x64_sys_sendto+0xde/0x100 [ 1194.995648][T14590] do_syscall_64+0xe2/0xf80 [ 1194.995671][T14590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.995688][T14590] ? trace_irq_disable+0x37/0x100 [ 1194.995704][T14590] ? clear_bhb_loop+0x60/0xb0 [ 1194.995725][T14590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.995742][T14590] RIP: 0033:0x7f1b9959aeb9 [ 1194.995760][T14590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.995774][T14590] RSP: 002b:00007f1b9a4b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1194.995794][T14590] RAX: ffffffffffffffda RBX: 00007f1b99815fa0 RCX: 00007f1b9959aeb9 [ 1194.995807][T14590] RDX: fffffffffffffe94 RSI: 0000200000000300 RDI: 0000000000000004 [ 1194.995824][T14590] RBP: 00007f1b9a4b1090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.995834][T14590] R10: 000000000000c000 R11: 0000000000000246 R12: 0000000000000002 [ 1194.995846][T14590] R13: 00007f1b99816038 R14: 00007f1b99815fa0 R15: 00007ffcc0792908 [ 1194.995876][T14590] [ 1195.236873][T14595] netlink: 'syz.0.10171': attribute type 83 has an invalid length. [ 1195.280132][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10169'. [ 1195.325369][T14591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10169'. [ 1195.482459][T14605] netlink: 56479 bytes leftover after parsing attributes in process `syz.1.10174'. [ 1195.513943][T14605] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1195.692591][T14618] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1195.712687][T14620] tunl0: Caught tx_queue_len zero misconfig [ 1195.834770][T14622] syzkaller0: entered promiscuous mode [ 1195.841039][T14622] syzkaller0: entered allmulticast mode [ 1196.210886][T14660] pim6reg: entered allmulticast mode [ 1196.254852][T14660] pim6reg: left allmulticast mode [ 1196.455166][T14669] bond8: option resend_igmp: invalid value (2878) [ 1196.481294][T14669] bond8: option resend_igmp: allowed values 0 - 255 [ 1196.504027][T14669] bond8 (unregistering): Released all slaves [ 1196.542711][T14652] lo speed is unknown, defaulting to 1000 [ 1196.557651][T14675] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1196.795908][T14688] netlink: 'syz.0.10193': attribute type 8 has an invalid length. [ 1197.039379][T14696] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1197.102415][T14696] bond8 (unregistering): Released all slaves [ 1197.627021][T14719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1198.203565][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 1199.539666][T14681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1199.653949][T14732] __nla_validate_parse: 10 callbacks suppressed [ 1199.653971][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10203'. [ 1199.700170][T14732] netlink: 'syz.3.10203': attribute type 1 has an invalid length. [ 1199.782790][T14740] netlink: 'syz.4.10204': attribute type 1 has an invalid length. [ 1199.799200][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10206'. [ 1199.851613][T14740] bond4: entered promiscuous mode [ 1199.859296][T14740] bond4: entered allmulticast mode [ 1199.865506][T14740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1199.889161][T14740] netlink: 'syz.4.10204': attribute type 4 has an invalid length. [ 1199.923771][T14740] netlink: 'syz.4.10204': attribute type 4 has an invalid length. [ 1200.045985][T14755] syzkaller0: entered promiscuous mode [ 1200.051701][T14755] syzkaller0: entered allmulticast mode [ 1200.105369][T14755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10209'. [ 1200.146410][T14761] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10211'. [ 1200.790084][T14780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10214'. [ 1203.717114][T14764] geneve4: entered promiscuous mode [ 1203.749862][T14766] bond8: option tlb_dynamic_lb: invalid value (5) [ 1203.764850][T14766] bond8 (unregistering): Released all slaves [ 1203.791566][T14765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10211'. [ 1203.820411][T14765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10211'. [ 1203.825671][T14788] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10216'. [ 1203.853294][T14765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10211'. [ 1203.863497][T14765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10211'. [ 1203.921753][T14780] bond0: entered promiscuous mode [ 1203.943104][T14780] : entered promiscuous mode [ 1203.948841][T14780] bond_slave_1: entered promiscuous mode [ 1203.970970][T14780] bond0: left promiscuous mode [ 1203.976551][T14780] : left promiscuous mode [ 1203.984336][T14780] bond_slave_1: left promiscuous mode [ 1204.024583][T14792] sit0: Caught tx_queue_len zero misconfig [ 1204.137517][T14804] --map-set only usable from mangle table [ 1204.566711][T14831] netlink: 'syz.2.10230': attribute type 7 has an invalid length. [ 1204.640304][T14835] syzkaller0: entered promiscuous mode [ 1204.653731][T14835] syzkaller0: entered allmulticast mode [ 1204.667142][T14835] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1204.742839][T14833] lo speed is unknown, defaulting to 1000 [ 1205.041082][T14843] __nla_validate_parse: 28 callbacks suppressed [ 1205.041105][T14843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10233'. [ 1205.185166][T14853] sctp: [Deprecated]: syz.2.10235 (pid 14853) Use of int in max_burst socket option deprecated. [ 1205.185166][T14853] Use struct sctp_assoc_value instead [ 1205.912824][T14887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10242'. [ 1206.639008][T14915] lo: Caught tx_queue_len zero misconfig [ 1206.760440][T14921] netlink: 'syz.3.10250': attribute type 1 has an invalid length. [ 1206.788309][T14921] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10250'. [ 1206.827992][T14921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10250'. [ 1207.168174][T14944] netlink: 'syz.1.10257': attribute type 2 has an invalid length. [ 1207.176971][T14944] netlink: 119 bytes leftover after parsing attributes in process `syz.1.10257'. [ 1207.230612][T14948] netlink: 'syz.2.10259': attribute type 1 has an invalid length. [ 1207.244483][T14946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1207.608294][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10263'. [ 1207.800320][T14971] netlink: 'syz.3.10266': attribute type 10 has an invalid length. [ 1207.808824][T14971] netlink: 55 bytes leftover after parsing attributes in process `syz.3.10266'. [ 1207.826078][T14977] netlink: 'syz.1.10267': attribute type 83 has an invalid length. [ 1208.118001][T14994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10270'. [ 1208.470735][T15013] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1208.513405][T15011] lo speed is unknown, defaulting to 1000 [ 1208.827717][T15022] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001 [ 1212.310731][T15024] lo speed is unknown, defaulting to 1000 [ 1212.331871][T15025] lo speed is unknown, defaulting to 1000 [ 1212.340525][T15032] lo speed is unknown, defaulting to 1000 [ 1212.989797][T15077] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10289'. [ 1213.284042][T15087] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1213.417313][T15089] syzkaller0: entered promiscuous mode [ 1213.430822][T15089] syzkaller0: entered allmulticast mode [ 1213.472203][T15094] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1213.496722][T15094] bridge1: entered allmulticast mode [ 1213.835171][T15112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10302'. [ 1214.328470][T15137] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10303'. [ 1217.644772][T15169] xt_recent: hitcount (262143) is larger than allowed maximum (65535) [ 1217.883348][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1218.299664][T15210] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10322'. [ 1218.314664][T15210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10322'. [ 1218.326884][T15210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10322'. [ 1218.529807][T15230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10328'. [ 1218.624704][T15229] bond6: option arp_interval: invalid value (18446744073709551615) [ 1218.632785][T15229] bond6: option arp_interval: allowed values 0 - 2147483647 [ 1218.654126][T15229] bond6 (unregistering): Released all slaves [ 1218.833673][T15255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10334'. [ 1219.016501][T15263] netlink: 'syz.0.10338': attribute type 1 has an invalid length. [ 1219.021475][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10339'. [ 1219.043733][T15263] netlink: 'syz.0.10338': attribute type 2 has an invalid length. [ 1219.165513][T15272] x_tables: duplicate entry at hook 3 [ 1219.507573][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10346'. [ 1219.584521][T15292] netlink: 'syz.3.10345': attribute type 21 has an invalid length. [ 1219.592476][T15292] IPv6: NLM_F_CREATE should be specified when creating new route [ 1219.613838][T15292] netlink: 'syz.3.10345': attribute type 1 has an invalid length. [ 1219.648515][T15296] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10345'. [ 1219.802042][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10349'. [ 1220.016594][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10344'. [ 1220.166344][ T8648] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.184847][ T8648] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.223077][ T8648] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.251203][ T8648] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1220.821249][T15365] syzkaller0: entered promiscuous mode [ 1220.831609][T15365] syzkaller0: entered allmulticast mode [ 1220.884843][T15366] netlink: 'syz.3.10366': attribute type 1 has an invalid length. [ 1220.981714][T15323] lec:lec_atm_close: lec0: Shut down! [ 1221.067540][T15372] netlink: 'syz.0.10369': attribute type 1 has an invalid length. [ 1221.076269][T15371] netlink: 'syz.0.10369': attribute type 1 has an invalid length. [ 1221.092247][T15371] netlink: 'syz.0.10369': attribute type 2 has an invalid length. [ 1221.117589][T15372] netlink: 'syz.0.10369': attribute type 2 has an invalid length. [ 1221.123430][T15371] netlink: 'syz.0.10369': attribute type 1 has an invalid length. [ 1221.504942][T17654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.532614][T17654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.276532][T15449] FAULT_INJECTION: forcing a failure. [ 1222.276532][T15449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1222.313017][T15449] CPU: 0 UID: 0 PID: 15449 Comm: syz.1.10387 Not tainted syzkaller #0 PREEMPT(full) [ 1222.313046][T15449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1222.313058][T15449] Call Trace: [ 1222.313066][T15449] [ 1222.313076][T15449] dump_stack_lvl+0xe8/0x150 [ 1222.313107][T15449] should_fail_ex+0x412/0x560 [ 1222.313135][T15449] _copy_from_user+0x2d/0xb0 [ 1222.313162][T15449] get_timespec64+0x96/0x1b0 [ 1222.313278][T15449] ? __pfx_get_timespec64+0x10/0x10 [ 1222.313299][T15449] ? kmem_cache_free+0x195/0x610 [ 1222.313328][T15449] __se_sys_ppoll+0xe3/0x2b0 [ 1222.313384][T15449] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1222.313401][T15449] ? __pfx_ksys_write+0x10/0x10 [ 1222.313426][T15449] ? __x64_sys_ppoll+0x20/0xc0 [ 1222.313444][T15449] do_syscall_64+0xe2/0xf80 [ 1222.313466][T15449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.313481][T15449] ? trace_irq_disable+0x37/0x100 [ 1222.313496][T15449] ? clear_bhb_loop+0x60/0xb0 [ 1222.313516][T15449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.313532][T15449] RIP: 0033:0x7f362fd9aeb9 [ 1222.313549][T15449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.313563][T15449] RSP: 002b:00007f3630caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1222.313581][T15449] RAX: ffffffffffffffda RBX: 00007f3630015fa0 RCX: 00007f362fd9aeb9 [ 1222.313593][T15449] RDX: 00002000000003c0 RSI: 0000000000000001 RDI: 0000200000000280 [ 1222.313604][T15449] RBP: 00007f3630caf090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.313614][T15449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.313625][T15449] R13: 00007f3630016038 R14: 00007f3630015fa0 R15: 00007ffe746ff448 [ 1222.313650][T15449] [ 1223.027771][T24707] IPVS: starting estimator thread 0... [ 1223.133416][T15491] IPVS: using max 37 ests per chain, 88800 per kthread [ 1223.375942][T15516] __nla_validate_parse: 12 callbacks suppressed [ 1223.375964][T15516] netlink: 2 bytes leftover after parsing attributes in process `syz.3.10406'. [ 1223.394410][T15516] hsr0: entered promiscuous mode [ 1223.399820][T15516] bridge0: port 3(hsr0) entered blocking state [ 1223.406937][T15516] bridge0: port 3(hsr0) entered disabled state [ 1223.414294][T15516] hsr0: entered allmulticast mode [ 1223.419588][T15516] hsr_slave_0: entered allmulticast mode [ 1223.454878][T15516] hsr_slave_1: entered allmulticast mode [ 1223.476135][T15516] bridge0: port 3(hsr0) entered blocking state [ 1223.482613][T15516] bridge0: port 3(hsr0) entered forwarding state [ 1223.786084][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10411'. [ 1223.848269][T15538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10412'. [ 1223.860344][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10412'. [ 1224.061643][T15549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10416'. [ 1224.075494][T15545] syzkaller0: entered promiscuous mode [ 1224.096701][T15545] syzkaller0: entered allmulticast mode [ 1224.170856][T15554] xt_hashlimit: max too large, truncated to 1048576 [ 1224.193862][T15554] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1224.325040][T15567] ªªªªªª: renamed from wg2 (while UP) [ 1224.395700][T15554] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10418'. [ 1224.434631][T15554] validate_nla: 2 callbacks suppressed [ 1224.434651][T15554] netlink: 'syz.2.10418': attribute type 4 has an invalid length. [ 1224.523923][T15576] netlink: 'syz.2.10418': attribute type 4 has an invalid length. [ 1224.568830][T15578] tipc: Enabled bearer , priority 0 [ 1224.587461][T15578] syzkaller0: entered promiscuous mode [ 1224.599687][T15578] syzkaller0: entered allmulticast mode [ 1224.660851][T15578] tipc: Resetting bearer [ 1224.682327][T15577] tipc: Resetting bearer [ 1224.731285][T15577] tipc: Disabling bearer [ 1224.916376][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10429'. [ 1224.954051][T15591] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1225.005513][T15591] bond4 (unregistering): Released all slaves [ 1225.139349][T15594] lo speed is unknown, defaulting to 1000 [ 1225.245287][T15604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10431'. [ 1225.299224][T15604] netlink: 'syz.0.10431': attribute type 10 has an invalid length. [ 1225.300886][T15610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10434'. [ 1225.335358][T15610] veth0_to_team: entered promiscuous mode [ 1225.356656][T15610] veth0_to_team: left promiscuous mode [ 1225.369178][T15613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10434'. [ 1225.379253][T15604] macvlan0: entered promiscuous mode [ 1225.385463][T15604] macvlan0: entered allmulticast mode [ 1225.398344][T15613] veth0_to_team: entered promiscuous mode [ 1225.422442][T15613] veth0_to_team: left promiscuous mode [ 1225.476752][ T8648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1225.484951][ C0] [ 1225.485075][ C0] ============================================ [ 1225.485117][ C0] WARNING: possible recursive locking detected [ 1225.485211][ C0] syzkaller #0 Not tainted [ 1225.485264][ C0] -------------------------------------------- [ 1225.485300][ C0] kworker/u8:19/8648 is trying to acquire lock: [ 1225.485314][ C0] ffff888093c02f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1225.485493][ C0] [ 1225.485493][ C0] but task is already holding lock: [ 1225.485500][ C0] ffff8880558f6f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1225.485548][ C0] [ 1225.485548][ C0] other info that might help us debug this: [ 1225.485556][ C0] Possible unsafe locking scenario: [ 1225.485556][ C0] [ 1225.485608][ C0] CPU0 [ 1225.485621][ C0] ---- [ 1225.485632][ C0] lock(&hsr->seqnr_lock); [ 1225.485667][ C0] lock(&hsr->seqnr_lock); [ 1225.485688][ C0] [ 1225.485688][ C0] *** DEADLOCK *** [ 1225.485688][ C0] [ 1225.485719][ C0] May be due to missing lock nesting notation [ 1225.485719][ C0] [ 1225.485750][ C0] 13 locks held by kworker/u8:19/8648: [ 1225.485798][ C0] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1225.485925][ C0] #1: ffffc9000402fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1225.485981][ C0] #2: ffff88803f678788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x450 [ 1225.486089][ C0] #3: ffffffff8e54c760 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 1225.486291][ C0] #4: ffffffff8e434018 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xb20 [ 1225.486369][ C0] #5: ffffc90000007ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5a0 [ 1225.486450][ C0] #6: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 1225.486496][ C0] #7: ffff8880558f6f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1225.486547][ C0] #8: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 1225.486597][ C0] #9: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 1225.486699][ C0] #10: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1920 [ 1225.486808][ C0] #11: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 1225.486861][ C0] #12: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1225.486915][ C0] [ 1225.486915][ C0] stack backtrace: [ 1225.486928][ C0] CPU: 0 UID: 0 PID: 8648 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 1225.486948][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1225.486962][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1225.486984][ C0] Call Trace: [ 1225.486992][ C0] [ 1225.487001][ C0] dump_stack_lvl+0xe8/0x150 [ 1225.487026][ C0] print_deadlock_bug+0x279/0x290 [ 1225.487044][ C0] __lock_acquire+0x253f/0x2cf0 [ 1225.487072][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1225.487099][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1225.487116][ C0] lock_acquire+0x106/0x330 [ 1225.487140][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1225.487160][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1225.487177][ C0] _raw_spin_lock_bh+0x36/0x50 [ 1225.487198][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1225.487216][ C0] hsr_dev_xmit+0x237/0x360 [ 1225.487232][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 1225.487249][ C0] dev_hard_start_xmit+0x2cd/0x7f0 [ 1225.487281][ C0] __dev_queue_xmit+0x168f/0x3850 [ 1225.487310][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1225.487387][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 1225.487412][ C0] ? ebt_do_table+0x2665/0x2830 [ 1225.487496][ C0] ? ebt_do_table+0x2665/0x2830 [ 1225.487519][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1225.487557][ C0] ? br_nf_post_routing+0x219/0xfe0 [ 1225.487577][ C0] ? lock_acquire+0x106/0x330 [ 1225.487606][ C0] br_dev_queue_push_xmit+0x370/0x4a0 [ 1225.487625][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1225.487645][ C0] NF_HOOK+0x360/0x3f0 [ 1225.487662][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1225.487678][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1225.487695][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1225.487712][ C0] ? lock_acquire+0x106/0x330 [ 1225.487742][ C0] br_forward_finish+0xd3/0x130 [ 1225.487760][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1225.487779][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1225.487796][ C0] NF_HOOK+0x360/0x3f0 [ 1225.487814][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1225.487831][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1225.487849][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1225.487867][ C0] ? __skb_clone+0x483/0x7a0 [ 1225.487891][ C0] ? br_handle_vlan+0x61/0x530 [ 1225.487967][ C0] __br_forward+0x397/0x540 [ 1225.488007][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1225.488026][ C0] br_flood+0x6ee/0xb80 [ 1225.488047][ C0] ? br_dev_xmit+0x193/0x1920 [ 1225.488069][ C0] br_dev_xmit+0x127a/0x1920 [ 1225.488088][ C0] ? br_dev_xmit+0x193/0x1920 [ 1225.488110][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 1225.488131][ C0] ? __skb_get_hash_net+0x13f/0x2e0 [ 1225.488183][ C0] ? __pfx___skb_get_hash_net+0x10/0x10 [ 1225.488208][ C0] ? skb_network_protocol+0x234/0x3f0 [ 1225.488233][ C0] ? __pfx_passthru_features_check+0x10/0x10 [ 1225.488261][ C0] dev_hard_start_xmit+0x2cd/0x7f0 [ 1225.488294][ C0] __dev_queue_xmit+0x168f/0x3850 [ 1225.488319][ C0] ? handle_softirqs+0x22a/0x7c0 [ 1225.488375][ C0] ? console_unlock+0xd1/0x1c0 [ 1225.488395][ C0] ? ret_from_fork+0x51b/0xa40 [ 1225.488474][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 1225.488506][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1225.488529][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 1225.488554][ C0] ? hsr_addr_subst_dest+0x30d/0xa90 [ 1225.488570][ C0] ? skb_clone+0x246/0x3a0 [ 1225.488590][ C0] hsr_forward_skb+0x157b/0x2860 [ 1225.488616][ C0] ? hsr_forward_skb+0xb3/0x2860 [ 1225.488639][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1225.488658][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1225.488680][ C0] ? __asan_memset+0x22/0x50 [ 1225.488706][ C0] ? __skb_pad+0x405/0x610 [ 1225.488734][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 1225.488759][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1225.488781][ C0] hsr_announce+0x1db/0x370 [ 1225.488801][ C0] ? hsr_announce+0x89/0x370 [ 1225.488820][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1225.488839][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1225.488863][ C0] call_timer_fn+0x192/0x5a0 [ 1225.488891][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1225.488916][ C0] ? call_timer_fn+0xd4/0x5a0 [ 1225.488940][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1225.488970][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1225.488993][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1225.489012][ C0] __run_timer_base+0x652/0x8b0 [ 1225.489036][ C0] ? ktime_get+0x45/0x200 [ 1225.489064][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1225.489092][ C0] ? sched_clock_cpu+0x74/0x440 [ 1225.489150][ C0] run_timer_softirq+0xb7/0x170 [ 1225.489174][ C0] handle_softirqs+0x22a/0x7c0 [ 1225.489193][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1225.489213][ C0] __irq_exit_rcu+0x5f/0x150 [ 1225.489230][ C0] irq_exit_rcu+0x9/0x30 [ 1225.489246][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1225.489273][ C0] [ 1225.489280][ C0] [ 1225.489288][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1225.489309][ C0] RIP: 0010:console_flush_all+0x801/0xb20 [ 1225.489330][ C0] Code: ff ff e8 b2 08 21 00 90 0f 0b 90 e9 85 fc ff ff e8 a4 08 21 00 e8 6f c0 f4 09 48 85 db 74 c0 e8 95 08 21 00 fb 48 8b 5c 24 08 <48> 8b 44 24 20 42 80 3c 20 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 86 [ 1225.489347][ C0] RSP: 0018:ffffc9000402f500 EFLAGS: 00000293 [ 1225.489365][ C0] RAX: ffffffff81a34ebb RBX: ffffc9000402f660 RCX: ffff888028d7bd00 [ 1225.489379][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1225.489391][ C0] RBP: ffffc9000402f610 R08: ffffffff8fef4977 R09: 1ffffffff1fde92e [ 1225.489404][ C0] R10: dffffc0000000000 R11: fffffbfff1fde92f R12: dffffc0000000000 [ 1225.489418][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8edeea80 [ 1225.489433][ C0] ? console_flush_all+0x7fb/0xb20 [ 1225.489460][ C0] ? console_flush_all+0x123/0xb20 [ 1225.489483][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1225.489505][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1225.489527][ C0] console_unlock+0xd1/0x1c0 [ 1225.489547][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1225.489565][ C0] ? _printk+0xdd/0x130 [ 1225.489593][ C0] vprintk_emit+0x485/0x560 [ 1225.489612][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1225.489633][ C0] _printk+0xdd/0x130 [ 1225.489656][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1225.489674][ C0] ? __pfx__printk+0x10/0x10 [ 1225.489696][ C0] ? __cfg80211_get_bss+0x5ad/0x780 [ 1225.489788][ C0] ieee80211_ibss_work+0xdd2/0x10a0 [ 1225.489864][ C0] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 1225.489882][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1225.489911][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1225.489935][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1225.489959][ C0] ? skb_dequeue+0x124/0x160 [ 1225.489977][ C0] ? ieee80211_iface_work+0x1035/0x1340 [ 1225.489999][ C0] ? ieee80211_iface_work+0x128e/0x1340 [ 1225.490023][ C0] ? rcu_is_watching+0x15/0xb0 [ 1225.490042][ C0] cfg80211_wiphy_work+0x2ab/0x450 [ 1225.490064][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 1225.490092][ C0] process_scheduled_works+0xaec/0x17a0 [ 1225.490131][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1225.490157][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1225.490178][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1225.490199][ C0] ? schedule+0x90/0x360 [ 1225.490224][ C0] worker_thread+0xda6/0x1360 [ 1225.490292][ C0] kthread+0x726/0x8b0 [ 1225.490342][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1225.490367][ C0] ? __pfx_kthread+0x10/0x10 [ 1225.490389][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1225.490412][ C0] ? __pfx_kthread+0x10/0x10 [ 1225.490432][ C0] ret_from_fork+0x51b/0xa40 [ 1225.490452][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1225.490502][ C0] ? __switch_to+0xc82/0x1410 [ 1225.490584][ C0] ? __pfx_kthread+0x10/0x10 [ 1225.490605][ C0] ret_from_fork_asm+0x1a/0x30 [ 1225.490639][ C0] [ 1226.368054][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5390 ms [ 1226.368075][ C0] lec:lec_tx_timeout: lec0 [ 1226.500087][ T8648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50