last executing test programs: 3.346024938s ago: executing program 3 (id=5203): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0xffff0001, 0x3) syz_emit_ethernet(0x79, &(0x7f0000000200)={@multicast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x3, 0x0, 0x6b, 0x65, 0x0, 0x14, 0x6, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@lsrr={0x83, 0xb, 0x27, [@empty, @rand_addr=0x64010102]}, @ssrr={0x89, 0xf, 0xc7, [@broadcast, @local, @private=0xa010100]}, @noop, @generic={0x82, 0x7, "26ca087061"}, @timestamp={0x44, 0x4, 0xf, 0x0, 0x3}, @ssrr={0x89, 0x7, 0x8a, [@multicast1]}, @end]}}, {{0x4e20, 0x4e23, 0x41424344, r1, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x2}, {"b29d836397cbfe1b6362d9bd6d3e9e4c9a2afc"}}}}}}, 0x0) r2 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c00010000000100"/36], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4880}, 0x48040801) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x3e9, 0x800, 0x70bd26, 0x25dfdbfc, {0x10, 0x0, 0x1, r4, 0x1, 0x7, 0x200, 0x81, 0x0, 0x40000, 0x8}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140), 0x4) 3.115572765s ago: executing program 3 (id=5206): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) listen(r0, 0xec) (async) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003e2ffff030289800000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd0a, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) socketpair(0x15, 0xa, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r4, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) 2.825763416s ago: executing program 1 (id=5212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff, 0x100}, 0x50) unshare(0x6020400) r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x9}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095", @ANYRESHEX=r5, @ANYBLOB="66d4f33669826d5ec0a1ddab38a89e4c95cbc21cc870940c7c083991b942c90bf60c226a64a97e428c521a586d88e0689c0bc119d862756d6cf978f41d41ffbe4798aa32e7e8e2ef155bd0746d797c9b458306b4e7dc0bef719b3062b1efbfc703c4b9b81d43e664301938efe274d3307003f30044ea6bbc5a41d18554902f194db3d99f336b3435661bba3601c594d22fdf101d123fcee99735671a2ab20e5213fedf7b7f579c16a5a6a6c2199dda6c322d5bcc6bdca53d08666038246e525e2b353f07215713ec8b0a6721cf347c7aba31f35e823a49ae9fada80e2c427f32a63026ce9f91295444d0"], 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)=""/4096, 0x8f, 0x1000, 0x0, 0x5, 0x10000, @value=r0}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @flow_dissector, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000400)={r7, &(0x7f0000000080)='-.\\\x00', 0x900, &(0x7f0000000280)={@_ha_fsid={[0x10, 0x7]}, {0x9, 0x480, 0x9, 0xfdaf}}, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x23d}) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet(0x2, 0x80001, 0x84) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000000540)) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r12 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r12, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x80108907, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000000100)={r11, 0xa11c}, 0x8) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r13, &(0x7f0000000080)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 2.34013639s ago: executing program 2 (id=5216): socket(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'xfrm0\x00'}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async, rerun: 64) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (rerun: 64) r12 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r11}, 0x8) close(r12) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4040) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.150206123s ago: executing program 2 (id=5219): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000400000004000000120000000000000057da9367f2ba79a1bdba8651455007d650efc60fe58dcfe35a8ad135a12c5fc7f9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00210000000000001c001280090039fa2eb642ecb82b00000c000280080003005802000088d49007b12f1a521342a650943995dd07b2d824b1b0d822b406083b05c2581fa52a1b15954357d8295221e716d748af051506b72b65ec3d427e5fc4b426b305c02e78f8fa00005788444e0ae6ca31c93e00960b4390d17543fd1f2e45f3165f9e36876fe011088109956137c3e90ed205030885b4344acbe2f24969c66bfe7b4f51c337e023f559daa9d13f2ce7962e2ea495455cdee89d706ff0551ade169f86f49fae75d99384708791e534e2201611ad00"/230], 0x3c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) close(r1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000040)={0x5, 0x5c54ad8, 0x4, 0x200}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xc3, 0xd9, &(0x7f0000000100)="cc4a508dfa7c5e48716ea1156ad2ad3ecaa8dbe3a22d032ec6abf5c4c8151c209e8d00a0081d93b90721bf14ca5bfc500f7ea3a77e0aafb1b2a3fe835a53e0052e558249ab3fe2985df1b07ec6688f07f220071134088852d1cd803900c5a4e7a2a7e8ea345d853292c83d6ad79808f67cd29d0b98e755626d6f371fa53b2ceb2fd7d2a7c815ad80a33fc9ec23484312456ca5160b519dcf823265a89dcf52e58abdfb19d70dd3bc59707df62198a071174b040365a44f6eaab276d7b0dd9e5bd638ce", &(0x7f0000000200)=""/217, 0xf6e, 0x0, 0xa0, 0x41, &(0x7f0000000300)="c5c16f4b7e131b18866fdc45f1f3e7f141abad6e7f51a87cb3ac19851d2b9225eea9e4e040aa01e550996133c1981c1fd9b5c9acc114f6197f56fa26dac105a781847050a2b4338b95aeb630aa131d5c18fdff4c9956f09988ca3c4a29af7d65c96700664ebf2b02049db92a18666e849d0c514ab98f1448a6c287b6e03cc9c1f203d6f9e5b4aebfa3deac8df1f7bdc6042d665406669b8cce2546bde8e369f8", &(0x7f00000003c0)="ae4f3941480657331f5200b3b93dcbffd6b389e1c396633bdb4e9e66f0da943d5d8dd69364695f4f9ee3e2bf33f8fc4cf9163322d12e3bd8cde089e5e9fc4aaec2", 0x4, 0x0, 0x7}, 0x50) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0x1, 0x500}, 0x48) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x0, 0x13, r6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 2.134971417s ago: executing program 3 (id=5220): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x0, 0x0, 0x23d, 0x0, "2dfedf4fe729e6da2c283c04b074205e1eefc56dbc4e3bbeef85e81f0118fc0f64326f290de80584bce41936f14cb7a820ac8e630e660da57c076a7cb4155c7f0efdcea917bd84db674f344208d682a5"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x0, 0x0, 0x23d, 0x0, "2dfedf4fe729e6da2c283c04b074205e1eefc56dbc4e3bbeef85e81f0118fc0f64326f290de80584bce41936f14cb7a820ac8e630e660da57c076a7cb4155c7f0efdcea917bd84db674f344208d682a5"}, 0xd8) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x8, 0x401, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x83, &(0x7f0000000dc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000610", 0x4d, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@hopopts={0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x78}]}], "983864eee1fe71e030673c5d9f"}}}}}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r4, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) (async) recvfrom$inet6(r4, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0xf) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a90000000000000000000000000000000000000000dd4f869049cbf9f07b884bd1880000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000008000003c00000000000000ffffffff00000000000000000000000000000000000300"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRESDEC=r4, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000000000a000a"], 0xbc}}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRESDEC=r4, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000000000a000a"], 0xbc}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38) (async) write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)={0x60, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x5555555555550081}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x52}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8001}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.971511141s ago: executing program 0 (id=5221): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc9, 0x400, 0xcfc5}}}, 0xa) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc9, 0x400, 0xcfc5}}}, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd28, 0x25dfdbfd, 0xc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x7328, 0x0}, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r3}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000080000000020000000900020073797a32000000000900010073797a30000000002c1e5b9e7f35b348659aa53410000480280001800700e3ff627400001c00028005000300010000000800024000000015080001400000000f140000001100010000000000000000000000000a14f6b7a7a30f326a201f47a623446427773e6653fd2646d90f75e07b0256756b84b04d87116a377480fba100d507b2007a661b1f8d"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040004) 1.964879651s ago: executing program 2 (id=5222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="b373e2ee3d473139a0b26d887987c21e4ee0d3c3942fb77cb2962377000000003220000002004e20ac14141500000000000000000000000000f80000"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000140000000000800024000000003080003400000000108000440ffffffff0900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) r2 = socket$inet(0x2, 0x802, 0x1) write(r2, &(0x7f0000000080)="08008edf773c8000", 0xfd) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r5], 0x84}}, 0x20008040) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e000000e701000000032c08a944070000000000", @ANYRES32, @ANYBLOB="a2bfb32500"/20, @ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="0400000001000000040000000600"/28], 0x50) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800fb000000000000000000000000001d3085120000fdffffff950000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f00000001c0)={r8, &(0x7f0000000500)=')>_\x16\xe5\x86\xc4\xfd\x04\x972qx(\xc1\x84\x8d\x8fx\x02\xb3^5\xe2$\x12\x8a)\x05h\xd7\x95\xdd\xc8\x12r\xcb\xda\x1cz\xc8\xfc\x1a\x98N4}\\\xbc\x80\xf5\xf9o\xc8c\xf8\xec\xe3T\xbe\x17e\xa6k!sHlgE\x84\xea08^S\xa1k9\xc97\xe6.\xf0\xbe\xd6\xd8\x87\xb2\x81\rE\xf9&\r\xff\x00\x00\x00\x00\x00\x00\x00\x00', 0x800, &(0x7f0000000040)={@align=0xffe, {0x1000, 0x57, 0x48001f, 0x3}}, 0x4, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000180)}) syz_emit_ethernet(0x36, &(0x7f00000026c0)=ANY=[@ANYBLOB="aaaa707e400a06ef438276aaaaaaaaffffffffff0000000000000000000000000100"/54], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000030000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000af000000000000008510000001000000950000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0x8) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x2000300, 0xe, 0x0, &(0x7f0000000580)="63eced8e46dc3f9bbb3389f79986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r12, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r10, 0x0) 1.938765912s ago: executing program 3 (id=5223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x70bd6c, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MTU={0x8, 0x4, 0x1ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200)=0x2, 0x4) listen(r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)={@val={0x70, 0xf7}, @void, @eth={@remote, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x12, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}, "443fb0a855ea"}}}}}}}, 0x38) syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x54, 0x6, 0xfe, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0xc2, 0x2000, 0x0, 0x7, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x8, @local, 0x1}, @md5sig={0x13, 0x12, "a1cbd12aa50e39de3b5624a87fb75f32"}, @md5sig={0x13, 0x12, "e9803cac6913fbfccc18ce5a512eaf73"}, @md5sig={0x13, 0x12, "f2a3c47d2be4dabe21013d40454c15b5"}]}}}}}}}}, 0x0) r6 = socket$inet_sctp(0x2, 0x65f03688bf3367ba, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3, 0x2, 0x200, 0x2, 0x3, {0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x2, 0x0, 0x17, 0x25, 0x7ff}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000340)={r7, 0x48, &(0x7f00000002c0)=[@in6={0xa, 0x6a1, 0x7, @private1, 0x6}, @in6={0xa, 0x4e23, 0x7, @empty, 0x9a}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @broadcast}], 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.808499187s ago: executing program 1 (id=5225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000000400028008000300070000000800090001"], 0x44}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) 1.748196384s ago: executing program 0 (id=5226): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2000000068746c2d8ede067d9268cc289e28da3944f83bf7f09d0856c4023917cf6567978f0383edb4548c109a514bbfecc16601d1eb23c38809b4b3b808f4e70a8db4938eaef7c1d64048f37dac4b18578a5b0cc21ad77f125c8ac0fc40172129854e768742aa0f6e1be386ad607f9322fdc1bfbbf86529e66b68a9c2430f3446157f9b12d9d34ccb09655e418044da98f4078c5abe2d61d231b0080d6226a9e14ca6b938e7da9c7a8167c925ea07a627291826b5f3af7b09d37ed002a74d78453d994d3c5affd582ba453d4b99ef78e64e25de49446755039d794b16434125787a2d1826002988c3e01d7411e5e3116c3c2650b13f8c4802266e8a1a07a4edc1eeaca2a05281c780c7a26e4bf4f9bba5c0ed4ff412fd140b14275ee4314dc6ae5b96dead8780a739b3feb7072bb5aa681010293b2586b2e09f69456f8ba3bde500000085c5ea032773f3281970bf91294d5638db00db7f8d4b4a84c7487d9d3eb9a2cf922899b9fbeaabe94fd5d8656be374778b44768514b9174dcca3ca2832350b44b66990ee53680eeb9718b99914001bd72ba05378c40fae568d939156e8d91207af956e25d80146dd63f6ba8a7d5754edea561046e104d444d6b17e1d4a4262e110fdcf81782e5e4d6d", @ANYRES16=r1, @ANYBLOB="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"/305], 0x20}, 0x1, 0x0, 0x0, 0x10050}, 0x4000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x98, 0x130, 0x130, 0x1c8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {0x59e9ca6af987edf9}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x28}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r4], 0x38}}, 0x10) 1.632040128s ago: executing program 2 (id=5227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newrule={0x6c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_DST={0x14, 0x1, @empty}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'pimreg0\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, @FRA_DST={0x14, 0x1, @loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24040884}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000651515bf1e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000651515bf1e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.629900642s ago: executing program 4 (id=5228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000140)={@empty}, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x2c, 0x40, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x2}]}, @nested={0x4, 0x2}]}, 0x2c}}, 0xc000) 1.542953712s ago: executing program 0 (id=5229): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000001280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f7}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0x2, 0x2}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e40)={0x44, 0x1, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}]}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002100210107000000000000000a000000000000000000000008001a"], 0x24}}, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r5, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x14c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x2b}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c044) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0x9f, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_CONSUMED={0xc}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x4) 1.35567892s ago: executing program 1 (id=5230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd2c, 0x25dfdbfe, {0xa, 0x14, 0x14, 0xd4, 0x1, 0x0, 0x0, 0x8, 0x11}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002000010000000000000000000af9130000000002000000001400010000000000000000000000000000000001140002"], 0x44}}, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000077c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async, rerun: 64) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) (async) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000000)='Z%G}', 0x4}], 0x1, 0x4) (async) write$cgroup_subtree(r7, &(0x7f0000003100)=ANY=[], 0x10448) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r8}, 0x70) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x10, r0, 0xaf0b9000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000004c0)={r1, r9}) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f580000000c0a0101000000000000000001001b000900020073797a32000000002c0003802800008008000340000000021c000b80360001800e000100636f6e6e6c696d69740c0000040002800900010073797a3000"], 0xdc}}, 0x0) 1.019438247s ago: executing program 1 (id=5231): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0xef, &(0x7f0000000580)=""/239, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x5, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x7c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) 948.298106ms ago: executing program 4 (id=5232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f00000000c0), 0x2c8, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000002c0)={0x2, 0xfffffffffffffff7, 0xc9, &(0x7f00000001c0)=""/201}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0xc000) 823.907752ms ago: executing program 4 (id=5233): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x7fffffff, @private0, 0x6}}, 0x24) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x69}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x2c}}, 0x4810) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x50, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf2e}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x5, 0x3, 0x3]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}]]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="143cc13de2f555bcb70000002c0050000800d800", @ANYRES32=0xee00, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x48800) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x48000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r11, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9, 0x0, 0x1}}}}, 0x30}}, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 743.20196ms ago: executing program 0 (id=5234): r0 = socket$tipc(0x1e, 0x4, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0xb004}, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x800, @any, 0x0, 0x1}, 0xe) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f00000003c0)={0x3, 0x8, 0x6, 0xf, 0xee4c}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'gre0\x00', 0x2}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000440)={'veth1\x00', 0x600}) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000004c0)="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", 0x21d}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x1, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0xeab2d256dadddff3, &(0x7f0000000140)=0x5, 0x4) (async) connect$tipc(r0, &(0x7f00000052c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3}}, 0x10) 739.997032ms ago: executing program 2 (id=5235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000000d06010200000000d98835ce00000000020000080500010007000000050005000000000016000300684873683a6e65742c706f000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10000}, 0x40880) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xc0}]}]}, 0x4c}}, 0x60040) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f0000000140)) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x5c, 0x0, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x3, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3f, 0x3, "acd1e93ad0ea106ddb39225708bb69c808216067eee7c4a0", "561e1642983432c4630021d6bede7e392b9d9a148783918358d915b3071872e0"}}}}}}}, 0x6e) 675.0238ms ago: executing program 3 (id=5236): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) 599.513804ms ago: executing program 1 (id=5237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2400}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x65}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000080)='exthdr\x00', 0x1, &(0x7f00000000c0)={@_ha_fsid={[0x3, 0x7]}, {0x80, 0x3, 0x40, 0x10001}}, 0xbf4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x2000000}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000001340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000000bc0)={0x6dc, 0xd, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x680, 0x3, 0x0, 0x1, [{0x67c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x314, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "b97422062ae33b2d4887da1c2bb5fc10508a9fd528adeb5e73ba3996e2ce7d9069eb695ae535d17d69adc925e8f875cc1e4da7c7c5750c1a3223d19edf38cb67fe84eab7c2a58dc3f115759ddcf7dd46d86abbddd5f779fe9d878e17ccdf2d2a36cd07e595a5e6df2032aaf88bcabd35d9c1a28c0a9e22195b9609ad89aa6f028c7fbbb2fcf676a66ca3105e12640bba56ef531e77afb7df9ecb975967b515f6131a1c25b1c9"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "c0862e686bda57af0704e83272a05e7764592f65b0c11c7a0b3fd54674cdefb1cf61ae114e92add3c5da8346a29b1659d0f1fbda31e37bdab9fd1c23d175d510af4399e4076ea6b1c29fd74fcd2bd59a29b100b8539360996f910b3655bf765d1cb4fff19ff38149c98a19b3de12c3b98c2433b641ade5e4ec2e22a91c0ba1ddbca06ea3def11c596fc52aea4d82bfb0a18cf64eacc2924a65fa92b4da907b27db55d198e49edaf1c63166904aa3bdcd67ad6f317f6eb6d4e6daef269fc56c56d7f34bc622892b68275497f8455c84fd3f0e2e0d4d706d85bd24f13b76"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x27, 0x1, "e268fc8e3b2578b1cd6d19b42966ab7f3eae1e33fc3b875bad8e68bdfdc73ba961c4e2"}, @NFTA_DATA_VALUE={0xf2, 0x1, "3e499654614c3dc629929e3ceffabf54442a85ccf33cf3eeac9d6f8649ed7962dfd9f6049b452d092a7b79e2e465504b12637965088840a6064050b5aad00e821cf681045ca9047f0fe00081e997c818af4c3c549f580e354c8d5838ea6496bd9959da026de30f9a539838e1326ada22d81c2953fc35ce5477eaac0de4d5a57ab9915a6bf93e6df92b0556beeff0384c4f6a4bd5b459d192b2cb2c885d6c4c9127be00d004d2e3316df0be5b2285ce26faed7b9aa353c50987e15ccd4522108283c78b03e28f3a00ee4d1cb950e463beac78f426d33cc90c49d3c8bcc240443589a1a422b411c7415a17b46ed9f1"}]}, @NFTA_SET_ELEM_USERDATA={0x9b, 0x6, 0x1, 0x0, "ef7763a36fc4e9fa1bd88c5bfedbd66ff6f36bb96c6e13da0ae55fb79201f7c4fa35cadee26e9f91ed70dc4f24a76d2721b9284d46d01ce2ceb931a60ca02d607bcbd9f1463e94b6fcd37ff371485e861ad42f01840b7f20d0aea355ca362c4b22abf75951db93a34a93c7170d9d753106c26368e82dfe7ac408ff8cc50cba5f677e6dd30ae46a92766c7dc3c38e4005aa3760092999d5"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x298, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x92, 0x1, "fc4f2fc1e37b7aaebd6d0944fedaf06f19db5940c9fdce7ef0af6efcae7b1cd2bd7fc6009ee579e4175d84a99af3a86721a17cc914f6cb4b920be920fe53943d1b2ec90dad2cefab0e3f1f93b68b0b5713cd0d4a08a8bf86b69cb2ade81f1c59a58fb4686271041bde9c5309fabce5c7e9e15af473bf856996e8b9137d91e1602f2c1cc4ec4dd416108b6812b8e6"}, @NFTA_DATA_VALUE={0xc6, 0x1, "488ad524b0f54dc5f89d89fb82e397528cdedc7eafc71578a2ec221fbad1462f1ba92368c41d924245fabd69670305a107fc56ddc1e7e654112fd7ced05fbb53018b21cf7648ad566290dd53bb0d9ad2f215e5dae16052385b307cf6efd1854b03344745faec0ada381bf18c9cb16e4d39046701d8c0b2a7122dd43acb50ef88d018c80806f6576edabb74494a1c483d4f645066b7d1e2d9d7d15439fc117cfbcff25d64902541594e15ac39c18d9bba370d21d1a250fada584ba2fe89f0e322de40"}, @NFTA_DATA_VALUE={0x8f, 0x1, "e047b3ca58e3d1df2d3a16b04512bf377c0e1909d54033072e6cf8e578ace175197c3fad53ecc4ea2f74aed28550399e763c3e595556ff598df896a7dfcd4da956ee6f7fce77820f8989e4edd91ece3fd403d2ab292d20181a31ce53e25337d9629d07fbab15cf22058aa017d47e8901552004a2c91e950699cbf78ba89fc955f4a21c47aa1f8463c028ad"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x6, 0x1, "1f8a"}, @NFTA_DATA_VALUE={0x59, 0x1, "7f7d49d6e154f8afcbcfd48adcc6436a47c0b7bfd40a3cd49d94c49a4edb2ee4305a4c65c21f1258e5609ab29b0fff46d99f4eb9b2c69d59ee9b28e2db9b65d0b6cda5b1239bddfbb9065fb40f6eb398e1d7899b40"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5d}, @NFTA_SET_ELEM_USERDATA={0x1b, 0x6, 0x1, 0x0, "40dd6f7038f10b7a5a881e63ad857ca4a5e6fe60033562"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x20004011}, 0x404c000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000b80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f00000003c0)=@newtfilter={0x778, 0x2c, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff1}, {0x2, 0x1}, {0xfff1, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x9}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x7}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x81}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0xa329}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @filter_kind_options=@f_basic={{0xa}, {0x6f8, 0x2, [@TCA_BASIC_POLICE={0x460, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffff66, 0x3, 0xfffffffe, 0x200, 0x2, 0xcf39cab, 0x3, 0x5, 0x6, 0x8, 0x80000001, 0x3f2cd090, 0x4, 0x5, 0x5, 0x0, 0x7, 0x6, 0x2, 0x80000000, 0x89, 0x1, 0x9, 0x0, 0x3, 0x4, 0xd, 0x6, 0xc5f, 0x10, 0x6, 0x0, 0x0, 0xff, 0xbda, 0x9, 0xff, 0x3, 0x3, 0x8, 0xd, 0xc8e1, 0x3, 0x2, 0xfffffffd, 0xee74, 0xfffffff8, 0x4, 0x0, 0x0, 0x3, 0xfffffffb, 0x800000, 0x1, 0x9, 0x1000, 0xd, 0x6, 0x0, 0x4, 0x8, 0x3, 0xfffffffd, 0xd8, 0x2, 0x5, 0x5, 0x57b0, 0x0, 0x1, 0x9, 0xbb, 0xffff, 0x400, 0x9, 0x5, 0x101, 0x3ff, 0x4, 0xffff, 0x6, 0xfffff274, 0x7, 0xe, 0xfffffff8, 0x200, 0x0, 0x1, 0x5, 0xf7, 0xc5c, 0x44, 0x1, 0x6, 0x4e6bc44, 0x7b, 0x2, 0x91, 0xf8, 0xffffffff, 0x7, 0x8, 0x6, 0x6, 0x5b2, 0x17, 0x4, 0x1, 0x7, 0x18000000, 0x7, 0x90d, 0x6, 0x23e, 0xffff, 0x500000, 0x5, 0x800, 0x1, 0x7f, 0x8, 0x0, 0x140000, 0x666, 0x0, 0x9, 0x4, 0x4, 0x6, 0x6, 0xfffffff7, 0x4, 0x3, 0x2, 0x9, 0xfbd, 0x3, 0x9297, 0x7, 0x5, 0x8, 0x0, 0x4800000, 0x9, 0x9, 0x8, 0x0, 0x9c6, 0x80, 0x7fffffff, 0xba, 0x1aba, 0x7a6, 0x0, 0xc, 0xd, 0x7fff, 0x3d, 0x5, 0x1, 0x7fff, 0x2, 0x101, 0xbbd5, 0x0, 0x200, 0x8, 0x2000000, 0x7, 0x43e, 0x5, 0x1000, 0x10001, 0x30, 0x3, 0x7, 0xfff, 0x6, 0x0, 0x2, 0x69, 0xfffffffd, 0x1000, 0x6, 0x7fffffff, 0x8, 0x7, 0x400, 0x0, 0x10001, 0x5, 0x8, 0x2, 0xff, 0x0, 0x80000001, 0x7fffffff, 0xc81, 0x3, 0x3e6, 0x400, 0x100, 0x7, 0x2, 0x6, 0x7, 0x4, 0x101, 0x2, 0x3, 0x80000000, 0x4, 0x9, 0x101, 0x9, 0x4, 0x40, 0x3, 0xc, 0x38e, 0x3, 0x1, 0xffffff7f, 0x5661, 0x10001, 0x80, 0x4, 0x5, 0x18ce, 0xffffffff, 0x0, 0xd8, 0xffffffff, 0x49, 0x6, 0x9, 0x6, 0x9cc, 0x1, 0x7, 0x101, 0xfffffff9, 0x4, 0xfffffeff, 0xdd, 0x8, 0x9, 0x80000001, 0x7f, 0x9836, 0x401, 0x0, 0x3ff, 0x1, 0x3, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x6, 0x2, 0x2, 0x6, {0x7, 0x1, 0x8, 0x8, 0x8, 0xca}, {0x0, 0x1, 0xb, 0x8000, 0x400, 0x7}, 0x3, 0x3, 0x40000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb1}]}, @TCA_BASIC_EMATCHES={0x294, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x200, 0x8, 0xa518}, {0x2, 0x2, 0x1}}}, @TCF_EM_META={0x5c, 0x1, 0x0, 0x0, {{0x8001, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x9, 0x2}, {0x8, 0x6, 0x1}}}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="337fe81efa", @TCF_META_TYPE_VAR=',N']}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR="f5a362b3", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="dc8560fdef75", @TCF_META_TYPE_VAR="b409aa7659c1", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="cc084252", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x92}, {0xfffffff7, 0x843, 0x39, 0x5}}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x8}, {0x9, 0x2, 0x3, 0x4}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0xa80}, {0x17, 0x2, 0xb, 0x6, 0xc, 0x0, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xf0c, 0x1, 0xfff8}, {0x1, 0x3ff, 0x1, 0x4, 0xa, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1ac, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x6}, {0x0, 0x5, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x3649}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x1}}}}, @TCF_EM_META={0xf4, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x101}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x8, 0x2}, {0x200, 0x24}}}, @TCA_EM_META_LVALUE={0x2c, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="5cfc17", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="798be9410b184c", @TCF_META_TYPE_VAR="585047fec14986", @TCF_META_TYPE_VAR="ae673b0b9a85d5", @TCF_META_TYPE_VAR="44798ac814a0c2fe"]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="aa43"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x97}, {0x3ff, 0xa6, 0x2}}}, @TCA_EM_META_RVALUE={0x33, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ea045204dd", @TCF_META_TYPE_VAR="b4b3e81b5c5dcb", @TCF_META_TYPE_VAR="d3f2ebdb3dfe1bf4e753", @TCF_META_TYPE_VAR="05518c3d8929220a20", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="d68c", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="2b0e"]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="344119ce110e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x79c, 0xe, 0x1}, {0xa, 0xb9, 0x1}}}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="cb", @TCF_META_TYPE_VAR="a9534876ee836e31fc68"]}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_VAR="0259ae18", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="d87bea320f4665", @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_META={0x90, 0x1, 0x0, 0x0, {{0x9, 0x4, 0xfe}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xff, 0x2}, {0x9, 0xff}}}, @TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="27afca3d467fbdb192", @TCF_META_TYPE_VAR="ccfbda408b9e4b", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="4d4dad"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x8, 0x2}, {0x10, 0xbc}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="9eeeec130f339058a5", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="706aedc9", @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="f798", @TCF_META_TYPE_INT=0x8]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x81}]}, 0x778}}, 0x8060) 545.330322ms ago: executing program 4 (id=5238): r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, 0x0, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$kcm(0x11, 0x200000000000003, 0x300) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r2}, 0x18) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000c14010029bd7000fbdbdf2508003d000100000008000100010000000800030001"], 0x28}}, 0x840) 476.168154ms ago: executing program 0 (id=5239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001580)={0x14, r2, 0x87, 0x70bd2d, 0x0, {0x1e}}, 0x14}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x4e) 319.612859ms ago: executing program 4 (id=5240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000000600028008000300070000000800090001"], 0x44}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) 255.139125ms ago: executing program 2 (id=5241): socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async, rerun: 32) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000029000b0027bd7000004000000201"], 0x1c}}, 0x4040080) 212.265868ms ago: executing program 3 (id=5242): select(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000003c0)={0x2, "89ea"}, 0x3) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x6, 0x4, &(0x7f0000000100)="b50d824e", 0x9, 0x2, 0x7c0, 0x8000, 0x43, 0x0, 0x7, 'syz0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x8084) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x20, 0x5, 0x9, {{0xe, 0x4, 0x0, 0x9, 0x38, 0x64, 0x0, 0x81, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x24, 0xd5, 0x3, 0x3, [{@multicast1, 0xc}, {@multicast2, 0x2}, {@multicast2, 0x2}, {@rand_addr=0x64010102, 0x2}]}]}}}}}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@getqdisc={0x28, 0x26, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x3, 0x2}, {0x4, 0xc}, {0xfff1, 0xfff1}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x40001) 155.400282ms ago: executing program 1 (id=5243): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x80, 0x10, 0x800, 0x1f, {{0x39, 0x4, 0x0, 0x1, 0xe4, 0x65, 0x0, 0x3, 0x29, 0x0, @private=0xa010101, @multicast1, {[@rr={0x7, 0xb, 0x9d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x27, 0x65, [@dev={0xac, 0x14, 0x14, 0x36}, @empty, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @loopback]}, @rr={0x7, 0xf, 0x37, [@loopback, @rand_addr=0x64010101, @private=0xa010100]}, @rr={0x7, 0x13, 0xf0, [@remote, @dev={0xac, 0x14, 0x14, 0x36}, @local, @private=0xa010100]}, @ssrr={0x89, 0x17, 0x9b, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0xc, 0xea, 0x1, 0x7, [{@multicast1, 0x7a5}]}, @timestamp_addr={0x44, 0x54, 0x59, 0x1, 0x6, [{@loopback, 0x3ff}, {@rand_addr=0x64010100, 0xffffffff}, {@private=0xa010102, 0xdf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@multicast2, 0x9}, {@multicast1, 0x37}, {@broadcast, 0xff}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x2}, {@multicast2, 0xc7a9}, {@multicast1, 0x5d}]}]}}}}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast2, @loopback, 0x0}, &(0x7f0000000500)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x10, 0x10, 0x6d, 0x7, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x65, 0x0, 0x9, 0x29, 0x0, @private=0xa010102, @multicast1, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x170, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) (async, rerun: 64) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r0) (rerun: 64) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r12, 0x20, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x846}, 0x20000080) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={0xffffffffffffffff, &(0x7f0000000900)="38bba04a64c570be1f9be767e5548d5c9ff7e2900885c067227979e3b332e6cb7aac470d1f1bef180afb460e80b5e529927ca5c22d8532477c4eb9bbffbb0db3a6fc2999ad1b69c76e9c0ee999cc2994a3ab7b3a71dd6df3765ec64f0179ac1938e1ccf7e3cb8cf469467b581d87ccc6f5d8de93c07ae6c04671ebfe2eca2bb0d1d3fd2cbdb336a061fc610a1f164c8891bdd975f1ae415207ef4908bd67bcab086f55555a7024822a0957fca663f2a2f6da60f89b35c9ab9f80a4f9e18350b1", &(0x7f00000009c0)=""/66, 0x4}, 0x20) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f0000000ac0), 0x8) (async) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r13) sendmsg$ETHTOOL_MSG_COALESCE_GET(r14, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x108, r15, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x88d1}, 0x4004) (async) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r14, 0x1, 0x53, &(0x7f0000000d40)={0x7, 0x7, 0x3}, &(0x7f0000000d80)=0x28) (async) ioctl$sock_FIOSETOWN(r14, 0x8901, &(0x7f0000000dc0)) (async) r16 = socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r13) sendmsg$TIPC_NL_MEDIA_GET(r16, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x50, r17, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x16}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r18 = syz_genetlink_get_family_id$team(&(0x7f0000000fc0), r16) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001000)={'bridge0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000017c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f0000001180)={0x5dc, r18, 0x4, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r19}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x423fb7f3}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 129.580731ms ago: executing program 4 (id=5244): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) getpeername(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000002000000000009500000000000000c030f0a9b259d3dfd07ce635f4dd02e6f04f4de91b1af7e4ec707cac1bfe1b3198b780193ab3c01cb086f5aa3016da19d17ada89f896630c7a7c4bfd8e153d2bb36ab120e6813eb14d3a5c2c282901c642897f08a55fb02b87e4c162d2bf32241000f9a574f518cfb5d6c6c20d9b06003bf7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 0 (id=5245): r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000858ae69cde03dfa09fb6624e847ccb0095af022abe95b7f44a1d9ace36fc400ea6cd15371b43235db48929d207db5a0b0abf7326e92955d3b020afe2fe44020cde179f4532665d36e9c2a4a25974918d93a61a415398bb415b31265ab6fddcec0291c8949480d218342dd67d49d0eead26c317b02816fe74449f5ed8c938a76a4f2601ad9e3bfe4d574eac5ffc2b63d902d1"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) kernel console output (not intermixed with test programs): 9][ T9883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.294570][ T9883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.312092][ T9883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.331537][ T6438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.362684][T19007] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3522'. [ 415.588092][T18929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.758894][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.789758][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.871184][T19014] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3524'. [ 415.882432][ T9882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.903132][ T9882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.994573][T19027] FAULT_INJECTION: forcing a failure. [ 415.994573][T19027] name failslab, interval 1, probability 0, space 0, times 0 [ 416.009396][T19027] CPU: 1 UID: 0 PID: 19027 Comm: syz.0.3527 Not tainted syzkaller #0 PREEMPT(full) [ 416.009420][T19027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 416.009431][T19027] Call Trace: [ 416.009437][T19027] [ 416.009445][T19027] dump_stack_lvl+0xe8/0x150 [ 416.009470][T19027] should_fail_ex+0x412/0x560 [ 416.009521][T19027] should_failslab+0xa8/0x100 [ 416.009542][T19027] __kmalloc_noprof+0xe8/0x760 [ 416.009569][T19027] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 416.009603][T19027] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 416.009634][T19027] genl_family_rcv_msg_doit+0xd9/0x330 [ 416.009663][T19027] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 416.009692][T19027] ? apparmor_capable+0x126/0x170 [ 416.009717][T19027] ? bpf_lsm_capable+0x9/0x20 [ 416.009735][T19027] ? security_capable+0x7e/0x2c0 [ 416.009894][T19027] genl_rcv_msg+0x61c/0x7a0 [ 416.009922][T19027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.009942][T19027] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 416.010032][T19027] ? __pfx_ref_tracker_free+0x10/0x10 [ 416.010107][T19027] netlink_rcv_skb+0x232/0x4b0 [ 416.010138][T19027] ? __pfx_genl_rcv_msg+0x10/0x10 [ 416.010162][T19027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.010209][T19027] ? down_read+0x270/0x2e0 [ 416.010250][T19027] ? genl_rcv+0xd/0x40 [ 416.010274][T19027] genl_rcv+0x28/0x40 [ 416.010295][T19027] netlink_unicast+0x75c/0x8e0 [ 416.010333][T19027] netlink_sendmsg+0x813/0xb40 [ 416.010373][T19027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.010407][T19027] ? aa_sock_msg_perm+0xf1/0x1b0 [ 416.010438][T19027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.010468][T19027] ____sys_sendmsg+0x972/0x9f0 [ 416.010487][T19027] ? __might_fault+0xaf/0x130 [ 416.010528][T19027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.010558][T19027] ? import_iovec+0x73/0xa0 [ 416.010585][T19027] ___sys_sendmsg+0x2a5/0x360 [ 416.010602][T19027] ? __lock_acquire+0x6b5/0x2cf0 [ 416.010623][T19027] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.010673][T19027] ? __fget_files+0x2a/0x420 [ 416.010708][T19027] ? __fget_files+0x3a0/0x420 [ 416.010741][T19027] __x64_sys_sendmsg+0x1bd/0x2a0 [ 416.010763][T19027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.010791][T19027] ? __pfx_ksys_write+0x10/0x10 [ 416.010827][T19027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.010847][T19027] do_syscall_64+0x174/0x580 [ 416.010865][T19027] ? trace_irq_disable+0x3b/0x140 [ 416.010892][T19027] ? clear_bhb_loop+0x40/0x90 [ 416.010915][T19027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.010933][T19027] RIP: 0033:0x7f7b4759ce59 [ 416.010950][T19027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.010966][T19027] RSP: 002b:00007f7b4853f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.010986][T19027] RAX: ffffffffffffffda RBX: 00007f7b47815fa0 RCX: 00007f7b4759ce59 [ 416.011000][T19027] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 416.011012][T19027] RBP: 00007f7b4853f090 R08: 0000000000000000 R09: 0000000000000000 [ 416.011023][T19027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.011045][T19027] R13: 00007f7b47816038 R14: 00007f7b47815fa0 R15: 00007ffd6c644958 [ 416.011074][T19027] [ 416.017056][T19014] bond1 (unregistering): Released all slaves [ 416.526134][T19030] vlan2: entered allmulticast mode [ 416.540305][T19030] hsr0: entered allmulticast mode [ 416.549941][T19030] hsr_slave_0: entered allmulticast mode [ 416.561901][T19030] hsr_slave_1: entered allmulticast mode [ 416.873777][T19038] bond1: entered promiscuous mode [ 416.958228][T19045] macvlan3: entered promiscuous mode [ 416.963746][T19045] macvlan3: entered allmulticast mode [ 416.970300][T19045] bond1: (slave macvlan3): Opening slave failed [ 417.264697][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3535'. [ 417.325013][T19061] : entered promiscuous mode [ 417.333938][T19063] netlink: 'syz.4.3536': attribute type 4 has an invalid length. [ 417.352186][T19061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3535'. [ 417.499011][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 417.512311][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 417.522493][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.538756][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.549088][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 418.246820][T19098] netlink: 'syz.4.3545': attribute type 15 has an invalid length. [ 418.272391][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3545'. [ 418.405219][T19098] netlink: 'syz.4.3545': attribute type 15 has an invalid length. [ 418.430791][T19098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3545'. [ 418.595808][T19112] netlink: 'syz.0.3548': attribute type 3 has an invalid length. [ 418.648547][ T1155] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 418.673981][ T1155] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 418.733852][T19111] : entered promiscuous mode [ 418.767081][ T1155] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 418.799712][ T1155] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 419.452907][T19132] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3554'. [ 419.597756][ T5640] Bluetooth: hci0: command tx timeout [ 419.719527][T19136] sctp: [Deprecated]: syz.2.3555 (pid 19136) Use of int in max_burst socket option deprecated. [ 419.719527][T19136] Use struct sctp_assoc_value instead [ 419.918895][ T9883] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.958111][ T9883] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.074392][T19149] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 420.308754][ T9883] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.352552][ T9883] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.437122][T19065] wg1 speed is unknown, defaulting to 1000 [ 420.542181][T19179] openvswitch: netlink: Key type 30 is not supported [ 420.577336][T19182] netlink: 'syz.0.3566': attribute type 10 has an invalid length. [ 420.591912][T19179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.643171][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3564'. [ 420.829714][T19182] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 420.978484][T19195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3568'. [ 421.010279][T19201] FAULT_INJECTION: forcing a failure. [ 421.010279][T19201] name failslab, interval 1, probability 0, space 0, times 0 [ 421.023496][T19201] CPU: 0 UID: 0 PID: 19201 Comm: syz.0.3570 Not tainted syzkaller #0 PREEMPT(full) [ 421.023518][T19201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 421.023529][T19201] Call Trace: [ 421.023536][T19201] [ 421.023545][T19201] dump_stack_lvl+0xe8/0x150 [ 421.023577][T19201] should_fail_ex+0x412/0x560 [ 421.023602][T19201] should_failslab+0xa8/0x100 [ 421.023622][T19201] __kmalloc_cache_noprof+0x88/0x660 [ 421.023648][T19201] ? ovs_dp_cmd_new+0x1cc/0xb30 [ 421.023679][T19201] ovs_dp_cmd_new+0x1cc/0xb30 [ 421.023707][T19201] ? trace_kmalloc+0x2a/0xf0 [ 421.023733][T19201] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 421.023762][T19201] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 421.023783][T19201] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 421.023812][T19201] genl_family_rcv_msg_doit+0x22a/0x330 [ 421.023840][T19201] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 421.023874][T19201] ? bpf_lsm_capable+0x9/0x20 [ 421.023891][T19201] ? security_capable+0x7e/0x2c0 [ 421.023923][T19201] genl_rcv_msg+0x61c/0x7a0 [ 421.023950][T19201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.023979][T19201] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 421.024004][T19201] ? __pfx_ref_tracker_free+0x10/0x10 [ 421.024036][T19201] netlink_rcv_skb+0x232/0x4b0 [ 421.024063][T19201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.024085][T19201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.024131][T19201] ? down_read+0x270/0x2e0 [ 421.024150][T19201] ? genl_rcv+0xd/0x40 [ 421.024172][T19201] genl_rcv+0x28/0x40 [ 421.024193][T19201] netlink_unicast+0x75c/0x8e0 [ 421.024227][T19201] netlink_sendmsg+0x813/0xb40 [ 421.024261][T19201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.024291][T19201] ? aa_sock_msg_perm+0xf1/0x1b0 [ 421.024320][T19201] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.024348][T19201] ____sys_sendmsg+0x972/0x9f0 [ 421.024366][T19201] ? __might_fault+0xaf/0x130 [ 421.024395][T19201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.024421][T19201] ? import_iovec+0x73/0xa0 [ 421.024446][T19201] ___sys_sendmsg+0x2a5/0x360 [ 421.024462][T19201] ? __lock_acquire+0x6b5/0x2cf0 [ 421.024503][T19201] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.024564][T19201] ? __fget_files+0x2a/0x420 [ 421.024587][T19201] ? __fget_files+0x3a0/0x420 [ 421.024621][T19201] __x64_sys_sendmsg+0x1bd/0x2a0 [ 421.024643][T19201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.024671][T19201] ? __pfx_ksys_write+0x10/0x10 [ 421.024708][T19201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.024729][T19201] do_syscall_64+0x174/0x580 [ 421.024747][T19201] ? trace_irq_disable+0x3b/0x140 [ 421.024774][T19201] ? clear_bhb_loop+0x40/0x90 [ 421.024798][T19201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.024816][T19201] RIP: 0033:0x7f7b4759ce59 [ 421.024834][T19201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.024848][T19201] RSP: 002b:00007f7b4853f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.024868][T19201] RAX: ffffffffffffffda RBX: 00007f7b47815fa0 RCX: 00007f7b4759ce59 [ 421.024882][T19201] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 421.024893][T19201] RBP: 00007f7b4853f090 R08: 0000000000000000 R09: 0000000000000000 [ 421.024905][T19201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.024916][T19201] R13: 00007f7b47816038 R14: 00007f7b47815fa0 R15: 00007ffd6c644958 [ 421.024948][T19201] [ 421.675613][ T5640] Bluetooth: hci0: command tx timeout [ 421.699815][T19210] netlink: 'syz.4.3571': attribute type 16 has an invalid length. [ 421.774036][T19210] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3571'. [ 421.898759][ T9883] bridge_slave_1: left promiscuous mode [ 421.913977][ T9883] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.961124][ T9883] bridge_slave_0: left allmulticast mode [ 421.997184][ T9883] bridge_slave_0: left promiscuous mode [ 422.018794][T19233] openvswitch: netlink: IP tunnel dst address not specified [ 422.032141][ T9883] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.099342][ T9883] pimreg: left allmulticast mode [ 422.750242][ T9883] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 422.758690][ T9883] bridge4 (unregistering): left promiscuous mode [ 422.819815][ T9883] bond13 (unregistering): (slave bridge5): Releasing backup interface [ 422.828430][ T9883] bridge5 (unregistering): left promiscuous mode [ 422.933183][ T9883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.942097][ T9883] bond_slave_0: left allmulticast mode [ 422.949773][ T9883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.965836][ T9883] bond_slave_1: left allmulticast mode [ 422.973828][ T9883] bond0 (unregistering): (slave team0): Releasing backup interface [ 422.982433][ T9883] team0: left allmulticast mode [ 422.988416][ T9883] team_slave_0: left allmulticast mode [ 422.993919][ T9883] team_slave_1: left allmulticast mode [ 423.000594][ T9883] bond0 (unregistering): Released all slaves [ 423.013324][ T9883] bond1 (unregistering): Released all slaves [ 423.027824][ T9883] bond2 (unregistering): Released all slaves [ 423.042826][ T9883] bond3 (unregistering): Released all slaves [ 423.060194][ T9883] bond4 (unregistering): Released all slaves [ 423.086581][ T9883] bond5 (unregistering): Released all slaves [ 423.102959][ T9883] bond6 (unregistering): (slave veth13): Releasing backup interface [ 423.112840][ T9883] bond6 (unregistering): Released all slaves [ 423.129908][ T9883] bond7 (unregistering): Released all slaves [ 423.147800][ T9883] bond8 (unregistering): Released all slaves [ 423.166811][ T9883] bond9 (unregistering): (slave bond10): Releasing backup interface [ 423.176191][ T9883] bond9 (unregistering): Released all slaves [ 423.192905][ T9883] bond10 (unregistering): Released all slaves [ 423.207735][ T9883] bond12 (unregistering): Released all slaves [ 423.227008][ T9883] bond11 (unregistering): Released all slaves [ 423.243129][ T9883] bond13 (unregistering): Released all slaves [ 423.275998][ T9883] bond14 (unregistering): Released all slaves [ 423.297595][ T9883] bond15 (unregistering): Released all slaves [ 423.317464][T19210] veth0_macvtap: entered allmulticast mode [ 423.334843][T19230] syzkaller0: entered promiscuous mode [ 423.345970][T19230] syzkaller0: entered allmulticast mode [ 423.387191][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 423.555744][ T9883] : left promiscuous mode [ 423.615466][T12027] wg1 speed is unknown, defaulting to 1000 [ 423.641393][T12027] syz2: Port: 1 Link DOWN [ 423.681232][ T9883] tipc: Left network mode [ 423.756093][ T5640] Bluetooth: hci0: command tx timeout [ 423.801911][T19265] netlink: 'syz.4.3579': attribute type 4 has an invalid length. [ 423.949877][T19268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3582'. [ 424.037362][T19268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3582'. [ 424.097560][T19268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3582'. [ 424.168661][T19268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3582'. [ 424.181084][T19268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3582'. [ 424.268886][T19275] x_tables: duplicate entry at hook 1 [ 424.280893][T19268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3582'. [ 424.342202][T19268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3582'. [ 424.413194][T19268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3582'. [ 424.520932][T19065] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.558548][T19065] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.603049][T19065] bridge_slave_0: entered allmulticast mode [ 424.646395][T19065] bridge_slave_0: entered promiscuous mode [ 424.676966][T19282] syzkaller1: entered promiscuous mode [ 424.693418][T19282] syzkaller1: entered allmulticast mode [ 424.773349][T19065] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.806915][T19065] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.845929][T19065] bridge_slave_1: entered allmulticast mode [ 424.891616][T19065] bridge_slave_1: entered promiscuous mode [ 425.360169][T19065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.383016][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 425.400273][T19314] syzkaller0: entered promiscuous mode [ 425.416543][T19314] syzkaller0: entered allmulticast mode [ 425.461693][T19065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.728546][T19065] team0: Port device team_slave_0 added [ 425.799983][T19065] team0: Port device team_slave_1 added [ 425.844303][ T5640] Bluetooth: hci0: command tx timeout [ 426.013561][T19065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.033735][T19065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.064459][T19065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.116046][T19065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.136034][T19065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.173324][T19065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.209342][ T9883] hsr_slave_0: left promiscuous mode [ 426.215792][ T9883] hsr_slave_1: left promiscuous mode [ 426.222185][ T9883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.230746][ T9883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.256394][ T9883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.265306][ T9883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.279349][ T9883] vlan0: left allmulticast mode [ 426.284395][ T9883] veth0_vlan: left allmulticast mode [ 426.289945][ T9883] vlan0: left promiscuous mode [ 426.296639][ T9883] veth1_vlan: left promiscuous mode [ 426.302075][ T9883] veth0_vlan: left promiscuous mode [ 427.114088][ T12] smc: removing ib device syz0 [ 427.236279][ T9883] team0 (unregistering): Port device team_slave_1 removed [ 427.253965][ T9883] team0 (unregistering): Port device team_slave_0 removed [ 427.336608][ T9887] smbdirect: ib_dev[syz2] removed [ 427.443227][ T5636] syz0: Port: 1 Link DOWN [ 427.453677][ T12] smbdirect: ib_dev[syz0] removed [ 427.642763][T19065] hsr_slave_0: entered promiscuous mode [ 427.660253][T19065] hsr_slave_1: entered promiscuous mode [ 427.679225][T19065] debugfs: 'hsr0' already exists in 'hsr' [ 427.685456][T19065] Cannot create hsr debugfs directory [ 428.273145][T19334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.662663][T19393] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 428.679691][T19393] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 428.936796][T19408] netlink: 'syz.4.3610': attribute type 21 has an invalid length. [ 429.098702][T19421] FAULT_INJECTION: forcing a failure. [ 429.098702][T19421] name failslab, interval 1, probability 0, space 0, times 0 [ 429.122826][T19408] __nla_validate_parse: 26 callbacks suppressed [ 429.122843][T19408] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3610'. [ 429.140240][T19421] CPU: 0 UID: 0 PID: 19421 Comm: syz.1.3614 Not tainted syzkaller #0 PREEMPT(full) [ 429.140267][T19421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.140279][T19421] Call Trace: [ 429.140287][T19421] [ 429.140295][T19421] dump_stack_lvl+0xe8/0x150 [ 429.140325][T19421] should_fail_ex+0x412/0x560 [ 429.140355][T19421] should_failslab+0xa8/0x100 [ 429.140378][T19421] __kmalloc_noprof+0xe8/0x760 [ 429.140408][T19421] ? ovs_vport_alloc+0x30/0x300 [ 429.140519][T19421] ovs_vport_alloc+0x30/0x300 [ 429.140556][T19421] internal_dev_create+0x2b/0x470 [ 429.140581][T19421] ovs_vport_add+0x113/0x370 [ 429.140608][T19421] ? new_vport+0x12/0x190 [ 429.140648][T19421] new_vport+0x1a/0x190 [ 429.140675][T19421] ovs_dp_cmd_new+0x6b9/0xb30 [ 429.140724][T19421] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 429.140755][T19421] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 429.140778][T19421] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 429.140807][T19421] genl_family_rcv_msg_doit+0x22a/0x330 [ 429.140836][T19421] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.140870][T19421] ? bpf_lsm_capable+0x9/0x20 [ 429.140887][T19421] ? security_capable+0x7e/0x2c0 [ 429.140921][T19421] genl_rcv_msg+0x61c/0x7a0 [ 429.140957][T19421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.140978][T19421] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 429.141004][T19421] ? __pfx_ref_tracker_free+0x10/0x10 [ 429.141035][T19421] netlink_rcv_skb+0x232/0x4b0 [ 429.141063][T19421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.141085][T19421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.141127][T19421] ? down_read+0x270/0x2e0 [ 429.141146][T19421] ? genl_rcv+0xd/0x40 [ 429.141168][T19421] genl_rcv+0x28/0x40 [ 429.141186][T19421] netlink_unicast+0x75c/0x8e0 [ 429.141221][T19421] netlink_sendmsg+0x813/0xb40 [ 429.141257][T19421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.141286][T19421] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.141313][T19421] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.141341][T19421] ____sys_sendmsg+0x972/0x9f0 [ 429.141358][T19421] ? __might_fault+0xaf/0x130 [ 429.141387][T19421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.141414][T19421] ? import_iovec+0x73/0xa0 [ 429.141439][T19421] ___sys_sendmsg+0x2a5/0x360 [ 429.141455][T19421] ? __lock_acquire+0x6b5/0x2cf0 [ 429.141477][T19421] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.141528][T19421] ? __fget_files+0x2a/0x420 [ 429.141549][T19421] ? __fget_files+0x3a0/0x420 [ 429.141581][T19421] __x64_sys_sendmsg+0x1bd/0x2a0 [ 429.141602][T19421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.141630][T19421] ? __pfx_ksys_write+0x10/0x10 [ 429.141664][T19421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.141684][T19421] do_syscall_64+0x174/0x580 [ 429.141701][T19421] ? trace_irq_disable+0x3b/0x140 [ 429.141728][T19421] ? clear_bhb_loop+0x40/0x90 [ 429.141751][T19421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.141768][T19421] RIP: 0033:0x7f2bf919ce59 [ 429.141785][T19421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.141800][T19421] RSP: 002b:00007f2bfa111028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.141819][T19421] RAX: ffffffffffffffda RBX: 00007f2bf9415fa0 RCX: 00007f2bf919ce59 [ 429.141831][T19421] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 429.141841][T19421] RBP: 00007f2bfa111090 R08: 0000000000000000 R09: 0000000000000000 [ 429.141851][T19421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.141860][T19421] R13: 00007f2bf9416038 R14: 00007f2bf9415fa0 R15: 00007ffd3994ca78 [ 429.141889][T19421] [ 429.817069][T19434] tipc: Started in network mode [ 429.822007][T19434] tipc: Node identity fa84688af52e, cluster identity 4711 [ 429.829604][T19434] tipc: Enabled bearer , priority 0 [ 429.853472][T19412] tipc: Resetting bearer [ 429.943460][T19448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.043499][T19457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3620'. [ 430.112415][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3620'. [ 430.264580][T19439] syzkaller0: entered promiscuous mode [ 430.278172][T19439] syzkaller0: entered allmulticast mode [ 430.300356][T19411] tipc: Resetting bearer [ 430.351598][T19411] tipc: Disabling bearer [ 430.365072][T19463] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3623'. [ 430.891225][T19467] veth3: entered allmulticast mode [ 431.034133][T19483] 8021q: VLANs not supported on wg2 [ 431.209301][T19065] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 431.242174][T12022] IPVS: starting estimator thread 0... [ 431.282857][T19065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.354137][T19065] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 431.366395][T19497] IPVS: using max 36 ests per chain, 86400 per kthread [ 431.380437][T19495] xt_cgroup: xt_cgroup: no path or classid specified [ 431.394921][T19504] openvswitch: netlink: Flow actions attr not present in new flow. [ 431.446447][T19065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.477134][T19495] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3633'. [ 431.487378][T19065] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 431.513376][T19065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.549343][T19065] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 431.607003][T19065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.637263][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3635'. [ 431.772490][T19508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.822337][T19521] netlink: 'syz.0.3638': attribute type 2 has an invalid length. [ 431.888427][T19521] netlink: 'syz.0.3638': attribute type 2 has an invalid length. [ 431.998402][T19527] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3639'. [ 432.012386][T19521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3638'. [ 432.043277][T19527] netlink: Unknown conntrack attr (0) [ 432.060150][T19521] nbd: must specify at least one socket [ 432.098439][T19065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.169288][T19533] veth0: entered promiscuous mode [ 432.199344][T19533] veth0: left promiscuous mode [ 432.247070][T19065] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.330368][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.337578][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.489266][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.496497][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.843155][ T9883] IPVS: stop unused estimator thread 0... [ 433.043917][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3648'. [ 433.315696][ T9882] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 433.823905][ T48] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 433.854597][ T48] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 433.895544][ T48] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 433.910684][ T48] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 434.315736][T19065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.380321][T19065] veth0_vlan: entered promiscuous mode [ 434.393958][T19065] veth1_vlan: entered promiscuous mode [ 434.450216][T19065] veth0_macvtap: entered promiscuous mode [ 434.461242][T19065] veth1_macvtap: entered promiscuous mode [ 434.507533][T19065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.545375][T19065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.597623][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.612781][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.622178][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.641141][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.105857][T19570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.282913][ T9883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.291591][T19669] netlink: 'syz.0.3658': attribute type 21 has an invalid length. [ 436.308276][ T9883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.360502][T19669] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3658'. [ 436.440634][T19675] tipc: Enabling of bearer rejected, failed to enable media [ 436.478070][T19675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3659'. [ 436.494802][ T9887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.531058][ T9887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.817157][T19702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3534'. [ 437.031831][T19704] xt_CT: No such helper "pptp" [ 437.141418][T19711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3667'. [ 437.369145][T19721] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3669'. [ 437.442642][T19717] netlink: 'syz.4.3668': attribute type 11 has an invalid length. [ 437.642760][T19730] netlink: 'syz.2.3671': attribute type 5 has an invalid length. [ 437.941877][T19739] netlink: 'syz.3.3675': attribute type 4 has an invalid length. [ 438.150437][T19751] netlink: 'syz.2.3680': attribute type 39 has an invalid length. [ 438.208972][T19755] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3680'. [ 438.441714][T19773] netlink: 'syz.3.3684': attribute type 83 has an invalid length. [ 438.471313][T19774] netlink: 'syz.4.3685': attribute type 1 has an invalid length. [ 438.498799][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3680'. [ 438.503536][T19774] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3685'. [ 438.541004][T19779] xt_hashlimit: size too large, truncated to 1048576 [ 438.559526][T19774] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3685'. [ 438.624839][T19774] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3685'. [ 438.713781][T19766] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 438.998199][T19790] netlink: 'syz.2.3688': attribute type 4 has an invalid length. [ 439.063063][T19790] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 439.241749][T19798] : entered promiscuous mode [ 439.510582][T19813] netem: change failed [ 439.677186][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.688612][ T1316] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 439.983845][T19831] hsr_slave_1 (unregistering): left promiscuous mode [ 440.123867][T19840] atomic_op ffff888054fa2998 conn xmit_atomic 0000000000000000 [ 440.273796][T12022] hid-generic 0005:10CF:5508.0001: unknown main item tag 0x0 [ 440.282347][T12022] hid-generic 0005:10CF:5508.0001: unknown main item tag 0x0 [ 440.310817][T12022] hid-generic 0005:10CF:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz1] on aa:aa:aa:aa:aa:aa [ 440.330500][T19853] netlink: 'syz.0.3704': attribute type 11 has an invalid length. [ 440.374959][T19853] netlink: 'syz.0.3704': attribute type 5 has an invalid length. [ 440.543544][T19858] veth0: entered promiscuous mode [ 440.591488][T19868] netlink: 'syz.0.3709': attribute type 1 has an invalid length. [ 440.713156][T19855] veth0: left promiscuous mode [ 441.643358][T19923] __nla_validate_parse: 15 callbacks suppressed [ 441.643376][T19923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3724'. [ 441.718885][T19927] netlink: 54 bytes leftover after parsing attributes in process `syz.4.3724'. [ 441.752466][T19927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3724'. [ 441.780169][T19931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3727'. [ 441.920977][T19928] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.928648][T19928] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.970522][ T30] audit: type=1107 audit(1780116499.524:8): pid=19941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='W1ٷE3c$=' [ 442.085978][T19928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.098617][T19928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.217390][ T9887] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.235329][ T9887] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.258675][ T9887] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.275746][ T9887] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.434722][T19954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3731'. [ 442.469379][T19954] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3731'. [ 442.741228][T19969] veth0: entered promiscuous mode [ 442.789911][T19969] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3733'. [ 442.797421][T19972] netlink: 'syz.4.3737': attribute type 2 has an invalid length. [ 442.935796][T19980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3738'. [ 442.983900][T19980] netlink: 54 bytes leftover after parsing attributes in process `syz.0.3738'. [ 443.022272][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3738'. [ 443.421068][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.435372][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.444570][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.457006][ T9884] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.479598][T19958] veth0: left promiscuous mode [ 443.584457][T20009] FAULT_INJECTION: forcing a failure. [ 443.584457][T20009] name failslab, interval 1, probability 0, space 0, times 0 [ 443.598867][T20009] CPU: 1 UID: 0 PID: 20009 Comm: syz.3.3747 Not tainted syzkaller #0 PREEMPT(full) [ 443.598890][T20009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.598901][T20009] Call Trace: [ 443.598908][T20009] [ 443.598916][T20009] dump_stack_lvl+0xe8/0x150 [ 443.598941][T20009] should_fail_ex+0x412/0x560 [ 443.598966][T20009] should_failslab+0xa8/0x100 [ 443.598983][T20009] ? xfrm_state_alloc+0x24/0x2f0 [ 443.599137][T20009] kmem_cache_alloc_noprof+0x87/0x650 [ 443.599176][T20009] xfrm_state_alloc+0x24/0x2f0 [ 443.599204][T20009] __find_acq_core+0x816/0x1ce0 [ 443.599239][T20009] xfrm_find_acq+0x78/0xa0 [ 443.599267][T20009] xfrm_alloc_userspi+0x712/0xd50 [ 443.599347][T20009] ? apparmor_capable+0x126/0x170 [ 443.599368][T20009] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 443.599393][T20009] ? __nla_parse+0x40/0x60 [ 443.599419][T20009] xfrm_user_rcv_msg+0x7ae/0xc40 [ 443.599447][T20009] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 443.599517][T20009] ? __pfx___mutex_trylock_common+0x10/0x10 [ 443.599563][T20009] ? rcu_is_watching+0x15/0xb0 [ 443.599588][T20009] ? trace_contention_end+0x3d/0x140 [ 443.599616][T20009] ? __mutex_lock+0x319/0x1550 [ 443.599647][T20009] netlink_rcv_skb+0x232/0x4b0 [ 443.599679][T20009] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 443.599706][T20009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.599753][T20009] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.599782][T20009] ? netlink_deliver_tap+0x2e/0x1b0 [ 443.599815][T20009] xfrm_netlink_rcv+0x79/0x90 [ 443.599839][T20009] netlink_unicast+0x75c/0x8e0 [ 443.599879][T20009] netlink_sendmsg+0x813/0xb40 [ 443.599920][T20009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.599953][T20009] ? aa_sock_msg_perm+0xf1/0x1b0 [ 443.599985][T20009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 443.600016][T20009] ____sys_sendmsg+0x972/0x9f0 [ 443.600035][T20009] ? __might_fault+0xaf/0x130 [ 443.600067][T20009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.600097][T20009] ? import_iovec+0x73/0xa0 [ 443.600123][T20009] ___sys_sendmsg+0x2a5/0x360 [ 443.600141][T20009] ? __lock_acquire+0x6b5/0x2cf0 [ 443.600175][T20009] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.600229][T20009] ? __fget_files+0x2a/0x420 [ 443.600253][T20009] ? __fget_files+0x3a0/0x420 [ 443.600289][T20009] __x64_sys_sendmsg+0x1bd/0x2a0 [ 443.600312][T20009] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 443.600342][T20009] ? __pfx_ksys_write+0x10/0x10 [ 443.600381][T20009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.600405][T20009] do_syscall_64+0x174/0x580 [ 443.600424][T20009] ? trace_irq_disable+0x3b/0x140 [ 443.600453][T20009] ? clear_bhb_loop+0x40/0x90 [ 443.600478][T20009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.600498][T20009] RIP: 0033:0x7f861119ce59 [ 443.600517][T20009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.600535][T20009] RSP: 002b:00007f8612132028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.600557][T20009] RAX: ffffffffffffffda RBX: 00007f8611415fa0 RCX: 00007f861119ce59 [ 443.600572][T20009] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 443.600583][T20009] RBP: 00007f8612132090 R08: 0000000000000000 R09: 0000000000000000 [ 443.600595][T20009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.600606][T20009] R13: 00007f8611416038 R14: 00007f8611415fa0 R15: 00007ffe4bbf3c48 [ 443.600640][T20009] [ 444.103113][T20015] xt_hashlimit: size too large, truncated to 1048576 [ 446.211835][T19993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.448798][T20055] xt_hashlimit: size too large, truncated to 1048576 [ 446.503316][T20054] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 446.519800][ T5758] IPVS: starting estimator thread 0... [ 446.625103][T20061] IPVS: using max 31 ests per chain, 74400 per kthread [ 446.659608][T20070] __nla_validate_parse: 6 callbacks suppressed [ 446.659629][T20070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3759'. [ 446.723426][T20070] netlink: 54 bytes leftover after parsing attributes in process `syz.0.3759'. [ 446.779794][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3759'. [ 447.074434][T20089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3764'. [ 447.097070][T20084] bond2 (unregistering): Released all slaves [ 447.492253][T20110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3772'. [ 447.532772][T20110] netlink: 54 bytes leftover after parsing attributes in process `syz.4.3772'. [ 447.575304][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3772'. [ 447.862580][T20124] bridge18: entered promiscuous mode [ 447.868739][T20124] bridge18: entered allmulticast mode [ 447.901563][T20129] bond1 (unregistering): Released all slaves [ 447.938385][T20131] tipc: Resetting bearer [ 448.241017][T20145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3782'. [ 448.293848][T20137] netlink: 54 bytes leftover after parsing attributes in process `syz.4.3782'. [ 448.323345][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3782'. [ 448.564707][T20167] Bluetooth: MGMT ver 1.23 [ 448.723852][T20167] vlan0: entered promiscuous mode [ 449.420791][T20200] ip6_vti0: entered promiscuous mode [ 449.430980][T20200] ip6_vti0: entered allmulticast mode [ 449.446945][T20211] netem: change failed [ 449.568213][T20190] syzkaller0: entered promiscuous mode [ 449.579893][T20190] syzkaller0: entered allmulticast mode [ 451.908245][T20244] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 451.962004][T20254] __nla_validate_parse: 11 callbacks suppressed [ 451.962024][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3809'. [ 452.072065][T20260] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3809'. [ 452.354689][T20273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3812'. [ 452.421631][T20273] netlink: 54 bytes leftover after parsing attributes in process `syz.1.3812'. [ 452.443122][T20275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3813'. [ 452.467200][T20273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'. [ 452.508283][T20275] FAULT_INJECTION: forcing a failure. [ 452.508283][T20275] name failslab, interval 1, probability 0, space 0, times 0 [ 452.530544][T20275] CPU: 1 UID: 0 PID: 20275 Comm: syz.3.3813 Not tainted syzkaller #0 PREEMPT(full) [ 452.530572][T20275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 452.530585][T20275] Call Trace: [ 452.530593][T20275] [ 452.530602][T20275] dump_stack_lvl+0xe8/0x150 [ 452.530632][T20275] should_fail_ex+0x412/0x560 [ 452.530671][T20275] should_failslab+0xa8/0x100 [ 452.530693][T20275] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 452.530722][T20275] ? __alloc_skb+0x1d0/0x7d0 [ 452.530758][T20275] ? __local_bh_enable_ip+0xd0/0x130 [ 452.530781][T20275] __alloc_skb+0x1d0/0x7d0 [ 452.530810][T20275] xfrm_alloc_compat+0x1a6/0x16f0 [ 452.530839][T20275] ? xfrm_get_translator+0x1b/0x240 [ 452.530864][T20275] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 452.530887][T20275] xfrm_alloc_userspi+0xa1a/0xd50 [ 452.530928][T20275] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 452.530960][T20275] ? __nla_parse+0x40/0x60 [ 452.530985][T20275] xfrm_user_rcv_msg+0x7ae/0xc40 [ 452.531013][T20275] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 452.531064][T20275] ? __pfx___mutex_trylock_common+0x10/0x10 [ 452.531088][T20275] ? rcu_is_watching+0x15/0xb0 [ 452.531107][T20275] ? trace_contention_end+0x3d/0x140 [ 452.531130][T20275] ? __mutex_lock+0x319/0x1550 [ 452.531155][T20275] netlink_rcv_skb+0x232/0x4b0 [ 452.531181][T20275] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 452.531202][T20275] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 452.531242][T20275] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.531267][T20275] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.531295][T20275] xfrm_netlink_rcv+0x79/0x90 [ 452.531316][T20275] netlink_unicast+0x75c/0x8e0 [ 452.531348][T20275] netlink_sendmsg+0x813/0xb40 [ 452.531382][T20275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.531408][T20275] ? aa_sock_msg_perm+0xf1/0x1b0 [ 452.531435][T20275] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.531460][T20275] ____sys_sendmsg+0x972/0x9f0 [ 452.531478][T20275] ? __might_fault+0xaf/0x130 [ 452.531506][T20275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.531532][T20275] ? import_iovec+0x73/0xa0 [ 452.531557][T20275] ___sys_sendmsg+0x2a5/0x360 [ 452.531573][T20275] ? __lock_acquire+0x6b5/0x2cf0 [ 452.531596][T20275] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.531647][T20275] ? __fget_files+0x2a/0x420 [ 452.531669][T20275] ? __fget_files+0x3a0/0x420 [ 452.531701][T20275] __x64_sys_sendmsg+0x1bd/0x2a0 [ 452.531721][T20275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.531748][T20275] ? __pfx_ksys_write+0x10/0x10 [ 452.531783][T20275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.531803][T20275] do_syscall_64+0x174/0x580 [ 452.531820][T20275] ? trace_irq_disable+0x3b/0x140 [ 452.531850][T20275] ? clear_bhb_loop+0x40/0x90 [ 452.531872][T20275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.531889][T20275] RIP: 0033:0x7f861119ce59 [ 452.531905][T20275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.531921][T20275] RSP: 002b:00007f8612132028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.531945][T20275] RAX: ffffffffffffffda RBX: 00007f8611415fa0 RCX: 00007f861119ce59 [ 452.531958][T20275] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 452.531969][T20275] RBP: 00007f8612132090 R08: 0000000000000000 R09: 0000000000000000 [ 452.531980][T20275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.531991][T20275] R13: 00007f8611416038 R14: 00007f8611415fa0 R15: 00007ffe4bbf3c48 [ 452.532021][T20275] [ 452.533223][T20282] netlink: 54 bytes leftover after parsing attributes in process `syz.3.3813'. [ 452.921501][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3813'. [ 453.022904][T20285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'. [ 453.044448][T20285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3815'. [ 453.264819][T20299] Bluetooth: MGMT ver 1.23 [ 454.107622][T20303] syzkaller0: entered promiscuous mode [ 454.119356][T20303] syzkaller0: entered allmulticast mode [ 455.034562][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 456.598319][T20386] syzkaller0: entered promiscuous mode [ 456.616181][T20386] syzkaller0: entered allmulticast mode [ 456.885320][T20423] x_tables: duplicate underflow at hook 2 [ 458.990568][T20449] __nla_validate_parse: 3 callbacks suppressed [ 458.990588][T20449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3835'. [ 459.016905][T20448] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3837'. [ 459.036909][T20451] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3834'. [ 459.069800][T20449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3835'. [ 459.088645][T20455] bridge19: entered promiscuous mode [ 459.116773][T20455] bridge19: entered allmulticast mode [ 459.139824][T20448] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.141225][T20449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3835'. [ 459.147547][T20448] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.475420][T20475] lo: entered promiscuous mode [ 459.489999][T20475] tunl0: entered promiscuous mode [ 459.503434][T20478] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3841'. [ 459.521725][T20475] gre0: entered promiscuous mode [ 459.553510][T20482] netlink: 'syz.3.3841': attribute type 1 has an invalid length. [ 459.591514][T20475] gretap0: entered promiscuous mode [ 459.641863][T20475] erspan0: entered promiscuous mode [ 459.658754][T20475] ip_vti0: entered promiscuous mode [ 459.877114][T20491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3844'. [ 459.888278][T20494] netlink: 'syz.0.3845': attribute type 10 has an invalid length. [ 459.899485][T20494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.913015][T20494] team0: Port device netdevsim1 added [ 459.972017][T20494] netlink: 'syz.0.3845': attribute type 10 has an invalid length. [ 460.013395][T20494] team0: Port device netdevsim1 removed [ 460.041942][T20494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.051306][T20494] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 460.221295][T20512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'. [ 460.439212][T20521] 8021q: VLANs not supported on ip6_vti0 [ 460.517579][T20524] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.3854'. [ 460.596155][T20532] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 460.888118][T20550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3862'. [ 460.961393][T20555] netlink: 'syz.3.3865': attribute type 1 has an invalid length. [ 461.143505][T20567] netlink: 'syz.0.3868': attribute type 2 has an invalid length. [ 461.175303][T20555] bond1: entered promiscuous mode [ 461.203152][T20555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.243543][T20561] bond1: (slave bridge2): making interface the new active one [ 461.251401][T20561] bridge2: entered promiscuous mode [ 461.260382][T20561] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 461.417097][T20577] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 461.448878][T20577] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 461.782706][T20595] bridge_slave_0: left allmulticast mode [ 461.804389][T20595] bridge_slave_0: left promiscuous mode [ 461.818540][T20595] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.855586][T20595] bridge_slave_1: left allmulticast mode [ 461.871477][T20595] bridge_slave_1: left promiscuous mode [ 461.879678][T20595] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.895672][T20595] bond0: (slave bond_slave_0): Releasing backup interface [ 461.936059][T20595] bond0: (slave bond_slave_1): Releasing backup interface [ 461.962452][T20595] team_slave_0: left promiscuous mode [ 461.991475][T20595] team0: Port device team_slave_0 removed [ 461.999124][T20595] team_slave_1: left promiscuous mode [ 462.017980][T20595] team0: Port device team_slave_1 removed [ 462.035355][T20595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.043429][T20595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.057383][T20595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.071003][T20595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.082768][T20595] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 462.334815][T20613] syzkaller0: entered promiscuous mode [ 462.355684][T20613] syzkaller0: entered allmulticast mode [ 462.469431][T20613] tipc: Started in network mode [ 462.498710][T20613] tipc: Node identity f2d68d15d1b9, cluster identity 4711 [ 462.523262][T20613] tipc: Enabled bearer , priority 0 [ 462.582137][T20612] tipc: Resetting bearer [ 462.681428][T20612] tipc: Disabling bearer [ 462.760815][T20633] netlink: 'syz.0.3887': attribute type 39 has an invalid length. [ 462.791664][T20632] bridge0: port 1(bond2) entered blocking state [ 462.826002][T20632] bridge0: port 1(bond2) entered disabled state [ 462.863026][T20632] bond2: entered allmulticast mode [ 462.901432][T20632] bond2: entered promiscuous mode [ 463.378144][ T5640] block nbd2: Receive control failed (result -32) [ 463.677542][T20691] bridge0: port 2(syz_tun) entered blocking state [ 463.697043][T20686] netlink: 'syz.1.3903': attribute type 11 has an invalid length. [ 463.704651][T20691] bridge0: port 2(syz_tun) entered disabled state [ 463.734584][T20691] syz_tun: entered allmulticast mode [ 463.794799][T20691] syz_tun: entered promiscuous mode [ 463.819951][T20691] bridge0: port 2(syz_tun) entered blocking state [ 463.826611][T20691] bridge0: port 2(syz_tun) entered forwarding state [ 464.089535][ T30] audit: type=1804 audit(1780116521.644:9): pid=20711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3912" name="/newroot/112/cgroup.controllers" dev="tmpfs" ino=584 res=1 errno=0 [ 464.153008][ T30] audit: type=1800 audit(1780116521.644:10): pid=20711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3912" name="cgroup.controllers" dev="tmpfs" ino=584 res=0 errno=0 [ 464.255436][T20721] __nla_validate_parse: 13 callbacks suppressed [ 464.255460][T20721] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3913'. [ 464.283075][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3915'. [ 464.309573][T20725] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3916'. [ 464.601698][T20740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.613767][T20737] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.3917'. [ 464.897229][T20764] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3922'. [ 465.071182][T20750] syzkaller0: entered promiscuous mode [ 465.091446][T20750] syzkaller0: entered allmulticast mode [ 465.247351][T20779] netlink: 'syz.0.3926': attribute type 12 has an invalid length. [ 465.292245][T20779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3926'. [ 465.348168][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3926'. [ 465.397921][T20785] veth1_macvtap: left promiscuous mode [ 465.513017][T20775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3924'. [ 465.558551][ T24] IPVS: starting estimator thread 0... [ 465.624423][T20785] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3924'. [ 465.676048][T20795] IPVS: using max 32 ests per chain, 76800 per kthread [ 465.694154][T20790] syzkaller0: entered promiscuous mode [ 465.708679][T20790] syzkaller0: entered allmulticast mode [ 466.230419][T20832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3936'. [ 468.818416][T20810] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 468.852497][T20823] tc_dump_action: action bad kind [ 468.870031][T20826] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 469.160831][T20871] netlink: 'syz.3.3938': attribute type 4 has an invalid length. [ 469.208799][T20878] openvswitch: netlink: Flow key attr not present in new flow. [ 469.260205][T20885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.580299][T20898] __nla_validate_parse: 3 callbacks suppressed [ 469.580320][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'. [ 469.789818][T20905] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 469.808134][T20905] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 469.842036][T20905] team0: Failed to send options change via netlink (err -105) [ 469.887569][T20905] team0: Port device batadv1 added [ 470.061051][T20909] bond3 (unregistering): Released all slaves [ 470.212225][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3946'. [ 470.465873][T20941] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3954'. [ 470.488049][T20942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3953'. [ 470.506558][T20942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.642295][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3956'. [ 470.695448][T20942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.748812][T20951] netlink: 'syz.4.3957': attribute type 33 has an invalid length. [ 470.999050][T20965] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 471.032830][T20968] netlink: 'syz.0.3960': attribute type 1 has an invalid length. [ 471.088003][T20968] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3960'. [ 471.112354][T20971] netlink: 'syz.2.3961': attribute type 21 has an invalid length. [ 471.133550][T20971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3961'. [ 471.144845][T20968] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3960'. [ 471.200089][T20968] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3960'. [ 471.571747][T20989] syzkaller1: entered promiscuous mode [ 471.616344][T20989] syzkaller1: entered allmulticast mode [ 471.644606][T20992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3967'. [ 472.745376][T21044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 472.752793][T21044] IPv6: NLM_F_CREATE should be set when creating new route [ 472.760094][T21044] IPv6: NLM_F_CREATE should be set when creating new route [ 472.874855][T21044] pim6reg527: entered allmulticast mode [ 473.420478][T21076] syzkaller0: entered promiscuous mode [ 473.439938][T21076] syzkaller0: entered allmulticast mode [ 473.514576][ T5640] Bluetooth: hci0: command tx timeout [ 473.786407][T21093] IPVS: length: 14 != 8 [ 473.991754][T21098] veth3: entered allmulticast mode [ 474.028705][T21105] netlink: 'syz.1.4003': attribute type 1 has an invalid length. [ 474.064518][T21109] netlink: 'syz.0.4002': attribute type 21 has an invalid length. [ 474.220747][T21114] veth5: entered promiscuous mode [ 474.237153][T21114] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 474.306583][T21113] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 474.360517][T21105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.374214][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 474.494364][ T48] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 474.538642][T21116] syzkaller0: entered promiscuous mode [ 474.570233][T21116] syzkaller0: entered allmulticast mode [ 474.595311][T21125] __nla_validate_parse: 4 callbacks suppressed [ 474.595326][T21125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4009'. [ 474.731313][T21136] openvswitch: netlink: IPv6 tunnel dst address is zero [ 474.817717][T21143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4014'. [ 476.774547][T21128] netlink: 'syz.2.4010': attribute type 4 has an invalid length. [ 476.842881][T21143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4014'. [ 477.012735][T21158] netlink: 'syz.2.4018': attribute type 9 has an invalid length. [ 477.116495][T21167] netlink: 'syz.0.4022': attribute type 10 has an invalid length. [ 477.170721][T21167] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.256246][T21167] bond0: (slave team0): Enslaving as an active interface with an up link [ 477.475455][T21186] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4025'. [ 477.533193][T21186] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4025'. [ 477.629599][T21186] wireguard0: entered promiscuous mode [ 477.857111][T21213] nbd: must specify an index to disconnect [ 477.872757][T21216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4033'. [ 477.893627][T21216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4033'. [ 478.061464][T21222] netlink: 'syz.1.4035': attribute type 1 has an invalid length. [ 478.091047][T21224] Cannot find del_set index 0 as target [ 478.332857][T21238] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4040'. [ 478.404052][T21243] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4041'. [ 478.445450][T21243] netlink: 'syz.1.4041': attribute type 39 has an invalid length. [ 478.870283][T21261] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4046'. [ 478.894857][T21265] sctp: [Deprecated]: syz.4.4047 (pid 21265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.894857][T21265] Use struct sctp_sack_info instead [ 478.980913][T21269] sctp: [Deprecated]: syz.4.4047 (pid 21269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.980913][T21269] Use struct sctp_sack_info instead [ 479.464635][T21288] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 479.747944][T21303] __nla_validate_parse: 4 callbacks suppressed [ 479.747964][T21303] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.4057'. [ 480.116392][T21315] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4062'. [ 480.279402][T21319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4063'. [ 480.312191][T21330] xt_hashlimit: size too large, truncated to 1048576 [ 480.436946][T21324] bond2 (unregistering): Released all slaves [ 480.497559][T21341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4065'. [ 480.750804][T21333] block nbd1: not configured, cannot reconfigure [ 480.760710][T21350] netlink: 'syz.0.4067': attribute type 1 has an invalid length. [ 480.832626][T21355] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4068'. [ 480.883430][T21355] openvswitch: netlink: Message has 5 unknown bytes. [ 481.029198][T21350] bond2: entered promiscuous mode [ 481.052144][T21350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 481.060812][T21358] netlink: 'syz.4.4069': attribute type 2 has an invalid length. [ 481.071257][T21358] netlink: 'syz.4.4069': attribute type 2 has an invalid length. [ 481.149909][T21340] bond2: (slave bridge20): making interface the new active one [ 481.174282][T21340] bridge20: entered promiscuous mode [ 481.198164][T21340] bond2: (slave bridge20): Enslaving as an active interface with an up link [ 481.232357][T21371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4074'. [ 481.405496][T21377] bridge2: entered promiscuous mode [ 481.429434][T21377] bridge2: entered allmulticast mode [ 481.479810][T21389] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4078'. [ 481.692774][T21401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4082'. [ 481.757291][T21396] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 481.921834][T21410] netlink: 54 bytes leftover after parsing attributes in process `syz.4.4084'. [ 481.951931][T21410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4084'. [ 482.096478][T21421] netlink: 'syz.4.4088': attribute type 1 has an invalid length. [ 482.121401][T21421] netlink: 'syz.4.4088': attribute type 1 has an invalid length. [ 482.726061][T21439] ipvlan2: entered allmulticast mode [ 482.731385][T21439] batadv_slave_1: entered allmulticast mode [ 482.748662][T21442] netlink: 'syz.4.4096': attribute type 1 has an invalid length. [ 482.770476][T21442] netlink: 'syz.4.4096': attribute type 39 has an invalid length. [ 482.775046][T21439] batman_adv: batadv0: Adding interface: ipvlan2 [ 482.794885][T21439] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.825292][T21440] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 482.838746][T21439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.842078][T21448] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 482.861675][T21439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.896459][T21439] batman_adv: batadv0: Interface activated: ipvlan2 [ 483.635748][T21469] syzkaller0: entered promiscuous mode [ 483.641500][T21469] syzkaller0: entered allmulticast mode [ 483.938943][T21495] netlink: 'syz.0.4106': attribute type 21 has an invalid length. [ 483.985595][T21495] IPv6: NLM_F_CREATE should be specified when creating new route [ 484.031917][T21497] pim6reg: entered allmulticast mode [ 484.338667][T21515] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 484.863862][T21544] Unsupported ieee802154 address type: 0 [ 484.936234][T21529] syzkaller0: entered promiscuous mode [ 484.978578][T21529] syzkaller0: entered allmulticast mode [ 485.165605][T21554] __nla_validate_parse: 10 callbacks suppressed [ 485.165624][T21554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4126'. [ 485.210049][T21554] netlink: 54 bytes leftover after parsing attributes in process `syz.0.4126'. [ 485.232199][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4126'. [ 485.237943][T21556] netem: change failed [ 485.301738][T21556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.439991][T21565] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4131'. [ 485.464281][T21565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4131'. [ 485.513276][T21565] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4131'. [ 485.528872][T21567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4132'. [ 485.553293][T21565] netlink: 'syz.0.4131': attribute type 2 has an invalid length. [ 485.582126][T21565] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4131'. [ 485.763884][T21573] vet: renamed from veth0_vlan [ 486.297543][T21603] openvswitch: netlink: Message has 1 unknown bytes. [ 486.361708][T21603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.433559][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4141'. [ 486.500832][T21606] netlink: 54 bytes leftover after parsing attributes in process `syz.2.4141'. [ 486.683623][T21621] netlink: 'syz.3.4146': attribute type 83 has an invalid length. [ 486.695495][T21618] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 486.697571][T21621] netlink: 'syz.3.4146': attribute type 83 has an invalid length. [ 486.724802][T21618] bond3 (unregistering): Released all slaves [ 487.152122][T21646] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 487.834905][ T5647] Bluetooth: hci3: command 0x0406 tx timeout [ 487.899078][T21676] netlink: 'syz.1.4160': attribute type 32 has an invalid length. [ 488.010684][T21676] bond2: option coupled_control: invalid value (192) [ 488.055773][T21676] bond2 (unregistering): Released all slaves [ 488.360469][T21681] : renamed from lo [ 488.400288][T21696] syzkaller0: entered promiscuous mode [ 488.423495][T21696] syzkaller0: entered allmulticast mode [ 488.461529][T21685] tipc: Started in network mode [ 488.483690][T21685] tipc: Node identity 8e2878dc0b36, cluster identity 4711 [ 488.528066][T21685] tipc: Enabled bearer , priority 0 [ 488.611575][T21684] tipc: Resetting bearer [ 488.710725][T21684] tipc: Disabling bearer [ 488.792955][T21712] vlan2: entered promiscuous mode [ 488.809075][T21712] dummy0: entered promiscuous mode [ 488.823702][T21720] netlink: 'syz.2.4166': attribute type 12 has an invalid length. [ 488.847878][T21720] netlink: 'syz.2.4166': attribute type 29 has an invalid length. [ 489.040447][T21744] netlink: 'syz.4.4172': attribute type 1 has an invalid length. [ 489.726794][T21786] Cannot find del_set index 4 as target [ 490.288713][T21811] xt_hashlimit: overflow, rate too high: 0 [ 490.318064][T21814] netlink: 'syz.2.4190': attribute type 1 has an invalid length. [ 490.350962][T21814] netlink: 'syz.2.4190': attribute type 3 has an invalid length. [ 490.372050][T21814] __nla_validate_parse: 18 callbacks suppressed [ 490.372066][T21814] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4190'. [ 490.425658][T21814] NCSI netlink: No device for ifindex 813332851 [ 490.463513][T21826] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 491.106363][T21854] netlink: 'syz.3.4194': attribute type 1 has an invalid length. [ 491.156645][T21854] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4194'. [ 491.891622][T21890] netlink: 'syz.1.4203': attribute type 10 has an invalid length. [ 491.915657][T21893] netlink: 'syz.0.4205': attribute type 1 has an invalid length. [ 491.930424][T21890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4203'. [ 491.963131][T21893] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4205'. [ 492.700684][T21930] netlink: 'syz.3.4217': attribute type 1 has an invalid length. [ 492.826506][T21940] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4219'. [ 492.828171][T21930] bond2: entered promiscuous mode [ 492.867299][T21930] 8021q: adding VLAN 0 to HW filter on device bond2 [ 492.907616][T21938] macvtap1: entered allmulticast mode [ 492.923343][T21943] Cannot find add_set index 0 as target [ 493.011207][T21930] bond2: (slave bridge3): making interface the new active one [ 493.040625][T21930] bridge3: entered promiscuous mode [ 493.051348][T21930] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 493.082512][T21943] team0: Device gtp0 is up. Set it down before adding it as a team port [ 493.160789][T21946] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 493.183721][T21946] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 493.213082][T21955] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 493.394886][T21967] ip6t_srh: unknown srh invflags 4000 [ 493.499663][T21967] Cannot find add_set index 4 as target [ 493.530280][T21968] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 493.554165][T21971] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 493.577968][T21967] pimreg3: entered allmulticast mode [ 493.624558][T21948] nbd1: detected capacity change from 0 to 63 [ 493.655148][ T5647] block nbd1: Receive control failed (result -32) [ 493.660151][ T5640] block nbd1: Receive control failed (result -32) [ 493.679466][ T5653] block nbd1: Send control failed (result -32) [ 493.715656][ T5653] block nbd1: Request send failed, requeueing [ 493.763887][ T2036] block nbd1: Dead connection, failed to find a fallback [ 493.771543][ T2036] block nbd1: shutting down sockets [ 493.777397][ T2036] blk_print_req_error: 138 callbacks suppressed [ 493.777412][ T2036] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.796047][ T2036] buffer_io_error: 138 callbacks suppressed [ 493.796124][ T2036] Buffer I/O error on dev nbd1, logical block 0, async page read [ 493.811269][ T5653] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.820459][ T5653] Buffer I/O error on dev nbd1, logical block 1, async page read [ 493.828512][ T5653] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.838145][ T5653] Buffer I/O error on dev nbd1, logical block 2, async page read [ 493.846155][ T5653] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.855253][ T5653] Buffer I/O error on dev nbd1, logical block 3, async page read [ 493.863123][ T5653] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.872367][ T5653] Buffer I/O error on dev nbd1, logical block 0, async page read [ 493.880290][ T5653] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.889478][ T5653] Buffer I/O error on dev nbd1, logical block 1, async page read [ 493.897377][ T5653] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.906564][ T5653] Buffer I/O error on dev nbd1, logical block 2, async page read [ 493.914548][ T5653] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.923779][ T5653] Buffer I/O error on dev nbd1, logical block 3, async page read [ 493.932005][ T5653] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.941146][ T5653] Buffer I/O error on dev nbd1, logical block 0, async page read [ 493.988073][ T5653] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 494.035595][ T5653] Buffer I/O error on dev nbd1, logical block 1, async page read [ 494.083543][ T5653] ldm_validate_partition_table(): Disk read failed. [ 494.117650][ T5653] Dev nbd1: unable to read RDB block 0 [ 494.130612][T21985] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.161752][ T5653] nbd1: unable to read partition table [ 494.180985][T21985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4233'. [ 494.214574][ T5653] ldm_validate_partition_table(): Disk read failed. [ 494.240615][ T5653] Dev nbd1: unable to read RDB block 0 [ 494.256329][ T5653] nbd1: unable to read partition table [ 494.280306][T21992] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 494.501134][T22002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4239'. [ 494.547805][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4241'. [ 494.600871][T22007] netlink: 54 bytes leftover after parsing attributes in process `syz.4.4241'. [ 494.611287][T22010] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4239'. [ 494.731029][T22002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.190106][T22039] xt_l2tp: v2 tid > 0xffff: 1114244 [ 495.586960][T22062] __nla_validate_parse: 2 callbacks suppressed [ 495.586978][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4254'. [ 495.634027][T22062] netlink: 'syz.2.4254': attribute type 1 has an invalid length. [ 495.644669][T22062] netlink: 'syz.2.4254': attribute type 2 has an invalid length. [ 495.691808][T22064] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4254'. [ 495.747166][T22068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4256'. [ 495.759181][T22064] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4254'. [ 495.788455][T22068] netlink: 54 bytes leftover after parsing attributes in process `syz.0.4256'. [ 495.800396][T22064] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4254'. [ 495.820975][T22068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4256'. [ 495.885449][T22069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4257'. [ 495.905422][T22069] netlink: 'syz.1.4257': attribute type 7 has an invalid length. [ 495.914036][T22069] netlink: 'syz.1.4257': attribute type 8 has an invalid length. [ 495.953656][T22069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4257'. [ 496.382671][T22091] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4267'. [ 496.495611][T22095] netlink: 'syz.1.4268': attribute type 83 has an invalid length. [ 496.619599][T22103] netlink: 'syz.0.4272': attribute type 1 has an invalid length. [ 496.806950][T22110] netlink: 'syz.0.4272': attribute type 8 has an invalid length. [ 497.351697][T22145] veth1_to_bond: entered allmulticast mode [ 497.442232][T22145] veth1_to_bond (unregistering): left allmulticast mode [ 497.537716][T22145] bond0: (slave bond_slave_1): Releasing backup interface [ 497.849983][T22166] xt_hashlimit: size too large, truncated to 1048576 [ 497.984831][T22177] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 498.831688][T22221] netlink: 'syz.3.4308': attribute type 1 has an invalid length. [ 498.865222][T22221] bond4: entered promiscuous mode [ 498.870760][T22221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 499.057964][T22231] team0: entered promiscuous mode [ 499.073477][T22231] team_slave_0: entered promiscuous mode [ 499.096448][T22231] team_slave_1: entered promiscuous mode [ 499.125339][T22230] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 499.127643][T22232] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 499.313877][T22245] : entered promiscuous mode [ 499.488776][T22256] netlink: 'syz.4.4318': attribute type 11 has an invalid length. [ 499.828328][T22277] netlink: 'syz.1.4324': attribute type 39 has an invalid length. [ 500.021799][T22278] syzkaller0: entered promiscuous mode [ 500.035877][T22278] syzkaller0: entered allmulticast mode [ 501.126588][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.538769][T22316] syz_tun: entered allmulticast mode [ 502.768517][T22331] tipc: Started in network mode [ 502.812091][T22331] tipc: Node identity 4, cluster identity 4711 [ 502.856495][T22331] tipc: Node number set to 4 [ 502.948900][T22338] __nla_validate_parse: 16 callbacks suppressed [ 502.948918][T22338] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4337'. [ 502.984671][T22334] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 503.317007][T22351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4341'. [ 503.379021][T22357] syzkaller0: entered promiscuous mode [ 503.398315][T22357] syzkaller0: entered allmulticast mode [ 503.486268][T22351] tipc: Enabled bearer , priority 0 [ 503.527654][T22349] tipc: Resetting bearer [ 503.672704][T22349] tipc: Disabling bearer [ 503.833800][T22374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4346'. [ 504.042713][T22386] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4349'. [ 504.071743][T22384] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4349'. [ 504.509174][T22404] netlink: 'syz.2.4352': attribute type 1 has an invalid length. [ 504.662963][T22413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4354'. [ 504.708908][T22413] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4354'. [ 505.364317][T22440] netlink: 'syz.1.4358': attribute type 9 has an invalid length. [ 505.671765][T22456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4361'. [ 505.722044][T22462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4363'. [ 505.809379][T22458] bond3 (unregistering): Released all slaves [ 506.064354][T22473] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4365'. [ 506.182458][T22476] veth0_to_team: mtu less than device minimum [ 507.051141][T22524] bond0: entered promiscuous mode [ 507.070126][T22524] bond_slave_0: entered promiscuous mode [ 507.085217][T22524] bond_slave_1: entered promiscuous mode [ 507.102276][T22524] batadv0: entered promiscuous mode [ 507.140085][T22524] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 507.171277][T22524] bond0: left promiscuous mode [ 507.184448][T22524] bond_slave_0: left promiscuous mode [ 507.203943][T22524] bond_slave_1: left promiscuous mode [ 507.221799][T22524] batadv0: left promiscuous mode [ 507.276773][T22525] bond0: option ad_select: unable to set because the bond device is up [ 507.680710][T22539] xt_hashlimit: size too large, truncated to 1048576 [ 507.728034][T22542] netlink: 'syz.2.4384': attribute type 2 has an invalid length. [ 507.745411][T22542] netlink: 'syz.2.4384': attribute type 2 has an invalid length. [ 507.909211][T22550] xt_hashlimit: size too large, truncated to 1048576 [ 507.974502][T22551] __nla_validate_parse: 1 callbacks suppressed [ 507.974519][T22551] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4386'. [ 508.118583][T22561] netlink: 'syz.0.4388': attribute type 21 has an invalid length. [ 508.126983][T22561] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4388'. [ 508.468307][T22581] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4391'. [ 510.842703][T22552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.851838][T22561] netlink: 400 bytes leftover after parsing attributes in process `syz.0.4388'. [ 511.199466][T22586] bond5 (unregistering): Released all slaves [ 511.438840][T22608] vlan0: entered promiscuous mode [ 511.479344][T22608] bridge0: entered promiscuous mode [ 512.007285][T22633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4404'. [ 512.085843][T22635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4405'. [ 512.445823][T22653] bond5 (unregistering): Released all slaves [ 512.693765][T22667] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4411'. [ 512.740401][T22667] netlink: 'syz.4.4411': attribute type 1 has an invalid length. [ 512.795644][T22667] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4411'. [ 512.907488][T22667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4411'. [ 513.047496][T22675] netlink: 'syz.3.4414': attribute type 1 has an invalid length. [ 513.886240][T22701] syzkaller0: entered promiscuous mode [ 513.945866][T22701] syzkaller0: entered allmulticast mode [ 514.314682][ T5640] Bluetooth: hci1: command tx timeout [ 514.414943][T22718] bond2 (unregistering): Released all slaves [ 515.017534][T22745] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 515.172352][T22747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4433'. [ 515.193732][T22747] netlink: 54 bytes leftover after parsing attributes in process `syz.1.4433'. [ 515.212610][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4433'. [ 517.179307][T22764] bond3 (unregistering): Released all slaves [ 517.305333][T22771] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 517.656302][T22789] netlink: 'syz.4.4445': attribute type 19 has an invalid length. [ 517.713735][T22798] veth1_macvtap: left promiscuous mode [ 517.799344][T22798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4448'. [ 517.951717][T22802] netlink: 'syz.4.4451': attribute type 1 has an invalid length. [ 517.963274][T22804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4449'. [ 518.059284][T22802] 8021q: adding VLAN 0 to HW filter on device bond3 [ 518.071619][T22811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4453'. [ 518.106633][ T1349] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.114782][ T1349] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.134459][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.200415][T22809] tap0: tun_chr_ioctl cmd 1074025676 [ 518.232787][T22809] tap0: owner set to 0 [ 518.305123][T22820] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4456'. [ 518.335813][T22819] bond3 (unregistering): Released all slaves [ 518.447145][ T5758] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.555181][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 518.955265][ T5636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 519.094647][T22860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4466'. [ 519.392484][T22876] netlink: 'syz.1.4470': attribute type 23 has an invalid length. [ 520.853485][T22926] netlink: 'syz.0.4485': attribute type 1 has an invalid length. [ 520.962355][T22926] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.971539][T22927] vcan0: entered allmulticast mode [ 521.004977][T22937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.026467][T22934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4484'. [ 521.067860][T22934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4484'. [ 521.162840][T22943] H: renamed from dummy0 (while UP) [ 521.372390][T22952] IPv6: NLM_F_REPLACE set, but no existing node found! [ 521.398920][T22952] xt_hashlimit: size too large, truncated to 1048576 [ 521.612581][T22959] netlink: 'syz.2.4492': attribute type 21 has an invalid length. [ 521.677273][T22959] IPv6: NLM_F_CREATE should be specified when creating new route [ 521.834447][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.913426][T22972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4494'. [ 521.933091][T22972] netlink: 'syz.2.4494': attribute type 7 has an invalid length. [ 521.951123][T22972] netlink: 'syz.2.4494': attribute type 8 has an invalid length. [ 521.963138][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4494'. [ 522.529440][T22993] netlink: 'syz.2.4501': attribute type 27 has an invalid length. [ 522.556265][T22993] netlink: 'syz.2.4501': attribute type 4 has an invalid length. [ 522.578644][T22993] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4501'. [ 522.832912][T23006] netlink: 'syz.2.4504': attribute type 2 has an invalid length. [ 522.895549][T23012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4507'. [ 522.909534][T23012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4507'. [ 522.925023][T23015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4507'. [ 523.233319][T23027] netlink: 'syz.2.4508': attribute type 13 has an invalid length. [ 523.419454][T23034] xt_l2tp: invalid flags combination: 4 [ 523.543718][T23038] netlink: 'syz.1.4512': attribute type 4 has an invalid length. [ 523.598320][T23039] netlink: 'syz.1.4512': attribute type 4 has an invalid length. [ 525.801820][T23049] bond2: option resend_igmp: invalid value (32767) [ 525.811914][T23049] bond2: option resend_igmp: allowed values 0 - 255 [ 525.821183][T23049] bond2 (unregistering): Released all slaves [ 525.850187][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4516'. [ 525.896118][T23048] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 526.100872][T23067] netlink: 'syz.4.4519': attribute type 24 has an invalid length. [ 526.320961][T23078] netlink: 'syz.3.4523': attribute type 4 has an invalid length. [ 526.535414][T23088] syzkaller0: entered promiscuous mode [ 526.541656][T23088] syzkaller0: entered allmulticast mode [ 526.552208][T23088] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4526'. [ 526.576261][T23088] netlink: 75 bytes leftover after parsing attributes in process `syz.0.4526'. [ 526.901302][T23091] syzkaller0: entered promiscuous mode [ 526.926559][T23091] syzkaller0: entered allmulticast mode [ 527.024406][T23111] netlink: 'syz.4.4532': attribute type 1 has an invalid length. [ 527.058996][T23111] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4532'. [ 527.099253][T23116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4534'. [ 527.132262][T23116] netlink: 'syz.0.4534': attribute type 12 has an invalid length. [ 527.200870][T23122] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4535'. [ 527.219499][T23120] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4535'. [ 527.230803][T23124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4536'. [ 527.242814][T23124] netlink: 'syz.1.4536': attribute type 18 has an invalid length. [ 527.254667][T23122] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4535'. [ 527.271459][T23124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4536'. [ 527.300777][T23120] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.308572][T23120] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.466754][T23132] netlink: 'syz.0.4539': attribute type 39 has an invalid length. [ 527.469893][T23124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4536'. [ 527.502294][T23124] netlink: 'syz.1.4536': attribute type 18 has an invalid length. [ 527.514943][T23132] hsr_slave_0: left promiscuous mode [ 528.124128][T23162] Cannot find set identified by id 0 to match [ 528.586021][T23167] syzkaller0: entered promiscuous mode [ 528.602106][T23167] syzkaller0: entered allmulticast mode [ 528.797869][T23190] IPv6: sit2: Disabled Multicast RS [ 528.815465][T23190] sit2: entered allmulticast mode [ 529.274340][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.629016][T23227] netlink: 'syz.2.4563': attribute type 13 has an invalid length. [ 529.691779][T23231] netlink: 'syz.0.4565': attribute type 14 has an invalid length. [ 529.716095][T23231] netlink: 'syz.0.4565': attribute type 13 has an invalid length. [ 529.867231][T23231] netlink: 'syz.0.4565': attribute type 1 has an invalid length. [ 529.888597][T23231] netlink: 'syz.0.4565': attribute type 2 has an invalid length. [ 530.235324][ T9882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.288479][T12026] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.288499][ T9882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.532416][T23262] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 530.635241][T12041] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.800628][T23273] veth0_macvtap: Caught tx_queue_len zero misconfig [ 531.196766][T12026] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 531.577641][T23315] __nla_validate_parse: 22 callbacks suppressed [ 531.577662][T23315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4588'. [ 531.632306][T23315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4588'. [ 531.662862][T23316] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 531.990394][T23337] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4593'. [ 532.021980][T23326] bond4: entered promiscuous mode [ 532.059884][T23326] bond4: entered allmulticast mode [ 532.088808][T23326] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.177117][ T30] audit: type=1107 audit(1780116589.734:11): pid=23344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='qkOLHmt<VP'Wn}*1^xYYDKg!Yϥdo!)ۯh7ZӿpUcooT7Y{EjW+/:Mq􄰡XMۢBIO`o]g32'>\U(5uoCZQugdɓq[H"SNb63iK2oܞ,2' [ 532.182673][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4598'. [ 532.577798][T23362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4602'. [ 532.601717][T23364] netlink: 'syz.3.4603': attribute type 29 has an invalid length. [ 532.624721][T23364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4603'. [ 532.652043][T23364] netlink: 'syz.3.4603': attribute type 29 has an invalid length. [ 532.686643][T23366] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4604'. [ 532.706720][T23364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4603'. [ 532.762466][T23371] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 532.780476][T23371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.138393][T23392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4610'. [ 533.162841][T23393] syzkaller1: entered promiscuous mode [ 533.179452][T23393] syzkaller1: entered allmulticast mode [ 533.445810][T23410] netlink: 'syz.4.4616': attribute type 16 has an invalid length. [ 533.453873][T23410] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4616'. [ 533.505747][T23401] bond5 (unregistering): Released all slaves [ 533.767227][T23415] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 533.993839][T23424] netlink: 'syz.0.4622': attribute type 1 has an invalid length. [ 534.020007][T23424] netlink: 'syz.0.4622': attribute type 2 has an invalid length. [ 534.041533][ T5758] IPVS: starting estimator thread 0... [ 534.144371][T23428] IPVS: using max 31 ests per chain, 74400 per kthread [ 534.314313][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 534.836159][T23440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.121063][ T3325] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.149380][ T3325] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.185078][T23475] xt_CT: You must specify a L4 protocol and not use inversions on it [ 535.204072][ T3325] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.241342][ T9886] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.349281][T23477] syzkaller1: entered promiscuous mode [ 535.362891][T23477] syzkaller1: entered allmulticast mode [ 535.459275][T23484] validate_nla: 2 callbacks suppressed [ 535.459293][T23484] netlink: 'syz.1.4639': attribute type 39 has an invalid length. [ 535.472748][T23489] mac80211_hwsim hwsim42 pim6reg0: entered allmulticast mode [ 535.490137][T23489] pim6reg: entered allmulticast mode [ 535.608969][T23489] bridge0: port 2(syz_tun) entered disabled state [ 535.731294][T23489] syz_tun (unregistering): left allmulticast mode [ 535.762355][T23489] syz_tun (unregistering): left promiscuous mode [ 535.771677][T23489] bridge0: port 2(syz_tun) entered disabled state [ 535.911207][T23498] bond2 (unregistering): Released all slaves [ 536.343605][T23507] syzkaller0: entered promiscuous mode [ 536.372320][T23507] syzkaller0: entered allmulticast mode [ 536.774009][T23542] netlink: 'syz.3.4658': attribute type 1 has an invalid length. [ 536.813411][T23542] netlink: 'syz.3.4658': attribute type 2 has an invalid length. [ 536.996103][T23550] __nla_validate_parse: 19 callbacks suppressed [ 536.996123][T23550] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4660'. [ 537.259825][T23561] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4664'. [ 537.297532][T23561] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 537.344644][T23563] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 537.803834][T23585] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.4670'. [ 537.833746][T23587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4671'. [ 538.055998][T23587] SET target dimension over the limit! [ 538.085784][T23604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4676'. [ 538.146672][T23602] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 538.199143][T23602] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 538.231423][T23602] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 538.333097][T23610] netlink: 'syz.3.4678': attribute type 21 has an invalid length. [ 538.391797][T23610] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4678'. [ 538.454810][T23610] netlink: 'syz.3.4678': attribute type 5 has an invalid length. [ 538.464761][T23610] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4678'. [ 539.088098][T23641] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4689'. [ 539.178414][T23643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4690'. [ 539.232250][T23649] netlink: 'syz.4.4692': attribute type 1 has an invalid length. [ 539.341820][T23654] netlink: 'syz.2.4693': attribute type 18 has an invalid length. [ 539.398830][T23649] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.420855][T23655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4692'. [ 539.572604][T23662] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 539.657614][T23671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.724792][T23649] macvlan4: entered promiscuous mode [ 539.744707][T23649] macvlan4: entered allmulticast mode [ 539.752270][T23649] bond4: entered promiscuous mode [ 539.773577][T23649] veth0_to_bond: entered promiscuous mode [ 539.795264][T23649] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 539.815457][T23649] bond4: left promiscuous mode [ 539.820361][T23649] veth0_to_bond: left promiscuous mode [ 539.874110][T10037] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.883237][T10037] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.894608][T10037] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.912271][T10037] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.780917][T23699] netlink: 'syz.2.4706': attribute type 11 has an invalid length. [ 541.043809][T23702] IPVS: set_ctl: invalid protocol: 44 172.20.20.40:20002 [ 541.166959][T23706] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 541.881137][T23731] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 541.920237][T23731] pim6reg1: entered promiscuous mode [ 541.949006][T23731] pim6reg1: entered allmulticast mode [ 541.988431][T23733] netlink: 'syz.3.4718': attribute type 12 has an invalid length. [ 542.029184][T23733] netlink: 'syz.3.4718': attribute type 29 has an invalid length. [ 542.058390][T23738] __nla_validate_parse: 4 callbacks suppressed [ 542.058414][T23738] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4719'. [ 542.077105][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 542.086149][T23733] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4718'. [ 542.151524][T23733] netlink: 'syz.3.4718': attribute type 1 has an invalid length. [ 542.229586][T23733] netlink: 'syz.3.4718': attribute type 2 has an invalid length. [ 542.649702][T23750] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.4722'. [ 542.687709][T23756] ip6t_srh: unknown srh match flags 4000 [ 542.734880][T23756] ip6t_srh: unknown srh match flags 4000 [ 542.792351][T23756] ip6t_srh: unknown srh match flags 4000 [ 543.105902][T23771] syzkaller0: entered promiscuous mode [ 543.128564][T23771] syzkaller0: entered allmulticast mode [ 543.268470][T23791] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4732'. [ 543.292719][T23792] netlink: 'syz.4.4730': attribute type 30 has an invalid length. [ 543.671335][T23789] syzkaller1: entered promiscuous mode [ 543.712051][T23789] syzkaller1: entered allmulticast mode [ 543.866417][T23801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4734'. [ 543.895533][T23800] tipc: Invalid UDP bearer configuration [ 543.895584][T23800] tipc: Enabling of bearer rejected, failed to enable media [ 544.252593][T23832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4738'. [ 544.265942][T23820] xt_hashlimit: size too large, truncated to 1048576 [ 544.635602][T23846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4743'. [ 544.898360][T23857] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4745'. [ 545.181008][T23866] netlink: 'syz.4.4750': attribute type 1 has an invalid length. [ 545.393062][T23866] 8021q: adding VLAN 0 to HW filter on device bond5 [ 545.634677][T23888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4755'. [ 545.715371][T23895] netlink: 'syz.1.4756': attribute type 1 has an invalid length. [ 545.752965][T23895] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 545.805257][T23904] tipc: Enabling of bearer rejected, media not registered [ 545.826811][T23904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4759'. [ 546.014986][T23919] netlink: 'syz.3.4764': attribute type 7 has an invalid length. [ 546.049417][T23919] netlink: 'syz.3.4764': attribute type 8 has an invalid length. [ 546.420444][T23933] pim6reg: entered allmulticast mode [ 546.599379][T23949] veth0: entered promiscuous mode [ 546.761578][T23948] veth0: left promiscuous mode [ 546.993585][T23970] nbd: socks must be embedded in a SOCK_ITEM attr [ 547.630899][T24000] netlink: 'syz.4.4788': attribute type 1 has an invalid length. [ 547.772983][T24000] xt_ipcomp: unknown flags 1D [ 548.262564][T24041] __nla_validate_parse: 9 callbacks suppressed [ 548.262583][T24041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4799'. [ 548.321543][T24042] netlink: 'syz.0.4799': attribute type 2 has an invalid length. [ 548.351619][T24042] netlink: 'syz.0.4799': attribute type 11 has an invalid length. [ 548.370392][T24046] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 548.381467][T24042] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4799'. [ 548.453996][T24047] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 548.788592][T24067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4808'. [ 548.825625][T24067] netlink: 54 bytes leftover after parsing attributes in process `syz.0.4808'. [ 548.849624][T24067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4808'. [ 548.887030][T24067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4808'. [ 548.906392][T24068] syzkaller0: entered promiscuous mode [ 548.923599][T24068] syzkaller0: entered allmulticast mode [ 548.934049][T24071] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 548.955941][T24073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4809'. [ 548.984959][T24073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4809'. [ 549.309221][T24086] netlink: 'syz.1.4814': attribute type 1 has an invalid length. [ 549.358097][T24086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 549.388839][T24089] netlink: 'syz.4.4815': attribute type 1 has an invalid length. [ 549.423445][T24086] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 549.448482][T24091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4815'. [ 549.457855][T24091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4815'. [ 549.471718][T24089] bond7: entered promiscuous mode [ 549.477858][T24089] 8021q: adding VLAN 0 to HW filter on device bond7 [ 549.494242][T24086] bond2: entered promiscuous mode [ 549.499659][T24086] bond2: entered allmulticast mode [ 549.533018][T24092] macvlan3: entered promiscuous mode [ 549.538657][T24092] macvlan3: entered allmulticast mode [ 549.546065][T24092] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 549.665635][T24089] bond7: (slave bridge5): making interface the new active one [ 549.690150][T24089] bridge5: entered promiscuous mode [ 549.721073][T24089] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 550.668906][T24130] netlink: 'syz.1.4822': attribute type 1 has an invalid length. [ 550.713364][T24118] syzkaller0: entered promiscuous mode [ 550.736373][T24118] syzkaller0: entered allmulticast mode [ 553.474600][T24124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.651042][T24130] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 553.753107][T24150] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 553.882740][T24158] netlink: 'syz.2.4828': attribute type 4 has an invalid length. [ 554.138839][T24167] __nla_validate_parse: 1 callbacks suppressed [ 554.138857][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4832'. [ 554.196431][T24167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4832'. [ 554.893545][T24203] netlink: 'syz.4.4841': attribute type 49 has an invalid length. [ 554.959542][T24209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4843'. [ 555.014399][T24209] netlink: 'syz.1.4843': attribute type 7 has an invalid length. [ 555.038609][T24209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4843'. [ 555.161652][T24203] ip6gretap0: entered promiscuous mode [ 555.174230][T24203] ip6gretap0: entered allmulticast mode [ 555.826045][T24242] netlink: 'syz.1.4852': attribute type 2 has an invalid length. [ 555.893361][T24244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4853'. [ 556.050430][T24244] netlink: 'syz.4.4853': attribute type 4 has an invalid length. [ 556.107297][T24244] netlink: 'syz.4.4853': attribute type 4 has an invalid length. [ 556.152865][T24252] siw: device registration error -23 [ 556.205327][T24259] sctp: [Deprecated]: syz.1.4856 (pid 24259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.205327][T24259] Use struct sctp_sack_info instead [ 556.673237][T24282] netlink: 'syz.2.4861': attribute type 32 has an invalid length. [ 556.831246][T24286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4863'. [ 556.890913][T24286] netlink: 54 bytes leftover after parsing attributes in process `syz.4.4863'. [ 556.931527][T24286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4863'. [ 557.019145][T24291] h: entered promiscuous mode [ 557.286996][T24309] netlink: 'syz.1.4868': attribute type 1 has an invalid length. [ 557.313986][T24309] netlink: 'syz.1.4868': attribute type 1 has an invalid length. [ 557.520475][T24309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 557.692154][T24312] bond3: (slave veth7): Enslaving as an active interface with a down link [ 557.701359][T24324] openvswitch: netlink: Flow actions attr not present in new flow. [ 557.785341][T24315] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 557.813638][T24315] bond3: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 557.973909][T24337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4873'. [ 558.002299][T24337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4873'. [ 558.074385][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 558.345936][T24349] erspan0: entered promiscuous mode [ 558.380069][T24349] erspan0: left promiscuous mode [ 559.052326][ T6439] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 559.091108][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 559.098917][ T6439] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 559.139070][T24387] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20002 [ 559.173278][T24394] __nla_validate_parse: 11 callbacks suppressed [ 559.173295][T24394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4892'. [ 559.242489][T24394] netlink: 54 bytes leftover after parsing attributes in process `syz.3.4892'. [ 559.291463][T24394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4892'. [ 559.492209][T24408] vlan0: entered promiscuous mode [ 559.531530][T24408] geneve1: entered promiscuous mode [ 559.543117][T24408] vlan0: entered allmulticast mode [ 559.550009][T24408] geneve1: entered allmulticast mode [ 559.645319][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 559.663823][T24413] netlink: 'syz.4.4898': attribute type 39 has an invalid length. [ 559.725851][T24413] hsr_slave_0: left promiscuous mode [ 559.746641][T24413] hsr_slave_1: left promiscuous mode [ 559.757541][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 560.148366][T24439] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4905'. [ 560.267785][T24444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4907'. [ 560.334885][T24444] netlink: 54 bytes leftover after parsing attributes in process `syz.1.4907'. [ 560.407988][T24444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4907'. [ 560.524612][T24452] Bluetooth: MGMT ver 1.23 [ 560.625820][T24452] bond5: option fail_over_mac: invalid value (16) [ 560.649688][T24452] bond5 (unregistering): Released all slaves [ 560.692908][T24463] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4910'. [ 560.870329][T24461] bond2 (unregistering): Released all slaves [ 560.989836][T24479] x_tables: duplicate underflow at hook 3 [ 561.243055][T24486] netlink: 'syz.2.4920': attribute type 1 has an invalid length. [ 561.357341][T24486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 561.391430][T24495] bond2: (slave ip6gretap1): making interface the new active one [ 561.400937][T24495] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 561.527289][T24498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4923'. [ 561.572626][T24498] netlink: 54 bytes leftover after parsing attributes in process `syz.3.4923'. [ 561.779253][T24509] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 561.894112][T24519] hsr_slave_1 (unregistering): left promiscuous mode [ 562.059996][T24524] bond3 (unregistering): Released all slaves [ 562.556821][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.566924][ T1316] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.647609][T24543] bond8: entered promiscuous mode [ 562.653212][T24543] bond8: entered allmulticast mode [ 562.671663][T24543] 8021q: adding VLAN 0 to HW filter on device bond8 [ 562.804349][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.995121][T24561] 8021q: adding VLAN 0 to HW filter on device bond5 [ 563.028222][T24561] bridge0: port 3(bond5) entered blocking state [ 563.052510][T24561] bridge0: port 3(bond5) entered disabled state [ 563.078320][T24561] bond5: entered allmulticast mode [ 563.123980][T24561] bond5: entered promiscuous mode [ 563.159172][T24579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.233827][T24578] bond3 (unregistering): Released all slaves [ 564.219209][T24638] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20002 [ 564.303149][T24637] bond9 (unregistering): Released all slaves [ 564.443361][T24650] Cannot find add_set index 0 as target [ 564.508543][T24651] x_tables: duplicate underflow at hook 1 [ 564.820395][T24671] __nla_validate_parse: 9 callbacks suppressed [ 564.820416][T24671] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4970'. [ 565.359015][T24691] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4975'. [ 565.651187][T24716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4983'. [ 565.661382][T24717] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 565.672117][T24716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4983'. [ 565.699422][T24717] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 565.899013][T24731] netlink: 'syz.2.4987': attribute type 9 has an invalid length. [ 566.238028][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4990'. [ 566.515273][T24769] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.4996'. [ 566.525165][T24769] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.4996'. [ 566.711851][T24779] netlink: 'syz.4.4999': attribute type 3 has an invalid length. [ 566.884552][T24784] veth0: entered promiscuous mode [ 566.898139][T24784] syzkaller0: entered promiscuous mode [ 566.903655][T24784] syzkaller0: entered allmulticast mode [ 567.674991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.725309][T24782] veth0: left promiscuous mode [ 568.883283][T24741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.187044][T24809] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 569.226700][T24817] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.5005'. [ 569.270203][T24815] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.5005'. [ 569.734271][T24847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5013'. [ 569.779811][T24851] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 570.135903][T24873] netlink: 'syz.4.5019': attribute type 9 has an invalid length. [ 570.234329][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 570.451737][T24885] netlink: 'syz.3.5024': attribute type 64 has an invalid length. [ 570.463460][T24885] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5024'. [ 570.486929][T24887] netdevsim netdevsim2 : renamed from netdevsim0 [ 570.506203][T24885] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.516109][T24887] xt_addrtype: ipv6 does not support BROADCAST matching [ 570.781031][T24899] IPVS: length: 239 != 202511869848 [ 570.920263][T24903] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5030'. [ 570.961099][T24903] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5030'. [ 571.000861][T24903] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5030'. [ 571.060909][T24903] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5030'. [ 571.109233][T24909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5031'. [ 571.155794][T24909] netlink: 54 bytes leftover after parsing attributes in process `syz.3.5031'. [ 571.190364][T24909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5031'. [ 571.442139][T24922] xt_bpf: check failed: parse error [ 572.444507][T24966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5042'. [ 572.453642][T24966] gre2: entered promiscuous mode [ 572.505374][T24970] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 572.505374][T24970] Please contact the netfilter-devel mailing list or update your nftables rules. [ 572.581233][T24971] sctp: [Deprecated]: syz.4.5044 (pid 24971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 572.581233][T24971] Use struct sctp_sack_info instead [ 572.602346][T24966] gre2: entered allmulticast mode [ 572.886044][T24983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5046'. [ 573.899985][T25022] syzkaller0: entered promiscuous mode [ 573.905824][T25022] syzkaller0: entered allmulticast mode [ 576.533422][T25045] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 576.556109][T25045] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 576.754096][T25066] __nla_validate_parse: 4 callbacks suppressed [ 576.754115][T25066] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5066'. [ 576.866587][T25072] netlink: 'syz.1.5069': attribute type 1 has an invalid length. [ 576.911311][T25074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5070'. [ 576.992031][T25072] 8021q: adding VLAN 0 to HW filter on device bond4 [ 576.999106][T25080] netlink: 'syz.2.5072': attribute type 2 has an invalid length. [ 577.010914][T25080] netlink: 'syz.2.5072': attribute type 1 has an invalid length. [ 577.073446][T25075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5069'. [ 577.106313][T25072] bond2: (slave veth0_to_bond): Releasing active interface [ 577.151453][T25072] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 577.388032][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5078'. [ 577.702054][T25115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.718122][T25116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5082'. [ 577.753783][T25116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5082'. [ 577.841040][T25116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5082'. [ 577.899896][T25116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5082'. [ 578.043534][T25128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5085'. [ 578.089101][T25128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5085'. [ 578.213475][T25135] "syz.0.5088" (25135) uses obsolete ecb(arc4) skcipher [ 578.309257][T25135] bond5 (unregistering): Released all slaves [ 579.223509][T25167] bond9 (unregistering): Released all slaves [ 579.617345][T25188] netlink: 'syz.0.5101': attribute type 1 has an invalid length. [ 579.640437][T25183] syzkaller1: entered promiscuous mode [ 579.662692][T25183] syzkaller1: entered allmulticast mode [ 579.822676][T25188] bond5: entered promiscuous mode [ 579.846803][T25188] 8021q: adding VLAN 0 to HW filter on device bond5 [ 580.113680][T25204] bond5: (slave bridge21): making interface the new active one [ 580.128150][T25204] bridge21: entered promiscuous mode [ 580.135264][T25204] bond5: (slave bridge21): Enslaving as an active interface with an up link [ 580.181983][T25205] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 580.239693][T25213] netlink: 'syz.2.5106': attribute type 2 has an invalid length. [ 580.252825][T25193] No such timeout policy "syz1" [ 580.682699][T25230] bond6 (unregistering): Released all slaves [ 580.943526][T25244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 580.992931][T25250] block nbd0: reconnected socket [ 581.004476][T25250] block nbd0: Unsupported socket: should be TCP or UNIX. [ 581.038593][T25250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.059805][ T12] veth1_to_bridge: left allmulticast mode [ 581.090614][ T12] veth1_to_bridge: left promiscuous mode [ 581.136781][ T12] bridge0: port 3(veth1_to_bridge) entered disabled state [ 581.243757][ T12] bridge_slave_1: left allmulticast mode [ 581.269856][ T12] bridge_slave_1: left promiscuous mode [ 581.286990][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.323401][T25272] netlink: 'syz.4.5118': attribute type 21 has an invalid length. [ 581.369657][ T12] bridge_slave_0: left allmulticast mode [ 581.384749][ T12] bridge_slave_0: left promiscuous mode [ 581.395463][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.507463][T25285] openvswitch: netlink: Duplicate or invalid key (type 0). [ 581.522054][T25285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.569023][ T12] bond8 (unregistering): (slave ip6gretap0): Removing an active aggregator [ 581.579536][ T12] bond8 (unregistering): (slave ip6gretap0): Releasing backup interface [ 581.597116][ T12] bond8 (unregistering): (slave ip6gretap0): the permanent HWaddr of slave - 4e:c1:86:2f:0d:56 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 581.761648][ T12] bond2 (unregistering): (slave gretap2): Releasing active interface [ 581.779019][ T5647] block nbd0: Receive control failed (result -32) [ 581.816131][ T12] bond4 (unregistering): (slave gretap3): Releasing active interface [ 582.166806][ T12] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 582.211373][ T12] bond0 (unregistering): Released all slaves [ 582.222648][ T12] bond1 (unregistering): Released all slaves [ 582.239401][ T12] bond2 (unregistering): Released all slaves [ 582.261049][ T12] bond3 (unregistering): (slave lo): Releasing backup interface [ 582.269190][ T12] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 582.282270][ T12] bond3 (unregistering): Released all slaves [ 582.299074][ T12] bond4 (unregistering): Released all slaves [ 582.313724][ T12] bond5 (unregistering): Released all slaves [ 582.337230][ T12] bond6 (unregistering): Released all slaves [ 582.353495][ T12] bond7 (unregistering): Released all slaves [ 582.370340][ T12] bond8 (unregistering): (slave veth5): Releasing backup interface [ 582.380189][ T12] bond8 (unregistering): Released all slaves [ 582.403661][ T12] bond9 (unregistering): Released all slaves [ 582.421590][ T12] bond10 (unregistering): Released all slaves [ 582.441081][ T12] bond11 (unregistering): Released all slaves [ 582.456599][ T12] bond12 (unregistering): Released all slaves [ 582.518256][T25269] veth1_macvtap: entered promiscuous mode [ 582.539503][T25269] macsec2: entered promiscuous mode [ 582.568806][T25269] veth1_macvtap: left promiscuous mode [ 582.622064][T25272] __nla_validate_parse: 11 callbacks suppressed [ 582.622082][T25272] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5118'. [ 582.650287][T25283] wg1: entered allmulticast mode [ 582.681920][ T12] tipc: Disabling bearer [ 582.712206][ T12] tipc: Left network mode [ 582.829075][T25296] netlink: 'syz.4.5124': attribute type 10 has an invalid length. [ 583.020797][T25299] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.028075][T25299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.035671][T25299] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.042842][T25299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.121333][T25299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.157215][T25313] xt_ecn: cannot match TCP bits for non-tcp packets [ 583.185959][T25299] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 583.230399][T25304] ipvlan0: entered promiscuous mode [ 583.291189][T25319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5128'. [ 583.930152][T25334] nbd: illegal input index 65833 [ 584.293787][T25343] netlink: 'syz.3.5132': attribute type 9 has an invalid length. [ 584.314743][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 585.006703][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.042929][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.059387][ T12] batman_adv: batadv0: Removing interface: ipvlan2 [ 585.075515][ T12] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 585.092496][ T12] batman_adv: batadv0: Removing interface: ipvlan1 [ 585.363654][ T12] team0 (unregistering): Port device team_slave_1 removed [ 585.408974][ T12] team0 (unregistering): Port device team_slave_0 removed [ 586.097506][ T12] IPVS: stop unused estimator thread 0... [ 586.452385][T25362] syzkaller0: entered promiscuous mode [ 586.459062][T25362] syzkaller0: entered allmulticast mode [ 586.673540][T25364] xt_CT: You must specify a L4 protocol and not use inversions on it [ 586.898052][T25369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5139'. [ 587.072906][T25337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.086052][T25357] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5135'. [ 587.639019][ T5647] block nbd3: Receive control failed (result -32) [ 587.763406][T25399] syzkaller1: entered promiscuous mode [ 587.786994][T25399] syzkaller1: entered allmulticast mode [ 588.145554][T25411] tipc: Enabling of bearer rejected, media not registered [ 588.285164][T25418] openvswitch: netlink: IP tunnel dst address not specified [ 588.598096][ T5647] block nbd4: Receive control failed (result -32) [ 588.711856][T25434] netlink: 54 bytes leftover after parsing attributes in process `syz.1.5164'. [ 588.720992][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5164'. [ 588.837475][T25439] netlink: 'syz.3.5163': attribute type 1 has an invalid length. [ 588.850465][T25439] netlink: 'syz.3.5163': attribute type 1 has an invalid length. [ 588.859402][T25439] netlink: 'syz.3.5163': attribute type 1 has an invalid length. [ 588.868487][T25439] netlink: 'syz.3.5163': attribute type 1 has an invalid length. [ 588.886263][T25444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5162'. [ 588.987524][T25448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5166'. [ 589.116559][T25448] syzkaller0: entered promiscuous mode [ 589.140858][T25448] syzkaller0: entered allmulticast mode [ 589.165821][T25450] netlink: 'syz.3.5168': attribute type 2 has an invalid length. [ 589.207751][T25450] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5168'. [ 589.235943][T25454] syzkaller1: entered promiscuous mode [ 589.254246][T25454] syzkaller1: entered allmulticast mode [ 589.558915][T25471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5172'. [ 589.619355][T25471] bond0: ARP target 8.4.0.0 is already present [ 589.675084][T25471] bond0: option arp_ip_target: invalid value (1032) [ 589.804413][T25478] netlink: 54 bytes leftover after parsing attributes in process `syz.4.5175'. [ 589.848811][T25478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5175'. [ 589.895260][T25483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5176'. [ 589.921149][T25484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5177'. [ 590.607897][T25506] syzkaller0: entered promiscuous mode [ 590.634178][T25506] syzkaller0: entered allmulticast mode [ 590.714442][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 590.868826][T25523] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 591.523913][T25548] netlink: 'syz.2.5198': attribute type 5 has an invalid length. [ 592.386077][T25597] openvswitch: netlink: Flow key attr not present in new flow. [ 592.508282][T25596] macsec1: entered promiscuous mode [ 592.526550][T25596] batadv0: entered promiscuous mode [ 592.542033][T25596] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 592.565602][T25596] batadv0: left promiscuous mode [ 592.576839][T25597] netlink: 'syz.2.5213': attribute type 1 has an invalid length. [ 592.596009][T25597] netlink: 'syz.2.5213': attribute type 1 has an invalid length. [ 592.612864][T25597] netlink: 'syz.2.5213': attribute type 8 has an invalid length. [ 592.851342][T25613] netlink: 'syz.2.5216': attribute type 1 has an invalid length. [ 592.868044][T25613] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 593.321366][T25636] hsr0: entered allmulticast mode [ 593.443171][T25636] hsr_slave_0: entered allmulticast mode [ 593.868077][T25665] validate_nla: 2 callbacks suppressed [ 593.868098][T25665] netlink: 'syz.1.5230': attribute type 1 has an invalid length. [ 593.902943][T25665] __nla_validate_parse: 24 callbacks suppressed [ 593.902961][T25665] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5230'. [ 593.932705][T25665] netlink: 658 bytes leftover after parsing attributes in process `syz.1.5230'. [ 593.958931][T25665] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5230'. [ 594.388812][T25676] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5233'. [ 594.513549][T25685] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5235'. [ 595.067704][T25709] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 595.108260][T25707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5241'. [ 595.111989][T12041] hid (null): global environment stack underflow [ 595.138768][T25714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5244'. [ 595.156382][T25706] lapbether: lapb_data_request error - 4 [ 595.196806][T12041] hid-generic 0005:07C0:8000.0002: global environment stack underflow [ 595.217907][T12041] hid-generic 0005:07C0:8000.0002: item 0 1 1 11 parsing failed [ 595.228530][T25706] lapbether: lapb_data_request error - 4 [ 595.236494][T12041] hid-generic 0005:07C0:8000.0002: probe with driver hid-generic failed with error -22 [ 595.264462][T12041] [ 595.264739][T25706] lapbether: lapb_data_request error - 4 [ 595.266809][T12041] ====================================================== [ 595.279503][T12041] WARNING: possible circular locking dependency detected [ 595.286584][T12041] syzkaller #0 Not tainted [ 595.291058][T12041] ------------------------------------------------------ [ 595.296165][T25706] lapbether: lapb_data_request error - 4 [ 595.298116][T12041] kworker/0:13/12041 is trying to acquire lock: [ 595.298130][T12041] ffff88801be85210 [ 595.304098][T25706] lapbether: lapb_data_request error - 4 [ 595.310030][T12041] (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x174/0x8e0 [ 595.314278][T25706] lapbether: lapb_data_request error - 4 [ 595.319512][T12041] [ 595.319512][T12041] but task is already holding lock: [ 595.319521][T12041] ffff88801be85180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 595.351474][T12041] [ 595.351474][T12041] which lock already depends on the new lock. [ 595.351474][T12041] [ 595.361888][T12041] [ 595.361888][T12041] the existing dependency chain (in reverse order) is: [ 595.365805][T25706] lapbether: lapb_data_request error - 4 [ 595.370905][T12041] [ 595.370905][T12041] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 595.384620][T12041] down_write+0x96/0x200 [ 595.389421][T12041] kernfs_add_one+0x41/0x5c0 [ 595.394565][T12041] kernfs_create_dir_ns+0xde/0x130 [ 595.400221][T12041] internal_create_group+0x425/0x1190 [ 595.406139][T12041] cpuhp_invoke_callback+0x445/0x860 [ 595.411955][T12041] cpuhp_issue_call+0x430/0x7a0 [ 595.417328][T12041] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 595.423919][T12041] __cpuhp_setup_state+0x3f/0x60 [ 595.429385][T12041] do_one_initcall+0x250/0x870 [ 595.434692][T12041] do_initcall_level+0x104/0x190 [ 595.440162][T12041] do_initcalls+0x59/0xa0 [ 595.445022][T12041] kernel_init_freeable+0x2a6/0x3e0 [ 595.450753][T12041] kernel_init+0x1d/0x1d0 [ 595.455693][T12041] ret_from_fork+0x514/0xb70 [ 595.460835][T12041] ret_from_fork_asm+0x1a/0x30 [ 595.466151][T12041] [ 595.466151][T12041] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 595.473979][T12041] [ 595.473979][T12041] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 595.481717][T12041] cpus_read_lock+0x42/0x160 [ 595.486843][T12041] static_key_slow_inc+0x12/0x30 [ 595.492329][T12041] nbd_genl_reconfigure+0x132f/0x1ea0 [ 595.498334][T12041] genl_family_rcv_msg_doit+0x22a/0x330 [ 595.504420][T12041] genl_rcv_msg+0x61c/0x7a0 [ 595.509470][T12041] netlink_rcv_skb+0x232/0x4b0 [ 595.514778][T12041] genl_rcv+0x28/0x40 [ 595.519291][T12041] netlink_unicast+0x75c/0x8e0 [ 595.524613][T12041] netlink_sendmsg+0x813/0xb40 [ 595.529926][T12041] ____sys_sendmsg+0x972/0x9f0 [ 595.535221][T12041] ___sys_sendmsg+0x2a5/0x360 [ 595.540431][T12041] __x64_sys_sendmsg+0x1bd/0x2a0 [ 595.545905][T12041] do_syscall_64+0x174/0x580 [ 595.551030][T12041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.557461][T12041] [ 595.557461][T12041] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 595.565131][T12041] __mutex_lock+0x1a3/0x1550 [ 595.570255][T12041] nbd_queue_rq+0x37b/0x1100 [ 595.575392][T12041] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 595.581575][T12041] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 595.588464][T12041] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 595.594984][T12041] blk_mq_run_hw_queue+0x348/0x4f0 [ 595.600633][T12041] blk_mq_dispatch_list+0xd16/0xe10 [ 595.606370][T12041] blk_mq_flush_plug_list+0x48d/0x570 [ 595.612274][T12041] __blk_flush_plug+0x3ed/0x4d0 [ 595.617723][T12041] __submit_bio+0x28d/0x580 [ 595.622763][T12041] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 595.628926][T12041] block_read_full_folio+0x599/0x830 [ 595.634909][T12041] filemap_read_folio+0x137/0x3b0 [ 595.640493][T12041] do_read_cache_folio+0x358/0x590 [ 595.646158][T12041] read_part_sector+0xb6/0x2b0 [ 595.651533][T12041] adfspart_check_ICS+0xb1/0x960 [ 595.657007][T12041] bdev_disk_changed+0x817/0x1770 [ 595.662569][T12041] blkdev_get_whole+0x380/0x510 [ 595.668010][T12041] bdev_open+0x31e/0xd30 [ 595.672784][T12041] blkdev_open+0x470/0x610 [ 595.677742][T12041] do_dentry_open+0x822/0x13a0 [ 595.683039][T12041] vfs_open+0x3b/0x340 [ 595.687643][T12041] path_openat+0x2e08/0x3860 [ 595.692771][T12041] do_file_open+0x23e/0x4a0 [ 595.697822][T12041] do_sys_openat2+0x113/0x200 [ 595.703052][T12041] __x64_sys_openat+0x138/0x170 [ 595.708444][T12041] do_syscall_64+0x174/0x580 [ 595.713570][T12041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.719997][T12041] [ 595.719997][T12041] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 595.727226][T12041] __mutex_lock+0x1a3/0x1550 [ 595.732350][T12041] nbd_queue_rq+0xc6/0x1100 [ 595.737401][T12041] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 595.743486][T12041] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 595.750351][T12041] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 595.756892][T12041] blk_mq_run_hw_queue+0x348/0x4f0 [ 595.762558][T12041] blk_mq_dispatch_list+0xd16/0xe10 [ 595.768291][T12041] blk_mq_flush_plug_list+0x48d/0x570 [ 595.774197][T12041] __blk_flush_plug+0x3ed/0x4d0 [ 595.779607][T12041] __submit_bio+0x28d/0x580 [ 595.784650][T12041] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 595.790819][T12041] block_read_full_folio+0x599/0x830 [ 595.796636][T12041] filemap_read_folio+0x137/0x3b0 [ 595.802197][T12041] do_read_cache_folio+0x358/0x590 [ 595.807839][T12041] read_part_sector+0xb6/0x2b0 [ 595.813126][T12041] adfspart_check_ICS+0xb1/0x960 [ 595.818591][T12041] bdev_disk_changed+0x817/0x1770 [ 595.824152][T12041] blkdev_get_whole+0x380/0x510 [ 595.829547][T12041] bdev_open+0x31e/0xd30 [ 595.834347][T12041] blkdev_open+0x470/0x610 [ 595.839302][T12041] do_dentry_open+0x822/0x13a0 [ 595.844594][T12041] vfs_open+0x3b/0x340 [ 595.849193][T12041] path_openat+0x2e08/0x3860 [ 595.854331][T12041] do_file_open+0x23e/0x4a0 [ 595.859375][T12041] do_sys_openat2+0x113/0x200 [ 595.864579][T12041] __x64_sys_openat+0x138/0x170 [ 595.869963][T12041] do_syscall_64+0x174/0x580 [ 595.875088][T12041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.881517][T12041] [ 595.881517][T12041] -> #4 (set->srcu){.+.+}-{0:0}: [ 595.888652][T12041] __synchronize_srcu+0xca/0x300 [ 595.894127][T12041] elevator_switch+0x1e8/0x7a0 [ 595.899418][T12041] elevator_change+0x2cc/0x450 [ 595.904717][T12041] elevator_set_default+0x36c/0x430 [ 595.910447][T12041] blk_register_queue+0x3e9/0x4e0 [ 595.916004][T12041] __add_disk+0x677/0xd50 [ 595.920869][T12041] add_disk_fwnode+0xfb/0x480 [ 595.926087][T12041] nbd_dev_add+0x72c/0xb50 [ 595.931034][T12041] nbd_init+0x168/0x1f0 [ 595.935836][T12041] do_one_initcall+0x250/0x870 [ 595.941163][T12041] do_initcall_level+0x104/0x190 [ 595.946627][T12041] do_initcalls+0x59/0xa0 [ 595.951485][T12041] kernel_init_freeable+0x2a6/0x3e0 [ 595.957213][T12041] kernel_init+0x1d/0x1d0 [ 595.962074][T12041] ret_from_fork+0x514/0xb70 [ 595.967194][T12041] ret_from_fork_asm+0x1a/0x30 [ 595.972490][T12041] [ 595.972490][T12041] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 595.980328][T12041] __mutex_lock+0x1a3/0x1550 [ 595.985454][T12041] elevator_change+0x1b3/0x450 [ 595.990762][T12041] elevator_set_none+0xb5/0x140 [ 595.996151][T12041] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 596.002486][T12041] nbd_start_device+0x17f/0xb10 [ 596.007894][T12041] nbd_genl_connect+0x165b/0x1cf0 [ 596.013467][T12041] genl_family_rcv_msg_doit+0x22a/0x330 [ 596.019564][T12041] genl_rcv_msg+0x61c/0x7a0 [ 596.024606][T12041] netlink_rcv_skb+0x232/0x4b0 [ 596.029907][T12041] genl_rcv+0x28/0x40 [ 596.034422][T12041] netlink_unicast+0x75c/0x8e0 [ 596.039814][T12041] netlink_sendmsg+0x813/0xb40 [ 596.045113][T12041] ____sys_sendmsg+0x972/0x9f0 [ 596.050401][T12041] ___sys_sendmsg+0x2a5/0x360 [ 596.055603][T12041] __x64_sys_sendmsg+0x1bd/0x2a0 [ 596.061065][T12041] do_syscall_64+0x174/0x580 [ 596.066181][T12041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.072607][T12041] [ 596.072607][T12041] -> #2 (&q->q_usage_counter(io)#69){++++}-{0:0}: [ 596.081236][T12041] blk_alloc_queue+0x546/0x680 [ 596.086530][T12041] __blk_mq_alloc_disk+0x197/0x390 [ 596.092175][T12041] nbd_dev_add+0x499/0xb50 [ 596.097129][T12041] nbd_genl_connect+0x962/0x1cf0 [ 596.102612][T12041] genl_family_rcv_msg_doit+0x22a/0x330 [ 596.108691][T12041] genl_rcv_msg+0x61c/0x7a0 [ 596.113724][T12041] netlink_rcv_skb+0x232/0x4b0 [ 596.119022][T12041] genl_rcv+0x28/0x40 [ 596.123533][T12041] netlink_unicast+0x75c/0x8e0 [ 596.128834][T12041] netlink_sendmsg+0x813/0xb40 [ 596.134135][T12041] ____sys_sendmsg+0x972/0x9f0 [ 596.139428][T12041] ___sys_sendmsg+0x2a5/0x360 [ 596.144639][T12041] __x64_sys_sendmsg+0x1bd/0x2a0 [ 596.150112][T12041] do_syscall_64+0x174/0x580 [ 596.155236][T12041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.161658][T12041] [ 596.161658][T12041] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 596.168887][T12041] fs_reclaim_acquire+0x71/0x100 [ 596.174368][T12041] kmem_cache_alloc_noprof+0x40/0x650 [ 596.180288][T12041] __kernfs_iattrs+0xdf/0x320 [ 596.185517][T12041] kernfs_iop_setattr+0xea/0x3f0 [ 596.190988][T12041] notify_change+0xc1a/0xf40 [ 596.196109][T12041] do_truncate+0x1c2/0x250 [ 596.201074][T12041] path_openat+0x2f89/0x3860 [ 596.206214][T12041] do_file_open+0x23e/0x4a0 [ 596.211256][T12041] do_sys_openat2+0x113/0x200 [ 596.216468][T12041] __x64_sys_openat+0x138/0x170 [ 596.221857][T12041] do_syscall_64+0x174/0x580 [ 596.226992][T12041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.233420][T12041] [ 596.233420][T12041] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 596.241965][T12041] __lock_acquire+0x15a5/0x2cf0 [ 596.247352][T12041] lock_acquire+0x106/0x350 [ 596.252391][T12041] down_write+0x96/0x200 [ 596.257177][T12041] __kernfs_remove+0x174/0x8e0 [ 596.262492][T12041] kernfs_remove_by_name_ns+0xc0/0x140 [ 596.268496][T12041] really_probe+0x382/0xaf0 [ 596.273623][T12041] __driver_probe_device+0x1ef/0x380 [ 596.279446][T12041] driver_probe_device+0x4f/0x240 [ 596.285010][T12041] __device_attach_driver+0x279/0x430 [ 596.290916][T12041] bus_for_each_drv+0x258/0x2f0 [ 596.296367][T12041] __device_attach+0x2c5/0x450 [ 596.301665][T12041] device_initial_probe+0xa1/0xd0 [ 596.307225][T12041] bus_probe_device+0x12a/0x220 [ 596.312612][T12041] device_add+0x7e9/0xbb0 [ 596.317472][T12041] hid_add_device+0x272/0x3e0 [ 596.322749][T12041] hidp_session_dev_work+0x45/0x160 [ 596.328562][T12041] process_scheduled_works+0xb5d/0x1860 [ 596.334648][T12041] worker_thread+0xa53/0xfc0 [ 596.339774][T12041] kthread+0x389/0x470 [ 596.344391][T12041] ret_from_fork+0x514/0xb70 [ 596.349523][T12041] ret_from_fork_asm+0x1a/0x30 [ 596.354829][T12041] [ 596.354829][T12041] other info that might help us debug this: [ 596.354829][T12041] [ 596.365066][T12041] Chain exists of: [ 596.365066][T12041] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 596.365066][T12041] [ 596.379544][T12041] Possible unsafe locking scenario: [ 596.379544][T12041] [ 596.387050][T12041] CPU0 CPU1 [ 596.392457][T12041] ---- ---- [ 596.397835][T12041] lock(&root->kernfs_rwsem); [ 596.402622][T12041] lock(cpuhp_state_mutex); [ 596.409749][T12041] lock(&root->kernfs_rwsem); [ 596.417053][T12041] lock(&root->kernfs_iattr_rwsem); [ 596.422359][T12041] [ 596.422359][T12041] *** DEADLOCK *** [ 596.422359][T12041] [ 596.430506][T12041] 5 locks held by kworker/0:13/12041: [ 596.435890][T12041] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 596.446927][T12041] #1: ffffc90003fefc40 ((work_completion)(&session->dev_init)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 596.459299][T12041] #2: ffff888041891a58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 596.468546][T12041] #3: ffff88801be852a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 596.479922][T12041] #4: ffff88801be85180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 596.490666][T12041] [ 596.490666][T12041] stack backtrace: [ 596.496577][T12041] CPU: 0 UID: 0 PID: 12041 Comm: kworker/0:13 Not tainted syzkaller #0 PREEMPT(full) [ 596.496598][T12041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.496611][T12041] Workqueue: events hidp_session_dev_work [ 596.496638][T12041] Call Trace: [ 596.496645][T12041] [ 596.496653][T12041] dump_stack_lvl+0xe8/0x150 [ 596.496673][T12041] print_circular_bug+0x2e1/0x300 [ 596.496697][T12041] check_noncircular+0x12e/0x150 [ 596.496725][T12041] __lock_acquire+0x15a5/0x2cf0 [ 596.496745][T12041] ? __lock_acquire+0x6b5/0x2cf0 [ 596.496764][T12041] ? __lock_acquire+0x6b5/0x2cf0 [ 596.496788][T12041] ? __kernfs_remove+0x174/0x8e0 [ 596.496816][T12041] lock_acquire+0x106/0x350 [ 596.496836][T12041] ? __kernfs_remove+0x174/0x8e0 [ 596.496867][T12041] down_write+0x96/0x200 [ 596.496886][T12041] ? __kernfs_remove+0x174/0x8e0 [ 596.496909][T12041] ? __pfx_down_write+0x10/0x10 [ 596.496927][T12041] ? kernfs_root+0x1c/0x230 [ 596.496946][T12041] ? kernfs_root+0x1c/0x230 [ 596.496971][T12041] ? kernfs_root+0x1ea/0x230 [ 596.496992][T12041] __kernfs_remove+0x174/0x8e0 [ 596.497016][T12041] ? kernfs_find_ns+0x51c/0x570 [ 596.497044][T12041] kernfs_remove_by_name_ns+0xc0/0x140 [ 596.497070][T12041] really_probe+0x382/0xaf0 [ 596.497093][T12041] __driver_probe_device+0x1ef/0x380 [ 596.497116][T12041] driver_probe_device+0x4f/0x240 [ 596.497136][T12041] __device_attach_driver+0x279/0x430 [ 596.497156][T12041] bus_for_each_drv+0x258/0x2f0 [ 596.497179][T12041] ? __pfx___device_attach_driver+0x10/0x10 [ 596.497196][T12041] ? __pfx_bus_for_each_drv+0x10/0x10 [ 596.497219][T12041] ? lockdep_hardirqs_on+0x7a/0x110 [ 596.497235][T12041] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 596.497342][T12041] __device_attach+0x2c5/0x450 [ 596.497369][T12041] ? __pfx___device_attach+0x10/0x10 [ 596.497386][T12041] ? do_raw_spin_unlock+0xf5/0x210 [ 596.497410][T12041] ? _raw_spin_unlock+0x28/0x50 [ 596.497441][T12041] device_initial_probe+0xa1/0xd0 [ 596.497458][T12041] bus_probe_device+0x12a/0x220 [ 596.497487][T12041] device_add+0x7e9/0xbb0 [ 596.497504][T12041] hid_add_device+0x272/0x3e0 [ 596.497519][T12041] ? hidp_session_dev_work+0x1e/0x160 [ 596.497546][T12041] hidp_session_dev_work+0x45/0x160 [ 596.497566][T12041] ? process_scheduled_works+0xa70/0x1860 [ 596.497585][T12041] process_scheduled_works+0xb5d/0x1860 [ 596.497614][T12041] ? __pfx_process_scheduled_works+0x10/0x10 [ 596.497634][T12041] ? assign_work+0x3d5/0x5e0 [ 596.497650][T12041] worker_thread+0xa53/0xfc0 [ 596.497678][T12041] kthread+0x389/0x470 [ 596.497698][T12041] ? __pfx_worker_thread+0x10/0x10 [ 596.497713][T12041] ? __pfx_kthread+0x10/0x10 [ 596.497734][T12041] ret_from_fork+0x514/0xb70 [ 596.497752][T12041] ? __pfx_ret_from_fork+0x10/0x10 [ 596.497767][T12041] ? __switch_to+0xc79/0x1410 [ 596.497797][T12041] ? __pfx_kthread+0x10/0x10 [ 596.497817][T12041] ret_from_fork_asm+0x1a/0x30 [ 596.497847][T12041] Stopping sshd: stopped /usr/sbin/sshd (pid 5390) OK Stopping crond: stopped /usr/sbin/crond (pid 5371) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5293) Stopping network: OK