last executing test programs: 2.902139463s ago: executing program 0 (id=9486): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, 0x0, 0x4000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x8080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180005ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x5) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = accept4$unix(r3, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r8, &(0x7f0000000900)=[{{&(0x7f0000000080)={0xa, 0x10, 0x9, @remote, 0x527d3b08}, 0xff98, &(0x7f00000002c0)=[{&(0x7f00000000c0)="c1", 0x1}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e21, 0x80000001, @mcast2, 0x6}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)="2e9226b9cb1cb5a4d36a41208efdf6cc6d2cfa3fda1e810eb74f51f6a99f36585a1873b76fadadfd8647f0a3bcce9600bb3c31cbf254d261a074d57da7c33ac78153e194f70a2c1405bd2fb8028ec6b8c7c66776ceb0a73bc868bfb33a6d111e2329fb62852b36a44560edf722dbd0d66131b59e40bf28e592171c7663e6bfea2496a30416ee45437279f7681cfe4441e0ab7ccd40"}, {&(0x7f00000003c0)="51c5990078d4b176e01ecaad5894098bae3672d88c9a4b8ad50f1cf2d83dac783d234ee24eeb22b9246610778b9b31f4953d"}, {&(0x7f0000000400)="aaa9f80d4c5a36cbb0b514ad90c7802fedd259c52c454a4c0b622017f28e05cc2a6140dfc94c1e7a11e830ae6b77bf46990170f28eaafd585c"}, {&(0x7f0000000540)="a6e83fd33e813b6fb593eee26c93d3b4ff5969b9c07586b93117d40fa68bc49bde6643a24852ad00ad14ec26eee81e0ee9013d2d6ea49eb1925539af65efc6d67ba199a1a877485b5288fcb765c36a44fffc0b493b67d4ab3faf1f971eff4bebd4038119e7536d3f208435c84efe748fa1643be0cb9aa29cdf1826c30ae071db065de8f4932719e1de0b856cdcbf2568b0"}], 0x0, &(0x7f00000006c0)=[@hoplimit={{0x0, 0x29, 0x34, 0x1}}, @dstopts={{0x0, 0x29, 0x37, {0x8, 0x200001f7, '\x00', [@hao={0xc9, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x5, 0x0, "684a9d65eda3beeaeeed79b91de1dad8123cd395"}, @generic={0xf8, 0x0, "ba43714185f44d45963620df77a88b78f5408c86a9c940d099b5ebb4a40333b61c6bc7af0d9bbcc5d4bf5053f483cbb7a81e89fd6c6ecb8bff5061789339b6e2ffa2568bf741d8691bdb7a164a5064c4fafdfce36c5a8cc55d1e65cfca5bea4d27f897959dfeaf80eefa4a295c62bd206e6f83e236308b26b2851581b266d97e739ebf58fba534b180893ea5da820c54196d0997d585208b093f08d401a57f8a3e182cb69a3ccbac21503fad86b2d8f4e3764b85bc7f44200a76cb56dfcdab0b7a95"}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x0, {0x3, 0x0, 0xf, 0x0, [0x4]}}, @generic={0x44, 0x0, "2106c8b0e01319fbb9dee9745642bf40be791f1ba38cb97946c66df02eb2377ba7ec1a9379a2c8b10086e4ba7d5d6a44db77008bf476cb3d3b72dd4b43cab8"}, @jumbo={0xc2, 0x4, 0xc}]}}}, @flowinfo={{0x0, 0x29, 0xb, 0x5}}, @hoplimit={{0x0, 0x29, 0x34, 0x80000001}}, @dstopts={{0x0, 0x29, 0x37, {0x88, 0x0, '\x00', [@calipso={0x7, 0x0, {0x1, 0x0, 0x1, 0x4, [0x100000001, 0x3, 0x5, 0x0]}}, @calipso={0x7, 0x0, {0x0, 0x0, 0x5, 0x7, [0x5, 0x0]}}]}}}]}}], 0x1, 0x200400c0) sendto$packet(r6, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}], 0x6e) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000140)={r10, @in6={{0xa, 0x4e21, 0x1641, @private2, 0xfffffff9}}, 0xfff, 0x9}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000240)={r11, 0x858, 0x10}, 0xc) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 1.924187981s ago: executing program 0 (id=9494): r0 = socket$inet6(0xa, 0x5, 0x8) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000007c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}], 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) 1.726347687s ago: executing program 4 (id=9495): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000580)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x204, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x50}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0xf) sendfile(r0, r4, 0x0, 0x20000000002) 1.710013084s ago: executing program 0 (id=9496): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x2, 0x3, 0xff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@newqdisc={0x24, 0x28, 0x1, 0x70bd29, 0xfffffdfb, {0x0, 0x0, 0x0, r7, {0x3}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44815}, 0x4000080) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f00000006c0)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500), 0x7b}, 0x0) 1.632083084s ago: executing program 2 (id=9498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @dev}, &(0x7f0000000300)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000340)={@empty, 0x52, r2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000050000000000000000400050d8deb4ea144f0000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000080)="f825d43eb1d20b4daffff769752cc4ef76e28f373637f74778adf0edb25f08927dec56406ec6313488bad56bede8c2bf8581818d29c181d7c3fda3850401f423494ee7dbe1cd0c08fb8cd5983b3073c8d6b2fecfd8d3", &(0x7f0000000100)=""/229, &(0x7f0000000200)="dd3867f6316aaf29cfc6116b5850f60a2a", &(0x7f0000000240)="725a51f8da114b965a2c5840a527a4ae8644c7a63f1dd94345f2950aa176d27df4c2e74a3e29cc0695a98f", 0x3, r3}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r5, 0x0, 0xff40) write$ppp(r5, &(0x7f0000000200)="bc72", 0x2) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) 1.443827716s ago: executing program 1 (id=9499): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r1) 1.410214914s ago: executing program 1 (id=9500): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000600), &(0x7f0000000480)=@tcp=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000600), &(0x7f0000000480)=@tcp=r1}, 0x20) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000400), &(0x7f0000000440)=0x4) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x78) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000040)=""/137, &(0x7f0000000100)=0x89) socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r4, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc}]}, 0x50}}, 0x20000010) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind(r5, &(0x7f0000000180)=@in={0x2, 0x4e20, @multicast1}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000140), 0x12) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x403, 0x70bc25, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe068, 0x20}}, 0x20}, 0x1, 0x2000000000000000, 0x0, 0x20006044}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x2, @remote}}]}, 0x110) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r9, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r10, 0x0, 0x2f, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) (async) setsockopt$inet_group_source_req(r10, 0x0, 0x2f, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) close(0x3) (async) close(0x3) socket$igmp6(0xa, 0x3, 0x2) 1.291253066s ago: executing program 0 (id=9501): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x1c, 0x0, 0xfffffb81}, {0xef, 0x0, 0x1}, 0x0, 0x1}}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x0, 0x167, 0x6, 0x9, 0x7ff, 0x7, 0x1, 0x6, 0x13f, 0x5, 0x8, 0x10000, 0x1ff, 0x1, 0x1ff, 0x9, 0x8, 0x5, 0xb, 0x8, 0xd, 0x6, 0x9, 0x8, 0x7, 0x16, 0x8, 0x80, 0x7fff, 0x8, 0x400, 0x7, 0x6, 0x3, 0x16, 0xfffffc00, 0xfffffffe, 0xfff, 0x10, 0x3ff, 0x80, 0x8001, 0xaf, 0x800, 0xd, 0x6, 0x3, 0x7f, 0x0, 0x40000000, 0x97, 0x2, 0x4, 0x9, 0x5, 0x4, 0x8001, 0x4, 0x6, 0x1, 0x7, 0x7, 0x40, 0x0, 0x1000, 0x5a, 0x4, 0x6, 0x2, 0x4, 0x2, 0x5, 0x3, 0xc, 0x80000001, 0x7fff, 0x0, 0x2, 0x2, 0x7, 0x3, 0x1000, 0x0, 0x4, 0x9, 0xe, 0x3ff, 0x8, 0xd61, 0x5, 0x9, 0x6, 0x0, 0x5, 0x5, 0x0, 0x2, 0x6, 0x5, 0x5, 0x5, 0x80000000, 0x9, 0xe, 0xe5ea, 0x7, 0x73, 0x10001, 0x7, 0x8f1b, 0x3, 0x80000000, 0x602, 0xfffffffd, 0x3, 0x7, 0x80000000, 0xfffffff7, 0xfff, 0x4, 0x3, 0x7d, 0x3ff, 0x2, 0xffffff01, 0x1, 0x1, 0x8, 0xffffffff, 0x7fff, 0xfffffff8, 0x7f, 0x80, 0x2, 0x6, 0xa6e, 0x5, 0x1, 0x9, 0x3, 0xb, 0x9, 0x3, 0x30, 0x3, 0x3, 0x3, 0x9, 0x1, 0x101, 0x80, 0xd8, 0x10001, 0x8, 0x3, 0x3, 0x0, 0x200040, 0xfffffff7, 0xc, 0x3, 0x4cdd072, 0x1, 0x9, 0x0, 0xffff301e, 0x90000, 0x0, 0x2, 0x0, 0x606, 0x6, 0x4, 0x1, 0x80000001, 0xfffffffc, 0xd40e, 0xfffffff7, 0x1, 0xd3f, 0xe48e, 0x3, 0x8, 0x3, 0x8, 0x77, 0xf, 0xeca, 0x8d, 0xe051, 0x6, 0x4, 0xab5, 0x3, 0xffffffbc, 0x8, 0x7, 0x16e8, 0x5, 0x8, 0xc, 0xffff, 0x8, 0x8000, 0x328, 0x5, 0x3, 0x515240d2, 0x1, 0x2, 0xe4, 0x4, 0xc1f5, 0x3, 0x9, 0x8, 0x3ff, 0x0, 0x11f, 0x8, 0xe8dd, 0x1, 0x8, 0x2, 0x8c, 0xffffffff, 0x9, 0x4, 0x46e, 0x7f, 0x0, 0x5, 0x1, 0x0, 0x5cd, 0x9, 0x277b, 0x3, 0x3, 0x5, 0x80000000, 0x80000000, 0x4, 0x0, 0x8, 0x8000, 0x100, 0x8000, 0x3, 0x1ff, 0x3069, 0xc, 0x400, 0x9, 0x400]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4815}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELSETELEM={0x3388, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x336c, 0x3, 0x0, 0x1, [{0x1388, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "159c8e6f38b8bab27068b68aa10fbee2e4bcc03a8d33316bb9225cf64b1545f1d95c04491e3e35b0f52c27305c01b2de73d6275716e6bc7e7277fe05c9c90367f3c9cdfa5374d8df56392880467b71300bef17f8c6b1b011b3f6b88048ece74674b4798fc0096cc4fad4aafd717d67371d8ba88c39e00ad3c46240ad38e98923430551ca30715702b65a81ddf29bff53bf4578ba45db9a636fdcec3536979e4b6a4f2a51b0a57a370fee75baa99f24b1d00895f5279a3b92f41ea684dbad6509993593f631197244739784cc8082d406fab8ec9f277289a39709bbe0"}, @NFTA_DATA_VALUE={0x2e, 0x1, "c8313c6b17ed352dd41e2442793b595eae40500f15e8ca9e1f2f924adfb987ba2a8d04597b9496fc3ce5"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x100, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "67778d0becce34e2cd9444d85a00996940e1dd6a3f9740d92b0886e68757faf876dc981e6ca083569d208fe64880bfb5823671831e440898d41b3989f8ee15d0bcb3ecf1e5664c"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x1148, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7b, 0x1, "db1bc923dd486b5ef80d2d0a18364dfaac628e11fefee64623baff2197ab2a5e0a2538cf2db022314f22b9de6a6bb32fdf658bb86e38e564ff79b6d163a9b71fa4ccdb2084cb614d92f7d9fcd22302a3f047727d0a3a2c8ff21e8fcea3f1a84da659cb990da15d678d330edb31df177797125388cc62f9"}, @NFTA_DATA_VALUE={0x62, 0x1, "cf1cb1364c55a0d7d330c7336afcc5328c8a09026d7e18aa065f25335b653f25d1f03a11ffa9fd3499977ec1dcea92eff706dd90ef9ed0acfc27a4595527d52a0fc3ca890f3eb660bc6efc162defb0e79c318ab3f2b9fd19a75031db3161"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x1f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "9aee0b5bd4979476e82e3250a65bbbaf9b21b00404f7ba8b4da0a1e9950e832d329110ff986f620d2af0538482ce9c7d77bf08737ff469a7dd0b1a4b40c50b98b78fae5fd4e1e1a4a685a66518a31bbf0ac522b29f8c51ae0dd34d015bc698a99330a536aa44240779d095389bf68d21a6b172089ed69b05318ab3c622eecc813bc247e0799b100cc3aa9bc64a661c0fb882c856017f00a95c4c15a89df60e5455321101fa"}, @NFTA_DATA_VALUE={0xe5, 0x1, "d35053aaa44c253879f34290e35036b459a19795114f7c2cba54f55ce5a4d8706ad026b6175040a48460887edb0792645f9ecc262821dfe6e5f2c7425b309e77310415cfe88adea3c22f7220c1ab29f46533815db6e4990e54ad7b7d836135ca6472d12e159783727f4d149e118728884863d09c89f9254e0dd9d3d588220f2fd6bc8ef62cbcd8cccb5f8018da6b19917b9ef41dbfdb36e2b3cbb7e7d38d9116daf91f137530563f21af1b3c34941f56ad6d2ccc92761bd9bfa7b440220242005527d9f49074f9058d1d8c39338d38f664e3e52a2de9a123347311065cd721eb4e"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x484, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x470, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "371df086a23a927e4cb7363c126335b6d4df98c086a8e29b19786adc811dcef464841ff8a1eee7ff2335fc49865bb003b21328dd0b5183957f7784ee22866bae971c1a91d7359005c35ed46b136e"}, @NFTA_DATA_VALUE={0xe9, 0x1, "fcd708b45f14d960e2702daea0493a67baee72b77b107a51d34d1b004035f850d52e6b86c877e4d55b1166d5ae8741927e1e164526d7b1a0b356befaf077dd1c895301c0f93aa1ae4d63014e804a8bdf6dd4e6f64a788f19936174486c616ba7960f3cc092c4ae643bb214b844922463c670fd0828db67b32720ddb761408dc2a42b9664aa06262285f99dfd809a6323e0bc78338063a1edf114a229dcb8e468f16c2c14d31e0a4c6b8a12e7ed7b1ea4e97249a34cd47fe09907b1bba0e52ac3d4a3965816f64b66e1490d79dadc586955bf43d9283b1f1c4f8abba58f6ab5aaab6810d5cb"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "1417b3077d1568c1e5f0ed9fc7d0285b5e0360ff995c636f3f8499701c13900a4c8d5ff67d8da1115c25dad0c13fff913ddfc72579df71ef538a8ed3f6ddbce26c4ff891879848853d4ba77b93ba571690e2c480521092746f42f6b4d3d2086753015d2928e70ff0c5efc3a071fb810eeea85c32d7bbff2857551a4dec0ed3cda5b2d58d0235fa"}, @NFTA_DATA_VALUE={0xf6, 0x1, "7ae8245ad7c3ffee50591d155a057cb55c5b6c503f3ed8cfa5e05a10b045757ecb664b27494e608c8c3a2e23210f3efb96df766fdf4a9bba59ae66fbc2e76cc429cb6f4ca76b456c6f6699b30d69915fbaa329035624c03f84fdcdabec41d795fa31972889619bfc9672abc43401e5037803b05ecd05841ae6c8be089ec71ba239fe1f3f4a54c66ab3cb3da07eb07447aa6b42d4c9e0e21c6750c7f45e7d3b5e0313b33f49d7e5522e9154258502e62244d57e08c1cdeaabe58d090b6e1b660887e2804041bb0cff435518ba5731a4539c6eb62b6942a7f07fbf33bda9a9b0a3468a8478cd52307743e84f25be4098cfdc81"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "5288e4c030ea296906eceff33ae15efc851162f09ed968a13a73519b52a6e5e059d23a44ee4cbc7c57db84ba8bf810d6ad8a13a0457ec04885d5aef89f0851d79272bb981010a689858b985a8d757673caf03f096de734"}, @NFTA_DATA_VALUE={0xf1, 0x1, "238ca54316d4e2adda8590543344c10e04b532d6cc250e7e5f26e2d8eb574d1b4f84deae9f8ccca268a432629bbf399115168ab0360f772ca619f9e706348b84947df3e5306cd80de032a90829a36fd9df57b008684c277aa512fc587bb8bd2d880d38c9846433d03b4a85d6c2e6db0ef797f448392268043b08a7f6f8747bf8cdba8c69dc0353effeb8571ac5c43450d611d7c4d0bd18544575008f02d8ce6ebe294ef9f796b52ce4373e6cde7628e4c04a9de8da202d466d35d1e49aa6460acac3237cd721f4650e1b5f560e455902a6a7420981ba4934b33c801cc9d606c97aa16c08844512c99dd3da9571"}, @NFTA_DATA_VALUE={0x2b, 0x1, "6595a7b5499dfa08257805807ee84c3972b841982783413a93e7a6a9443e63cb7d13bbb53dbe8a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x1500, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x168, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xd}]}}}, {0xdc, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xac, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "a5dc23be385253a4756559a8250105aae81d764501c46675373615fd353406cb6d57e12823b7c50ffa54cfdd7b74f97380c5a3985a727c19"}, @NFTA_DATA_VALUE={0x52, 0x1, "1e244cc2d6c07936bb730073387c6a9b0daf4955d7a0730601f4156c4061dde4d24bd4a9e07290247cade582f94f291ebc9db858a901fa3ae2a68a8e8ba31d0cfb8ea6039fddfdea070bcfcc2040"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x1388, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x80}]}}}, {0x174, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x164, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFTA_BITWISE_MASK={0x140, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x103, 0x1, "3b4d59c440b3a74e969f808acd748263ec5d0cab42733e4521cef64ff4a5706e6826c1c8a1e0cf511fa130428681726b9b3ac1e56dab84e2aac022aa6473ec5b6cb792a80ec7403cf9484229e980277daf5edd74a28144050a00c10e03820af0a420f88b2e4fc912b7ce94587ee75add018d6d6d2ee6c9cb84391b5ea2126f4bc1912bd4fc2bbaf6c76b07c5f802ca71fb795330242623dd2a3c150c4b54ac1535c6d71050c8800693b38640b3c59f078c9771d6edf2debf260d4c5d18ff44d17efacbb26b0546bb9d0a3cba23d2b059ab3f2bcbcf014df132a653ff75dfc21b0014f0e0a903fb9ae7cfba934352d5e2a65463af6142aa7a47736c4c81ec28"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x1070, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x105c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1058, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}, {0x60, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x48, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x37, 0x1, "ad69cada534a3e3a09427d279d04fd93930f13874b9a4f96fcfa341124bdbbf2efc098c0133ed9692962abb47c3879fa012632"}]}]}}}, {0x50, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x468, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3d0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xac, 0x1, "f0ab641be98ead00653d981ca1d920bcad0d83342e332d1ab7ac73528742348da01686a8b90638cb5886b6e27d7f3f0da6e8f74091de8e0f0741c56e9e2d79ddfb46a653017285cb52d66866829959482790a57b383fef820256da24f1d95ef971efe2f224ed9502a117a4634193870ed54800cf9a687625834efe9a964b510532c06784077d2ab4826a2c72511d55b84bafcc6a4c0bbeeeecdf0312747665aa6aa233c041f10893"}, @NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xcf, 0x1, "72177bec21d52df3da05edae2bcad9d4e94176e4f72720755280f9100585197ec2da78781dfd9bb619d8e64cfb7bb2a333457abeb79294661e0ab09a6272aed7f07090fd3b0ddd3b2acf0a399fe844ba4ba62b8dac0cb71c9376c5fdaf728f19697b41b0890711f4061081e1bc65796da1b3b5128b93f2da6008d3bbd4aced44c8036dcff9ac3308a287fc3af30c7bfc1b3f485272542d99c5c6273f78d9fdd9439effb9019e94607b457f3f74ccaffbea594410b94797cb81641a1a55fdc3208e1a4bff185e12753587d7"}, @NFTA_DATA_VALUE={0xf3, 0x1, "67c05ebb20f97cb39b99d814281673f3b02eda41c4890c7ecb3fbb2d8d114dd659b46ab78837d2dbf3dbf0b0cfb8676b830a30eeb119428c7a72543d192ffc65da8ea1706fd4c78a2556f3e0eb325ddc666b2a66615393c770d5b15bb55283cace996664fd01ad2a8f3e91b79dae72e4254e0edb85ea4dff1d110473e3a58b499a143e8d2aeb4f96c9e64dc7da82ef34356a418965a24527e3e48a02ef5c00687fed8acf07a6efda2dd98bc87465f8954aafec667674c934d7219be14973b0473d48305c6c1684bae8cde624280cae7b39e0641eabf14fa64ea5987308967e24471c6e7e28ab9b5cfc71904cef93dd"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY={0x30, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x14, 0x1, "09677ffadd93d4e571830d8f216320d8"}]}]}]}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0xa01, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffe}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x342c}}, 0x0) 1.285594908s ago: executing program 1 (id=9502): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 1.202090928s ago: executing program 1 (id=9503): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)=""/59, 0x3b}], 0x2) sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff, [0x8000]}}) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0xfc82, 0x6, 0x208e, 0x8, 0x9c000, 0x8f}, 0x1c) 1.182378427s ago: executing program 0 (id=9504): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='+\\%\x00', 0x80, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x55848c4d]}, {0x8, 0x0, 0x0, 0x7fffffff}}, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x3}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8a, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xb, 0x100, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x80, 0x1}}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)=@newtfilter={0xa4, 0x2c, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {0xe, 0x10}, {0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x40, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'bridge0\x00'}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xc}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xc}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}, @TCA_RATE={0x6, 0x5, {0xcf, 0x3}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6e}}, @TCA_RATE={0x6, 0x5, {0xd2, 0x1}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x4004011) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000680)={r2, 0x1, 0x6}, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000004) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000007c0)) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x3c}}, 0x8810) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) (async, rerun: 32) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a00), r0) (rerun: 32) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r7, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004000) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000c40)={&(0x7f0000000b00), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r8, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x58}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x10}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x26}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xdb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x44840}, 0x0) (async) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000cc0), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r9, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x8}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x20008010) (async) socket$inet_smc(0x2b, 0x1, 0x0) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000e00), r0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r10, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x153583a0af511817}, 0x4048044) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f40), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000001140)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f0000000f80)={0x158, r11, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4c090}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x11) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000013c0)={&(0x7f00000012c0), 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r12, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000400}, 0x4000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001480)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000001580)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, r13, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x100, 0x58}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x2040005) 1.078948336s ago: executing program 2 (id=9505): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd70001100ffff07000000"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000003b80)={0x0, 0x28, &(0x7f0000003b40)={&(0x7f0000000080)={0x14, r8, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x0, 0x70bd25, 0xe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x2404800c) r9 = socket$inet6(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r10, 0x6628) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x26, 0x0, 0x8}, 0x28) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r9, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.069058975s ago: executing program 4 (id=9506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x50, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) r3 = socket(0x1, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) r6 = accept4$unix(r3, &(0x7f0000000800)=@abs, &(0x7f0000001900)=0x6e, 0x80000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r8}}}], 0x20, 0x20040000}}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001940)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000001a40)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r11, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffe40, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0000000014000000000000000100000001"], 0x38, 0x400c0}}], 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000001c00)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000004c0)="c4c2c569b05e8b2e9ec1cde875446f73bf82be5234bb26f0752b2e63ae8f02a08c6fe2df379daca087286d70a8c85218124fb87de41109122344c22f54bd259833cafe3154d79382210c568a5df86b222da3c23ce55f56c0071baaa12c0e31d7edec89c863958996eea212e90a11f27515a15b2e3f8b374103bc7d8fce46c3b9b9207e293ecd719e9a928889119aff8b320b1d1cd9ed35e038b7d3e22998c61169aeb6f30a681e8c5a602df6077519a48695c6ab7277261f277a4aa95a777dab171c0e7f15602475b6", 0xc9}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000340)="de3487", 0x3}, {&(0x7f00000005c0)="b0c2cfc5efab45c2e088e71d7073c7cbfa31b83d297b007903ca6518bea8f6e493790182ea8723de47814b4f62dc901cd4ba459cbd566bc1bcf99e03697c09c423b504ebe41d2d36bbe8270eb406ac529d00883c0a4995012ff1b082919ecfa24f59a8220f2d6af0122e9e02f77823eb0c0a90e2042fea18110ffcaa", 0x7c}, {&(0x7f0000000640)="67126ff6e8dab0db612a55a3625f5d89ab7df0332cbadc027e99", 0x1a}, {&(0x7f0000000680)="3b5df98e86cdbd888942365444ca9e0be673aa7ffcd16a3e0da8566a489be5bdc57ffa4ebe2f7510dee4cef5b80bed30d9a89ce91a79cf6dc1fc815fc20371f6a1a19d75c98432a498c62e65c4f97e318da64b6d5fda68fa633a6909a165a6901a3c8317cc1fa602d1f44257da7706e7f7d7ee3b067a322c81fadaf60735a4b0c5d6d6ddd25bc23b2cb15934a7cf", 0x8e}, {&(0x7f0000000740)="77426da7611f0fca83158c44cb4521dcd5a855c4b5eccc1ae80030d55691dc11ba090b", 0x23}], 0x7, &(0x7f0000001a80)=[@rights={{0x30, 0x1, 0x1, [r2, r0, r2, r6, r0, r0, r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r2, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r14}}}], 0x68, 0x80}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001b00)="735d15053203cb085e08cb3b1e39d2e462bf81e4b86d5be3d1c2dd21799aeb47e923fe5d977b2e8f1886375ac92bfe9045f4a060e6b5d1ae2bae24dec2a612bb491b75723229093d3b6c85da24eb1ddd43a7af2088d1e3d748604b9bfefd68a5ec754b181ccfdcf37139c2157a67b53ed5ecf3090702cd13cd7e4550460e4b2cc98756f6964f557c151c180d6d9e156d51eab91bb0e6b4f4c88cab0d1dd1f01ecbb8aeb96bcf3b403f07", 0xaa}], 0x1, 0x0, 0x0, 0x50}}], 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) bind$phonet(r3, &(0x7f00000001c0)={0x23, 0xd, 0x7f, 0x6}, 0x10) socketpair(0xf, 0x80004, 0x5, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) 933.142217ms ago: executing program 2 (id=9508): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd000000000010003c0002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00002400128009000100626f6e640000000014000280050015000000000005000100010000009cd14606f3784049971a0718b56dc5bc98598d73dc"], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 902.141846ms ago: executing program 0 (id=9509): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x17, r4, 0x1, 0x40, 0x6, @broadcast}, 0x14) getsockname$packet(r3, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x20040805}, 0x4000080) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', r4, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f00000003c0)=""/177, 0xb1}, {&(0x7f00000006c0)=""/136, 0x88}], 0x4, &(0x7f0000000780)=""/233, 0xe9}, 0x20) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000280), &(0x7f0000000000)=r8}, 0x20) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r8, r10, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r1, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(0xffffffffffffffff, 0x0) r11 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r11, 0x0, 0x0) accept4$inet(r9, &(0x7f00000004c0)={0x2, 0x0, @multicast2}, &(0x7f0000000500)=0x10, 0x800) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) 713.078722ms ago: executing program 3 (id=9511): socket$inet6(0xa, 0x5, 0x6) (async) socket(0x10, 0x3, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x10, 0x1b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, '^,}-\x00'}]}, 0x20}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x24}}, 0x20000804) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) (rerun: 32) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x10) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r5) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r6, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3ff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xea2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000600)={0x9, 0x8c, 0xf, 0x401}, 0x8) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa0, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) r8 = accept4$rose(0xffffffffffffffff, &(0x7f00000007c0)=@full={0xb, @dev, @remote, 0x0, [@bcast, @rose, @bcast, @default, @bcast]}, &(0x7f0000000800)=0x40, 0x80000) ioctl$SIOCRSSL2CALL(r8, 0x89e2, &(0x7f0000000840)=@default) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) (async) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc0385869, &(0x7f0000000a00)={r7, &(0x7f0000000900)='%\x00', 0x41, &(0x7f0000000940)={@align=0xe00000000000, {0x4, 0x7, 0x90, 0xc01}}, 0x7, &(0x7f0000000980), &(0x7f00000009c0)}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, 0x0, 0xaf2d0dd5156c06af, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) (async) getpeername$inet6(r11, &(0x7f0000000b40)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000b80)=0x1c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000c40)={'sit0\x00', &(0x7f0000000f00)={'tunl0\x00', 0x0, 0x700, 0x10, 0x6, 0x3, {{0x16, 0x4, 0x1, 0x6, 0x58, 0x65, 0x7, 0x99, 0x29, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xd8, [@local, @empty, @broadcast, @local]}, @noop, @lsrr={0x83, 0xb, 0x20, [@local, @dev={0xac, 0x14, 0x14, 0x37}]}, @rr={0x7, 0x23, 0xaa, [@dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @dev={0xac, 0x14, 0x14, 0xf}, @local, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c80)={'syztnl2\x00', r12, 0x4, 0xf5, 0xff, 0x0, 0x0, @empty, @mcast1, 0x7890, 0x8000, 0x7, 0x37a6}}) (async) ioctl$TUNSETDEBUG(r11, 0x400454c9, &(0x7f0000000d40)=0x40) (async) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x44, r13, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x67}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x24}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008084}, 0x6000040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 697.526811ms ago: executing program 4 (id=9512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd907, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x9, 0x0, 0xff, 0x11002, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x1}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=r0, @ANYRES64=0x0], 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe24}, 0x48) 572.950898ms ago: executing program 3 (id=9513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0xe, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="c0d11636", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8}, 0x94) 409.329602ms ago: executing program 3 (id=9514): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x14}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_IFALIASn={0x4}]}, 0x3c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000a00)="eda55bcd35b6de17b36efc4229163ce28b38f8dcedd7616b02178c7aa815f84c20e894997cc4813a6e3334e1b724ed1c9c4d4d52926482b75c94d5d8f970282badbcd5710fcc58b4fee4e9f315f4f6d1e123c10c2c6b66557a666320700ac2ae9c491646f8e8e3abb3b3c954d799db165829a704b45164aceb418b57b6faee091f01beaf733a96eb4c", 0x89}, {&(0x7f0000000180)="6869d28a08101c707fe348b63d13070d", 0x10}], 0x2, 0x0, 0x0, 0x20000000}, 0x0) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/211, 0xd3}], 0x1, &(0x7f0000000900)=""/211, 0xd3}, 0x9}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000180)) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 403.535861ms ago: executing program 4 (id=9515): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, 0x0, 0x4004000) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4008080) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001040)}, 0x100) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x9, @empty, 0xfffffff7}}, [0x7, 0x2000008, 0xc, 0xffffffff, 0x1, 0x219, 0x5, 0x8, 0x7, 0x200, 0x8, 0x7, 0x0, 0x2, 0x9]}, &(0x7f00000002c0)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={r2, 0x5}, &(0x7f0000000380)=0x8) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendto$inet6(r4, &(0x7f0000000480)="e02a7bb6e7da72697b2cdbbcff42a02b0f8bb691348acb814839e600969dac7c83d0fbc38c1ce536bc54c8ba122e63c7063ab3697ca58e7d", 0x38, 0x4000000, &(0x7f0000000280)={0x1d, 0x5e23, 0x20000004, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc52}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000), 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000001c00)=ANY=[], 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000005c0)={{0xffffffffffffffff, &(0x7f0000000400)='ethtool\x00', 0x40100, &(0x7f0000000440)={@align=0x5, {0x6, 0x77d, 0x9b98, 0x8}}, 0x7, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000580)}, {[0x10, 0x9, 0x8, 0x2]}, 0x9, 0xd9, &(0x7f0000000680)=""/217}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000780)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 296.031932ms ago: executing program 2 (id=9516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b3e27bd7000f6dbdf25200000000c002d28297fb04dbf8005000100020000000c0006000100000001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010010000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffc88000340000000040900010073797a30"], 0xd8}}, 0x0) 289.943331ms ago: executing program 3 (id=9517): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 249.593678ms ago: executing program 1 (id=9518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r2, 0xffffffffffffc000) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x85}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'batadv0\x00', 0x4000}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00010000000000000000000a001000c3"], 0x1c}}, 0x0) syz_emit_ethernet(0xaf, &(0x7f0000000200)={@local, @empty, @void, {@x25={0x805, {0x1, 0x2, 0xf3, "17d421ceb9e93ae7bf7d743ff6115055ca92d74ce96efd7dce0a9bb5647365197de9e584f1cd455a678671cc40490145e034bcf1d0521a3a7e2ec06cd0a37f072ef8f14874188dcdf84927c16de438d8413119fe3c0e7054bf163a70aa0ef3f6ac229c950c028db1983e94aeff4f573dbccc2f2adb62d2cae3f044463d780ae2d54ef6d1c16a474924d51af453dcd1b16aec2a326487775777d19b14d45d"}}}}, 0x0) 248.825328ms ago: executing program 3 (id=9519): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_GATEWAY={0x8, 0x5, @local}]}, 0x24}}, 0x20000050) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0xfffffffffffffdff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_NUM_RX_QUEUES={0x8}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) socket(0x11, 0x3, 0x0) (async) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0xfd}, [@RTA_GATEWAY={0x8, 0x5, @local}]}, 0x24}}, 0x20000050) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0xfffffffffffffdff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_NUM_RX_QUEUES={0x8}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) 219.762735ms ago: executing program 2 (id=9520): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @local}, @local, @mcast2, 0x7, 0x5, 0x6, 0x480, 0x5, 0x800002}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x3, 0x0, 0x8000, 0x69a6377be0bf9904, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value, @void, @value=r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000014c0)="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", 0xff9}], 0x1}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newtaction={0x150, 0x30, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{0x13c, 0x1, [@m_ipt={0x34, 0x7, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x104, 0x3, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x5, 'mangle\x00', 0x8, 0xe3b}}]}, {0xad, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4cba66c2cb8027195714c33e2b2dd00a1ac21a0136f9dce38751e61106037d11a50f191c9c43e9712bac48b8926c40a45232fe7f5551fe5e2"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x150}}, 0x40c1) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) bind$tipc(r8, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x55459d45c9412840, {0x42, 0x1, 0x1}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) ioctl$NILFS_IOCTL_SYNC(r4, 0x80086e8a, 0x0) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) shutdown(0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}], 0x2}, 0xb}], 0x2, 0x10, 0x0) close(r3) 156.879148ms ago: executing program 4 (id=9521): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r1) 142.444688ms ago: executing program 3 (id=9522): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="0400000009000000000000000800"/32], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) unshare(0x16020500) (async) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x28}}, 0x24000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYBLOB="020000000a0001"], 0x30}, 0x1, 0x0, 0x0, 0x68eaadec908dc23b}, 0x20024090) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x121900, 0x0) (rerun: 32) close(r5) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x4ab41, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xa}, 0x10) (rerun: 32) socket$packet(0x11, 0xa, 0x300) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000040)="259a53f27137b5a76d2688f54c65", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1200408}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x100) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000c1401002cbd7000fedbdf1b0800010002000000080003000000000008003d000300000048e50af2e348cc2c452e4355327a109199641dd3a4a49847bdfc214241a87cdbfff27891b25d9d56993a685747dafe10e345c6a4e81cb5186cef368f610fd39dffeea7e6043ec1106475476c67342e544b25cfca03c278ef04de3628026312ec2971380504a5ed141cde54cebd920b2b9899284190f32d45374d49368ca14643d80a015920bbe94b1616c1847b0ec3ba4231c72941760a49652a0112453b30eff1327a928caac949"], 0x28}, 0x1, 0x0, 0x0, 0x24044041}, 0x4080) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000340)) (rerun: 64) writev(r8, &(0x7f0000000280), 0x1) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1800002, 0x96030, 0xffffffffffffffff, 0xd0fb8000) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000f7000000001dfa69000000080001fac1b3fd58943c26f0df5fc1f04705b0042799250db94bdbc89a27e5d6423efb8637184f977281f4fb67cc7959c637266e1a839616876d3574900798d54fa3d7b8bd8151f7757fcd0eec9fee5d8168b3117db0aee73be7eb7aa895cd89722fd345c2e8130cea5266c37b34733879c61e6c92931e16594f4c79d0a1d15b07019d0e43ee85a37f30c081f3ffab47b6246ecd6397859f285b155c33a9f95b3ec6e29cc249b5872a44f7aea3e49b562daf61030014a20abc"], 0x28}}, 0x0) 117.460358ms ago: executing program 1 (id=9523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, &(0x7f0000000100)=0x6e, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000340)=""/229, &(0x7f0000000440)=0xe5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x35, 0x20, 0x6, 0xfffffffe}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000300000018110000a23f50ac3a1b5905f9e2ad714663b38a06b345bc5f665557622b971b27d5d41d032ccd90ce3597648e820613342791d97ff3c1697dfff5f6abcd074dc33523092955bdb7dea0ae868346f264110f08a1455d480b33557fb08094fe1648e94ecf16d7dc508c88c4a4d3fcb37ef2da868397a47f2edd3d09da190040a7861022293411fee1461a", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000002000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0270000000000000380012800b0001006272696467650000280002800c00230002060000000000000500250000000000050024000000000005002a"], 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x410) 67.315112ms ago: executing program 4 (id=9524): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380"], 0xbc}}, 0xc0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a1401082cbd7000fddbdf250900020073797a300000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002900)=""/4096, 0x1000}], 0x1}, 0x7fffffff}], 0x1, 0x120, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380"], 0xbc}}, 0xc0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a1401082cbd7000fddbdf250900020073797a300000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) (async) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002900)=""/4096, 0x1000}], 0x1}, 0x7fffffff}], 0x1, 0x120, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) (async) 0s ago: executing program 2 (id=9525): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x64, r1, 0x1, 0xffffff80, 0xfffffffe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x8c0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x3b0, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x308, 0x378, 0x378, 0x308, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xff, 0xff000000], 'vlan1\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [0x0, 0x0, 0x0, 0x52f1fc93a83a0023], [0x0, 0x0, 0xff000000, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x16, 0x81, 0x4, 0x8}, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x0, 0x0, [0x5, 0x1, 0x5, 0xb2, 0x8, 0x4, 0x4, 0x8000, 0x29d6, 0xa5c, 0x3, 0x6, 0x6, 0x0, 0x9e, 0x2], 0x6}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x7c, 0x0, 0x424, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008804) kernel console output (not intermixed with test programs): butes in process `syz.2.8444'. [ 961.239243][ T6597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 961.489338][ T6635] bond7: option lacp_active: invalid value (8) [ 961.499070][ T6635] bond7 (unregistering): Released all slaves [ 961.570315][ T6646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8448'. [ 961.808496][ T6657] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8451'. [ 961.829977][ T6654] gre0 speed is unknown, defaulting to 1000 [ 961.869902][ T6668] syzkaller1: entered promiscuous mode [ 961.878285][ T6668] syzkaller1: entered allmulticast mode [ 961.914199][ T6669] syzkaller0: entered promiscuous mode [ 961.925634][ T6669] syzkaller0: entered allmulticast mode [ 961.961501][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8452'. [ 962.028847][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8455'. [ 962.064675][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8455'. [ 962.260515][ T6685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8458'. [ 962.296075][ T6654] lo speed is unknown, defaulting to 1000 [ 962.345785][ T6688] gre0 speed is unknown, defaulting to 1000 [ 962.405151][ T6690] netlink: 'syz.4.8459': attribute type 4 has an invalid length. [ 962.413369][ T6690] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8459'. [ 962.445267][ T6692] netlink: 'syz.1.8460': attribute type 10 has an invalid length. [ 962.459671][ T6692] dummy0: entered promiscuous mode [ 962.465129][ T6692] team0: Device dummy0 is of different type [ 962.724543][ T6688] lo speed is unknown, defaulting to 1000 [ 963.089967][ T6709] netlink: 'syz.1.8464': attribute type 30 has an invalid length. [ 963.285921][ T6721] xt_TPROXY: Can be used only with -p tcp or -p udp [ 963.351707][ T6725] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8469'. [ 963.364297][ T6725] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8469'. [ 963.618221][ T6727] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8470'. [ 963.639423][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8470'. [ 963.876784][ T6735] gre0 speed is unknown, defaulting to 1000 [ 964.328937][ T6759] ip6t_rpfilter: unknown options [ 964.465088][ T6765] netlink: 'syz.3.8480': attribute type 1 has an invalid length. [ 964.483672][ T6765] macvlan2: left promiscuous mode [ 964.545459][ T6763] netlink: 'syz.4.8479': attribute type 4 has an invalid length. [ 964.588294][ T6760] gre0 speed is unknown, defaulting to 1000 [ 964.599297][ T6735] lo speed is unknown, defaulting to 1000 [ 964.974274][ T6789] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 964.982489][ T6789] netlink: 'syz.4.8488': attribute type 1 has an invalid length. [ 965.146563][ T6789] bond12: entered promiscuous mode [ 965.153551][ T6789] 8021q: adding VLAN 0 to HW filter on device bond12 [ 965.244060][ T6789] bond12: (slave bridge9): making interface the new active one [ 965.252355][ T6789] bridge9: entered promiscuous mode [ 965.260524][ T6789] bond12: (slave bridge9): Enslaving as an active interface with an up link [ 965.271703][ T6790] gre0 speed is unknown, defaulting to 1000 [ 965.282356][ T6760] lo speed is unknown, defaulting to 1000 [ 965.747326][ T6803] gre0 speed is unknown, defaulting to 1000 [ 965.956615][ T6803] lo speed is unknown, defaulting to 1000 [ 966.087918][ T6790] lo speed is unknown, defaulting to 1000 [ 967.550543][ T6846] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 967.863022][ T6857] dvmrp12: entered allmulticast mode [ 967.889785][ T6856] dvmrp12: left allmulticast mode [ 967.906232][ T6866] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 968.139337][ T6882] veth1_macvtap: left promiscuous mode [ 968.287878][T31770] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.296419][T31770] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.309147][T31770] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.342852][ T6884] batadv0: entered promiscuous mode [ 968.349305][ T6884] debugfs: 'hsr1' already exists in 'hsr' [ 968.355061][ T6884] Cannot create hsr debugfs directory [ 968.361331][ T6884] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 968.372931][ T6884] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 968.392853][T31770] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.564860][ T6896] gre0 speed is unknown, defaulting to 1000 [ 968.662468][ T6902] __nla_validate_parse: 7 callbacks suppressed [ 968.662488][ T6902] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8511'. [ 968.715011][ T6902] syzkaller0: entered promiscuous mode [ 968.741027][ T6902] syzkaller0: entered allmulticast mode [ 969.096235][ T6896] lo speed is unknown, defaulting to 1000 [ 969.185067][ T6908] pim6reg1: entered promiscuous mode [ 969.193202][ T6908] pim6reg1: entered allmulticast mode [ 969.464437][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8517'. [ 969.515258][ T6923] bond10: entered promiscuous mode [ 969.526097][ T6923] bond10: entered allmulticast mode [ 969.531917][ T6923] 8021q: adding VLAN 0 to HW filter on device bond10 [ 969.598700][ T6913] dummy0 speed is unknown, defaulting to 1000 [ 969.656576][ T6913] dummy0 speed is unknown, defaulting to 1000 [ 969.709303][ T6913] dummy0 speed is unknown, defaulting to 1000 [ 969.876833][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8523'. [ 969.957150][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8523'. [ 970.058193][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8527'. [ 970.131610][ T6913] infiniband syz2: set down [ 970.136371][ T5889] dummy0 speed is unknown, defaulting to 1000 [ 970.150863][ T6913] infiniband syz2: added dummy0 [ 970.289032][ T6913] RDS/IB: syz2: added [ 970.293115][ T6913] smc: adding ib device syz2 with port count 1 [ 970.308127][ T6913] smc: ib device syz2 port 1 has no pnetid [ 970.318062][T18004] dummy0 speed is unknown, defaulting to 1000 [ 970.325329][ T6913] dummy0 speed is unknown, defaulting to 1000 [ 970.612169][ T6972] ipvlan2: entered promiscuous mode [ 970.635305][ T6972] bridge0: port 1(ipvlan2) entered blocking state [ 970.642806][ T6972] bridge0: port 1(ipvlan2) entered disabled state [ 970.650342][ T6972] ipvlan2: entered allmulticast mode [ 970.656073][ T6972] bridge0: entered allmulticast mode [ 970.664006][ T6972] ipvlan2: left allmulticast mode [ 970.669397][ T6972] bridge0: left allmulticast mode [ 970.760037][ T6913] dummy0 speed is unknown, defaulting to 1000 [ 970.877508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.952973][ T6984] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8535'. [ 971.040875][ T6986] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 971.054220][ T6986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8537'. [ 971.149750][ T6990] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8539'. [ 971.182305][ T6913] dummy0 speed is unknown, defaulting to 1000 [ 971.252691][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8540'. [ 971.372754][ T6999] tipc: Enabling of bearer rejected, failed to enable media [ 971.568530][ T7010] gre0 speed is unknown, defaulting to 1000 [ 971.645081][ T7015] hsr0: entered promiscuous mode [ 971.665360][ T7015] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8546'. [ 971.759380][ T7020] hsr0: left promiscuous mode [ 971.764276][ T6913] dummy0 speed is unknown, defaulting to 1000 [ 971.897147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.046065][ T7010] lo speed is unknown, defaulting to 1000 [ 972.474607][ T6913] dummy0 speed is unknown, defaulting to 1000 [ 972.793771][ T6913] dummy0 speed is unknown, defaulting to 1000 [ 973.036053][ T6913] dummy0 speed is unknown, defaulting to 1000 [ 973.175073][ T6913] dummy0 speed is unknown, defaulting to 1000 [ 973.466653][ T7072] netlink: 'syz.2.8563': attribute type 32 has an invalid length. [ 973.924580][ T7084] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20002 [ 974.015233][ T7094] gre0 speed is unknown, defaulting to 1000 [ 974.654720][ T7094] lo speed is unknown, defaulting to 1000 [ 974.871347][ T7124] __nla_validate_parse: 4 callbacks suppressed [ 974.871369][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8576'. [ 974.917020][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8576'. [ 975.072746][ T7128] 8021q: adding VLAN 0 to HW filter on device bond11 [ 975.094143][ T7126] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 975.328401][ T7094] dummy0 speed is unknown, defaulting to 1000 [ 975.563139][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8587'. [ 975.697295][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8589'. [ 975.719417][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8589'. [ 975.737377][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8590'. [ 975.763551][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8590'. [ 976.028828][ T7189] xt_hashlimit: size too large, truncated to 1048576 [ 976.079100][ T7191] –: renamed from vxcan1 [ 976.664858][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8598'. [ 976.688373][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8598'. [ 976.889321][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8601'. [ 977.128033][ T7226] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 977.175515][ T7229] veth0_vlan: left promiscuous mode [ 977.181886][ T7229] veth0_vlan: entered promiscuous mode [ 977.934916][ T7290] netlink: 'syz.1.8624': attribute type 10 has an invalid length. [ 977.955043][ T7290] veth0_vlan: left promiscuous mode [ 977.989052][ T7290] veth0_vlan: entered promiscuous mode [ 978.001157][ T7290] team0: Device veth0_vlan failed to register rx_handler [ 978.082833][ T7300] netlink: 'syz.1.8624': attribute type 29 has an invalid length. [ 978.151850][ T7307] gre0 speed is unknown, defaulting to 1000 [ 978.183603][ T7309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.209474][ T7309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.219726][ T7309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.238359][ T7312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.246764][ T7312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.586861][ T7326] netlink: 'syz.0.8633': attribute type 21 has an invalid length. [ 978.713589][ T7307] lo speed is unknown, defaulting to 1000 [ 978.871979][ T7345] FAULT_INJECTION: forcing a failure. [ 978.871979][ T7345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.885722][ T7345] CPU: 1 UID: 0 PID: 7345 Comm: syz.1.8637 Not tainted syzkaller #0 PREEMPT(full) [ 978.885748][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 978.885760][ T7345] Call Trace: [ 978.885768][ T7345] [ 978.885776][ T7345] dump_stack_lvl+0xe8/0x150 [ 978.885806][ T7345] should_fail_ex+0x412/0x560 [ 978.885837][ T7345] _copy_from_user+0x2d/0xb0 [ 978.885859][ T7345] ___sys_sendmsg+0x1c6/0x360 [ 978.885898][ T7345] ? __pfx____sys_sendmsg+0x10/0x10 [ 978.885955][ T7345] ? __fget_files+0x2a/0x420 [ 978.885981][ T7345] ? __fget_files+0x3a0/0x420 [ 978.886015][ T7345] __x64_sys_sendmsg+0x1bd/0x2a0 [ 978.886041][ T7345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 978.886074][ T7345] ? __pfx_ksys_write+0x10/0x10 [ 978.886108][ T7345] do_syscall_64+0x14d/0xf80 [ 978.886131][ T7345] ? trace_irq_disable+0x3b/0x150 [ 978.886147][ T7345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.886164][ T7345] ? clear_bhb_loop+0x40/0x90 [ 978.886187][ T7345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.886205][ T7345] RIP: 0033:0x7f509339c819 [ 978.886224][ T7345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.886240][ T7345] RSP: 002b:00007f50915d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 978.886260][ T7345] RAX: ffffffffffffffda RBX: 00007f5093616090 RCX: 00007f509339c819 [ 978.886273][ T7345] RDX: 0000000020040001 RSI: 00002000000003c0 RDI: 0000000000000005 [ 978.886284][ T7345] RBP: 00007f50915d5090 R08: 0000000000000000 R09: 0000000000000000 [ 978.886295][ T7345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.886305][ T7345] R13: 00007f5093616128 R14: 00007f5093616090 R15: 00007ffe09b25a18 [ 978.886331][ T7345] [ 979.002544][ T7346] bond7: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 979.151980][ T7346] bond7 (unregistering): Released all slaves [ 979.490247][ T7359] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 979.510650][ T7307] dummy0 speed is unknown, defaulting to 1000 [ 979.656683][ T7367] gre0 speed is unknown, defaulting to 1000 [ 979.823738][ T7373] bridge_slave_1: left allmulticast mode [ 979.829693][ T7373] bridge_slave_1: left promiscuous mode [ 979.835494][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.878188][ T7373] bridge_slave_0: left allmulticast mode [ 979.894124][ T7373] bridge_slave_0: left promiscuous mode [ 979.904464][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.956874][ T7376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.965887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.188714][ T7375] syzkaller0: entered promiscuous mode [ 980.194229][ T7375] syzkaller0: entered allmulticast mode [ 981.225882][ T7394] FAULT_INJECTION: forcing a failure. [ 981.225882][ T7394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.241110][ T7394] CPU: 1 UID: 0 PID: 7394 Comm: syz.4.8650 Not tainted syzkaller #0 PREEMPT(full) [ 981.241133][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 981.241143][ T7394] Call Trace: [ 981.241150][ T7394] [ 981.241157][ T7394] dump_stack_lvl+0xe8/0x150 [ 981.241183][ T7394] should_fail_ex+0x412/0x560 [ 981.241209][ T7394] _copy_from_user+0x2d/0xb0 [ 981.241227][ T7394] __copy_msghdr+0x3c5/0x5b0 [ 981.241250][ T7394] ___sys_sendmsg+0x213/0x360 [ 981.241273][ T7394] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.241320][ T7394] ? __fget_files+0x2a/0x420 [ 981.241352][ T7394] ? __fget_files+0x3a0/0x420 [ 981.241381][ T7394] __x64_sys_sendmsg+0x1bd/0x2a0 [ 981.241402][ T7394] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 981.241429][ T7394] ? __pfx_ksys_write+0x10/0x10 [ 981.241456][ T7394] do_syscall_64+0x14d/0xf80 [ 981.241477][ T7394] ? trace_irq_disable+0x3b/0x150 [ 981.241491][ T7394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.241506][ T7394] ? clear_bhb_loop+0x40/0x90 [ 981.241525][ T7394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.241540][ T7394] RIP: 0033:0x7fe28699c819 [ 981.241556][ T7394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.241570][ T7394] RSP: 002b:00007fe28787b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.241587][ T7394] RAX: ffffffffffffffda RBX: 00007fe286c15fa0 RCX: 00007fe28699c819 [ 981.241599][ T7394] RDX: 0000000020040001 RSI: 00002000000003c0 RDI: 0000000000000005 [ 981.241609][ T7394] RBP: 00007fe28787b090 R08: 0000000000000000 R09: 0000000000000000 [ 981.241617][ T7394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.241626][ T7394] R13: 00007fe286c16038 R14: 00007fe286c15fa0 R15: 00007ffced6e2e18 [ 981.241651][ T7394] [ 982.712957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.721942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.731078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.746573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.754901][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.763089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.771265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.779616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.787774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.795887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.039019][ T7367] lo speed is unknown, defaulting to 1000 [ 983.384169][ T7367] dummy0 speed is unknown, defaulting to 1000 [ 983.437148][ T7429] __nla_validate_parse: 12 callbacks suppressed [ 983.437170][ T7429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8659'. [ 983.467332][ T7429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8659'. [ 983.624324][ T7422] gre0 speed is unknown, defaulting to 1000 [ 983.945602][ T7442] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8662'. [ 984.021950][ T7444] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8662'. [ 984.544332][ T7423] gre0 speed is unknown, defaulting to 1000 [ 984.609792][ T7459] gre1: entered allmulticast mode [ 984.676698][ T7464] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8668'. [ 984.889516][ T7423] lo speed is unknown, defaulting to 1000 [ 984.929920][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8671'. [ 984.964476][ T7475] netem: change failed [ 985.199072][ T7423] dummy0 speed is unknown, defaulting to 1000 [ 985.208997][ T7422] lo speed is unknown, defaulting to 1000 [ 985.441445][ T7504] netlink: 'syz.0.8678': attribute type 1 has an invalid length. [ 985.520238][ T7497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8680'. [ 985.543033][ T7504] bond7: entered promiscuous mode [ 985.581214][ T7504] bond7: entered allmulticast mode [ 985.586767][ T7504] 8021q: adding VLAN 0 to HW filter on device bond7 [ 985.622262][ T7507] macvlan4: entered promiscuous mode [ 985.627935][ T7507] macvlan4: entered allmulticast mode [ 985.635156][ T7507] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 985.674426][ T7513] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8680'. [ 985.756050][ T7503] gre0 speed is unknown, defaulting to 1000 [ 986.362210][ T7422] dummy0 speed is unknown, defaulting to 1000 [ 986.375419][ T7503] lo speed is unknown, defaulting to 1000 [ 987.226742][ T7503] dummy0 speed is unknown, defaulting to 1000 [ 988.315111][ T7547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8689'. [ 989.935004][ T7568] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8693'. [ 989.997454][ T7568] xt_ipcomp: unknown flags 1D [ 990.207491][ T7573] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8694'. [ 990.291074][ T7578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8694'. [ 990.613220][ T7589] syzkaller0: entered promiscuous mode [ 990.621433][ T7589] syzkaller0: entered allmulticast mode [ 990.656624][ T7589] bond12: Removing last ns target with arp_interval on [ 990.694090][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8697'. [ 991.085773][ T7607] syzkaller1: entered promiscuous mode [ 991.092163][ T7607] syzkaller1: entered allmulticast mode [ 991.408694][ T7619] syzkaller1: entered promiscuous mode [ 991.414215][ T7619] syzkaller1: entered allmulticast mode [ 991.775108][ T7636] tipc: Enabled bearer , priority 0 [ 991.792971][ T7636] syzkaller0: entered promiscuous mode [ 991.811622][ T7636] syzkaller0: entered allmulticast mode [ 991.856411][ T7636] tipc: Resetting bearer [ 991.888476][ T7632] tipc: Resetting bearer [ 991.920472][ T7632] tipc: Disabling bearer [ 991.953122][ T7645] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8711'. [ 992.003497][ T7648] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8711'. [ 992.275240][ T7661] net_ratelimit: 14 callbacks suppressed [ 992.275259][ T7661] openvswitch: netlink: IP tunnel dst address not specified [ 992.358892][ T7667] netlink: 'syz.1.8717': attribute type 1 has an invalid length. [ 992.480124][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8718'. [ 992.491535][ T7678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8718'. [ 992.523455][ T7680] x_tables: ip_tables: osf match: only valid for protocol 6 [ 992.674822][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8723'. [ 992.715058][ T7691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8723'. [ 992.945836][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 993.208266][ T7720] gre0 speed is unknown, defaulting to 1000 [ 993.394175][ T7743] netlink: 'syz.4.8737': attribute type 1 has an invalid length. [ 993.688222][ T7754] bond10: entered promiscuous mode [ 993.695781][ T7754] bond10: entered allmulticast mode [ 993.704793][ T7754] 8021q: adding VLAN 0 to HW filter on device bond10 [ 993.728336][ T7720] lo speed is unknown, defaulting to 1000 [ 993.747531][ T7712] gre0 speed is unknown, defaulting to 1000 [ 993.951391][ T7764] bond0: Caught tx_queue_len zero misconfig [ 994.135157][ T7766] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 994.251833][ T7770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.260874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.465984][ T7720] dummy0 speed is unknown, defaulting to 1000 [ 994.531523][ T7780] bond11: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 994.569570][ T7780] bond11 (unregistering): Released all slaves [ 994.597907][ T7768] gre0 speed is unknown, defaulting to 1000 [ 994.603939][ T7712] lo speed is unknown, defaulting to 1000 [ 994.782606][ T7792] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 995.181873][ T7796] gre0 speed is unknown, defaulting to 1000 [ 995.413140][ T7785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 995.530064][ T7712] dummy0 speed is unknown, defaulting to 1000 [ 995.532275][ T7768] lo speed is unknown, defaulting to 1000 [ 996.122012][ T7796] lo speed is unknown, defaulting to 1000 [ 996.277978][ T7806] __nla_validate_parse: 8 callbacks suppressed [ 996.277996][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8753'. [ 996.494381][ T7768] dummy0 speed is unknown, defaulting to 1000 [ 997.059440][ T7796] dummy0 speed is unknown, defaulting to 1000 [ 997.422752][ T7810] gre0 speed is unknown, defaulting to 1000 [ 997.565739][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8756'. [ 997.957040][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 997.965077][ C1] lec:lec_tx_timeout: lec0 [ 998.465587][ T7810] lo speed is unknown, defaulting to 1000 [ 998.706154][ T7833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8759'. [ 998.810311][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8759'. [ 998.823314][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8759'. [ 998.938225][ T7810] dummy0 speed is unknown, defaulting to 1000 [ 999.431639][ T7838] siw: device registration error -23 [ 1000.580647][ T7857] netlink: 'syz.3.8767': attribute type 2 has an invalid length. [ 1000.736053][ T7862] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8768'. [ 1000.778773][ T7859] gre0 speed is unknown, defaulting to 1000 [ 1000.892118][ T7855] xt_CT: No such helper "syz1" [ 1000.985864][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8771'. [ 1001.739736][ T7859] lo speed is unknown, defaulting to 1000 [ 1001.933424][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8780'. [ 1001.948039][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8780'. [ 1001.971813][ T7908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8780'. [ 1001.990946][ T7910] netlink: 504 bytes leftover after parsing attributes in process `syz.1.8781'. [ 1002.187779][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8785'. [ 1002.207268][ T7926] veth0_virt_wifi: default FDB implementation only supports local addresses [ 1002.437336][ T7938] xt_addrtype: ipv6 does not support BROADCAST matching [ 1002.450298][ T7859] dummy0 speed is unknown, defaulting to 1000 [ 1002.466248][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8788'. [ 1002.510678][ T7938] netlink: 11 bytes leftover after parsing attributes in process `syz.4.8788'. [ 1002.527923][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8790'. [ 1002.564799][ T7947] netlink: 'syz.2.8790': attribute type 1 has an invalid length. [ 1002.576495][ T7946] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8790'. [ 1002.590496][ T7946] bond8: (slave dummy0): Releasing active interface [ 1002.724876][ T7956] ip6t_REJECT: ECHOREPLY is not supported [ 1002.878349][ T7962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.886648][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.700548][ T7986] syzkaller0: entered promiscuous mode [ 1003.706300][ T7986] syzkaller0: entered allmulticast mode [ 1003.717630][ T7986] tipc: Enabled bearer , priority 0 [ 1003.787507][ T7992] batadv_slave_0: entered promiscuous mode [ 1003.816503][ T7993] tipc: Resetting bearer [ 1003.942966][ T7993] tipc: Disabling bearer [ 1004.112749][ T8004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.985137][ T7992] batadv_slave_0: left promiscuous mode [ 1005.078776][ T7991] gre0 speed is unknown, defaulting to 1000 [ 1005.275627][ T8014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8806'. [ 1005.288848][ T8016] mac80211_hwsim hwsim79 ªªªªª;: renamed from wlan0 [ 1005.556877][ T8029] tipc: Resetting bearer [ 1005.611382][ T7991] lo speed is unknown, defaulting to 1000 [ 1005.918656][ T8043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.927161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.968789][ T8043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.977965][ T3567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.995940][ T8043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.004941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.023626][ T8041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.168029][ T8041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.197816][ T7991] dummy0 speed is unknown, defaulting to 1000 [ 1006.279540][ T8041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.489744][ T8041] team0: Failed to send options change via netlink (err -105) [ 1006.517967][ T8041] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1006.537929][ T8041] team0: Port device netdevsim0 removed [ 1006.545217][ T8041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.816651][ T3567] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.843543][ T8068] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1006.891708][T12845] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1006.966346][T31770] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.018695][T31770] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1007.026904][ T8068] gre0 speed is unknown, defaulting to 1000 [ 1007.180865][ T8091] netlink: zone id is out of range [ 1007.197498][ T8092] __nla_validate_parse: 3 callbacks suppressed [ 1007.197518][ T8092] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8822'. [ 1007.220490][ T8091] netlink: 'syz.4.8825': attribute type 3 has an invalid length. [ 1007.238943][ T8092] netlink: 245 bytes leftover after parsing attributes in process `syz.0.8822'. [ 1007.309158][ T8094] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 1007.332474][ T8068] lo speed is unknown, defaulting to 1000 [ 1007.428566][ T8096] ip_vti0: entered promiscuous mode [ 1007.438337][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8827'. [ 1007.608870][ T8068] dummy0 speed is unknown, defaulting to 1000 [ 1007.713511][ T8111] pimreg: entered allmulticast mode [ 1007.884525][ T8111] gre0 speed is unknown, defaulting to 1000 [ 1008.165587][ T8124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8833'. [ 1008.251299][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8833'. [ 1008.447617][ T8111] lo speed is unknown, defaulting to 1000 [ 1008.611206][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8834'. [ 1008.623603][T28693] Bluetooth: hci2: link tx timeout [ 1008.629136][T28693] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1008.639192][ T51] Bluetooth: hci2: link tx timeout [ 1008.644338][ T51] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1008.652334][ T51] Bluetooth: hci2: link tx timeout [ 1008.657552][ T51] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1008.687243][ T51] Bluetooth: hci2: link tx timeout [ 1008.692590][ T51] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1008.700558][ T51] Bluetooth: hci2: link tx timeout [ 1008.705784][ T51] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1008.733512][ T8111] dummy0 speed is unknown, defaulting to 1000 [ 1009.132559][ T8129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1009.143565][ T8129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1009.153068][ T8129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1009.161401][ T8129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1009.170196][ T8129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1009.390895][ T6800] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.413919][ T8148] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8841'. [ 1009.490210][ T8139] gre0 speed is unknown, defaulting to 1000 [ 1009.549506][ T8152] netlink: 'syz.3.8843': attribute type 10 has an invalid length. [ 1009.623598][ T6800] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.663739][ T8152] mac80211_hwsim hwsim83 wlan1: entered promiscuous mode [ 1009.679164][ T8152] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1009.842258][ T6800] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.964261][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8844'. [ 1010.022831][ T6800] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.141528][ T8139] lo speed is unknown, defaulting to 1000 [ 1010.556550][ T6800] batadv1: left allmulticast mode [ 1010.562355][ T6800] batadv1: left promiscuous mode [ 1010.572693][ T6800] bridge0: port 4(batadv1) entered disabled state [ 1010.651879][ T6800] vlan2: left promiscuous mode [ 1010.657520][ T6800] bridge0: port 3(vlan2) entered disabled state [ 1010.666473][ T6800] bridge_slave_1: left allmulticast mode [ 1010.674286][ T6800] bridge_slave_1: left promiscuous mode [ 1010.680606][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.699009][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1010.719646][ T6800] ¾x9ÿ: left promiscuous mode [ 1010.724656][ T6800] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1010.773616][ T8178] netlink: 'syz.0.8849': attribute type 1 has an invalid length. [ 1010.780868][ T6800] veth7: left allmulticast mode [ 1010.786251][ T6800] veth7: left promiscuous mode [ 1010.815717][ T6800] bridge10: port 2(veth7) entered disabled state [ 1010.824999][ T6800] veth5: left allmulticast mode [ 1010.830177][ T6800] veth5: left promiscuous mode [ 1010.835246][ T6800] bridge10: port 1(veth5) entered disabled state [ 1011.077616][ T6800] gretap0 (unregistering): left allmulticast mode [ 1011.267227][T28693] Bluetooth: hci1: command tx timeout [ 1011.800931][ T6800] bond7 (unregistering): (slave bridge14): Releasing active interface [ 1011.841562][ T6800] bond0 (unregistering): left promiscuous mode [ 1011.848064][ T6800] bond_slave_1: left promiscuous mode [ 1011.858047][ T6800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.870036][ T6800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1011.880773][ T6800] bond0 (unregistering): Released all slaves [ 1011.890964][ T6800] bond1 (unregistering): Released all slaves [ 1011.907647][ T6800] bond2 (unregistering): Released all slaves [ 1011.920377][ T6800] bond3 (unregistering): Released all slaves [ 1011.932855][ T6800] bond4 (unregistering): Released all slaves [ 1011.948987][ T6800] bond5 (unregistering): Released all slaves [ 1011.964217][ T6800] bond6 (unregistering): Released all slaves [ 1011.987326][ T6800] bond7 (unregistering): Released all slaves [ 1012.000982][ T6800] bond8 (unregistering): Released all slaves [ 1012.014337][ T6800] bond9 (unregistering): Released all slaves [ 1012.026728][ T6800] bond10 (unregistering): Released all slaves [ 1012.041507][ T8139] dummy0 speed is unknown, defaulting to 1000 [ 1012.184480][ T8178] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1012.194632][ T8182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8851'. [ 1012.222995][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8852'. [ 1012.225551][ T6800] : left promiscuous mode [ 1012.266160][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8852'. [ 1012.369455][ T6800] tipc: Disabling bearer [ 1012.388861][ T6800] tipc: Left network mode [ 1012.503352][ T8188] bond7: Unable to set up delay as MII monitoring is disabled [ 1012.720192][ T8188] bond7 (unregistering): Released all slaves [ 1013.337150][T28693] Bluetooth: hci1: command tx timeout [ 1013.536136][ T8208] gre0 speed is unknown, defaulting to 1000 [ 1013.932577][T13116] lec:lec_start_xmit: lec0:No lecd attached [ 1013.939250][ T8139] chnl_net:caif_netlink_parms(): no params data found [ 1014.096531][ T8208] lo speed is unknown, defaulting to 1000 [ 1014.281819][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.297537][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.304972][ T8139] bridge_slave_0: entered allmulticast mode [ 1014.329009][ T8139] bridge_slave_0: entered promiscuous mode [ 1014.354831][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.377677][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.384966][ T8139] bridge_slave_1: entered allmulticast mode [ 1014.411587][ T8139] bridge_slave_1: entered promiscuous mode [ 1014.483846][ T8208] dummy0 speed is unknown, defaulting to 1000 [ 1014.511433][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.546208][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.750198][ T8139] team0: Port device team_slave_0 added [ 1014.764668][ T8139] team0: Port device team_slave_1 added [ 1014.855094][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.864050][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.927864][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.949563][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.956539][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.985711][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.094382][ T8139] hsr_slave_0: entered promiscuous mode [ 1015.111868][ T8139] hsr_slave_1: entered promiscuous mode [ 1015.125063][ T8139] debugfs: 'hsr0' already exists in 'hsr' [ 1015.131917][ T8139] Cannot create hsr debugfs directory [ 1015.261209][ T5882] page_pool_release_retry() stalled pool shutdown: id 286, 1 inflight 60 sec [ 1015.417303][T28693] Bluetooth: hci1: command tx timeout [ 1015.442030][ T6800] hsr_slave_0: left promiscuous mode [ 1015.449786][ T6800] hsr_slave_1: left promiscuous mode [ 1015.682634][ T6800] team0 (unregistering): Port device team_slave_1 removed [ 1015.700777][ T6800] team0 (unregistering): Port device team_slave_0 removed [ 1016.585964][ T8139] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1016.601778][ T8139] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1016.623209][ T8139] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1016.637852][ T8139] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1016.752512][ T8139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.775584][ T8139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.793336][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.800494][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.815888][ T6800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.823020][ T6800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.041975][ T8139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.091847][ T8139] veth0_vlan: entered promiscuous mode [ 1017.116024][ T8139] veth1_vlan: entered promiscuous mode [ 1017.151747][ T8139] veth0_macvtap: entered promiscuous mode [ 1017.165147][ T8139] veth1_macvtap: entered promiscuous mode [ 1017.196875][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.214659][ T8139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.233258][T31770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.250739][T31770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.273107][T31770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.306081][T31770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.377425][T31770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.387445][T31770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.436131][ T6800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.445535][ T6800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.499496][T28693] Bluetooth: hci1: command tx timeout [ 1018.947035][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1018.955069][ C1] lec:lec_tx_timeout: lec0 [ 1030.751662][ T8385] netlink: 'syz.3.8869': attribute type 1 has an invalid length. [ 1030.761068][ T8381] gre0 speed is unknown, defaulting to 1000 [ 1030.777155][ T8385] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8869'. [ 1030.821537][ T8385] NCSI netlink: No device for ifindex 0 [ 1030.917224][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1030.933277][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1030.942034][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1030.950536][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1030.959830][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1030.990711][ T8387] "syz.0.8868" (8387) uses obsolete ecb(arc4) skcipher [ 1031.127588][ T8407] netlink: 'syz.3.8871': attribute type 1 has an invalid length. [ 1031.166004][ T8407] netlink: 'syz.3.8871': attribute type 2 has an invalid length. [ 1031.194453][ T8407] netlink: 'syz.3.8871': attribute type 1 has an invalid length. [ 1031.217106][ T8407] netlink: 'syz.3.8871': attribute type 3 has an invalid length. [ 1031.231702][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8871'. [ 1031.248141][ T8413] netlink: 292 bytes leftover after parsing attributes in process `syz.4.8873'. [ 1031.363015][ T8381] lo speed is unknown, defaulting to 1000 [ 1031.369720][ T8399] gre0 speed is unknown, defaulting to 1000 [ 1031.735071][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8878'. [ 1031.739028][ T8441] x_tables: duplicate underflow at hook 2 [ 1031.928024][ T8439] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8878'. [ 1031.938145][ T8381] dummy0 speed is unknown, defaulting to 1000 [ 1031.950709][ T8399] lo speed is unknown, defaulting to 1000 [ 1031.973148][ T8451] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1032.060368][ T8456] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8883'. [ 1032.634605][T31770] bond5 (unregistering): (slave ip6gretap2): Releasing active interface [ 1032.661896][T31770] ip6gretap2 (unregistering): left allmulticast mode [ 1033.017167][T28693] Bluetooth: hci5: command tx timeout [ 1033.054805][ T8490] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8890'. [ 1033.255488][T31770] bond0 (unregistering): (slave team0): Releasing backup interface [ 1033.265215][T31770] team0: left promiscuous mode [ 1033.270519][T31770] vxcan1: left promiscuous mode [ 1033.277754][T31770] bond0 (unregistering): Released all slaves [ 1033.290369][T31770] bond1 (unregistering): Released all slaves [ 1033.303496][T31770] bond2 (unregistering): Released all slaves [ 1033.317544][T31770] bond3 (unregistering): (slave veth5): Releasing active interface [ 1033.333318][T31770] bond3 (unregistering): Released all slaves [ 1033.345921][T31770] bond4 (unregistering): Released all slaves [ 1033.360430][T31770] bond5 (unregistering): Released all slaves [ 1033.373161][T31770] bond6 (unregistering): Released all slaves [ 1033.393422][ T8399] dummy0 speed is unknown, defaulting to 1000 [ 1033.410188][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8890'. [ 1033.571089][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8891'. [ 1033.611162][T31770] : left promiscuous mode [ 1033.680470][T31770] : left promiscuous mode [ 1033.687827][ T8496] xt_connbytes: Forcing CT accounting to be enabled [ 1033.777782][T31770] tipc: Disabling bearer [ 1033.804930][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8892'. [ 1033.843908][T31770] tipc: Left network mode [ 1033.856810][ T8510] Cannot find set identified by id 65534 to match [ 1034.491528][ T8532] xt_hashlimit: max too large, truncated to 1048576 [ 1034.554424][ T8518] gre0 speed is unknown, defaulting to 1000 [ 1034.711639][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.737786][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.960095][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.978518][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1035.097143][T28693] Bluetooth: hci5: command tx timeout [ 1035.364299][ T8564] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1035.374834][ T8564] net_ratelimit: 53 callbacks suppressed [ 1035.374854][ T8564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.410516][ T8518] lo speed is unknown, defaulting to 1000 [ 1035.503599][ T8559] gre0 speed is unknown, defaulting to 1000 [ 1035.601548][ T8399] chnl_net:caif_netlink_parms(): no params data found [ 1036.050106][ T8399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.062794][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.079145][ T8399] bridge_slave_0: entered allmulticast mode [ 1036.088350][ T8399] bridge_slave_0: entered promiscuous mode [ 1036.109854][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.127790][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.140789][ T8399] bridge_slave_1: entered allmulticast mode [ 1036.168249][ T8399] bridge_slave_1: entered promiscuous mode [ 1036.192434][ T8518] dummy0 speed is unknown, defaulting to 1000 [ 1036.230980][ T8399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.254724][ T8399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.325179][ T8399] team0: Port device team_slave_0 added [ 1036.336355][ T8399] team0: Port device team_slave_1 added [ 1036.396549][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.404370][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.467144][ T8399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.484311][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.507635][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.565719][ T8399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.685889][ T8399] hsr_slave_0: entered promiscuous mode [ 1036.703842][ T8399] hsr_slave_1: entered promiscuous mode [ 1036.719256][ T8399] debugfs: 'hsr0' already exists in 'hsr' [ 1036.727687][ T8399] Cannot create hsr debugfs directory [ 1036.760013][ T8559] lo speed is unknown, defaulting to 1000 [ 1037.054693][ T8626] __nla_validate_parse: 6 callbacks suppressed [ 1037.054712][ T8626] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8917'. [ 1037.181328][T28693] Bluetooth: hci5: command tx timeout [ 1037.259551][ T8630] syzkaller1: entered promiscuous mode [ 1037.274392][ T8630] syzkaller1: entered allmulticast mode [ 1037.414472][ T8559] dummy0 speed is unknown, defaulting to 1000 [ 1038.068360][ T8639] syzkaller0: entered promiscuous mode [ 1038.077389][ T8639] syzkaller0: entered allmulticast mode [ 1038.208002][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8924'. [ 1039.262533][T28693] Bluetooth: hci5: command tx timeout [ 1040.349820][T31770] batadv0: left promiscuous mode [ 1040.388421][T31770] hsr_slave_0: left promiscuous mode [ 1040.394719][T31770] hsr_slave_1: left promiscuous mode [ 1040.870875][T31770] team0 (unregistering): Port device vxcan1 removed [ 1040.967290][ T8694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8930'. [ 1041.175995][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8933'. [ 1041.380667][T31770] IPVS: stop unused estimator thread 0... [ 1041.865192][ T8399] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1041.902835][ T8399] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1041.960642][ T8399] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1042.003932][ T8399] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1042.115880][ T8740] team0: Port device syz_tun added [ 1042.141565][ T8743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8941'. [ 1042.162462][ T8743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8941'. [ 1042.197578][ T8743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8941'. [ 1042.318257][ T8756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1042.671291][ T8399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.723671][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8944'. [ 1042.770780][ T8399] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.816222][ T8777] gre0 speed is unknown, defaulting to 1000 [ 1042.818747][T31770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.829405][T31770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.853241][ T8761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8944'. [ 1042.880080][T31770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.887304][T31770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.272973][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8949'. [ 1043.539764][ T8777] lo speed is unknown, defaulting to 1000 [ 1043.602766][ T8399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.775415][ T8399] veth0_vlan: entered promiscuous mode [ 1043.796307][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8953'. [ 1043.829899][ T8399] veth1_vlan: entered promiscuous mode [ 1043.875696][ T8832] netlink: 'syz.4.8955': attribute type 1 has an invalid length. [ 1044.011491][ T8832] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1044.090592][ T8837] bond14: (slave veth17): Enslaving as an active interface with a down link [ 1044.119937][ T8777] dummy0 speed is unknown, defaulting to 1000 [ 1044.131954][ T8399] veth0_macvtap: entered promiscuous mode [ 1044.170995][ T8399] veth1_macvtap: entered promiscuous mode [ 1044.248210][ T8832] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1044.272756][ T8832] bond14: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1044.392129][ T8856] syzkaller0: entered promiscuous mode [ 1044.397819][ T8856] syzkaller0: entered allmulticast mode [ 1044.434884][ T8856] tipc: Started in network mode [ 1044.441821][ T8856] tipc: Node identity f2514544ffa2, cluster identity 4711 [ 1044.478805][ T8856] tipc: Enabled bearer , priority 0 [ 1044.519549][ T8855] tipc: Resetting bearer [ 1044.602271][ T8855] tipc: Disabling bearer [ 1044.630881][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.645839][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8960'. [ 1044.671076][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.715758][T31772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.762082][T31772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.800068][T31772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.896294][T31772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.981629][ T8872] netlink: 192 bytes leftover after parsing attributes in process `syz.3.8961'. [ 1045.280197][ T8896] netlink: 'syz.3.8965': attribute type 3 has an invalid length. [ 1045.301674][ T8896] netlink: 'syz.3.8965': attribute type 3 has an invalid length. [ 1045.345018][ T8895] syzkaller0: entered promiscuous mode [ 1045.350867][ T8895] syzkaller0: entered allmulticast mode [ 1045.372198][T31770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.386449][T31770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.543341][ T8905] x_tables: duplicate underflow at hook 1 [ 1045.550894][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8967'. [ 1045.591711][ T8907] x_tables: duplicate underflow at hook 1 [ 1045.612896][T31770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.632343][T31770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.906915][ T8915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1045.919388][ T8925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1046.235986][ T8939] gre0: MTU too low for tipc bearer [ 1046.270606][ T8939] tipc: Disabling bearer [ 1046.361290][ T8950] x_tables: unsorted underflow at hook 3 [ 1046.637349][ T8966] netlink: 'syz.2.8980': attribute type 10 has an invalid length. [ 1046.665788][ T8966] dummy0: entered promiscuous mode [ 1046.676775][ T8966] bridge0: port 3(dummy0) entered blocking state [ 1046.691404][ T8966] bridge0: port 3(dummy0) entered disabled state [ 1046.700154][ T8966] dummy0: entered allmulticast mode [ 1046.707234][ T8966] bridge0: port 3(dummy0) entered blocking state [ 1046.713679][ T8966] bridge0: port 3(dummy0) entered forwarding state [ 1046.799680][ T8977] sctp: [Deprecated]: syz.3.8983 (pid 8977) Use of int in max_burst socket option. [ 1046.799680][ T8977] Use struct sctp_assoc_value instead [ 1046.817846][ T8968] nbd0: detected capacity change from 0 to 127 [ 1046.830057][ T51] block nbd0: Receive control failed (result -104) [ 1046.830606][T28693] block nbd0: Receive control failed (result -32) [ 1046.847880][ T8405] block nbd0: Send control failed (result -32) [ 1046.871181][ T8405] block nbd0: Request send failed, requeueing [ 1046.909353][ T8405] block nbd0: Dead connection, failed to find a fallback [ 1046.916441][ T8405] block nbd0: shutting down sockets [ 1046.923121][ T11] blk_print_req_error: 138 callbacks suppressed [ 1046.923140][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1046.946023][ T11] buffer_io_error: 138 callbacks suppressed [ 1046.946040][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1046.985220][ T8405] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1047.001078][ T8405] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1047.017466][ T8405] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1047.037013][ T8405] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1047.195203][ T8983] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) ! [ 1047.265624][ T8985] netlink: 'syz.2.8986': attribute type 1 has an invalid length. [ 1047.324134][ T8987] __nla_validate_parse: 2 callbacks suppressed [ 1047.324156][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8986'. [ 1047.445199][ T8987] gretap1: entered allmulticast mode [ 1047.537920][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1047.549332][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1047.565089][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1047.602934][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1047.613242][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1047.784662][ T8989] gre0 speed is unknown, defaulting to 1000 [ 1047.907872][ T9024] dvmrp1: entered allmulticast mode [ 1048.104726][ T9035] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8998'. [ 1048.147998][ T9025] gre0 speed is unknown, defaulting to 1000 [ 1048.154012][ T8989] lo speed is unknown, defaulting to 1000 [ 1048.588682][ T8989] dummy0 speed is unknown, defaulting to 1000 [ 1048.593043][ T9057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1048.626396][ T9025] lo speed is unknown, defaulting to 1000 [ 1048.707365][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9006'. [ 1048.719980][ T9064] netlink: 208 bytes leftover after parsing attributes in process `syz.2.9006'. [ 1048.731925][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9006'. [ 1048.932059][ T9074] netlink: 'syz.2.9009': attribute type 24 has an invalid length. [ 1049.090625][ T9085] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9012'. [ 1049.099531][ T9083] batman_adv: batadv0: Adding interface: vlan3 [ 1049.120606][ T9083] batman_adv: batadv0: The MTU of interface vlan3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1049.169174][ T9083] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 1049.245452][ T9025] dummy0 speed is unknown, defaulting to 1000 [ 1049.366728][ T9101] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9016'. [ 1049.407528][ T9101] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9016'. [ 1049.611946][ T9113] netlink: 'syz.2.9020': attribute type 1 has an invalid length. [ 1049.697227][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9021'. [ 1049.743874][ T51] Bluetooth: hci4: command tx timeout [ 1049.751616][ T9119] bond2: (slave bridge1): making interface the new active one [ 1049.764505][ T9119] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1049.784820][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9021'. [ 1049.795843][ T8989] chnl_net:caif_netlink_parms(): no params data found [ 1049.838710][ T9127] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1049.877011][ T9122] syz.4.9021: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1049.896835][ T9126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1049.898420][ T9122] CPU: 0 UID: 0 PID: 9122 Comm: syz.4.9021 Not tainted syzkaller #0 PREEMPT(full) [ 1049.898446][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1049.898460][ T9122] Call Trace: [ 1049.898470][ T9122] [ 1049.898479][ T9122] dump_stack_lvl+0xe8/0x150 [ 1049.898514][ T9122] warn_alloc+0x249/0x340 [ 1049.898540][ T9122] ? stack_trace_save+0xa9/0x100 [ 1049.898566][ T9122] ? __pfx_warn_alloc+0x10/0x10 [ 1049.898596][ T9122] ? kasan_save_track+0x4f/0x80 [ 1049.898616][ T9122] ? kasan_save_track+0x3e/0x80 [ 1049.898637][ T9122] ? __kasan_kmalloc+0x93/0xb0 [ 1049.898659][ T9122] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1049.898682][ T9122] ? xskq_create+0x56/0x170 [ 1049.898707][ T9122] ? xsk_setsockopt+0x54c/0x990 [ 1049.898729][ T9122] ? do_sock_setsockopt+0x17c/0x1b0 [ 1049.898753][ T9122] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1049.898777][ T9122] ? do_syscall_64+0x14d/0xf80 [ 1049.898809][ T9122] __vmalloc_node_range_noprof+0x132/0x1730 [ 1049.898863][ T9122] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1049.898893][ T9122] ? __kasan_kmalloc+0x93/0xb0 [ 1049.898922][ T9122] vmalloc_user_noprof+0xad/0xe0 [ 1049.898945][ T9122] ? xskq_create+0xbf/0x170 [ 1049.898971][ T9122] xskq_create+0xbf/0x170 [ 1049.899000][ T9122] xsk_init_queue+0x8a/0xe0 [ 1049.899027][ T9122] xsk_setsockopt+0x54c/0x990 [ 1049.899054][ T9122] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1049.899078][ T9122] ? __pfx_aa_sk_perm+0x10/0x10 [ 1049.899110][ T9122] ? aa_sock_opt_perm+0xff/0x1a0 [ 1049.899143][ T9122] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1049.899167][ T9122] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1049.899192][ T9122] do_sock_setsockopt+0x17c/0x1b0 [ 1049.899221][ T9122] __x64_sys_setsockopt+0x13d/0x1b0 [ 1049.899252][ T9122] do_syscall_64+0x14d/0xf80 [ 1049.899280][ T9122] ? trace_irq_disable+0x3b/0x150 [ 1049.899298][ T9122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.899318][ T9122] ? clear_bhb_loop+0x40/0x90 [ 1049.899343][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.899363][ T9122] RIP: 0033:0x7fe28699c819 [ 1049.899383][ T9122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.899407][ T9122] RSP: 002b:00007fe28787b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1049.899429][ T9122] RAX: ffffffffffffffda RBX: 00007fe286c15fa0 RCX: 00007fe28699c819 [ 1049.899444][ T9122] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 1049.899457][ T9122] RBP: 00007fe286a32c91 R08: 0000000000000004 R09: 0000000000000000 [ 1049.899470][ T9122] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.899484][ T9122] R13: 00007fe286c16038 R14: 00007fe286c15fa0 R15: 00007ffced6e2e18 [ 1049.899516][ T9122] [ 1049.899536][ T9122] Mem-Info: [ 1050.185995][ T9122] active_anon:6161 inactive_anon:0 isolated_anon:0 [ 1050.185995][ T9122] active_file:2900 inactive_file:40656 isolated_file:0 [ 1050.185995][ T9122] unevictable:768 dirty:128 writeback:0 [ 1050.185995][ T9122] slab_reclaimable:14021 slab_unreclaimable:161354 [ 1050.185995][ T9122] mapped:29621 shmem:1369 pagetables:3582 [ 1050.185995][ T9122] sec_pagetables:0 bounce:0 [ 1050.185995][ T9122] kernel_misc_reclaimable:0 [ 1050.185995][ T9122] free:1235740 free_pcp:22964 free_cma:0 [ 1050.259189][ T9122] Node 0 active_anon:24644kB inactive_anon:0kB active_file:11600kB inactive_file:162420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44756kB dirty:512kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14868kB pagetables:14300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1050.305168][ T9122] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73728kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1050.337282][ T9122] Node 0 DMA free:11236kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:8kB free_cma:0kB [ 1050.370375][ T9122] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1050.381899][ T9122] Node 0 DMA32 free:1252132kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24644kB inactive_anon:0kB active_file:11600kB inactive_file:162420kB unevictable:1536kB writepending:512kB zspages:0kB present:3129332kB managed:2552352kB mlocked:0kB bounce:0kB free_pcp:39176kB local_pcp:20620kB free_cma:0kB [ 1050.432807][ T8989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.441875][ T8989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.487571][ T8989] bridge_slave_0: entered allmulticast mode [ 1050.498096][ T9122] lowmem_reserve[]: 0 0 0 0 0 [ 1050.503309][ T9122] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1050.539023][ T9122] lowmem_reserve[]: 0 0 0 0 0 [ 1050.543780][ T9122] Node 1 Normal free:3679336kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:53172kB local_pcp:26140kB free_cma:0kB [ 1050.580677][ T8989] bridge_slave_0: entered promiscuous mode [ 1050.599772][ T8989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.609671][ T8989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.625870][ T9122] lowmem_reserve[]: 0 0 0 0 0 [ 1050.633010][ T8989] bridge_slave_1: entered allmulticast mode [ 1050.642948][ T9122] Node 0 DMA: 1*4kB (U) 2*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11236kB [ 1050.677110][ T9122] Node 0 DMA32: 7514*4kB (UM) 8242*8kB (UME) 5591*16kB (UME) 364*32kB (UM) 793*64kB (UME) 966*128kB (UME) 640*256kB (UME) 402*512kB (UME) 219*1024kB (UM) 117*2048kB (UM) 11*4096kB (U) = 1250088kB [ 1050.730078][ T8989] bridge_slave_1: entered promiscuous mode [ 1050.758362][ T9122] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1050.778258][ T9122] Node 1 Normal: 4*4kB (UM) 15*8kB (UM) 8*16kB (UM) 5*32kB (UM) 17*64kB (UM) 13*128kB (UM) 12*256kB (UM) 12*512kB (UM) 9*1024kB (UM) 8*2048kB (U) 889*4096kB (UM) = 3679336kB [ 1050.806786][ T9122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1050.817786][ T9122] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1050.837651][ T9122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1050.847891][ T9122] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1050.942105][ T9122] 48096 total pagecache pages [ 1050.962673][ T9122] 0 pages in swap cache [ 1050.971730][ T9122] Free swap = 124996kB [ 1050.982945][ T9122] Total swap = 124996kB [ 1050.991953][ T9122] 2097051 pages RAM [ 1051.023578][ T9122] 0 pages HighMem/MovableOnly [ 1051.043550][ T9122] 427129 pages reserved [ 1051.052105][ T9146] team0 (unregistering): Port device team_slave_0 removed [ 1051.064219][ T9122] 0 pages cma reserved [ 1051.083527][ T9146] team0 (unregistering): Port device team_slave_1 removed [ 1051.127757][ T9146] team0 (unregistering): Port device syz_tun removed [ 1051.169833][ T8989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.270769][ T9153] netlink: 'syz.2.9031': attribute type 25 has an invalid length. [ 1051.286567][ T9153] netlink: 'syz.2.9031': attribute type 3 has an invalid length. [ 1051.295851][ T9149] netlink: 'syz.4.9030': attribute type 1 has an invalid length. [ 1051.318637][ T8989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.452673][ T8989] team0: Port device team_slave_0 added [ 1051.475134][ T8989] team0: Port device team_slave_1 added [ 1051.525384][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.533719][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.560661][ T8989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.579571][ T9155] bridge0: port 3(dummy0) entered disabled state [ 1051.601014][ T9155] dummy0 (unregistering): left allmulticast mode [ 1051.607722][ T9155] bridge0: port 3(dummy0) entered disabled state [ 1051.623168][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.631603][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.660372][ T8989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.792833][ T9163] syzkaller0: entered promiscuous mode [ 1051.805577][ T8989] hsr_slave_0: entered promiscuous mode [ 1051.814507][ T8989] hsr_slave_1: entered promiscuous mode [ 1051.818645][ T51] Bluetooth: hci4: command tx timeout [ 1051.821828][ T8989] debugfs: 'hsr0' already exists in 'hsr' [ 1051.831474][ T8989] Cannot create hsr debugfs directory [ 1051.867840][ T9159] 0: reclassify loop, rule prio 0, protocol 800 [ 1052.029129][ T9169] tipc: Enabled bearer , priority 0 [ 1052.066373][ T9169] syzkaller0: entered promiscuous mode [ 1052.073099][ T9169] syzkaller0: entered allmulticast mode [ 1052.184126][ T9169] tipc: Resetting bearer [ 1052.221375][ T9168] tipc: Resetting bearer [ 1052.244167][ T9168] tipc: Disabling bearer [ 1052.283030][ T8989] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.434889][ T8989] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.562950][ T9197] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1052.605500][ T9198] gre0 speed is unknown, defaulting to 1000 [ 1052.643227][ T8989] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1052.666236][ T9202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1052.682014][ T9205] tipc: MTU too low for tipc bearer [ 1052.779561][ T8989] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.063788][ T9198] lo speed is unknown, defaulting to 1000 [ 1053.102445][ T9212] __nla_validate_parse: 6 callbacks suppressed [ 1053.102463][ T9212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9051'. [ 1053.139086][ T9212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9051'. [ 1053.180040][ T9212] syzkaller0: entered promiscuous mode [ 1053.209858][ T9212] 0: reclassify loop, rule prio 0, protocol 800 [ 1053.322849][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9053'. [ 1053.332050][ T8989] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1053.423894][ T8989] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1053.489692][ T9239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.511423][ T9239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.523466][ T9241] netlink: 'syz.1.9057': attribute type 1 has an invalid length. [ 1053.532060][ T9239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1053.559535][ T8989] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1053.576124][ T9198] dummy0 speed is unknown, defaulting to 1000 [ 1053.649115][ T8989] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1053.719984][ T9250] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 1053.851189][ T8989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.874577][ T8989] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.890297][T12845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.897505][T12845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.905659][ T51] Bluetooth: hci4: command tx timeout [ 1053.925265][T31770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.932488][T31770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.372258][ T8989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.385457][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1054.499723][ T8989] veth0_vlan: entered promiscuous mode [ 1054.544132][ T8989] veth1_vlan: entered promiscuous mode [ 1054.680776][ T9284] syzkaller0: entered promiscuous mode [ 1054.826572][ T8989] veth0_macvtap: entered promiscuous mode [ 1054.861208][ T8989] veth1_macvtap: entered promiscuous mode [ 1054.932857][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.975271][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.065606][ T9307] FAULT_INJECTION: forcing a failure. [ 1055.065606][ T9307] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.079087][ T9307] CPU: 1 UID: 0 PID: 9307 Comm: syz.1.9076 Not tainted syzkaller #0 PREEMPT(full) [ 1055.079112][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1055.079123][ T9307] Call Trace: [ 1055.079131][ T9307] [ 1055.079139][ T9307] dump_stack_lvl+0xe8/0x150 [ 1055.079170][ T9307] should_fail_ex+0x412/0x560 [ 1055.079200][ T9307] should_failslab+0xa8/0x100 [ 1055.079224][ T9307] __kmalloc_cache_noprof+0x88/0x660 [ 1055.079244][ T9307] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1055.079269][ T9307] ? sctp_add_bind_addr+0x8c/0x370 [ 1055.079297][ T9307] sctp_add_bind_addr+0x8c/0x370 [ 1055.079325][ T9307] sctp_copy_local_addr_list+0x314/0x4f0 [ 1055.079352][ T9307] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1055.079376][ T9307] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1055.079402][ T9307] ? sctp_v6_is_any+0x64/0x80 [ 1055.079427][ T9307] ? sctp_copy_one_addr+0x93/0x360 [ 1055.079454][ T9307] sctp_bind_addr_copy+0xb3/0x3c0 [ 1055.079478][ T9307] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1055.079503][ T9307] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1055.079524][ T9307] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1055.079549][ T9307] ? __local_bh_enable_ip+0xd0/0x130 [ 1055.079579][ T9307] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1055.079600][ T9307] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1055.079625][ T9307] sctp_sendmsg+0x1528/0x2c10 [ 1055.079658][ T9307] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1055.079679][ T9307] ? aa_sk_perm+0x6d5/0x900 [ 1055.079710][ T9307] ? __pfx_aa_sk_perm+0x10/0x10 [ 1055.079737][ T9307] ? sock_rps_record_flow+0x19/0x350 [ 1055.079757][ T9307] ? __pfx_inet_sendmsg+0x10/0x10 [ 1055.079779][ T9307] ? inet_sendmsg+0x2f4/0x370 [ 1055.079800][ T9307] ? __pfx_inet_sendmsg+0x10/0x10 [ 1055.079821][ T9307] __sys_sendto+0x5de/0x710 [ 1055.079845][ T9307] ? __pfx___sys_sendto+0x10/0x10 [ 1055.079862][ T9307] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1055.079900][ T9307] ? __fget_files+0x3a0/0x420 [ 1055.079936][ T9307] ? ksys_write+0x242/0x270 [ 1055.079958][ T9307] ? __pfx_ksys_write+0x10/0x10 [ 1055.079982][ T9307] __x64_sys_sendto+0xde/0x100 [ 1055.080006][ T9307] do_syscall_64+0x14d/0xf80 [ 1055.080029][ T9307] ? trace_irq_disable+0x3b/0x150 [ 1055.080044][ T9307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.080062][ T9307] ? clear_bhb_loop+0x40/0x90 [ 1055.080084][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.080100][ T9307] RIP: 0033:0x7f104999c819 [ 1055.080118][ T9307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.080133][ T9307] RSP: 002b:00007f104a8ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1055.080152][ T9307] RAX: ffffffffffffffda RBX: 00007f1049c15fa0 RCX: 00007f104999c819 [ 1055.080165][ T9307] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000003 [ 1055.080176][ T9307] RBP: 00007f104a8ff090 R08: 000020000005ffe4 R09: 000000000000001c [ 1055.080188][ T9307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.080198][ T9307] R13: 00007f1049c16038 R14: 00007f1049c15fa0 R15: 00007fffa503baf8 [ 1055.080227][ T9307] [ 1055.429918][ T6800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.450052][ T6800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.511521][ T6800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.527822][ T6800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.775463][T31770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.811695][T31770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.851878][T31770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.876710][T31770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.962950][ T9331] siw: device registration error -23 [ 1055.979491][ T51] Bluetooth: hci4: command tx timeout [ 1056.012808][ T9336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9083'. [ 1056.032362][ T9336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9083'. [ 1056.068571][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8984'. [ 1056.084600][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8984'. [ 1056.095031][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8984'. [ 1056.118238][ T9340] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9084'. [ 1056.613415][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9096'. [ 1056.709385][ T9375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.717113][ T9375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.884653][ T9375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.896333][ T9386] netlink: 'syz.4.9097': attribute type 1 has an invalid length. [ 1056.904099][ T9375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.007610][ T9381] bond14: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 1057.018106][ T9381] bond14: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 1057.031215][ T9386] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1057.037669][ T3567] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.056793][ T3567] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.065953][ T3567] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.111477][ T3567] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.133562][ T9392] netlink: 'syz.4.9098': attribute type 12 has an invalid length. [ 1057.169259][ T9392] netlink: 'syz.4.9098': attribute type 12 has an invalid length. [ 1057.286679][ T9392] gre0 speed is unknown, defaulting to 1000 [ 1057.611799][ T9418] netlink: 'syz.1.9107': attribute type 2 has an invalid length. [ 1057.810359][ T9392] lo speed is unknown, defaulting to 1000 [ 1058.144311][ T9457] __nla_validate_parse: 1 callbacks suppressed [ 1058.144334][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9116'. [ 1058.171574][ T9448] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1058.201046][ T9392] dummy0 speed is unknown, defaulting to 1000 [ 1058.575101][ T9433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1059.053034][ T9486] FAULT_INJECTION: forcing a failure. [ 1059.053034][ T9486] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.071917][ T9486] CPU: 0 UID: 0 PID: 9486 Comm: syz.1.9123 Not tainted syzkaller #0 PREEMPT(full) [ 1059.071941][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1059.071953][ T9486] Call Trace: [ 1059.071961][ T9486] [ 1059.071969][ T9486] dump_stack_lvl+0xe8/0x150 [ 1059.072001][ T9486] should_fail_ex+0x412/0x560 [ 1059.072032][ T9486] should_failslab+0xa8/0x100 [ 1059.072058][ T9486] __kmalloc_cache_noprof+0x88/0x660 [ 1059.072080][ T9486] ? sctp_stream_init_ext+0x57/0x180 [ 1059.072110][ T9486] sctp_stream_init_ext+0x57/0x180 [ 1059.072137][ T9486] sctp_sendmsg_to_asoc+0x8e4/0x1900 [ 1059.072156][ T9486] ? __asan_memcpy+0x40/0x70 [ 1059.072181][ T9486] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 1059.072212][ T9486] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 1059.072232][ T9486] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1059.072251][ T9486] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1059.072278][ T9486] ? __local_bh_enable_ip+0xd0/0x130 [ 1059.072301][ T9486] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1059.072323][ T9486] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1059.072356][ T9486] sctp_sendmsg+0x1b3d/0x2c10 [ 1059.072390][ T9486] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1059.072413][ T9486] ? aa_sk_perm+0x6d5/0x900 [ 1059.072446][ T9486] ? __pfx_aa_sk_perm+0x10/0x10 [ 1059.072475][ T9486] ? sock_rps_record_flow+0x19/0x350 [ 1059.072496][ T9486] ? __pfx_inet_sendmsg+0x10/0x10 [ 1059.072520][ T9486] ? inet_sendmsg+0x2f4/0x370 [ 1059.072542][ T9486] ? __pfx_inet_sendmsg+0x10/0x10 [ 1059.072566][ T9486] __sys_sendto+0x5de/0x710 [ 1059.072591][ T9486] ? __pfx___sys_sendto+0x10/0x10 [ 1059.072610][ T9486] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1059.072649][ T9486] ? __fget_files+0x3a0/0x420 [ 1059.072687][ T9486] ? ksys_write+0x242/0x270 [ 1059.072710][ T9486] ? __pfx_ksys_write+0x10/0x10 [ 1059.072736][ T9486] __x64_sys_sendto+0xde/0x100 [ 1059.072762][ T9486] do_syscall_64+0x14d/0xf80 [ 1059.072788][ T9486] ? trace_irq_disable+0x3b/0x150 [ 1059.072804][ T9486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.072822][ T9486] ? clear_bhb_loop+0x40/0x90 [ 1059.072845][ T9486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.072862][ T9486] RIP: 0033:0x7f104999c819 [ 1059.072881][ T9486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.072897][ T9486] RSP: 002b:00007f104a8ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1059.072920][ T9486] RAX: ffffffffffffffda RBX: 00007f1049c15fa0 RCX: 00007f104999c819 [ 1059.072934][ T9486] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000003 [ 1059.072945][ T9486] RBP: 00007f104a8ff090 R08: 000020000005ffe4 R09: 000000000000001c [ 1059.072957][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1059.072969][ T9486] R13: 00007f1049c16038 R14: 00007f1049c15fa0 R15: 00007fffa503baf8 [ 1059.073000][ T9486] [ 1059.660715][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9126'. [ 1059.708075][ T9500] netlink: 'syz.0.9126': attribute type 13 has an invalid length. [ 1059.784612][ T9503] netlink: 'syz.1.9129': attribute type 11 has an invalid length. [ 1059.817197][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1059.825265][ C1] lec:lec_tx_timeout: lec0 [ 1060.011177][ T9513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9131'. [ 1060.122123][ T9520] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1060.149800][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9136'. [ 1060.218960][ T9527] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9137'. [ 1060.389285][ T9545] macsec1: entered allmulticast mode [ 1060.394717][ T9545] macsec0: entered allmulticast mode [ 1060.400666][ T9545] veth1_macvtap: entered allmulticast mode [ 1060.596122][ T9558] netlink: 'syz.3.9142': attribute type 21 has an invalid length. [ 1060.604583][ T9558] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9142'. [ 1061.188629][ T9556] netlink: 192 bytes leftover after parsing attributes in process `syz.3.9142'. [ 1061.259154][ T9552] gre0 speed is unknown, defaulting to 1000 [ 1061.646495][ T9583] xt_TCPMSS: Only works on TCP SYN packets [ 1061.656827][ T9552] lo speed is unknown, defaulting to 1000 [ 1061.660974][ T9564] gre0 speed is unknown, defaulting to 1000 [ 1061.686824][ T9583] pimreg: entered allmulticast mode [ 1061.705306][ T9586] xt_TCPMSS: Only works on TCP SYN packets [ 1062.209395][ T9564] lo speed is unknown, defaulting to 1000 [ 1062.213871][ T9552] dummy0 speed is unknown, defaulting to 1000 [ 1062.215272][ T9598] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1062.224013][ T51] Bluetooth: hci4: command tx timeout [ 1062.268278][ T9599] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9154'. [ 1062.681492][ T9611] netlink: 324 bytes leftover after parsing attributes in process `syz.1.9159'. [ 1062.711645][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9160'. [ 1062.842340][ T9564] dummy0 speed is unknown, defaulting to 1000 [ 1063.213340][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9166'. [ 1063.649824][ T9653] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9171'. [ 1064.123673][ T9665] netlink: 'syz.1.9175': attribute type 3 has an invalid length. [ 1064.674578][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9183'. [ 1064.790785][ T9698] xt_hashlimit: size too large, truncated to 1048576 [ 1064.808139][ T9698] xt_hashlimit: max too large, truncated to 1048576 [ 1064.860784][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9184'. [ 1064.867828][ T9689] syzkaller1: entered promiscuous mode [ 1064.875219][ T9689] syzkaller1: entered allmulticast mode [ 1064.902467][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9184'. [ 1064.958520][ T9698] netlink: 580 bytes leftover after parsing attributes in process `syz.2.9184'. [ 1065.038923][ T9708] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9186'. [ 1065.073013][ T9708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9186'. [ 1065.200167][ T9708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9186'. [ 1065.239098][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9186'. [ 1065.241908][ T9717] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1065.317482][ T9717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1065.754504][ T9733] siw: device registration error -23 [ 1065.831799][ T9740] veth0_virt_wifi: entered allmulticast mode [ 1065.861060][ T9740] veth0_virt_wifi: left allmulticast mode [ 1066.099225][ T9746] mac80211_hwsim hwsim83 syzkaller0: entered promiscuous mode [ 1066.162346][ T9758] x_tables: duplicate underflow at hook 3 [ 1066.205929][ T9760] gre0 speed is unknown, defaulting to 1000 [ 1066.330481][ T9768] tipc: Started in network mode [ 1066.343102][ T9770] FAULT_INJECTION: forcing a failure. [ 1066.343102][ T9770] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.364268][ T9768] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1066.380284][ T9768] tipc: New replicast peer: fe88:0000:0000:0000:0000:0000:0000:0102 [ 1066.391105][ T9770] CPU: 0 UID: 0 PID: 9770 Comm: syz.0.9206 Not tainted syzkaller #0 PREEMPT(full) [ 1066.391129][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1066.391141][ T9770] Call Trace: [ 1066.391149][ T9770] [ 1066.391161][ T9770] dump_stack_lvl+0xe8/0x150 [ 1066.391192][ T9770] should_fail_ex+0x412/0x560 [ 1066.391225][ T9770] should_failslab+0xa8/0x100 [ 1066.391251][ T9770] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1066.391275][ T9770] ? __alloc_skb+0x1d0/0x7d0 [ 1066.391294][ T9770] ? __local_bh_enable_ip+0xd0/0x130 [ 1066.391323][ T9770] __alloc_skb+0x1d0/0x7d0 [ 1066.391349][ T9770] sctp_packet_transmit+0x290/0x2ac0 [ 1066.391381][ T9770] ? __sctp_packet_append_chunk+0x912/0xd00 [ 1066.391416][ T9770] ? sctp_packet_append_chunk+0x9b4/0x1010 [ 1066.391445][ T9770] sctp_packet_singleton+0x234/0x340 [ 1066.391472][ T9770] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 1066.391505][ T9770] ? sctp_outq_select_transport+0x462/0x570 [ 1066.391528][ T9770] ? sctp_transport_burst_limited+0x19c/0x280 [ 1066.391557][ T9770] sctp_outq_flush+0x50d/0x31b0 [ 1066.391595][ T9770] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1066.391622][ T9770] ? __pfx_sctp_outq_flush+0x10/0x10 [ 1066.391650][ T9770] ? sctp_outq_tail+0x612/0x920 [ 1066.391674][ T9770] ? sctp_outq_uncork+0x4d/0xa0 [ 1066.391698][ T9770] sctp_do_sm+0x54c7/0x5cf0 [ 1066.391727][ T9770] ? __x64_sys_sendto+0xde/0x100 [ 1066.391747][ T9770] ? do_syscall_64+0x14d/0xf80 [ 1066.391771][ T9770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.391797][ T9770] ? __pfx_sctp_do_sm+0x10/0x10 [ 1066.391857][ T9770] ? __sk_mem_raise_allocated+0x290/0x12c0 [ 1066.391883][ T9770] ? __genradix_ptr+0x1e1/0x220 [ 1066.391912][ T9770] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 1066.391936][ T9770] sctp_sendmsg_to_asoc+0x143d/0x1900 [ 1066.391954][ T9770] ? __asan_memcpy+0x40/0x70 [ 1066.391979][ T9770] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 1066.392013][ T9770] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1066.392032][ T9770] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1066.392059][ T9770] ? __local_bh_enable_ip+0xd0/0x130 [ 1066.392080][ T9770] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1066.392102][ T9770] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1066.392128][ T9770] sctp_sendmsg+0x1b3d/0x2c10 [ 1066.392162][ T9770] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1066.392185][ T9770] ? aa_sk_perm+0x6d5/0x900 [ 1066.392218][ T9770] ? __pfx_aa_sk_perm+0x10/0x10 [ 1066.392247][ T9770] ? sock_rps_record_flow+0x19/0x350 [ 1066.392269][ T9770] ? __pfx_inet_sendmsg+0x10/0x10 [ 1066.392292][ T9770] ? inet_sendmsg+0x2f4/0x370 [ 1066.392314][ T9770] ? __pfx_inet_sendmsg+0x10/0x10 [ 1066.392337][ T9770] __sys_sendto+0x5de/0x710 [ 1066.392366][ T9770] ? __pfx___sys_sendto+0x10/0x10 [ 1066.392385][ T9770] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1066.392423][ T9770] ? __fget_files+0x3a0/0x420 [ 1066.392460][ T9770] ? ksys_write+0x242/0x270 [ 1066.392484][ T9770] ? __pfx_ksys_write+0x10/0x10 [ 1066.392510][ T9770] __x64_sys_sendto+0xde/0x100 [ 1066.392536][ T9770] do_syscall_64+0x14d/0xf80 [ 1066.392559][ T9770] ? trace_irq_disable+0x3b/0x150 [ 1066.392575][ T9770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.392593][ T9770] ? clear_bhb_loop+0x40/0x90 [ 1066.392616][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.392635][ T9770] RIP: 0033:0x7f17d6b9c819 [ 1066.392653][ T9770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.392668][ T9770] RSP: 002b:00007f17d7a14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1066.392688][ T9770] RAX: ffffffffffffffda RBX: 00007f17d6e15fa0 RCX: 00007f17d6b9c819 [ 1066.392701][ T9770] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000003 [ 1066.392713][ T9770] RBP: 00007f17d7a14090 R08: 000020000005ffe4 R09: 000000000000001c [ 1066.392725][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1066.392736][ T9770] R13: 00007f17d6e16038 R14: 00007f17d6e15fa0 R15: 00007ffcdde285d8 [ 1066.392768][ T9770] [ 1066.784696][ T9768] tipc: Enabled bearer , priority 21 [ 1066.958194][ T9760] lo speed is unknown, defaulting to 1000 [ 1066.973755][ T9784] netlink: 'syz.0.9211': attribute type 1 has an invalid length. [ 1067.209208][ T9760] dummy0 speed is unknown, defaulting to 1000 [ 1067.251546][ T9799] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1067.257935][ T9797] netlink: 'syz.0.9215': attribute type 4 has an invalid length. [ 1067.266861][ T9799] syzkaller1: linktype set to 825 [ 1067.284068][ T9797] netlink: 'syz.0.9215': attribute type 4 has an invalid length. [ 1067.350020][ T9799] syzkaller1: tun_chr_ioctl cmd 1074304026 [ 1067.433828][ T9805] bond1: entered allmulticast mode [ 1067.439752][ T9805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1067.691381][ T9817] FAULT_INJECTION: forcing a failure. [ 1067.691381][ T9817] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.722873][ T9817] CPU: 0 UID: 0 PID: 9817 Comm: syz.2.9221 Not tainted syzkaller #0 PREEMPT(full) [ 1067.722900][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1067.722912][ T9817] Call Trace: [ 1067.722920][ T9817] [ 1067.722929][ T9817] dump_stack_lvl+0xe8/0x150 [ 1067.722962][ T9817] should_fail_ex+0x412/0x560 [ 1067.722995][ T9817] should_failslab+0xa8/0x100 [ 1067.723025][ T9817] __kmalloc_cache_noprof+0x88/0x660 [ 1067.723047][ T9817] ? sctp_add_bind_addr+0x8c/0x370 [ 1067.723079][ T9817] sctp_add_bind_addr+0x8c/0x370 [ 1067.723109][ T9817] sctp_copy_local_addr_list+0x314/0x4f0 [ 1067.723139][ T9817] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1067.723164][ T9817] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1067.723191][ T9817] ? sctp_v6_is_any+0x64/0x80 [ 1067.723219][ T9817] ? sctp_copy_one_addr+0x93/0x360 [ 1067.723247][ T9817] sctp_bind_addr_copy+0x189/0x3c0 [ 1067.723279][ T9817] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1067.723308][ T9817] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1067.723333][ T9817] ? __local_bh_enable_ip+0xd0/0x130 [ 1067.723355][ T9817] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1067.723376][ T9817] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1067.723401][ T9817] sctp_sendmsg+0x1528/0x2c10 [ 1067.723433][ T9817] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1067.723454][ T9817] ? aa_sk_perm+0x6d5/0x900 [ 1067.723485][ T9817] ? __pfx_aa_sk_perm+0x10/0x10 [ 1067.723512][ T9817] ? sock_rps_record_flow+0x19/0x350 [ 1067.723534][ T9817] ? __pfx_inet_sendmsg+0x10/0x10 [ 1067.723556][ T9817] ? inet_sendmsg+0x2f4/0x370 [ 1067.723578][ T9817] ? __pfx_inet_sendmsg+0x10/0x10 [ 1067.723601][ T9817] __sys_sendto+0x5de/0x710 [ 1067.723625][ T9817] ? __pfx___sys_sendto+0x10/0x10 [ 1067.723643][ T9817] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1067.723681][ T9817] ? __fget_files+0x3a0/0x420 [ 1067.723715][ T9817] ? ksys_write+0x242/0x270 [ 1067.723740][ T9817] ? __pfx_ksys_write+0x10/0x10 [ 1067.723764][ T9817] __x64_sys_sendto+0xde/0x100 [ 1067.723788][ T9817] do_syscall_64+0x14d/0xf80 [ 1067.723812][ T9817] ? trace_irq_disable+0x3b/0x150 [ 1067.723828][ T9817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.723847][ T9817] ? clear_bhb_loop+0x40/0x90 [ 1067.723868][ T9817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.723885][ T9817] RIP: 0033:0x7f8c8999c819 [ 1067.723903][ T9817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.723918][ T9817] RSP: 002b:00007f8c8a8c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1067.723937][ T9817] RAX: ffffffffffffffda RBX: 00007f8c89c15fa0 RCX: 00007f8c8999c819 [ 1067.723951][ T9817] RDX: 0000000000000001 RSI: 0000200000847fff RDI: 0000000000000003 [ 1067.723963][ T9817] RBP: 00007f8c8a8c2090 R08: 000020000005ffe4 R09: 000000000000001c [ 1067.723976][ T9817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1067.723987][ T9817] R13: 00007f8c89c16038 R14: 00007f8c89c15fa0 R15: 00007ffe89cf3f28 [ 1067.724019][ T9817] [ 1067.775380][ T9821] vlan0: entered promiscuous mode [ 1067.991899][ T9826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1068.144022][ T9222] tipc: Node number set to 1 [ 1068.186409][ T9828] bond15: option miimon: invalid value (18446744073709551607) [ 1068.194088][ T9828] bond15: option miimon: allowed values 0 - 2147483647 [ 1068.203016][ T9828] bond15 (unregistering): Released all slaves [ 1068.340079][ T9833] bond15: option miimon: invalid value (18446744073709551607) [ 1068.348086][ T9833] bond15: option miimon: allowed values 0 - 2147483647 [ 1068.356751][ T9833] bond15 (unregistering): Released all slaves [ 1068.382219][ T9849] veth1_macvtap: left allmulticast mode [ 1068.393207][ T9849] veth1_macvtap: left promiscuous mode [ 1068.448110][ T9850] veth1_macvtap: entered promiscuous mode [ 1068.466078][ T9850] veth1_macvtap: entered allmulticast mode [ 1068.532773][ T9852] __nla_validate_parse: 13 callbacks suppressed [ 1068.532792][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9231'. [ 1068.552421][ T9852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9231'. [ 1068.701994][ T9861] netlink: 500 bytes leftover after parsing attributes in process `syz.1.9234'. [ 1068.712255][ T9861] team0: No ports can be present during mode change [ 1068.850301][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9236'. [ 1068.911232][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9238'. [ 1068.927325][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9238'. [ 1069.030952][ T9873] netlink: 47 bytes leftover after parsing attributes in process `syz.1.9237'. [ 1069.135595][ T9878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1069.620473][ T9901] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9244'. [ 1069.838113][ T9907] batman_adv: batadv0: Adding interface: macsec1 [ 1069.846211][ T9907] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.872801][ T9907] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 1070.263790][ T9917] netlink: 'syz.0.9249': attribute type 21 has an invalid length. [ 1070.278384][ T9917] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9249'. [ 1070.315513][ T9917] netlink: 'syz.0.9249': attribute type 5 has an invalid length. [ 1070.334784][ T9917] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9249'. [ 1070.359835][ T9919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.389264][ T9919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.448417][ T9919] bond0: (slave batadv0): Releasing backup interface [ 1070.470424][ T9919] batadv0 (unregistering): left promiscuous mode [ 1070.595380][ T9932] openvswitch: netlink: Message has 8 unknown bytes. [ 1070.602389][ T9932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1070.829600][ T9952] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1070.872200][ T9936] netlink: 'syz.3.9256': attribute type 7 has an invalid length. [ 1071.152524][ T9967] xt_hashlimit: size too large, truncated to 1048576 [ 1071.218885][ T9969] syzkaller1: entered promiscuous mode [ 1071.274013][ T9969] syzkaller1: entered allmulticast mode [ 1071.614603][ T9993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.645246][ T9994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1072.022434][T10019] ip6erspan0: entered promiscuous mode [ 1072.036694][T10019] ip6erspan0: entered allmulticast mode [ 1072.058968][T10026] netlink: 'syz.0.9282': attribute type 61 has an invalid length. [ 1072.076428][ T9222] IPVS: starting estimator thread 0... [ 1072.135277][T10030] vlan2: entered allmulticast mode [ 1072.156369][T10030] bond0: entered allmulticast mode [ 1072.162431][T10030] bond_slave_0: entered allmulticast mode [ 1072.169013][T10030] bond_slave_1: entered allmulticast mode [ 1072.177081][T10028] IPVS: using max 32 ests per chain, 76800 per kthread [ 1072.196315][T10030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.206153][T10030] bond_slave_0: left allmulticast mode [ 1072.213705][T10030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.224475][T10030] bond_slave_1: left allmulticast mode [ 1072.232384][T10030] bond0 (unregistering): Released all slaves [ 1072.550257][T10054] bond2: entered allmulticast mode [ 1072.570867][T10054] macvlan2: entered promiscuous mode [ 1072.576203][T10054] macvlan2: entered allmulticast mode [ 1072.589533][T10054] bond2: (slave macvlan2): Opening slave failed [ 1072.781083][T10071] sctp: [Deprecated]: syz.2.9295 (pid 10071) Use of int in max_burst socket option. [ 1072.781083][T10071] Use struct sctp_assoc_value instead [ 1073.128893][T10089] gre0 speed is unknown, defaulting to 1000 [ 1073.259068][T10092] netlink: 'syz.2.9300': attribute type 4 has an invalid length. [ 1073.407098][T10089] lo speed is unknown, defaulting to 1000 [ 1073.643471][T10089] dummy0 speed is unknown, defaulting to 1000 [ 1074.479652][T10121] ip6tnl0: entered promiscuous mode [ 1074.486670][T10121] __nla_validate_parse: 8 callbacks suppressed [ 1074.486689][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9308'. [ 1074.785495][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9311'. [ 1074.885029][T10143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9312'. [ 1074.894953][T10144] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9312'. [ 1075.013225][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9314'. [ 1075.054057][T10153] bridge_slave_1: left allmulticast mode [ 1075.081138][T10153] bridge_slave_1: left promiscuous mode [ 1075.091444][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9313'. [ 1075.098855][T10153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.134407][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9313'. [ 1075.327711][T10162] vlan5: entered allmulticast mode [ 1075.337045][T10162] bond0: entered allmulticast mode [ 1075.342430][T10162] bond_slave_0: entered allmulticast mode [ 1075.362602][T10162] bond_slave_1: entered allmulticast mode [ 1075.372686][T10162] team0: entered allmulticast mode [ 1075.372794][T10164] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9318'. [ 1075.378214][T10162] team_slave_1: entered allmulticast mode [ 1075.378238][T10162] syz_tun: entered allmulticast mode [ 1075.378260][T10162] mac80211_hwsim hwsim83 wlan1: entered allmulticast mode [ 1075.474030][T10164] bond0 (unregistering): left promiscuous mode [ 1075.493660][T10164] bond_slave_0: left promiscuous mode [ 1075.516128][T10164] bond_slave_1: left promiscuous mode [ 1075.522545][T10164] team0: left promiscuous mode [ 1075.531722][T10164] team_slave_1: left promiscuous mode [ 1075.537622][T10164] syz_tun: left promiscuous mode [ 1075.543152][T10164] mac80211_hwsim hwsim83 wlan1: left promiscuous mode [ 1075.552376][T10164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.562345][T10164] bond_slave_0: left allmulticast mode [ 1075.572567][T10164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.599339][T10164] bond_slave_1: left allmulticast mode [ 1075.608577][T10164] bond0 (unregistering): (slave team0): Releasing backup interface [ 1075.624977][T10164] team0: left allmulticast mode [ 1075.632136][T10164] team_slave_1: left allmulticast mode [ 1075.647919][T10164] syz_tun: left allmulticast mode [ 1075.665636][T10164] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1075.675847][T10164] mac80211_hwsim hwsim83 wlan1: left allmulticast mode [ 1075.692350][T10164] bond0 (unregistering): Released all slaves [ 1075.811673][T10194] syzkaller0: entered promiscuous mode [ 1075.818929][T10194] syzkaller0: entered allmulticast mode [ 1075.974757][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9328'. [ 1075.986194][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9328'. [ 1076.431594][T28693] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1076.442911][T28693] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1076.459640][T10218] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 1076.559083][T10225] netlink: 'syz.1.9334': attribute type 10 has an invalid length. [ 1076.583015][T28693] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1076.610753][T28693] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1076.626476][T28693] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1076.734334][T10220] gre0 speed is unknown, defaulting to 1000 [ 1076.783117][T10229] netlink: 'syz.4.9336': attribute type 3 has an invalid length. [ 1076.870066][T10229] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1076.911682][T10229] netlink: 'syz.4.9336': attribute type 5 has an invalid length. [ 1076.920614][T13116] lec:lec_start_xmit: lec0:No lecd attached [ 1076.945053][T10229] geneve4: entered promiscuous mode [ 1076.999461][T10229] geneve4: entered allmulticast mode [ 1077.059248][T30041] team0: Port device syz_tun removed [ 1077.077867][ T6800] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1077.096363][ T6800] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1077.149815][ T6800] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1077.178107][ T6800] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1077.235774][T10220] lo speed is unknown, defaulting to 1000 [ 1077.377364][T10253] syzkaller0: entered promiscuous mode [ 1077.382958][T10253] syzkaller0: entered allmulticast mode [ 1077.395115][T10253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.405452][T31770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.427702][ T11] block nbd0: Connection timed out, retrying (0/2 alive) [ 1077.436871][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1077.446538][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1077.454527][ T8405] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1077.485296][ T8405] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1077.511945][ T8405] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1077.548704][ T8405] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1077.557607][ T8405] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1077.557631][T10255] bond15: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1077.567987][ T8405] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1077.568076][ T8405] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1077.568095][ T8405] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1077.568153][ T8405] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1077.568171][ T8405] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1077.568199][ T8405] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1077.568215][ T8405] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1077.568242][ T8405] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1077.568258][ T8405] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1077.568285][ T8405] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1077.568303][ T8405] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1077.568342][ T8405] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1077.568360][ T8405] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1077.568798][ T8405] ldm_validate_partition_table(): Disk read failed. [ 1077.569275][ T8405] Dev nbd0: unable to read RDB block 0 [ 1077.714456][ T8405] nbd0: unable to read partition table [ 1077.725411][T10255] bond15 (unregistering): Released all slaves [ 1077.734353][ T8405] ldm_validate_partition_table(): Disk read failed. [ 1077.742395][ T8405] Dev nbd0: unable to read RDB block 0 [ 1077.760823][ T8405] nbd0: unable to read partition table [ 1077.796010][T10278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.803822][T10278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.831407][T10278] bridge0: entered allmulticast mode [ 1077.840926][T10220] dummy0 speed is unknown, defaulting to 1000 [ 1078.380347][T10220] chnl_net:caif_netlink_parms(): no params data found [ 1078.427999][T10305] netlink: 'syz.4.9353': attribute type 8 has an invalid length. [ 1078.541060][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.549162][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.556773][T10220] bridge_slave_0: entered allmulticast mode [ 1078.565572][T10220] bridge_slave_0: entered promiscuous mode [ 1078.577955][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.585452][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.593360][T10220] bridge_slave_1: entered allmulticast mode [ 1078.601224][T10220] bridge_slave_1: entered promiscuous mode [ 1078.663731][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.685793][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.699830][ T51] Bluetooth: hci3: command tx timeout [ 1078.890852][T10220] team0: Port device team_slave_0 added [ 1078.910209][T10220] team0: Port device team_slave_1 added [ 1078.933665][T10331] gre0 speed is unknown, defaulting to 1000 [ 1078.951517][T10344] syzkaller0: entered promiscuous mode [ 1078.966227][T10344] syzkaller0: entered allmulticast mode [ 1079.091863][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.119676][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.176633][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.199701][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.206739][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.269242][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.406855][T10331] lo speed is unknown, defaulting to 1000 [ 1079.431605][T10220] hsr_slave_0: entered promiscuous mode [ 1079.468394][T10220] hsr_slave_1: entered promiscuous mode [ 1079.474922][T10220] debugfs: 'hsr0' already exists in 'hsr' [ 1079.487524][T10220] Cannot create hsr debugfs directory [ 1079.637808][T10358] __nla_validate_parse: 11 callbacks suppressed [ 1079.637828][T10358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9366'. [ 1079.758179][T10362] openvswitch: netlink: IPv4 tun info is not correct [ 1079.813543][T10331] dummy0 speed is unknown, defaulting to 1000 [ 1080.096526][T10220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1080.107762][T10365] sctp: [Deprecated]: syz.0.9368 (pid 10365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1080.107762][T10365] Use struct sctp_sack_info instead [ 1080.133844][T10220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1080.146264][T10365] sctp: [Deprecated]: syz.0.9368 (pid 10365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1080.146264][T10365] Use struct sctp_sack_info instead [ 1080.176630][T10220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1080.196878][T10220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1080.376046][T10380] gre0 speed is unknown, defaulting to 1000 [ 1080.497328][T10220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.550419][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.581085][T10269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.588291][T10269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.638651][T10269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.645858][T10269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.777926][ T51] Bluetooth: hci3: command tx timeout [ 1080.994694][T10398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9375'. [ 1081.032281][T10398] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1081.242952][T10220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.323379][T10220] veth0_vlan: entered promiscuous mode [ 1081.342490][T10220] veth1_vlan: entered promiscuous mode [ 1081.397868][T10220] veth0_macvtap: entered promiscuous mode [ 1081.419879][T10220] veth1_macvtap: entered promiscuous mode [ 1081.512124][T10380] lo speed is unknown, defaulting to 1000 [ 1081.530683][T10220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.561660][T10220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.589975][T10267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.621868][T10267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.648119][T10267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.729052][T10267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.765295][T10408] netlink: 'syz.0.9377': attribute type 1 has an invalid length. [ 1081.803952][T10408] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9377'. [ 1081.829626][T10408] netlink: 'syz.0.9377': attribute type 1 has an invalid length. [ 1081.858162][T10408] netlink: 'syz.0.9377': attribute type 8 has an invalid length. [ 1081.899185][T10408] netlink: 606 bytes leftover after parsing attributes in process `syz.0.9377'. [ 1081.927534][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1081.935660][ C1] lec:lec_tx_timeout: lec0 [ 1081.968175][T10269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.996988][T10269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.055156][T10380] dummy0 speed is unknown, defaulting to 1000 [ 1082.093638][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9383'. [ 1082.112598][T31772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.137452][T31772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.159335][T10421] gre0 speed is unknown, defaulting to 1000 [ 1082.455552][T10442] ip6gretap1: entered allmulticast mode [ 1082.828720][T10421] lo speed is unknown, defaulting to 1000 [ 1082.833044][T10444] gre0 speed is unknown, defaulting to 1000 [ 1082.867312][ T51] Bluetooth: hci3: command tx timeout [ 1082.951420][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9387'. [ 1083.191408][T10450] Bluetooth: MGMT ver 1.23 [ 1083.197734][T10444] lo speed is unknown, defaulting to 1000 [ 1083.213859][T10421] dummy0 speed is unknown, defaulting to 1000 [ 1083.709287][T10444] dummy0 speed is unknown, defaulting to 1000 [ 1084.323087][T10475] netlink: 'syz.0.9394': attribute type 4 has an invalid length. [ 1084.408548][T10479] netlink: 'syz.0.9394': attribute type 10 has an invalid length. [ 1084.512972][T10481] mac80211_hwsim hwsim86 ªªªªª;: renamed from wlan0 [ 1084.551969][T10267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.565364][T10267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.916912][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9400'. [ 1084.926371][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9400'. [ 1084.938236][ T51] Bluetooth: hci3: command tx timeout [ 1084.946891][T10495] openvswitch: netlink: Flow key attribute not present in set flow. [ 1085.083741][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9401'. [ 1085.239566][T10508] netlink: 'syz.0.9405': attribute type 1 has an invalid length. [ 1085.248728][T10508] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9405'. [ 1085.513137][T10514] vlan2: entered allmulticast mode [ 1085.521743][T10514] bond0: entered allmulticast mode [ 1085.527446][T10514] bond_slave_0: entered allmulticast mode [ 1085.533189][T10514] bond_slave_1: entered allmulticast mode [ 1085.539809][T10504] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9403'. [ 1085.547480][T10514] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9407'. [ 1085.567906][T10504] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9403'. [ 1085.664471][T10514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.691593][T10514] bond_slave_0: left allmulticast mode [ 1085.720223][T10514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.745325][T10514] bond_slave_1: left allmulticast mode [ 1085.766823][T10514] bond0 (unregistering): Released all slaves [ 1085.825150][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9409'. [ 1085.837688][T10521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1085.987355][T10525] gre0 speed is unknown, defaulting to 1000 [ 1086.020999][T10529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9411'. [ 1086.320186][T10525] lo speed is unknown, defaulting to 1000 [ 1086.393661][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9414'. [ 1086.423872][T10537] netlink: 'syz.4.9414': attribute type 29 has an invalid length. [ 1086.896523][T10525] dummy0 speed is unknown, defaulting to 1000 [ 1087.020368][ T51] Bluetooth: hci3: command tx timeout [ 1087.033482][T10563] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1087.134097][T10561] netlink: 'syz.3.9420': attribute type 11 has an invalid length. [ 1087.722691][T10588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.730086][T10588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.059910][T28693] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1088.070863][T28693] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1088.083718][T28693] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1088.095326][T28693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1088.105507][T28693] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1088.213957][T10598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.221245][T10598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.228777][T10598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.235923][T10598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.247733][T10598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.254952][T10598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.298911][T10620] Bluetooth: MGMT ver 1.23 [ 1088.453440][T10617] gre0 speed is unknown, defaulting to 1000 [ 1089.019777][T10646] netlink: 'syz.3.9443': attribute type 10 has an invalid length. [ 1089.147668][T10646] veth0_vlan: left promiscuous mode [ 1089.155215][T10646] veth0_vlan: entered promiscuous mode [ 1089.175768][T10646] team0: Device veth0_vlan failed to register rx_handler [ 1089.744262][T10617] lo speed is unknown, defaulting to 1000 [ 1089.833715][T10686] dvmrp12: entered allmulticast mode [ 1089.985113][T10617] dummy0 speed is unknown, defaulting to 1000 [ 1090.137202][T28693] Bluetooth: hci0: command tx timeout [ 1090.157719][T10694] netlink: 'syz.0.9454': attribute type 10 has an invalid length. [ 1090.171826][T10694] team0: Device veth1_macvtap failed to register rx_handler [ 1090.295100][T10617] chnl_net:caif_netlink_parms(): no params data found [ 1090.362715][T10617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.370053][T10617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.377823][T10617] bridge_slave_0: entered allmulticast mode [ 1090.384980][T10617] bridge_slave_0: entered promiscuous mode [ 1090.392900][T10617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.401121][T10617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.408714][T10617] bridge_slave_1: entered allmulticast mode [ 1090.415808][T10617] bridge_slave_1: entered promiscuous mode [ 1090.442001][T10617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.453687][T10617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.481786][T10617] team0: Port device team_slave_0 added [ 1090.490055][T10617] team0: Port device team_slave_1 added [ 1090.515677][T10617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.523203][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.549794][T10617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.562305][T10617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.569414][T10617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.595773][T10617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.636225][T10617] hsr_slave_0: entered promiscuous mode [ 1090.642931][T10617] hsr_slave_1: entered promiscuous mode [ 1090.650245][T10617] debugfs: 'hsr0' already exists in 'hsr' [ 1090.655979][T10617] Cannot create hsr debugfs directory [ 1090.661682][T10685] dvmrp12: left allmulticast mode [ 1090.765169][T10617] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1090.831149][T10617] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1090.882317][T10617] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1090.921045][T10617] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1092.032656][T10656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1092.073906][T10617] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1092.115641][T10617] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1092.145932][T10707] __nla_validate_parse: 13 callbacks suppressed [ 1092.145951][T10707] netlink: 18 bytes leftover after parsing attributes in process `syz.3.9455'. [ 1092.165821][T10617] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1092.202740][T10617] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1092.218633][T28693] Bluetooth: hci0: command tx timeout [ 1092.473848][T10617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.510246][T10617] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.526521][T10283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.533748][T10283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.599344][T10283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.606531][T10283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.883556][T10769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9471'. [ 1093.049143][T10617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.082510][T10780] vlan2: entered allmulticast mode [ 1093.087935][T10780] macvtap0: entered allmulticast mode [ 1093.290924][T10796] netlink: 'syz.1.9477': attribute type 1 has an invalid length. [ 1093.311030][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9477'. [ 1093.327657][T10796] netlink: 658 bytes leftover after parsing attributes in process `syz.1.9477'. [ 1093.336874][T10796] netlink: 'syz.1.9477': attribute type 1 has an invalid length. [ 1093.402489][T10800] IPv6: addrconf: prefix option has invalid lifetime [ 1093.499653][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9480'. [ 1093.562202][T10617] veth0_vlan: entered promiscuous mode [ 1093.593463][T10617] veth1_vlan: entered promiscuous mode [ 1093.665692][T10617] veth0_macvtap: entered promiscuous mode [ 1093.699651][T10617] veth1_macvtap: entered promiscuous mode [ 1093.797253][T10617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1093.825976][T10617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1093.837776][T10825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9483'. [ 1093.865802][T10825] bond0: entered promiscuous mode [ 1093.908585][T10825] bond_slave_0: entered promiscuous mode [ 1093.914458][T10825] bond_slave_1: entered promiscuous mode [ 1093.939936][T10825] bond0: left promiscuous mode [ 1093.958598][T10825] bond_slave_0: left promiscuous mode [ 1093.964206][T10825] bond_slave_1: left promiscuous mode [ 1094.001901][T10827] netlink: 'syz.1.9484': attribute type 2 has an invalid length. [ 1094.027447][T10831] netlink: 'syz.3.9485': attribute type 1 has an invalid length. [ 1094.036356][T10283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.066791][T10283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.084041][T10283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.112295][T10283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.297621][T28693] Bluetooth: hci0: command tx timeout [ 1094.439386][T10283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.466807][T10283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.593446][ T30] audit: type=1800 audit(1774893945.212:26): pid=10840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9485" name="memory.events" dev="tmpfs" ino=110 res=0 errno=0 [ 1094.619158][T10267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.648002][T10267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.771388][T10861] tipc: New replicast peer: 255.255.255.255 [ 1094.783807][T10861] tipc: Enabled bearer , priority 21 [ 1095.066451][T10873] Unsupported ieee802154 address type: 0 [ 1095.365384][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9495'. [ 1095.399982][T28693] block nbd1: Receive control failed (result -1) [ 1095.423432][T10887] tipc: Failed to remove unknown binding: 66,0,0/1:4106401824/4106401826 [ 1095.432084][T10887] tipc: Failed to remove unknown binding: 66,0,0/1:4106401824/4106401825 [ 1095.451455][T10887] tipc: Failed to remove unknown binding: 66,0,0/1:4106401824/4106401826 [ 1095.460731][T10887] tipc: Failed to remove unknown binding: 66,0,0/1:4106401824/4106401825 [ 1095.708853][T10899] lo: Caught tx_queue_len zero misconfig [ 1095.722673][T10899] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 1095.898615][ T9222] tipc: Node number set to 234046788 [ 1096.035110][T10916] netlink: 'syz.3.9507': attribute type 1 has an invalid length. [ 1096.063799][T10916] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.9507'. [ 1096.213150][T10921] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1096.235741][T10925] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1096.334414][T10921] bond0 (unregistering): Released all slaves [ 1096.379544][T28693] Bluetooth: hci0: command tx timeout [ 1096.394561][T10938] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9512'. [ 1096.672506][T10947] netlink: 140 bytes leftover after parsing attributes in process `syz.2.9516'. [ 1096.993033][T10283] [ 1096.995388][T10283] ====================================================== [ 1097.002396][T10283] WARNING: possible circular locking dependency detected [ 1097.009406][T10283] syzkaller #0 Not tainted [ 1097.013797][T10283] ------------------------------------------------------ [ 1097.020788][T10283] kworker/u8:17/10283 is trying to acquire lock: [ 1097.027088][T10283] ffffffff8e85dae8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0 [ 1097.036644][T10283] [ 1097.036644][T10283] but task is already holding lock: [ 1097.043984][T10283] ffffffff8e5fcd08 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9ef/0x1e90 [ 1097.053272][T10283] [ 1097.053272][T10283] which lock already depends on the new lock. [ 1097.053272][T10283] [ 1097.063654][T10283] [ 1097.063654][T10283] the existing dependency chain (in reverse order) is: [ 1097.072646][T10283] [ 1097.072646][T10283] -> #9 (wq_pool_mutex){+.+.}-{4:4}: [ 1097.080107][T10283] __mutex_lock+0x19f/0x1300 [ 1097.085214][T10283] __alloc_workqueue+0x9ef/0x1e90 [ 1097.090739][T10283] alloc_workqueue_noprof+0xe3/0x210 [ 1097.096523][T10283] padata_alloc+0xc1/0x370 [ 1097.101460][T10283] pcrypt_init_padata+0x27/0x100 [ 1097.106914][T10283] pcrypt_init+0x60/0xc0 [ 1097.111731][T10283] do_one_initcall+0x250/0x8d0 [ 1097.117005][T10283] do_initcall_level+0x104/0x190 [ 1097.122474][T10283] do_initcalls+0x59/0xa0 [ 1097.127305][T10283] kernel_init_freeable+0x2a6/0x3e0 [ 1097.133013][T10283] kernel_init+0x1d/0x1d0 [ 1097.137844][T10283] ret_from_fork+0x51e/0xb90 [ 1097.142939][T10283] ret_from_fork_asm+0x1a/0x30 [ 1097.148211][T10283] [ 1097.148211][T10283] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1097.155924][T10283] cpus_read_lock+0x42/0x160 [ 1097.161019][T10283] static_key_slow_inc+0x12/0x30 [ 1097.166471][T10283] ipv6_flowlabel_opt+0x1b94/0x28e0 [ 1097.172172][T10283] do_ipv6_setsockopt+0xd9f/0x3150 [ 1097.177790][T10283] ipv6_setsockopt+0x59/0x170 [ 1097.182976][T10283] do_sock_setsockopt+0x17c/0x1b0 [ 1097.188506][T10283] __x64_sys_setsockopt+0x13d/0x1b0 [ 1097.194210][T10283] do_syscall_64+0x14d/0xf80 [ 1097.199311][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.205736][T10283] [ 1097.205736][T10283] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1097.213458][T10283] lock_sock_nested+0x41/0x100 [ 1097.218730][T10283] inet_shutdown+0x6a/0x390 [ 1097.223740][T10283] nbd_mark_nsock_dead+0x2e9/0x560 [ 1097.229358][T10283] recv_work+0x1c7f/0x1d90 [ 1097.234281][T10283] process_scheduled_works+0xb6e/0x18c0 [ 1097.240334][T10283] worker_thread+0xa53/0xfc0 [ 1097.245441][T10283] kthread+0x388/0x470 [ 1097.250018][T10283] ret_from_fork+0x51e/0xb90 [ 1097.255116][T10283] ret_from_fork_asm+0x1a/0x30 [ 1097.260390][T10283] [ 1097.260390][T10283] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1097.268023][T10283] __mutex_lock+0x19f/0x1300 [ 1097.273213][T10283] nbd_queue_rq+0x37b/0x1100 [ 1097.278309][T10283] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1097.284368][T10283] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1097.291200][T10283] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1097.297693][T10283] blk_mq_run_hw_queue+0x348/0x4f0 [ 1097.303353][T10283] blk_mq_dispatch_list+0xd16/0xe10 [ 1097.309080][T10283] blk_mq_flush_plug_list+0x48d/0x570 [ 1097.314964][T10283] __blk_flush_plug+0x3ed/0x4d0 [ 1097.320598][T10283] __submit_bio+0x28d/0x580 [ 1097.325606][T10283] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1097.331745][T10283] block_read_full_folio+0x599/0x830 [ 1097.337582][T10283] filemap_read_folio+0x137/0x3b0 [ 1097.343149][T10283] do_read_cache_folio+0x358/0x590 [ 1097.348767][T10283] read_part_sector+0xb6/0x2b0 [ 1097.354038][T10283] adfspart_check_ICS+0xa5/0xa40 [ 1097.359482][T10283] bdev_disk_changed+0x7ba/0x1550 [ 1097.365011][T10283] blkdev_get_whole+0x380/0x510 [ 1097.370368][T10283] bdev_open+0x31e/0xd30 [ 1097.375132][T10283] blkdev_open+0x470/0x610 [ 1097.380054][T10283] do_dentry_open+0x785/0x14e0 [ 1097.385326][T10283] vfs_open+0x3b/0x340 [ 1097.389919][T10283] path_openat+0x2e08/0x3860 [ 1097.395021][T10283] do_file_open+0x23e/0x4a0 [ 1097.400030][T10283] do_sys_openat2+0x113/0x200 [ 1097.405303][T10283] __x64_sys_openat+0x138/0x170 [ 1097.410673][T10283] do_syscall_64+0x14d/0xf80 [ 1097.415794][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.422494][T10283] [ 1097.422494][T10283] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1097.429708][T10283] __mutex_lock+0x19f/0x1300 [ 1097.434924][T10283] nbd_queue_rq+0xc6/0x1100 [ 1097.439962][T10283] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1097.446019][T10283] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1097.452857][T10283] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1097.459352][T10283] blk_mq_run_hw_queue+0x348/0x4f0 [ 1097.464971][T10283] blk_mq_dispatch_list+0xd16/0xe10 [ 1097.470682][T10283] blk_mq_flush_plug_list+0x48d/0x570 [ 1097.476559][T10283] __blk_flush_plug+0x3ed/0x4d0 [ 1097.481912][T10283] __submit_bio+0x28d/0x580 [ 1097.486934][T10283] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1097.493183][T10283] block_read_full_folio+0x599/0x830 [ 1097.498988][T10283] filemap_read_folio+0x137/0x3b0 [ 1097.504537][T10283] do_read_cache_folio+0x358/0x590 [ 1097.510160][T10283] read_part_sector+0xb6/0x2b0 [ 1097.515437][T10283] adfspart_check_ICS+0xa5/0xa40 [ 1097.520886][T10283] bdev_disk_changed+0x7ba/0x1550 [ 1097.526441][T10283] blkdev_get_whole+0x380/0x510 [ 1097.531798][T10283] bdev_open+0x31e/0xd30 [ 1097.536546][T10283] blkdev_open+0x470/0x610 [ 1097.541467][T10283] do_dentry_open+0x785/0x14e0 [ 1097.546756][T10283] vfs_open+0x3b/0x340 [ 1097.551335][T10283] path_openat+0x2e08/0x3860 [ 1097.556432][T10283] do_file_open+0x23e/0x4a0 [ 1097.561444][T10283] do_sys_openat2+0x113/0x200 [ 1097.566629][T10283] __x64_sys_openat+0x138/0x170 [ 1097.571993][T10283] do_syscall_64+0x14d/0xf80 [ 1097.577096][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.583502][T10283] [ 1097.583502][T10283] -> #4 (set->srcu){.+.+}-{0:0}: [ 1097.590613][T10283] __synchronize_srcu+0xca/0x300 [ 1097.596064][T10283] elevator_switch+0x1e8/0x7a0 [ 1097.601334][T10283] elevator_change+0x2cc/0x450 [ 1097.606604][T10283] elevator_set_default+0x36c/0x430 [ 1097.612311][T10283] blk_register_queue+0x366/0x430 [ 1097.617846][T10283] __add_disk+0x677/0xd50 [ 1097.622770][T10283] add_disk_fwnode+0xfb/0x480 [ 1097.627973][T10283] nbd_dev_add+0x72c/0xb50 [ 1097.632897][T10283] nbd_init+0x168/0x1f0 [ 1097.637560][T10283] do_one_initcall+0x250/0x8d0 [ 1097.642837][T10283] do_initcall_level+0x104/0x190 [ 1097.648279][T10283] do_initcalls+0x59/0xa0 [ 1097.653109][T10283] kernel_init_freeable+0x2a6/0x3e0 [ 1097.658811][T10283] kernel_init+0x1d/0x1d0 [ 1097.663816][T10283] ret_from_fork+0x51e/0xb90 [ 1097.668910][T10283] ret_from_fork_asm+0x1a/0x30 [ 1097.674182][T10283] [ 1097.674182][T10283] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1097.681985][T10283] __mutex_lock+0x19f/0x1300 [ 1097.687088][T10283] elevator_change+0x1b3/0x450 [ 1097.692360][T10283] elevator_set_none+0xb5/0x140 [ 1097.697719][T10283] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1097.704038][T10283] nbd_start_device+0x17f/0xb10 [ 1097.709401][T10283] nbd_genl_connect+0x165b/0x1cf0 [ 1097.714931][T10283] genl_family_rcv_msg_doit+0x22a/0x330 [ 1097.721009][T10283] genl_rcv_msg+0x61c/0x7a0 [ 1097.726114][T10283] netlink_rcv_skb+0x232/0x4b0 [ 1097.731400][T10283] genl_rcv+0x28/0x40 [ 1097.735917][T10283] netlink_unicast+0x80f/0x9b0 [ 1097.741205][T10283] netlink_sendmsg+0x813/0xb40 [ 1097.746488][T10283] ____sys_sendmsg+0x972/0x9f0 [ 1097.751763][T10283] ___sys_sendmsg+0x2a5/0x360 [ 1097.756948][T10283] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1097.762406][T10283] do_syscall_64+0x14d/0xf80 [ 1097.767520][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.773917][T10283] [ 1097.773917][T10283] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1097.782532][T10283] blk_alloc_queue+0x546/0x680 [ 1097.787804][T10283] __blk_mq_alloc_disk+0x197/0x390 [ 1097.793420][T10283] nbd_dev_add+0x499/0xb50 [ 1097.798342][T10283] nbd_init+0x168/0x1f0 [ 1097.803004][T10283] do_one_initcall+0x250/0x8d0 [ 1097.808277][T10283] do_initcall_level+0x104/0x190 [ 1097.813722][T10283] do_initcalls+0x59/0xa0 [ 1097.818557][T10283] kernel_init_freeable+0x2a6/0x3e0 [ 1097.824264][T10283] kernel_init+0x1d/0x1d0 [ 1097.829107][T10283] ret_from_fork+0x51e/0xb90 [ 1097.834221][T10283] ret_from_fork_asm+0x1a/0x30 [ 1097.839532][T10283] [ 1097.839532][T10283] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1097.846731][T10283] fs_reclaim_acquire+0x71/0x100 [ 1097.852174][T10283] prepare_alloc_pages+0x152/0x650 [ 1097.857792][T10283] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1097.864104][T10283] __alloc_pages_noprof+0xa/0x30 [ 1097.869546][T10283] pcpu_populate_chunk+0x182/0xb30 [ 1097.875162][T10283] pcpu_alloc_noprof+0xc6c/0x19c0 [ 1097.880688][T10283] xt_percpu_counter_alloc+0x161/0x220 [ 1097.886654][T10283] translate_table+0x134a/0x2110 [ 1097.892100][T10283] ipt_register_table+0x11b/0x7f0 [ 1097.897640][T10283] iptable_nat_table_init+0x43/0x2e0 [ 1097.903454][T10283] xt_find_table_lock+0x30c/0x3e0 [ 1097.908991][T10283] xt_request_find_table_lock+0x26/0x100 [ 1097.915132][T10283] do_ipt_get_ctl+0x716/0x1240 [ 1097.920405][T10283] nf_getsockopt+0x26e/0x290 [ 1097.925503][T10283] ip_getsockopt+0x19e/0x230 [ 1097.930599][T10283] do_sock_getsockopt+0x2d3/0x3f0 [ 1097.936130][T10283] __x64_sys_getsockopt+0x1a4/0x240 [ 1097.941834][T10283] do_syscall_64+0x14d/0xf80 [ 1097.946935][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.953338][T10283] [ 1097.953338][T10283] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1097.961058][T10283] __lock_acquire+0x15a5/0x2cf0 [ 1097.966416][T10283] lock_acquire+0xf0/0x2e0 [ 1097.971337][T10283] __mutex_lock+0x19f/0x1300 [ 1097.976443][T10283] pcpu_alloc_noprof+0x218/0x19c0 [ 1097.981975][T10283] __alloc_workqueue+0xa81/0x1e90 [ 1097.987683][T10283] alloc_workqueue_noprof+0xe3/0x210 [ 1097.993473][T10283] __rds_conn_create+0x134b/0x22d0 [ 1097.999093][T10283] rds_conn_create+0x43/0x60 [ 1098.004194][T10283] rds_tcp_accept_one+0x46b/0xd50 [ 1098.009727][T10283] rds_tcp_accept_worker+0x1d/0x70 [ 1098.015366][T10283] process_scheduled_works+0xb6e/0x18c0 [ 1098.021427][T10283] worker_thread+0xa53/0xfc0 [ 1098.026528][T10283] kthread+0x388/0x470 [ 1098.031099][T10283] ret_from_fork+0x51e/0xb90 [ 1098.036196][T10283] ret_from_fork_asm+0x1a/0x30 [ 1098.041472][T10283] [ 1098.041472][T10283] other info that might help us debug this: [ 1098.041472][T10283] [ 1098.051680][T10283] Chain exists of: [ 1098.051680][T10283] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 1098.051680][T10283] [ 1098.064700][T10283] Possible unsafe locking scenario: [ 1098.064700][T10283] [ 1098.072126][T10283] CPU0 CPU1 [ 1098.077473][T10283] ---- ---- [ 1098.082813][T10283] lock(wq_pool_mutex); [ 1098.087047][T10283] lock(cpu_hotplug_lock); [ 1098.094089][T10283] lock(wq_pool_mutex); [ 1098.100838][T10283] lock(pcpu_alloc_mutex); [ 1098.105349][T10283] [ 1098.105349][T10283] *** DEADLOCK *** [ 1098.105349][T10283] [ 1098.113488][T10283] 4 locks held by kworker/u8:17/10283: [ 1098.119012][T10283] #0: ffff8880316c5948 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1098.129884][T10283] #1: ffffc9000615fc40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1098.142579][T10283] #2: ffff88806a521068 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xae/0xd50 [ 1098.153269][T10283] #3: ffffffff8e5fcd08 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9ef/0x1e90 [ 1098.163006][T10283] [ 1098.163006][T10283] stack backtrace: [ 1098.168929][T10283] CPU: 0 UID: 0 PID: 10283 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 1098.168946][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1098.168957][T10283] Workqueue: krdsd rds_tcp_accept_worker [ 1098.168976][T10283] Call Trace: [ 1098.168984][T10283] [ 1098.168992][T10283] dump_stack_lvl+0xe8/0x150 [ 1098.169012][T10283] print_circular_bug+0x2e1/0x300 [ 1098.169034][T10283] check_noncircular+0x12e/0x150 [ 1098.169055][T10283] __lock_acquire+0x15a5/0x2cf0 [ 1098.169074][T10283] ? check_path+0x21/0x40 [ 1098.169092][T10283] ? check_noncircular+0xda/0x150 [ 1098.169112][T10283] ? add_lock_to_list+0xc7/0x100 [ 1098.169130][T10283] ? lockdep_unlock+0x5d/0xd0 [ 1098.169144][T10283] ? __lock_acquire+0x146e/0x2cf0 [ 1098.169162][T10283] lock_acquire+0xf0/0x2e0 [ 1098.169177][T10283] ? pcpu_alloc_noprof+0x218/0x19c0 [ 1098.169196][T10283] __mutex_lock+0x19f/0x1300 [ 1098.169215][T10283] ? pcpu_alloc_noprof+0x218/0x19c0 [ 1098.169230][T10283] ? __mutex_trylock_common+0x158/0x260 [ 1098.169251][T10283] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1098.169271][T10283] ? pcpu_alloc_noprof+0x218/0x19c0 [ 1098.169286][T10283] ? trace_contention_end+0x3d/0x150 [ 1098.169299][T10283] ? __pfx___mutex_lock+0x10/0x10 [ 1098.169317][T10283] ? __mutex_lock+0x319/0x1300 [ 1098.169343][T10283] ? __alloc_workqueue+0x9ef/0x1e90 [ 1098.169358][T10283] pcpu_alloc_noprof+0x218/0x19c0 [ 1098.169372][T10283] ? rcu_is_watching+0x15/0xb0 [ 1098.169392][T10283] ? __kasan_kmalloc+0x93/0xb0 [ 1098.169407][T10283] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 1098.169425][T10283] __alloc_workqueue+0xa81/0x1e90 [ 1098.169443][T10283] alloc_workqueue_noprof+0xe3/0x210 [ 1098.169456][T10283] ? pcpu_alloc+0x10/0x360 [ 1098.169475][T10283] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1098.169491][T10283] ? mutex_init_lockep+0xf9/0x130 [ 1098.169510][T10283] __rds_conn_create+0x134b/0x22d0 [ 1098.169526][T10283] ? __rds_conn_create+0x2e4/0x22d0 [ 1098.169546][T10283] ? __pfx___rds_conn_create+0x10/0x10 [ 1098.169561][T10283] ? __ipv6_chk_addr_and_flags+0x686/0x7e0 [ 1098.169579][T10283] ? __ipv6_chk_addr_and_flags+0x187/0x7e0 [ 1098.169601][T10283] rds_conn_create+0x43/0x60 [ 1098.169616][T10283] rds_tcp_accept_one+0x46b/0xd50 [ 1098.169635][T10283] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 1098.169654][T10283] rds_tcp_accept_worker+0x1d/0x70 [ 1098.169669][T10283] ? process_scheduled_works+0xa8d/0x18c0 [ 1098.169685][T10283] process_scheduled_works+0xb6e/0x18c0 [ 1098.169711][T10283] ? __pfx_process_scheduled_works+0x10/0x10 [ 1098.169730][T10283] ? assign_work+0x3d5/0x5e0 [ 1098.169747][T10283] worker_thread+0xa53/0xfc0 [ 1098.169772][T10283] kthread+0x388/0x470 [ 1098.169785][T10283] ? __pfx_worker_thread+0x10/0x10 [ 1098.169801][T10283] ? __pfx_kthread+0x10/0x10 [ 1098.169814][T10283] ret_from_fork+0x51e/0xb90 [ 1098.169832][T10283] ? __pfx_ret_from_fork+0x10/0x10 [ 1098.169848][T10283] ? __switch_to+0xc7d/0x1450 [ 1098.169864][T10283] ? __pfx_kthread+0x10/0x10 [ 1098.169876][T10283] ret_from_fork_asm+0x1a/0x30 [ 1098.169900][T10283]