last executing test programs: 3.101823314s ago: executing program 4 (id=11618): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f00000000c0)=""/1, &(0x7f0000000100)=0xf002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="380f2a0be65e93fbc6abbdf57eba9e06e514ea9ca42c4db5e8aa68b7a043812ce1fee8624224ffdbb4840ef8808040736790cace2d903e04c071e22d7d466e44c578b227f68666197ca9ef736ad82104b02ff763d901856cdf45d0baadf41aedb24be1d5a8c005e874c09bdfdda80ed4ab7496b32c9ae84efe529ac16ad2c67b1403e2b43d4213320c66c83f32ca476ab7ba4ecc1cfedc620f784161bb57b3f424e49a", @ANYRES16=r0, @ANYBLOB="5691e95152fc24a47d3998aaafcd9ba5"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24000840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) r5 = socket(0x10, 0x3, 0x5699800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x140a, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18060000000000000000000000000000711076000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2.989225411s ago: executing program 4 (id=11619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x51, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port\x00'}]}, 0x64}}, 0x800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) bind(r1, &(0x7f00000003c0)=@generic={0x1f, "0000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a00"}, 0x32) sendmsg$nl_netfilter(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14c, 0xf, 0xb, 0x201, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x5}, [@typed={0x8, 0x30, 0x0, 0x0, @u32=0x7}, @nested={0x27, 0x117, 0x0, 0x1, [@generic="dce76c79738460e70bb8ccee3a138c959f9bd777067fbc8b84025c8c7bb34e", @nested={0x4, 0x14e}]}, @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="7e16dd5cb793f33159c3314902e34b801370e4fbe3a96d514973e4cf20c0575af7fb2f8b59c38223f24a8a5ea0610accc65e272d7aca59a9ba8adffb", @typed={0x4, 0x148}, @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x80}, @generic="6b813332d713a91c9584701c26b41f7bb8f9b9e71a4b00d946", @generic="104cd7741a1d3362f6013d00e538246026e70688a47088c9687995bd09e88490ad110652c8828580dda4eea32f59712a2544566ca0f0ca04c2515d00695928d2b42282cd9ff320de8e56b29207a3cd1e21c4769a8c6b7d4118133c30e79d3e193318427a21684f02485cd7ceecaa53709eae250addc67afaeca6e5748ca3df1b806850e5a21119499d376cd71f7d4d84cd7399"]}, 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x240040c4) pwrite64(r0, &(0x7f0000000300)="f65c268c059dae7e9aa272c63418b69b0af57945a34311d0e12e1a43ae972f1f05eb9c82bcb0d47dd3c21632d7d120318cbfe636444e0862bcaf9ad7f509314a42ad08814f178fa41e84674dbffcee33f4c9fdb26b03ddec38d61eb97db66d1be1458a398cd30c29d49d85ad428c09ac5c", 0x71, 0xfffffffffffff522) 2.980958067s ago: executing program 4 (id=11620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r1, &(0x7f00000005c0)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}, 0x2}], 0x1, 0x100, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000300)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000500)='syzkaller\x00'}, 0x90) write(r4, &(0x7f0000000080)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800828001000000", 0x24) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r3, 0x5, 0x7000000, 0xfffffffe, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.8255833s ago: executing program 4 (id=11621): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x4e20, 0x0, 'lblc\x00', 0x1, 0x12c, 0xfffffffb}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) 2.557521914s ago: executing program 2 (id=11626): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x2c, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x6, 0x10, 0x40, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="44cdf766f93a"}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, r2, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x4, 0xe}]}, 0x18}}, 0x0) (rerun: 64) clock_gettime(0x7, &(0x7f0000000600)) (async, rerun: 32) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (rerun: 32) 2.446534815s ago: executing program 2 (id=11628): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000540)=0x79, 0x4) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e932057", 0x17e}, {&(0x7f00000008c0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000bc0)=0xdf8, 0x4) writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb9df7231e2e643ecb223f032a1ae299327d7156236f0edc44c4c268168596acd7c225338921f9e7b97e55fd594eaa95067216139cad3915f76f9cf17d61", 0xb2}, {&(0x7f0000000d00)="135c15194fad5248c52ac1fc08d8399a", 0x10}], 0x2) write(r0, &(0x7f0000000d40)="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", 0x303) 1.889027645s ago: executing program 4 (id=11634): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000540)=0x79, 0x4) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d9c60eb5e932057", 0x17e}, {&(0x7f00000008c0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000bc0)=0xdf8, 0x4) writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb9df7231e2e643ecb223f032a1ae299327d7156236f0edc44c4c268168596acd7c225338921f9e7b97e55fd594eaa95067216139cad3915f76f9cf17d61", 0xb2}, {&(0x7f0000000d00)="135c15194fad5248c52ac1fc08d8399a", 0x10}], 0x2) write(r0, &(0x7f0000000d40)="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", 0x308) 1.801284279s ago: executing program 3 (id=11635): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000100)="8b", 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={0x1f}, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x10000009, @loopback, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="a3", 0x1}], 0x1}}], 0x2, 0x4040881) sendto$inet6(r1, &(0x7f0000000000)="f03f", 0x2, 0x4, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000001900)=0x40) 1.520291891s ago: executing program 2 (id=11643): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8000, 0x0, 0x2, 0xc}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x0, 0x0, 0x4007}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1, 0x4, &(0x7f0000000f40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0x8588) 1.335019791s ago: executing program 0 (id=11645): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@loopback={0xfec0ffff00000000}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r2, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800000000001}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) 1.333018844s ago: executing program 2 (id=11646): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x44080) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000540)=0x79, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r5, &(0x7f0000000040), 0x9) write$tun(r5, &(0x7f0000000200)={@val={0x0, 0x809b}, @void, @ipv6=@udp={0x9, 0x6, "a96f79", 0x10, 0x11, 0x1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {0x4e21, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x100, @val=0x80}}}}}}, 0x3c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={0x70, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x14, r10, 0x1}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, r10, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @GTPA_FAMILY={0x5, 0xd, 0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x27}, @GTPA_NET_NS_FD={0x8, 0x7, r4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x4) write$tun(r5, &(0x7f0000000280)={@val={0x0, 0x809b}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @random="604adf671193", @loopback, @empty, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x38) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f00000006c0)={{0x5, 0x1}, 0x100, './file0\x00'}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='bbr', 0x3) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x2, 0xb, 0x9, 0x8, 0x6, 0x0, 0x70bd2d, 0x5, [@sadb_lifetime={0x4, 0x3, 0x80, 0x7, 0x8, 0x6ebb}]}, 0x30}}, 0x4040800) writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706", 0x70}], 0x1) write(r0, &(0x7f0000000d40)="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", 0x2d8) sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="7da20883b15bddf63516401492b737f7c572aa792ad6fd3b2c11a24b66b6412511c65642df2fd4d899c036fc2d04b8fcd235d7680e1a8c366061e08d3fb1393a838ae749cb327824f88cf800171828ed5a73815bdebbd5073c3488d92a741ce4351dbeacea7da7975b48ced0a966cd693ec0c47f3310cc5b83d9a3839d1a83c8eefba31b81a3173446200a584880e99a15508eac11d0eeafcbea92fbfa2b23", 0x9f}, {&(0x7f0000000140)="7581bd48f6cda4b2432aa171a3e7ada76fda5f785788878541d6d8921e2c5ca0e602796f268d1fba5ec3f57b0a0110a500303572be0aa1d078e1111e47e9d014c283b311ba1b41658d4e37530c8ab637e92a395ca03d05838a6f0e07565d360d60303ca3c6a8039f35897165d33e12660edc53d352525c997331bdf41e9d825cdf7d93ada2e187", 0x87}], 0x2}}], 0x1, 0x40c0) 1.019234471s ago: executing program 0 (id=11649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x64004001) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000000b000000000500000a8c000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a31000000000c0005"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, 0x0, 0x4, 0x1, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000090601020000000000000000020000020900020073797a31000000000500010007006b6400000880"], 0x2c}, 0x1, 0x0, 0x0, 0x100000c6}, 0x24000010) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x9c}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) sendmmsg$unix(r4, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4084}}], 0x1, 0x24008890) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r5, 0x1, 0x37, 0x0, &(0x7f0000000780)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000640)="5600000011002914002402080000009af8000400200000", 0x17) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000140)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000180)={0x3}, 0x10) sendto$inet(r7, &(0x7f0000000700)="b3", 0x1, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000a00)={0x0, 0x4}, 0x8) sendmmsg$inet6(r7, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="cc", 0x1}], 0x1}}], 0x1, 0x0) close(r7) setsockopt$inet_tcp_int(r7, 0x6, 0xc, &(0x7f0000000b00)=0x3, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x24c}}, 0x0) 975.772077ms ago: executing program 4 (id=11650): r0 = socket$inet6(0xa, 0x5, 0x0) sendto$inet6(r0, &(0x7f0000000000)="00404fe8a721a66e6ed23f28545b50092a31c659b43f227b62afb4afc7ec4c19f3fa3c7f51db15e91353a4deb111f7a40b145e68de42dff84c444085914e91246efa51bf3936b7546d8a40d3edf5ca97d8af989d3f36094b3f3967ee30dff7406da83f7952d097842df3e7889f3c349a1b98b4b2de6096afce5860e576a0c0de3563c353e0b352ea61dfd05c6296f0a20f814df85a51bf2e5a9b55510a16023c514ba5b6bcb9d76f4b74305b8cf819febc1236bee4f1176f0475c44aa825b8", 0xbf, 0x20008084, &(0x7f00000000c0)={0xa, 0x4e20, 0x80000000, @loopback, 0x6}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000000)="00404fe8a721a66e6ed23f28545b50092a31c659b43f227b62afb4afc7ec4c19f3fa3c7f51db15e91353a4deb111f7a40b145e68de42dff84c444085914e91246efa51bf3936b7546d8a40d3edf5ca97d8af989d3f36094b3f3967ee30dff7406da83f7952d097842df3e7889f3c349a1b98b4b2de6096afce5860e576a0c0de3563c353e0b352ea61dfd05c6296f0a20f814df85a51bf2e5a9b55510a16023c514ba5b6bcb9d76f4b74305b8cf819febc1236bee4f1176f0475c44aa825b8", 0xbf, 0x20008084, &(0x7f00000000c0)={0xa, 0x4e20, 0x80000000, @loopback, 0x6}, 0x1c) socket$inet6(0xa, 0x5, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)={0x40, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x1, 0x80008}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001440)={0xb08, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x214, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x51, 0x3, "09d0dc8d1498a4a5d123ae87a16f60cc6ba3e7389949084a50f3fa3d8d381b92fdd2dd422b646cb00254ca047ad59e71425aa7d62988a24f8d025db8c37be99f121415206bb223efc4feae75d9"}, @NL80211_FTM_RESP_ATTR_LCI={0xb7, 0x2, "702d7d3fbfeb7ad8b51461a4e85f1d80b0081f1b29e248b0d297d0127187532479950ebd00c175380007b31c828ff8b18ffc706efbf18eb223809844c1b6d0610d82de01c9f672cc6601d8e49f7a97f09a2feed70e5a78994546aa0b7d0d90abfc58109cbc68169e8bf256246b6bb5f2f2a283d649daca4f626e4d14aca552eba79175fb53b33131682b18df869d4f6fee2803d221a212d75ceea76b61e049988c8379eac2304da9c2efd370080623b334b71a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x73, 0x3, "892df1b412735b1ab170cee76acfb792f65591057a36215034a84d501f8b98c9da10b1ae2d07a57a154d09ed9a0e9d17a4add0f12df4158ec29abd80440e0387bd996a7f27fd7c8dbcabad185405d27bb7e8565994a51c92a17a05ce60ce9462eb112fb28ee48149e24ea4688986fc"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x89, 0x3, "fcc28a6f6c906b2eed701f0a49bdca813e0ae030d707c2721e4d7ebe4ae50c5916f855c34ac06de1d3448b8dd0e5f5b6e04be66aaa2bb6a3d2c68eab65c3f8202f9d391c28d436af5330d78f2b691d2f018cc088de763e5e56d74ea39457b8bea58d2098b56af9f0474d107b8f0be80a80e108710c7269c745f73aae262510441102f5494e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x2cb, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x1dc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xa5, 0x2, "51abb11e73fa72131ec68a1afae32b5cf6b2e32951a2536a1856c69597551526047b6d1a41a9badb790bbdaca74778656cef1abc09346dd814691df81fe70b8f2fff1344064df47af3ff090b707104ad6fc8a3714fa92c3daa96b597c1c6171fc811bc62dc5edb31a1e38959109585c323471fc0bb55cc31b955389f5f81dbc5d24f19ce860a7c746ab061f65bfcfecda2b62766496d6ed81d00bd54e5e9de2348"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe9, 0x3, "e6cee501cd33082a90623308b1820b4201d5b8b8f7af46d6b9e1feff1ee3979ffde7eb52fd74bc86b2375064a3dee4aef8dea578eb8f297a9e91ae606e3295ee3ec32e0e9bb2e0d20281f529f6144447a3ce4a10efe96fd1042fdf7d93998c3ce5003b06041c4d980899d5138d46b081b5bd5c2323f68d1fa7c77ae6b2e9b0b9958241d50f0966511995a8cd3e5cd4481f4acfe86c3630735152203dfe9e6cc192faedc3fbcf81876a0ad83b0ed924104a4904f3e5abd0d1f2a36de1b677582100d16c4e2c4c9b7e2ad0e0c664fecf6b568d2356f767fbdb24221720201a251ba3db8472f7"}, @NL80211_FTM_RESP_ATTR_LCI={0x3d, 0x2, "cdee8a20dfd61a88bfcd46e6d81eeeac233953742a4923ce319798c9e53689da20d205e3b7a7c230f86d39a00b5d65a0b7583c13b6476e8efc"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x229, 0x7f, [@peer_mgmt={0x75, 0x8, {0x0, 0x3ff, @val=0x4, @val=0x25, @void}}, @tim={0x5, 0xbf, {0x3, 0x26, 0xf4, "e6adb4a223f9064cf3a1bb953d16c3c9e1c70b737ccfb0a40a253ab87090412dec898156aed4208b8f409e332b2c552a5f321890ca164b6cf0fe27d6a8ae4ede946f0bedab809abcd38d41cd3062e3a59fe16fc9f39a88d0625608bd4f6c41fbe71d364d233b0bfa33774ecc6e48044dda696ef5565aa4db9e720c4648d0c27d3e13009c69b4388c35183f0231aad2db98b6fd55faa5a62e43d95ffc248c46e22c301cef1316c98462bafb198c4911358b9373f7a516d76c647ae29b"}}, @ht={0x2d, 0x1a, {0x8000, 0x3, 0x2, 0x0, {0x6, 0x7, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x10}}, @dsss={0x3, 0x1, 0xb8}, @measure_req={0x26, 0x27, {0x3, 0xc, 0x7a, "0115c756849225b3201448e909e8b14f35ba187cb2fcf5408280fac1d58d72ef5b64c611"}}, @chsw_timing={0x68, 0x4, {0x8, 0xd}}, @random_vendor={0xdd, 0xfb, "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"}, @ibss={0x6, 0x2, 0x7}, @mesh_chsw={0x76, 0x6, {0x8, 0x1, 0xf, 0xb}}, @erp={0x2a, 0x1}]}, @NL80211_ATTR_BEACON_HEAD={0x204, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_a, @device_b, @initial, {0x1, 0x8}, @value=@ver_80211n={0x0, 0x9, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x7fffffff, @default, 0x4, @void, @void, @void, @val={0x4, 0x6, {0x4, 0x7, 0x9128, 0x7fff}}, @void, @val={0x5, 0x4c, {0x2, 0x9b, 0x8, "ca57804b071ec83c22c62df6dc0b6e24c16f7963d99c3b4b643ee7ef37747e86704205409b08849c98ea54e941a0b9cbb2f63e07ed44b65ddcd6494033824b18f5950f9f0fbc6190cb"}}, @val={0x25, 0x3, {0x1, 0xad, 0x7}}, @void, @void, @val={0x2d, 0x1a, {0x80, 0x3, 0x3, 0x0, {0xc22, 0x5fc, 0x0, 0x10, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x1ff, 0x9}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3, 0xc, 0x0, 0x6}}, [{0xdd, 0x69, "a74d04b890e333893fcf4e5aa5eb885602531b10e0e05dd549910871f0f90773988fdc714e38698f58331026bf5f5d50787640db8f63a55ed41d8cd916ca7c017b38c5cfd56288241b3983905767beb40c5c0679f3239fb3af5865c2f447500ea370a8e539a311ff52"}, {0xdd, 0xe4, "8875ebf855be7f404b75e3e1c189bfa6d8d6f5e352fef2125955084fba9b77df6aca370ed8272ba5b6d16fe469b84cf14fdd90aa2c6b94b833e864c852ed62f6796a4463b8715398a911d5002a091faef2e10b177d0aa4a160ae0312fc853bf468f9d8acacab7a7f34259166068fcf25ecb067c0cc3f8c1d66825b6901d06e56675d264462434c36e246dcc40f1d20cfb8dd1ec0d2fca84cf2a959d31576dec9e082133023532487e90aa4cbeab7e803955cd9298b5c7d30882612a8269cc6c18cda067ce7326637c941a9aa604837c597f37a52b3686bc95437677100888204aa4d42c3"}]}}]}, 0xb08}, 0x1, 0x0, 0x0, 0x2d028ba45c54907a}, 0x4000008) (async) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001440)={0xb08, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x214, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x51, 0x3, "09d0dc8d1498a4a5d123ae87a16f60cc6ba3e7389949084a50f3fa3d8d381b92fdd2dd422b646cb00254ca047ad59e71425aa7d62988a24f8d025db8c37be99f121415206bb223efc4feae75d9"}, @NL80211_FTM_RESP_ATTR_LCI={0xb7, 0x2, "702d7d3fbfeb7ad8b51461a4e85f1d80b0081f1b29e248b0d297d0127187532479950ebd00c175380007b31c828ff8b18ffc706efbf18eb223809844c1b6d0610d82de01c9f672cc6601d8e49f7a97f09a2feed70e5a78994546aa0b7d0d90abfc58109cbc68169e8bf256246b6bb5f2f2a283d649daca4f626e4d14aca552eba79175fb53b33131682b18df869d4f6fee2803d221a212d75ceea76b61e049988c8379eac2304da9c2efd370080623b334b71a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x73, 0x3, "892df1b412735b1ab170cee76acfb792f65591057a36215034a84d501f8b98c9da10b1ae2d07a57a154d09ed9a0e9d17a4add0f12df4158ec29abd80440e0387bd996a7f27fd7c8dbcabad185405d27bb7e8565994a51c92a17a05ce60ce9462eb112fb28ee48149e24ea4688986fc"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x89, 0x3, "fcc28a6f6c906b2eed701f0a49bdca813e0ae030d707c2721e4d7ebe4ae50c5916f855c34ac06de1d3448b8dd0e5f5b6e04be66aaa2bb6a3d2c68eab65c3f8202f9d391c28d436af5330d78f2b691d2f018cc088de763e5e56d74ea39457b8bea58d2098b56af9f0474d107b8f0be80a80e108710c7269c745f73aae262510441102f5494e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x2cb, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x1dc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xa5, 0x2, "51abb11e73fa72131ec68a1afae32b5cf6b2e32951a2536a1856c69597551526047b6d1a41a9badb790bbdaca74778656cef1abc09346dd814691df81fe70b8f2fff1344064df47af3ff090b707104ad6fc8a3714fa92c3daa96b597c1c6171fc811bc62dc5edb31a1e38959109585c323471fc0bb55cc31b955389f5f81dbc5d24f19ce860a7c746ab061f65bfcfecda2b62766496d6ed81d00bd54e5e9de2348"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe9, 0x3, "e6cee501cd33082a90623308b1820b4201d5b8b8f7af46d6b9e1feff1ee3979ffde7eb52fd74bc86b2375064a3dee4aef8dea578eb8f297a9e91ae606e3295ee3ec32e0e9bb2e0d20281f529f6144447a3ce4a10efe96fd1042fdf7d93998c3ce5003b06041c4d980899d5138d46b081b5bd5c2323f68d1fa7c77ae6b2e9b0b9958241d50f0966511995a8cd3e5cd4481f4acfe86c3630735152203dfe9e6cc192faedc3fbcf81876a0ad83b0ed924104a4904f3e5abd0d1f2a36de1b677582100d16c4e2c4c9b7e2ad0e0c664fecf6b568d2356f767fbdb24221720201a251ba3db8472f7"}, @NL80211_FTM_RESP_ATTR_LCI={0x3d, 0x2, "cdee8a20dfd61a88bfcd46e6d81eeeac233953742a4923ce319798c9e53689da20d205e3b7a7c230f86d39a00b5d65a0b7583c13b6476e8efc"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x229, 0x7f, [@peer_mgmt={0x75, 0x8, {0x0, 0x3ff, @val=0x4, @val=0x25, @void}}, @tim={0x5, 0xbf, {0x3, 0x26, 0xf4, "e6adb4a223f9064cf3a1bb953d16c3c9e1c70b737ccfb0a40a253ab87090412dec898156aed4208b8f409e332b2c552a5f321890ca164b6cf0fe27d6a8ae4ede946f0bedab809abcd38d41cd3062e3a59fe16fc9f39a88d0625608bd4f6c41fbe71d364d233b0bfa33774ecc6e48044dda696ef5565aa4db9e720c4648d0c27d3e13009c69b4388c35183f0231aad2db98b6fd55faa5a62e43d95ffc248c46e22c301cef1316c98462bafb198c4911358b9373f7a516d76c647ae29b"}}, @ht={0x2d, 0x1a, {0x8000, 0x3, 0x2, 0x0, {0x6, 0x7, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x3, 0x10}}, @dsss={0x3, 0x1, 0xb8}, @measure_req={0x26, 0x27, {0x3, 0xc, 0x7a, "0115c756849225b3201448e909e8b14f35ba187cb2fcf5408280fac1d58d72ef5b64c611"}}, @chsw_timing={0x68, 0x4, {0x8, 0xd}}, @random_vendor={0xdd, 0xfb, "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"}, @ibss={0x6, 0x2, 0x7}, @mesh_chsw={0x76, 0x6, {0x8, 0x1, 0xf, 0xb}}, @erp={0x2a, 0x1}]}, @NL80211_ATTR_BEACON_HEAD={0x204, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_a, @device_b, @initial, {0x1, 0x8}, @value=@ver_80211n={0x0, 0x9, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x7fffffff, @default, 0x4, @void, @void, @void, @val={0x4, 0x6, {0x4, 0x7, 0x9128, 0x7fff}}, @void, @val={0x5, 0x4c, {0x2, 0x9b, 0x8, "ca57804b071ec83c22c62df6dc0b6e24c16f7963d99c3b4b643ee7ef37747e86704205409b08849c98ea54e941a0b9cbb2f63e07ed44b65ddcd6494033824b18f5950f9f0fbc6190cb"}}, @val={0x25, 0x3, {0x1, 0xad, 0x7}}, @void, @void, @val={0x2d, 0x1a, {0x80, 0x3, 0x3, 0x0, {0xc22, 0x5fc, 0x0, 0x10, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x1ff, 0x9}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3, 0xc, 0x0, 0x6}}, [{0xdd, 0x69, "a74d04b890e333893fcf4e5aa5eb885602531b10e0e05dd549910871f0f90773988fdc714e38698f58331026bf5f5d50787640db8f63a55ed41d8cd916ca7c017b38c5cfd56288241b3983905767beb40c5c0679f3239fb3af5865c2f447500ea370a8e539a311ff52"}, {0xdd, 0xe4, "8875ebf855be7f404b75e3e1c189bfa6d8d6f5e352fef2125955084fba9b77df6aca370ed8272ba5b6d16fe469b84cf14fdd90aa2c6b94b833e864c852ed62f6796a4463b8715398a911d5002a091faef2e10b177d0aa4a160ae0312fc853bf468f9d8acacab7a7f34259166068fcf25ecb067c0cc3f8c1d66825b6901d06e56675d264462434c36e246dcc40f1d20cfb8dd1ec0d2fca84cf2a959d31576dec9e082133023532487e90aa4cbeab7e803955cd9298b5c7d30882612a8269cc6c18cda067ce7326637c941a9aa604837c597f37a52b3686bc95437677100888204aa4d42c3"}]}}]}, 0xb08}, 0x1, 0x0, 0x0, 0x2d028ba45c54907a}, 0x4000008) socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000700)="2700000014000707030e0000120f0a0011000e000000000000000000078a151f7508003900050021", 0x28) (async) write(r2, &(0x7f0000000700)="2700000014000707030e0000120f0a0011000e000000000000000000078a151f7508003900050021", 0x28) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r3, &(0x7f00000012c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f00000012c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) getpeername(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x18}}, 0x20004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000100001000000000000000a2c000000060a09040000000000000000020000000900020873797a32000001000000000000807a3000000000000000000000000a000000000000000000000000000000000012383b2ca2d3aba81ebfb5706598573eebef8e2ef6ce757d6f840f3088c4301c"], 0x54}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x901, &(0x7f0000000800)="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", 0x0, 0x0, 0x0}) (async) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0x901, &(0x7f0000000800)="2555cebc6fedc3dc13a2f4493019b1b7d078c241ec9ee4deb392ed3bf7fae507c58bff8823ede2b9be8878c520bd70bac5a1cc79e8b5d893e891d122813a62566834d8cc4b55dbf0990fdcfdc26bd1eb91d87e7548cc75156b0a67a350b1fd2b62034e3ba48b5d87f9006574b4723ad9175e4bd432b67dfff96f177eb23df9ebcc5f480b5cc18f7369ecc92d706dbb6d167bff697b91555376196ad7c95030120a9b62918f643d52fb6ddd49421b7febff3d2e66d77e5712415c9b5640b378f84ad2ede2f5b44406c1dbbe9e66970fdc7e38aa562b7eda578bae4ece2b8f3c6ca8a9817d1c4e28536f8733203677820995743c7913035e1df83c057cddcd8e81eaeff63846207869ff6a221e9d1ed7714600ac67bf6a5cf52cadfd245f04eaaee5a302424bc42972e28518720ff1e31935755acbd370fa6dcc617cd4ee159c4ba2aa43b76eee6cade05ec950932cc4ac76e09a604a83bebe89b60954c09cba51df36bb3c4a2762d1f4b47e0bb62a9b1efc9af122e9f8daf64ad52fbc274c217effdacb5227b0d5f854a9740934db8a928ac150efed1dbdf806a487162e6593b70d819c7537c12096e914ded7ba7c9ee9deaaa211f9cc69d282dec8537040851ab6e9cbf5c8f053c1214ad22082a3df16a2368bc2dde2d599e6a282e6510d6dd0bb9e8a42b1848d119a4016b2b516f65a9a88999056fc4e74107dbd43e11953522d9a1ea04e7c8254d3f64d7ec8673d5c9dc3c88f226882a9073cf5b23227dff0a2bc4b2067c3108b4f6a4ccaeb83df59d0470c3dcbcb455fd13ab5e95ba02b6daef0db2c9ee3db2d4e1046bd1a948045da0d4f81f88adae24e9624989aaeaee902449c094d0d5fd2617d00396e71538bc9a277a8db2e051664e1ef76059c3160aafc231510cbb1997ec29a50799706e61fcb54b407ff44be8925ccf6449631f3c7628d9b45c80e5607e3a14a810051248f8cf7e441acd78ba050b72e89b8a701ec2ce5479c575362d3e8527cc5aa199c7901befdab45ef4d3139c8845d7c8eab76eb42e7846c553e86afd0f2540d7a834bbb0706d407d7032a0417e002e62900f6fc1929f4944f4ae2edc7005e600453905b00f61ea58fc4b06f4c8d314160872f8aa5bd43676f4484c5da5b4942035d294c12779e421b9c399d38775a28ef870251c5288bf41eb4e7045aec61deaac0e1ea6aef2ffc01d36a538d248aa9156a35d14696a270f3da4c70b5c2b7721ff5e9afab5c73a9028b7f5ea1603e581f392fcce4c26d05a1e89b7c54ff67e8b567d504c7f7850a397efbfb96896616e3a9906382c2a273ad241c537560220843a7d361c2d71e0387970d103762e63c51305b4bc8410ba37ecb401e5b6e5824d6a49cde4fce3f774d9d3803a47ac8e72819774454e6ae813e43f6a542fc60e70f186cc7da2f0541645ce20dc6fe58e7c48805e7303fc7f49dc01808dcd25ca1cf07aa990e13f55d67d128aa413741e37bba3c5b50c9e67266b00e838fcf31105802beba4d83a0190056e606ac2c68b612befcb48ec3fc2b53b5dc5050ed8d50838a109ce11b24d9682e31a5473b05b530d75bff8bb86bb151d5cab7d2558bc706b32efd6069ff2519fa164223e7e99663c1b135cf1320833452f5cb298de31db2ef803b09af8eb26472225166b0a092566457b03065db6138878f41b8b11de65cbeb7e0e57b4c7c55fcba40ec100ed1f146ec706a0fe57dd5e8140e4aa5d339c71bd2d2f4a47011b9e3ad3095600a8a8480a0c0f35f9af110cc5fd3531e11cfcd48e5cbf85be6f23fc768c39c869391dad67bfa6220f813986c40845847fea90c5414fccc72ec9f803d11d037658a04a3bc3390e0ab6b48c03ab97b2607e15b80f4bcfb59fc0ed5bf97e9d607ed4bc0bccfee00a2d1eff5578706b6f9003ae3395e7a04ba62cad32f7ebaf43053d4b75179862ac5d6b074244a1cf8a6a59c0a08c0325bf5aa5dfa75024416440496eb4f353ed3baa4d06e699ec0f19d6c29ecf48c0ec3ad6d553b206ef02e4384b6d3a5b441466494a4ad664c767d3dc78e4a53374fc19f5f62dc34a3db1c65435a3350918ffd7687eb4057a26d6f02a3822ec6dbf597cdddb9e8095546b66e88fef373f7e7b79561a911fa545f012ffd49c0f1598568b7796ad36f0cc8f65cba34f5795eab688e9bcf93175c1bde23be8fd639ae373dd181237faaa67d77e63e8350d967a0dd3ed8156a6ac05c6c3f908961a8409a825e1f22b9e5f93e5ef5efee0a74f73910e1077d4c18b63d2cd368d45ad82896c830a71354523995ccb551e8fe6b3f46ab4381576794478796c68df5a3befc12953ebb3317454df55d2fe78917c4451c8324db1dc4aa8385d3e67614efee0eef8b575abdd1c450a56d1e06233cabf0409d86a998a8f1fcbf401cd1d4395db5502361896e0cdb97f1beb9437cbe22ae37db790b11b3b1ff5aad72f10b60e77e8ef06775ac053b6de49057ec3ae6f07811c4aaed61ee3aff21704452a5b0e3f433f06724130e841ca5c5b1d08f9f24480ab6ce92daa25aff4d81a77aa090b3313e91e3db17248fd19d07ee3290801d251fa24db7fef868bfb4c71dba784b6bac3a9481afe9cf4e18f0f1cd491a0ee249008ee1f810338645cc927c07bfbb5259c3326bc7fabd14817ad9b366f9af305423f8e828baacc192beed13b4faf453803b121d2f21d7a5a518befc5091985ff28cf240a904f452ffc81c651142090c8140757f33b1dd5b935a8dc13136d1bedc0f915d46501559ca069e6d58e95d9a25f4faff517dc827abf0ef94f08826b2e3e016f912fd9357f8909764554d857f540a2d85d70587b6f5169fb109dd5a952552489538e416a4fb5f82fc80d82e72fe3bbe320029815c2a2d64f4fa254b65243a97850bd17a5afa99e38d3f1be3d7740aaa16306f0f45361bb3c501aef022432eb519cf1c6ec7fc41a0ab7160575c12bdec80069f084eaf75234f1cadeb435263d0f62bc1e424ad1920ee170a0c6867b2b8074ccb803f4e3b294cb1fc391afec152cd3b5b11192f609e98423d335e6891f4790ca864533e0aa42b9604d45cf35d7aea329a8c970112574f85b13ad9fa74ea126263e9ed905ebe0b531bb6014691227dfc80ca9499bf2df5968b0ffa54a53f39719ba34fee96bcef5557559ce0d0387c57b9110fae42b77d89934622c5781ed12d2943e04c56c07eed6d12ca9bd82f09a39baf0b3bc9fc15c6f8cb6985b1a9a35209a86649697d8820bc831eb39b", 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001140)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)={0x40, r4, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b8d4fbed2154e0e1a627b3a6d5"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x40}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000102500008000", @ANYRES8=r2, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000440), 0x40000000000009f, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r9, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(0xca, &(0x7f0000001240)="040e0c010310e2feffffffff40ffff", 0xf) 973.197324ms ago: executing program 0 (id=11651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_b, @random="f56b2f124e1f", {0xc, 0x1}}, 0x6820, @random=0x9, 0x2000, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x3, 0x31, 0x4}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x4, 0x78, 0x7}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x8, 0xa0}}, @val={0x76, 0x6, {0x9, 0x3, 0x33, 0x9}}, [{0xdd, 0x6, "5240f295e76c"}]}, 0x53) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x827, @mcast2}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xc}, @in6={0xa, 0x4e22, 0x7, @local, 0x9}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}], 0xcc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_b, @random="f56b2f124e1f", {0xc, 0x1}}, 0x6820, @random=0x9, 0x2000, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x3, 0x31, 0x4}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x4, 0x78, 0x7}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x8, 0xa0}}, @val={0x76, 0x6, {0x9, 0x3, 0x33, 0x9}}, [{0xdd, 0x6, "5240f295e76c"}]}, 0x53) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x827, @mcast2}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xc}, @in6={0xa, 0x4e22, 0x7, @local, 0x9}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x4}, @in={0x2, 0x4e20, @loopback}], 0xcc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) 849.940742ms ago: executing program 3 (id=11652): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev}]}}}]}, 0x48}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d000000000095000000"], &(0x7f0000000300)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 849.30853ms ago: executing program 1 (id=11653): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000340)='\x00', 0x0}, 0x48) ioctl$int_in(r2, 0x0, &(0x7f0000000000)=0x10000d) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x11) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001980)={0x9, 0x4, 0x200, 0x3, 0x6, 0x32e35e75, 0x7, 0x80000001}, &(0x7f00000019c0)=0x20) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000340)='\x00', 0x0}, 0x48) (async) ioctl$int_in(r2, 0x0, &(0x7f0000000000)=0x10000d) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x11) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001980)={0x9, 0x4, 0x200, 0x3, 0x6, 0x32e35e75, 0x7, 0x80000001}, &(0x7f00000019c0)=0x20) (async) 822.202953ms ago: executing program 3 (id=11654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r1, &(0x7f00000005c0)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}], 0x1}, 0x2}], 0x1, 0x100, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(0x0, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000300)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r6, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000500)='syzkaller\x00'}, 0x90) write(r4, &(0x7f0000000080)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800828001000000", 0x24) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r3, 0x5, 0x7000000, 0xfffffffe, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 706.016331ms ago: executing program 1 (id=11655): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000101240)={0x1, 0x0}, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="30005080110001004abee33908f8eef16f160271f4000000050002000100000005000900010000000800030006ac0f"], 0x4c}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffb, 0x1}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (async, rerun: 32) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000101280)=r0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00001012c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000101380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xc06}}, &(0x7f00001013c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0x0, 0x1, 0x0, &(0x7f0000101400)=[{0x0, 0x16, 0x6, 0x2}], 0x10, 0x3}, 0x94) 705.024508ms ago: executing program 3 (id=11656): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)="5c318abbf2f650a92636bce8fced2192cce5e18e09ad2de3e48870324a1714fc76d1f0271f7f8214266c3ab547a94864cc0a936e9e", &(0x7f00000002c0), 0x1003, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, &(0x7f0000000340)=""/145, &(0x7f0000000400), &(0x7f0000000440), 0x4, r1}, 0x38) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x1, 0xb7, 0x7, 0x3}, {0x6, 0xb, 0x6, 0xffffffff}]}, 0x10) 578.10715ms ago: executing program 3 (id=11657): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251000000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x20008880) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251000000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x20008880) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x40, r5, 0x1, 0x70bd27, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4815}, 0x800) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x40, r5, 0x1, 0x70bd27, 0x5, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4815}, 0x800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r7) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000fddbdf250900000008000300", @ANYRES32=r8, @ANYBLOB="0500080000000000050007"], 0x38}, 0x1, 0x0, 0x0, 0x200400d4}, 0x80) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x88, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r11 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 432.952147ms ago: executing program 1 (id=11658): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000010000000000000000000000000000000000000000000000000069520c481f193049a4d2e1d6cb"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000004000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x80000003, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000001640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x80002, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001a40)=ANY=[@ANYBLOB="3000000011140100000000000000000008004a00010000000800034c08d1a97359c904000100000008000e0004000000080001000000000016e31f2f291cf99afe5eb2991b0d242eb45bd1587709cc2c54e425dc58be1c588a803ca4cf5d25e15099c831c61f14fb82aa29cff5164ed5c22bb8c91807b86c77230c92358ed8acec1cf23581cdd781fb3f4c9201fe59801acc6313f2069ff563bd9af553a2390c1eaafcfc6dc6"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000002c0)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000004c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b07caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r2, &(0x7f0000000540)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) writev(r2, &(0x7f0000001540)=[{&(0x7f0000001580)='c', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000001600)=0x2, 0x4) close(0x3) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x201}}, @init={0x18, 0x84, 0x0, {0x9, 0x7, 0xd, 0x434}}], 0x48}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0xc, 0xc, &(0x7f00000018c0)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r6, 0x0, 0xe, 0x0, &(0x7f0000001a00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000280)=@buf={0xf9, &(0x7f0000000180)="6d186639d85a0c85663ba2d8e55e27b66b91d688867660c3929d543e537d06b858bbccd22efac4f3d2e9f852d1a7b1402d0f6a8eb5403ec908c35342e9267da007a6d1dfc676b11f39257aa0aadd5cdd5343451519b4d672ef1b87a6c4a34e4578b36b148de7a4a53057629e148275960fdd29b41d4cdaa6c555e7fbf0114d16e3b31d9137fcf706f458a7975d5b89cb49e54392a1628f45dca6cfb950d9959c2b438c89092fa7d069906513e484badb56034e9b5960e4b24ec7a0466310c6b06f5568cab4345688f0c754028e0910612f71670968f3c2bce3f6fbd858ba0c9480b8a345447eef2b2df6ac14fa4a1e28d7ba7b1b3f1ba32eac"}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 380.036413ms ago: executing program 0 (id=11659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000080000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000007400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 285.629509ms ago: executing program 3 (id=11660): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000540)=0x79, 0x4) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="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", 0x17e}, {&(0x7f00000008c0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000bc0)=0xdf8, 0x4) writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb9df7231e2e643ecb223f032a1ae299327d7156236f0edc44c4c268168596acd7c225338921f9e7b97e55fd594eaa95067216139cad3915f76f9cf17d61", 0xb2}, {&(0x7f0000000d00)="135c15194fad5248c52ac1fc08d8399a", 0x10}], 0x2) write(r0, &(0x7f0000000d40)="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", 0x308) 285.176644ms ago: executing program 1 (id=11661): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000010000104050000000300000000000000", @ANYRES8=r1, @ANYBLOB="c3670400000000009000128009000100766c616e00000000800002800600010003000000640004800c00010008000000060000000c00010007000000050000000c00010003000000070000000c00010000000000040000000c00010070000000940f00000c000100ff010000030000000c0001007ac00000000000000c00010000010000ff000000100003800c004100020000009b04000008000500", @ANYRES32=r1], 0xb8}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000010000104050000000300000000000000", @ANYRES8=r1, @ANYBLOB="c3670400000000009000128009000100766c616e00000000800002800600010003000000640004800c00010008000000060000000c00010007000000050000000c00010003000000070000000c00010000000000040000000c00010070000000940f00000c000100ff010000030000000c0001007ac00000000000000c00010000010000ff000000100003800c004100020000009b04000008000500", @ANYRES32=r1], 0xb8}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) 275.296966ms ago: executing program 0 (id=11662): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080)={0x1, 0x2}, 0x8) sendmmsg$sock(r2, &(0x7f00000000c0)=[{{&(0x7f0000000140)=@hci={0x1f, 0x23, 0x4}, 0x80, 0x0}}], 0x1, 0x20008875) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0xc3ff, {0x0, 0x0, 0x0, 0x0, 0x1050c, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$sock_linger(r2, 0x1, 0x3d, &(0x7f0000000080)={0x1, 0x2}, 0x8) (async) sendmmsg$sock(r2, &(0x7f00000000c0)=[{{&(0x7f0000000140)=@hci={0x1f, 0x23, 0x4}, 0x80, 0x0}}], 0x1, 0x20008875) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0xc3ff, {0x0, 0x0, 0x0, 0x0, 0x1050c, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) 252.567053ms ago: executing program 2 (id=11663): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 142.876376ms ago: executing program 1 (id=11664): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) (fail_nth: 1) 142.290696ms ago: executing program 0 (id=11665): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0xc3, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x3c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000004000000140001800d0001007564703a7379b390b3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40004) getpid() r2 = socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000380)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000000000006090000000000009500"/32], &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x44, 0x10, &(0x7f0000000040)}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0xc3, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x3c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000004000000140001800d0001007564703a7379b390b3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40004) (async) getpid() (async) socket(0x2b, 0x80801, 0x1) (async) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000380)='bridge0\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000000000006090000000000009500"/32], &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x44, 0x10, &(0x7f0000000040)}, 0x48) (async) 66.376886ms ago: executing program 1 (id=11666): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001a80)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001a80)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000001ac0), 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e020000001e01060001", @ANYRESOCT], 0x154}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='syzkaller\x00'}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r6, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000001300)="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", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e, &(0x7f0000001400), &(0x7f0000001440)}, 0x2c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x50, r9, 0xe17, 0x70bd2b, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x30, r4, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x30, r4, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000001500)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000001540)={0x8, 0x3, 0x4, 0xfffffffe}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800f000100626f6e645f736c61766500000c000580060005000900000059c3b089a7b86c534c4447047e43bf4f678433ec4cd661ab0be971a7bd9992193746d8249894ae0a5ff9ce1d3fe8e8dd6d407359f6558b0fe92018ce0e4284c88539caabf7bd19bed7d28e95cbbec39bf6d6e45e1fb514b9dabd7baf8cd2fea8827af6aa804662570c46"], 0x40}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r13) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r13) sendmsg$IEEE802154_LLSEC_ADD_KEY(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="01002dbd7000fcdbdf252700a7c242bf0999d92000"], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x98, r4, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_KEK={0x18, 0xf2, "3c7b2128e43f59a1098cf468a437d1b6ef02a218"}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@broadcast}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_FILS_KEK={0x3e, 0xf2, "7985d5ed2caad8a9ca47f4d15ec9c21fa769055a32f3aacb924489e5a10711786db52d46a7f047f0f8ee3d4ad765e38ff2a997fc9df334495ebd"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x8050) sendmsg$IEEE802154_START_REQ(r12, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42004000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r14, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xde}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x9}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 2 (id=11667): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711004000071a9de397b55aa18000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): s: counters copy to user failed while replacing table [ 1342.912074][ T9718] netlink: 'syz.4.10306': attribute type 6 has an invalid length. [ 1342.912092][ T9718] netlink: 'syz.4.10306': attribute type 5 has an invalid length. [ 1342.927856][ T9617] Bluetooth: hci1: unexpected event 0x10 length: 2 > 1 [ 1342.929147][ T9617] Bluetooth: hci1: hardware error 0x00 [ 1343.002629][ T5618] block nbd7: Receive control failed (result -32) [ 1343.111235][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 1343.267229][ T9734] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1343.275639][ T9734] bond4: entered allmulticast mode [ 1343.279079][ T9734] bond0: (slave bond4): Enslaving as an active interface with an up link [ 1343.319328][ T9742] netlink: 'syz.4.10316': attribute type 4 has an invalid length. [ 1343.457542][ T9746] __nla_validate_parse: 9 callbacks suppressed [ 1343.457559][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10318'. [ 1343.457574][ T9746] openvswitch: netlink: Flow actions attr not present in new flow. [ 1343.458957][ T9745] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1343.512214][T10670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.554308][ T9748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.554564][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.750324][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10322'. [ 1343.777796][ T9759] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1343.779859][ T9759] bond0: (slave bond12): Enslaving as an active interface with an up link [ 1344.016322][ T9778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10326'. [ 1345.036533][ T9617] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1346.138108][ T9778] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1346.157754][ T9778] team0: Device ipvlan2 is already an upper device of the team interface [ 1346.224662][ T9781] xt_policy: neither incoming nor outgoing policy selected [ 1346.232650][T23474] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.332976][ T9783] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1346.338094][ T9783] bond0: (slave bond8): Enslaving as an active interface with an up link [ 1346.690346][ T9814] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10338'. [ 1346.703000][ T9814] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10338'. [ 1346.839147][ T9818] netlink: 'syz.1.10340': attribute type 1 has an invalid length. [ 1346.839165][ T9818] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10340'. [ 1347.007940][ T9834] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1347.009819][ T9834] bond5: entered allmulticast mode [ 1347.023589][ T9834] bond0: (slave bond5): Enslaving as an active interface with an up link [ 1347.136004][ T9845] xt_limit: Overflow, try lower: 536871034/0 [ 1347.173865][ T9847] netlink: 'syz.0.10347': attribute type 2 has an invalid length. [ 1347.504615][ T9870] veth0: entered promiscuous mode [ 1347.505633][ T9870] veth0: left promiscuous mode [ 1347.506565][ T9870] netlink: 'syz.1.10352': attribute type 4 has an invalid length. [ 1347.672057][T10670] net_ratelimit: 10 callbacks suppressed [ 1347.672073][T10670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.830657][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1347.893181][ T9893] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1347.896198][ T9893] bond6: entered allmulticast mode [ 1347.898132][ T9893] bond0: (slave bond6): Enslaving as an active interface with an up link [ 1347.948145][ T9898] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1348.021884][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10358'. [ 1348.021903][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10358'. [ 1348.072369][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.143127][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10358'. [ 1348.143146][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10358'. [ 1348.192459][T23470] IPVS: starting estimator thread 0... [ 1348.280636][ T9913] IPVS: using max 31 ests per chain, 74400 per kthread [ 1348.327242][ T9915] xt_policy: too many policy elements [ 1348.561425][ T9926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.562163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.606893][ T9933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.607664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.680036][ T9936] sctp: [Deprecated]: syz.3.10370 (pid 9936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1348.680036][ T9936] Use struct sctp_sack_info instead [ 1348.713899][T10670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.714169][T10670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.870636][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1348.932389][ T9949] __nla_validate_parse: 1 callbacks suppressed [ 1348.932404][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10374'. [ 1348.934039][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10373'. [ 1348.935886][ T9949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10374'. [ 1348.965679][ T9949] netlink: 'syz.4.10374': attribute type 11 has an invalid length. [ 1348.965768][ T9950] ieee802154 phy1 wpan1: encryption failed: -22 [ 1349.005813][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10374'. [ 1349.045393][ T9959] netlink: 'syz.4.10374': attribute type 11 has an invalid length. [ 1349.072065][ T9949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10374'. [ 1349.105784][ T9961] netlink: 'syz.0.10377': attribute type 1 has an invalid length. [ 1349.236986][ T9970] syzkaller0: entered promiscuous mode [ 1349.237004][ T9970] syzkaller0: entered allmulticast mode [ 1349.258983][ T9970] tipc: Enabled bearer , priority 0 [ 1349.280114][ T9969] tipc: Resetting bearer [ 1349.328954][ T9969] tipc: Disabling bearer [ 1349.449789][ T9984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10384'. [ 1349.528545][T23479] IPVS: starting estimator thread 0... [ 1349.623858][ T9991] IPVS: using max 27 ests per chain, 64800 per kthread [ 1349.752643][T10000] can: request_module (can-proto-0) failed. [ 1349.776023][T10008] ebt_limit: overflow, try lower: 4278190080/255 [ 1350.182177][T10023] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10398'. [ 1350.182201][T10023] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10398'. [ 1350.598603][T10043] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1350.598603][T10043] [ 1350.598724][T10043] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1350.598724][T10043] [ 1350.598859][T10043] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1350.598859][T10043] [ 1350.598968][T10043] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1350.598968][T10043] [ 1350.599075][T10043] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1350.599075][T10043] [ 1350.599183][T10043] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1350.599183][T10043] [ 1350.599289][T10043] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1350.599289][T10043] [ 1350.599414][T10043] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1350.599414][T10043] [ 1350.599519][T10043] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1350.599519][T10043] [ 1350.599683][T10043] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not [ 1350.599683][T10043] [ 1350.933742][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10410'. [ 1350.933763][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10410'. [ 1350.936622][T10054] vlan0: entered promiscuous mode [ 1351.295604][T10093] syzkaller0: entered promiscuous mode [ 1351.295621][T10093] syzkaller0: entered allmulticast mode [ 1351.515507][T10110] block nbd8: Unsupported socket: should be TCP or UNIX. [ 1351.723119][T10120] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1351.725322][T10120] bond0: (slave bond13): Enslaving as an active interface with an up link [ 1351.836583][T10127] syzkaller0: entered promiscuous mode [ 1351.836601][T10127] syzkaller0: entered allmulticast mode [ 1351.853180][T10127] tipc: Enabled bearer , priority 0 [ 1351.873654][T10127] tipc: Resetting bearer [ 1351.968371][T10126] tipc: Resetting bearer [ 1351.996576][T10126] tipc: Disabling bearer [ 1352.235438][T10154] netlink: 'syz.3.10433': attribute type 1 has an invalid length. [ 1352.412626][T10172] IPVS: set_ctl: invalid protocol: 255 172.20.20.39:20003 [ 1352.476376][T10170] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 1352.881710][T24039] net_ratelimit: 28 callbacks suppressed [ 1352.881727][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.031484][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1353.031665][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.177602][T10210] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 1353.433413][T10218] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1353.459379][T10218] batman_adv: batadv0: Adding interface: macvtap1 [ 1353.459394][T10218] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.459417][T10218] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1353.558131][ T9617] Bluetooth: hci4: link tx timeout [ 1353.558147][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.570038][ T9617] Bluetooth: hci4: link tx timeout [ 1353.570052][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.592280][ T9617] Bluetooth: hci4: link tx timeout [ 1353.592296][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.592319][ T9617] Bluetooth: hci4: link tx timeout [ 1353.592328][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.593672][ T9617] Bluetooth: hci4: link tx timeout [ 1353.593687][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.593711][ T9617] Bluetooth: hci4: link tx timeout [ 1353.593721][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.593743][ T9617] Bluetooth: hci4: link tx timeout [ 1353.593753][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.593810][ T9617] Bluetooth: hci4: link tx timeout [ 1353.593820][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.593842][ T9617] Bluetooth: hci4: link tx timeout [ 1353.593851][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.593902][ T9617] Bluetooth: hci4: link tx timeout [ 1353.593912][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.593960][ T9617] Bluetooth: hci4: link tx timeout [ 1353.593970][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.594026][ T9617] Bluetooth: hci4: link tx timeout [ 1353.594036][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.594140][ T9617] Bluetooth: hci4: link tx timeout [ 1353.594861][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.594891][ T9617] Bluetooth: hci4: link tx timeout [ 1353.594901][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595000][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595011][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595033][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595043][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595072][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595082][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595142][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595152][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595174][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595183][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595204][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595213][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595266][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595275][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595330][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595340][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595393][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595403][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595425][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595435][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595491][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595502][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595620][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595630][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595652][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595662][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595726][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595736][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595831][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595842][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595865][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595874][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595925][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595935][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.595982][ T9617] Bluetooth: hci4: link tx timeout [ 1353.595992][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596039][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596049][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596078][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596088][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596141][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596151][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596200][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596210][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596259][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596270][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596316][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596327][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596373][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596383][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596452][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596462][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596483][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596492][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596553][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596563][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596621][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596630][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596688][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596699][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596722][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596732][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596786][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596796][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596818][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596828][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596956][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596966][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.596988][ T9617] Bluetooth: hci4: link tx timeout [ 1353.596998][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.597018][ T9617] Bluetooth: hci4: link tx timeout [ 1353.597028][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.597090][ T9617] Bluetooth: hci4: link tx timeout [ 1353.597101][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.597124][ T9617] Bluetooth: hci4: link tx timeout [ 1353.597133][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.597185][ T9617] Bluetooth: hci4: link tx timeout [ 1353.597195][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.597307][ T9617] Bluetooth: hci4: link tx timeout [ 1353.597317][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598035][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598047][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598079][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598089][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598110][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598120][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598140][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598150][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598206][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598216][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598271][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598281][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598302][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598312][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598369][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598379][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598403][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598412][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598464][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598474][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598613][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598624][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598646][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598655][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598711][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598721][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598745][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598754][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598806][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598816][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598869][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598879][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598902][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598924][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.598947][ T9617] Bluetooth: hci4: link tx timeout [ 1353.598956][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599020][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599030][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599156][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599167][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599189][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599198][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599250][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599260][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599333][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599343][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599365][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599374][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599395][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599404][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599458][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599468][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599538][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599548][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599598][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599609][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599658][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599668][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599723][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599733][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599782][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599792][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599884][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599895][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599916][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599926][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.599976][ T9617] Bluetooth: hci4: link tx timeout [ 1353.599986][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.600033][ T9617] Bluetooth: hci4: link tx timeout [ 1353.600043][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.600072][ T9617] Bluetooth: hci4: link tx timeout [ 1353.600082][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.600129][ T9617] Bluetooth: hci4: link tx timeout [ 1353.600139][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.600311][ T9617] Bluetooth: hci4: link tx timeout [ 1353.600322][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.600700][ T9617] Bluetooth: hci4: link tx timeout [ 1353.600712][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.683077][ T9617] Bluetooth: hci4: link tx timeout [ 1353.683092][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.706645][ T9617] Bluetooth: hci4: link tx timeout [ 1353.706660][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.775802][ T9617] Bluetooth: hci4: link tx timeout [ 1353.775816][ T9617] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1353.921763][T10670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.070930][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1354.473419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.537729][T10251] __nla_validate_parse: 16 callbacks suppressed [ 1354.537745][T10251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10459'. [ 1354.951696][T10670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.012831][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10464'. [ 1355.074638][T10268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10464'. [ 1355.074665][T10268] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 1355.110732][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1355.114378][T23485] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1355.164030][T10276] netlink: 'syz.2.10465': attribute type 3 has an invalid length. [ 1355.423411][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10468'. [ 1355.592632][ T9617] Bluetooth: hci4: command 0x0406 tx timeout [ 1355.665840][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10473'. [ 1355.744804][T10318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10476'. [ 1355.811654][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10474'. [ 1355.857617][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10478'. [ 1355.892825][T10325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10478'. [ 1356.110115][T10334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1356.175334][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1356.242001][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1356.433722][T10342] IPv6: sit2: Disabled Multicast RS [ 1356.729817][T10363] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1356.730068][T10363] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1358.081413][T10670] net_ratelimit: 70 callbacks suppressed [ 1358.081434][T10670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.234862][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1358.792038][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.121335][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.280663][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1359.517580][T10375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.517735][T10375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.517922][T10375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.518542][T10375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.518665][T10375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.799664][T10389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10499'. [ 1360.439849][ T4716] hid-generic 0005:07C0:8001.0004: item fetching failed at offset 0/1 [ 1360.452647][ T4716] hid-generic 0005:07C0:8001.0004: probe with driver hid-generic failed with error -22 [ 1360.458653][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10506'. [ 1360.573518][T10428] netlink: 'syz.4.10509': attribute type 1 has an invalid length. [ 1361.137806][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10517'. [ 1361.513635][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.150880][ T9617] Bluetooth: hci4: command 0x0406 tx timeout [ 1362.286915][T10477] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1363.066075][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10530'. [ 1363.093848][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10530'. [ 1363.322357][T10514] netlink: 108 bytes leftover after parsing attributes in process `syz.4.10532'. [ 1363.352467][T24039] net_ratelimit: 116 callbacks suppressed [ 1363.352483][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.354965][T10514] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1363.440811][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1363.760291][T10531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.768995][T10531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.769219][T10531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.770349][T10531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.798218][T10531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.800194][T10531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.800335][T10531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.831956][T10531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.063151][T10548] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1364.063428][T10547] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1364.296940][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10540'. [ 1364.369623][T10571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10542'. [ 1364.619398][T10588] siw: device registration error -23 [ 1364.927786][T10601] ovs0: entered promiscuous mode [ 1365.020226][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10553'. [ 1365.345810][T10627] netlink: 'syz.4.10556': attribute type 1 has an invalid length. [ 1365.381829][T10626] netlink: 'syz.4.10556': attribute type 1 has an invalid length. [ 1365.473470][T10634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10558'. [ 1365.523083][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10560'. [ 1365.855654][T10662] netlink: 'syz.1.10565': attribute type 11 has an invalid length. [ 1365.878779][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10563'. [ 1365.991253][T10672] netlink: 'syz.4.10567': attribute type 32 has an invalid length. [ 1365.991271][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10567'. [ 1366.096951][T10672] bond8: option coupled_control: invalid value (192) [ 1366.114477][T10672] bond8 (unregistering): Released all slaves [ 1366.193336][T10681] netlink: 'syz.1.10568': attribute type 39 has an invalid length. [ 1366.465542][T10689] syzkaller0: entered promiscuous mode [ 1366.465564][T10689] syzkaller0: entered allmulticast mode [ 1366.568970][T10701] netlink: 'syz.4.10574': attribute type 11 has an invalid length. [ 1366.609464][T23474] bridge0: port 4(veth0) entered disabled state [ 1366.874658][T10719] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10578'. [ 1367.045695][T10732] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10583'. [ 1367.049237][T10732] bridge0: port 3(syz_tun) entered blocking state [ 1367.049956][T10732] bridge0: port 3(syz_tun) entered disabled state [ 1367.050108][T10732] syz_tun: entered allmulticast mode [ 1367.056169][T10732] syz_tun: entered promiscuous mode [ 1367.056854][T10732] bridge0: port 3(syz_tun) entered blocking state [ 1367.056955][T10732] bridge0: port 3(syz_tun) entered forwarding state [ 1367.664815][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10598'. [ 1367.723849][T10775] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10598'. [ 1367.869742][T10792] netlink: 'syz.2.10601': attribute type 9 has an invalid length. [ 1368.148866][T10799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10606'. [ 1368.178926][T10808] syzkaller0: entered promiscuous mode [ 1368.178946][T10808] syzkaller0: entered allmulticast mode [ 1368.476933][T10828] netlink: 'syz.3.10612': attribute type 1 has an invalid length. [ 1368.476952][T10828] netlink: 'syz.3.10612': attribute type 2 has an invalid length. [ 1368.542873][T10830] net_ratelimit: 70 callbacks suppressed [ 1368.542891][T10830] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 1368.552572][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.640590][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1368.977969][T10860] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20000 [ 1369.171810][T10869] can: request_module (can-proto-0) failed. [ 1369.193180][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.362030][T10881] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 1369.603271][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.603655][T10898] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 1369.670612][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1369.952835][T10921] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 1369.997416][T10926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1370.179797][T10940] __nla_validate_parse: 12 callbacks suppressed [ 1370.179816][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10644'. [ 1370.246736][T10941] pimreg: entered allmulticast mode [ 1370.285114][T10945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10641'. [ 1370.330377][T10944] netlink: 'syz.2.10645': attribute type 12 has an invalid length. [ 1370.330389][T10944] netlink: 'syz.2.10645': attribute type 29 has an invalid length. [ 1370.333512][T10944] netlink: 148 bytes leftover after parsing attributes in process `syz.2.10645'. [ 1370.393865][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10647'. [ 1370.394738][T10944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10645'. [ 1370.555997][T10955] netlink: 'syz.1.10649': attribute type 1 has an invalid length. [ 1370.556018][T10955] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10649'. [ 1370.707691][ T31] audit: type=1800 audit(1792575957.692:88): pid=10971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10654" name="cgroup.freeze" dev="tmpfs" ino=1286 res=0 errno=0 [ 1370.780144][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10653'. [ 1370.826046][T10977] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1370.827747][T10977] bond7 (unregistering): Released all slaves [ 1370.865005][T10974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10653'. [ 1370.974523][T10967] validate_nla: 3 callbacks suppressed [ 1370.974539][T10967] netlink: 'syz.1.10652': attribute type 1 has an invalid length. [ 1370.991929][T10989] netlink: 'syz.4.10657': attribute type 1 has an invalid length. [ 1371.049661][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10657'. [ 1371.068689][T10967] netlink: 'syz.1.10652': attribute type 1 has an invalid length. [ 1371.123705][T10967] netlink: 'syz.1.10652': attribute type 1 has an invalid length. [ 1371.150484][T10989] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1371.202395][T10967] netlink: 'syz.1.10652': attribute type 1 has an invalid length. [ 1371.259419][T10967] netlink: 'syz.1.10652': attribute type 1 has an invalid length. [ 1371.329513][T10967] netlink: 'syz.1.10652': attribute type 1 has an invalid length. [ 1371.377597][T10967] netlink: 'syz.1.10652': attribute type 1 has an invalid length. [ 1371.412222][T10967] netlink: 'syz.1.10652': attribute type 1 has an invalid length. [ 1371.586589][T11024] ip6t_rt: unknown flags 36 [ 1371.587553][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10668'. [ 1372.363505][T11070] pimreg: left allmulticast mode [ 1372.979005][T11112] sctp: [Deprecated]: syz.1.10698 (pid 11112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1372.979005][T11112] Use struct sctp_sack_info instead [ 1373.000189][T11112] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1373.245178][T11125] netlink: 'syz.2.10701': attribute type 1 has an invalid length. [ 1373.759623][ T4723] net_ratelimit: 18 callbacks suppressed [ 1373.759641][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.831331][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1374.080319][T11184] nbd: socks must be embedded in a SOCK_ITEM attr [ 1374.148837][T11186] veth1_to_hsr: entered allmulticast mode [ 1374.214740][T11191] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1374.299905][T11197] syzkaller0: create flow: hash 2275008228 index 0 [ 1374.373786][T23474] syzkaller0: tun_net_xmit 76 [ 1374.374082][T23474] syzkaller0: tun_net_xmit 48 [ 1374.390928][ T4715] syzkaller0: tun_net_xmit 76 [ 1374.485713][T11208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.485846][T11208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.486007][T11208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.487252][T11208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.487403][T11208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.488222][T11208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.488334][T11208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.493156][T11208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.913999][T11213] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 1376.951897][T11189] syzkaller0 (unregistered): delete flow: hash 2275008228 index 0 [ 1377.062051][T11229] __nla_validate_parse: 19 callbacks suppressed [ 1377.062067][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10736'. [ 1377.199503][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10736'. [ 1377.254883][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10741'. [ 1377.254911][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10741'. [ 1377.289982][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10741'. [ 1377.290002][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10741'. [ 1377.465532][T11264] syzkaller0: entered promiscuous mode [ 1377.465553][T11264] syzkaller0: entered allmulticast mode [ 1377.809521][T11290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10750'. [ 1378.803142][T23470] net_ratelimit: 35 callbacks suppressed [ 1378.803162][T23470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.966470][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.040586][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1380.000028][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.076089][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1380.076786][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.077002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.788270][T11357] validate_nla: 2 callbacks suppressed [ 1380.788289][T11357] netlink: 'syz.0.10771': attribute type 1 has an invalid length. [ 1380.827236][T11357] bond7: entered promiscuous mode [ 1380.827737][T11357] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1380.854923][T11359] xt_IDLETIMER: timeout value is too big [ 1380.882435][T11360] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1380.882815][T11360] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address [ 1380.882832][T11360] bond7: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 1380.934915][T11360] bond7: (slave wireguard1): making interface the new active one [ 1380.934975][T11360] wireguard1: entered promiscuous mode [ 1380.936333][T11360] bond7: (slave wireguard1): Enslaving as an active interface with an up link [ 1380.976332][T11360] bond7: (slave wireguard2): The slave device specified does not support setting the MAC address [ 1380.985351][T11373] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1381.007029][T11360] bond7: (slave wireguard2): Enslaving as a backup interface with an up link [ 1381.032740][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.064806][T11360] bond7: (slave wireguard3): The slave device specified does not support setting the MAC address [ 1381.092633][T11360] bond7: (slave wireguard3): Enslaving as a backup interface with an up link [ 1381.117794][T11360] bond7: (slave wireguard4): The slave device specified does not support setting the MAC address [ 1381.120658][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1381.146916][T11360] bond7: (slave wireguard4): Enslaving as a backup interface with an up link [ 1381.175246][T11360] bond7: (slave wireguard5): The slave device specified does not support setting the MAC address [ 1381.201590][T11360] bond7: (slave wireguard5): Enslaving as a backup interface with an up link [ 1381.218941][T11360] bond7: (slave wireguard6): The slave device specified does not support setting the MAC address [ 1381.235359][T11360] bond7: (slave wireguard6): Enslaving as a backup interface with an up link [ 1381.247548][T11360] bond7: (slave wireguard7): The slave device specified does not support setting the MAC address [ 1381.266884][T11360] bond7: (slave wireguard7): Enslaving as a backup interface with an up link [ 1381.333609][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10781'. [ 1381.334397][T11392] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10781'. [ 1381.343211][T11385] bond10: Unable to set up delay as MII monitoring is disabled [ 1381.377561][T11385] bond10 (unregistering): Released all slaves [ 1381.441017][T11360] bond7: (slave wireguard8): The slave device specified does not support setting the MAC address [ 1381.446294][T11360] bond7: (slave wireguard8): Enslaving as a backup interface with an up link [ 1381.464834][T11360] bond7: (slave wireguard9): The slave device specified does not support setting the MAC address [ 1381.486004][T11360] bond7: (slave wireguard9): Enslaving as a backup interface with an up link [ 1381.564230][T11360] bond7: (slave wireguard10): The slave device specified does not support setting the MAC address [ 1381.597563][T11360] bond7: (slave wireguard10): Enslaving as a backup interface with an up link [ 1381.648030][T11360] bond7: (slave wireguard11): The slave device specified does not support setting the MAC address [ 1381.672770][T11360] bond7: (slave wireguard11): Enslaving as a backup interface with an up link [ 1381.678596][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10785'. [ 1382.025371][T11438] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1382.089936][T11445] __nla_validate_parse: 1 callbacks suppressed [ 1382.089953][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10795'. [ 1382.197200][T11455] ieee802154 phy1 wpan1: encryption failed: -22 [ 1382.256207][T11457] netlink: 236 bytes leftover after parsing attributes in process `syz.1.10798'. [ 1382.256230][T11457] netlink: 236 bytes leftover after parsing attributes in process `syz.1.10798'. [ 1382.304156][T11459] netlink: 'syz.3.10799': attribute type 1 has an invalid length. [ 1382.345019][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10801'. [ 1382.358253][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10799'. [ 1382.411634][T11466] FAULT_INJECTION: forcing a failure. [ 1382.411634][T11466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.411663][T11466] CPU: 1 UID: 0 PID: 11466 Comm: syz.1.10802 Not tainted syzkaller #0 PREEMPT(full) [ 1382.411684][T11466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1382.411696][T11466] Call Trace: [ 1382.411704][T11466] [ 1382.411713][T11466] dump_stack_lvl+0xe8/0x150 [ 1382.411749][T11466] should_fail_ex+0x410/0x560 [ 1382.411782][T11466] _copy_from_user+0x2d/0xb0 [ 1382.411812][T11466] ___sys_sendmsg+0x1c6/0x360 [ 1382.411835][T11466] ? __lock_acquire+0x747/0x2de0 [ 1382.411863][T11466] ? __pfx____sys_sendmsg+0x10/0x10 [ 1382.411891][T11466] ? kstrtouint+0x6e/0xe0 [ 1382.411941][T11466] ? __fget_files+0x2a/0x420 [ 1382.411960][T11466] ? __fget_files+0x3a2/0x420 [ 1382.411989][T11466] __sys_sendmmsg+0x273/0x4d0 [ 1382.412017][T11466] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1382.412048][T11466] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1382.412089][T11466] ? ksys_write+0x242/0x270 [ 1382.412112][T11466] ? __pfx_ksys_write+0x10/0x10 [ 1382.412140][T11466] __x64_sys_sendmmsg+0xa0/0xc0 [ 1382.412163][T11466] do_syscall_64+0x166/0x520 [ 1382.412185][T11466] ? trace_irq_disable+0x3b/0x140 [ 1382.412207][T11466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.412227][T11466] ? clear_bhb_loop+0x70/0xc0 [ 1382.412251][T11466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.412276][T11466] RIP: 0033:0x7f03ca99f559 [ 1382.412295][T11466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.412311][T11466] RSP: 002b:00007f03cb8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1382.412332][T11466] RAX: ffffffffffffffda RBX: 00007f03cac25fa0 RCX: 00007f03ca99f559 [ 1382.412346][T11466] RDX: 0000000000000001 RSI: 0000200000007340 RDI: 0000000000000003 [ 1382.412359][T11466] RBP: 00007f03cb8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1382.412370][T11466] R10: 00000000000040c0 R11: 0000000000000246 R12: 0000000000000001 [ 1382.412381][T11466] R13: 00007f03cac26038 R14: 00007f03cac25fa0 R15: 00007fff0ee37478 [ 1382.412412][T11466] [ 1382.599303][T11473] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.10804'. [ 1382.696702][T11475] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1382.706189][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10806'. [ 1382.762209][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10808'. [ 1383.021799][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10813'. [ 1383.021836][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10813'. [ 1383.054379][T11497] netlink: 'syz.2.10812': attribute type 33 has an invalid length. [ 1383.054587][T11497] netlink: 'syz.2.10812': attribute type 33 has an invalid length. [ 1383.054782][T11497] netlink: 'syz.2.10812': attribute type 33 has an invalid length. [ 1383.054968][T11497] netlink: 'syz.2.10812': attribute type 33 has an invalid length. [ 1383.055157][T11497] netlink: 'syz.2.10812': attribute type 33 has an invalid length. [ 1383.055793][T11497] netlink: 'syz.2.10812': attribute type 33 has an invalid length. [ 1383.055997][T11497] netlink: 'syz.2.10812': attribute type 33 has an invalid length. [ 1383.056642][T11497] netlink: 'syz.2.10812': attribute type 33 has an invalid length. [ 1383.140263][T11502] FAULT_INJECTION: forcing a failure. [ 1383.140263][T11502] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.140291][T11502] CPU: 0 UID: 0 PID: 11502 Comm: syz.0.10814 Not tainted syzkaller #0 PREEMPT(full) [ 1383.140312][T11502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1383.140323][T11502] Call Trace: [ 1383.140331][T11502] [ 1383.140340][T11502] dump_stack_lvl+0xe8/0x150 [ 1383.140373][T11502] should_fail_ex+0x410/0x560 [ 1383.140406][T11502] ? __alloc_skb+0x1db/0x7a0 [ 1383.140425][T11502] should_failslab+0xa8/0x100 [ 1383.140454][T11502] ? __alloc_skb+0x1db/0x7a0 [ 1383.140470][T11502] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1383.140495][T11502] ? __alloc_skb+0x1db/0x7a0 [ 1383.140520][T11502] __alloc_skb+0x1db/0x7a0 [ 1383.140544][T11502] tcp_stream_alloc_skb+0x3f/0x580 [ 1383.140651][T11502] tcp_sendmsg_locked+0x138c/0x5400 [ 1383.140737][T11502] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1383.140765][T11502] ? tcp_sendmsg+0x21/0x50 [ 1383.140787][T11502] ? __local_bh_enable_ip+0xd6/0x140 [ 1383.140818][T11502] tcp_sendmsg+0x2f/0x50 [ 1383.140835][T11502] ? __pfx_inet_sendmsg+0x10/0x10 [ 1383.140859][T11502] sock_sendmsg_nosec+0x10e/0x180 [ 1383.140888][T11502] ____sys_sendmsg+0x54e/0x850 [ 1383.140914][T11502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1383.140946][T11502] ? import_iovec+0x73/0xa0 [ 1383.140979][T11502] ___sys_sendmsg+0x2a5/0x360 [ 1383.140998][T11502] ? __lock_acquire+0x747/0x2de0 [ 1383.141025][T11502] ? __pfx____sys_sendmsg+0x10/0x10 [ 1383.141053][T11502] ? kstrtouint+0x6e/0xe0 [ 1383.141106][T11502] ? __fget_files+0x2a/0x420 [ 1383.141123][T11502] ? __fget_files+0x3a2/0x420 [ 1383.141153][T11502] __sys_sendmmsg+0x273/0x4d0 [ 1383.141180][T11502] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1383.141211][T11502] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1383.141251][T11502] ? ksys_write+0x242/0x270 [ 1383.141274][T11502] ? __pfx_ksys_write+0x10/0x10 [ 1383.141302][T11502] __x64_sys_sendmmsg+0xa0/0xc0 [ 1383.141326][T11502] do_syscall_64+0x166/0x520 [ 1383.141348][T11502] ? trace_irq_disable+0x3b/0x140 [ 1383.141369][T11502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.141389][T11502] ? clear_bhb_loop+0x70/0xc0 [ 1383.141414][T11502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.141433][T11502] RIP: 0033:0x7fd8d7f9f559 [ 1383.141451][T11502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1383.141468][T11502] RSP: 002b:00007fd8d8dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1383.141488][T11502] RAX: ffffffffffffffda RBX: 00007fd8d8225fa0 RCX: 00007fd8d7f9f559 [ 1383.141502][T11502] RDX: 0000000000000001 RSI: 0000200000007340 RDI: 0000000000000003 [ 1383.141515][T11502] RBP: 00007fd8d8dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1383.141528][T11502] R10: 00000000000040c0 R11: 0000000000000246 R12: 0000000000000001 [ 1383.141540][T11502] R13: 00007fd8d8226038 R14: 00007fd8d8225fa0 R15: 00007ffff957f8e8 [ 1383.141573][T11502] [ 1383.349759][T11504] syzkaller0: entered promiscuous mode [ 1383.349777][T11504] syzkaller0: entered allmulticast mode [ 1383.912591][ T1050] net_ratelimit: 17 callbacks suppressed [ 1383.912610][ T1050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.162775][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.230646][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1384.328740][T11591] ip_tables: iptables: counters copy to user failed while replacing table [ 1384.775154][T11612] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1384.776416][T11612] bond0: (slave bond10): Enslaving as an active interface with an up link [ 1384.805127][T11613] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1384.833762][T11613] bond8: (slave gretap3): making interface the new active one [ 1384.834379][T11613] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 1384.838928][T11613] veth1_macvtap: left promiscuous mode [ 1385.215903][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.270692][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1385.324755][T11644] : entered promiscuous mode [ 1385.458487][T11650] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1385.474502][T11650] bond0: (slave bond14): Enslaving as an active interface with an up link [ 1385.505037][T11658] 8021q: VLANs not supported on gre0 [ 1385.858768][T11687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.858926][T11687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.859165][T11687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.860111][T11687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.121130][T23497] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1387.318622][T11784] validate_nla: 27 callbacks suppressed [ 1387.318642][T11784] netlink: 'syz.1.10896': attribute type 1 has an invalid length. [ 1387.318655][T11784] __nla_validate_parse: 23 callbacks suppressed [ 1387.318666][T11784] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10896'. [ 1387.664570][T11793] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10899'. [ 1387.664596][T11793] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10899'. [ 1388.043228][T11806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1388.220909][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10909'. [ 1388.284113][T11823] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1388.286250][T11823] bond0: (slave bond15): Enslaving as an active interface with an up link [ 1388.334437][T11827] syzkaller1: entered promiscuous mode [ 1388.334455][T11827] syzkaller1: entered allmulticast mode [ 1388.353177][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10910'. [ 1388.392401][T11837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.453394][T11840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.514813][T11841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.532896][T11841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1389.354633][ T4723] net_ratelimit: 17 callbacks suppressed [ 1389.354647][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.440592][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1389.590744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.591007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.671889][T23470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.393944][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.470576][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1391.434945][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1391.510643][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1392.474443][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.553946][ T4723] net_ratelimit: 4 callbacks suppressed [ 1394.553960][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.630567][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1394.791149][T23470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.594467][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1395.670568][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1396.635403][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.710794][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1397.354221][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.674261][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.750688][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1399.752110][T24039] net_ratelimit: 5 callbacks suppressed [ 1399.752129][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.830652][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1399.911647][T23474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.795042][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.870648][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1401.841503][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.910590][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1402.875733][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.950582][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1402.953170][ T4716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.952290][T32444] net_ratelimit: 2 callbacks suppressed [ 1404.952305][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.030790][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1405.671458][T23497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.994589][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1406.070664][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1407.034601][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.110581][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1407.592552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.595846][ T4717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.596020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.156056][T32444] net_ratelimit: 5 callbacks suppressed [ 1410.156071][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.230604][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1411.194207][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.270669][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1411.430789][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.431602][T23479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.232028][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.310756][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1413.275313][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.350704][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1415.353493][ T4723] net_ratelimit: 5 callbacks suppressed [ 1415.353514][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.430692][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1416.394550][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.470647][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1416.554304][ T1050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.435182][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.520622][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1417.830991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.480038][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.550596][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1419.112353][ T1050] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1420.553891][ T4723] net_ratelimit: 3 callbacks suppressed [ 1420.553905][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.630679][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1421.591719][T23470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.596260][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.670770][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1422.634859][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.710574][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1422.957454][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.957921][T23497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.958124][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.675596][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.754636][T24039] net_ratelimit: 6 callbacks suppressed [ 1425.754651][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.830768][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1426.798180][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.870604][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1427.433628][T23483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.835006][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.910681][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1428.711051][T23479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.711236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.874269][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.953982][ T4723] net_ratelimit: 4 callbacks suppressed [ 1430.953995][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.030576][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1431.271583][T23474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.995675][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.070669][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1433.034822][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.110666][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1433.199689][ T1050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.075761][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.150675][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1436.155571][T32444] net_ratelimit: 4 callbacks suppressed [ 1436.156370][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.230583][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1436.231932][ T4716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.031419][T23474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.194421][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.271069][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1438.235163][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.312249][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1438.952842][T23470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.274029][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.354301][T32444] net_ratelimit: 5 callbacks suppressed [ 1441.354316][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.430662][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1441.991273][ T4716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.151339][T23479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.393616][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.470582][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1443.436637][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.510693][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1444.474380][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.550650][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1446.555767][T24039] net_ratelimit: 5 callbacks suppressed [ 1446.555781][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.630814][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1447.592538][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.670609][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1447.752885][ T4716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.911483][T13324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.554985][ T4717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.634098][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.710685][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1449.674156][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.113544][T23474] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1451.752200][T23483] net_ratelimit: 4 callbacks suppressed [ 1451.752218][T23483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.752393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.756091][T32444] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.830659][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1452.794147][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.870669][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1453.511791][ T4716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.673224][T23497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.833862][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.910596][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1456.951697][T24039] net_ratelimit: 5 callbacks suppressed [ 1456.951718][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.030675][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1457.512732][T13324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.513018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.994186][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.070623][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1458.701282][T11869] tc_dump_action: action bad kind [ 1458.797084][T13324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.905528][T11885] netlink: 'syz.3.10925': attribute type 1 has an invalid length. [ 1458.935430][T11880] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1458.936718][T11880] bond0: (slave bond19): Enslaving as an active interface with an up link [ 1459.012629][T11885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10925'. [ 1459.035236][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.076192][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10925'. [ 1459.110652][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1459.216134][T11902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.246931][T11898] bond16: (slave bridge4): making interface the new active one [ 1459.249840][T11898] bond16: (slave bridge4): Enslaving as an active interface with an up link [ 1459.383073][T11911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10933'. [ 1459.383187][T11911] macvlan0: entered promiscuous mode [ 1459.463366][T11914] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10931'. [ 1459.467785][T11921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10932'. [ 1459.697706][T11936] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1459.710121][T11936] bond0: (slave bond10): Enslaving as an active interface with an up link [ 1459.897506][T11947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10938'. [ 1460.115514][T11959] x_tables: duplicate underflow at hook 1 [ 1460.186902][T11964] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10943'. [ 1460.219176][T11965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10945'. [ 1460.261385][T11967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10945'. [ 1460.371904][T11977] pim6reg: entered allmulticast mode [ 1460.372884][T11977] veth1_to_hsr: entered allmulticast mode [ 1460.373081][T11977] pim6reg: left allmulticast mode [ 1460.373169][T11977] veth1_to_hsr: left allmulticast mode [ 1460.929719][T11994] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1460.933730][T11994] bond0: (slave bond11): Enslaving as an active interface with an up link [ 1461.116308][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10957'. [ 1461.340215][T12028] netlink: 'syz.2.10960': attribute type 11 has an invalid length. [ 1461.340234][T12028] netlink: 'syz.2.10960': attribute type 4 has an invalid length. [ 1461.416950][T12031] netlink: 'syz.2.10960': attribute type 11 has an invalid length. [ 1461.416968][T12031] netlink: 'syz.2.10960': attribute type 4 has an invalid length. [ 1461.843674][T12048] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1461.847652][T12048] bond9: entered allmulticast mode [ 1461.849951][T12048] bond0: (slave bond9): Enslaving as an active interface with an up link [ 1461.993884][T23479] net_ratelimit: 7 callbacks suppressed [ 1461.993901][T23479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.151389][ T4723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.230686][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1462.230943][T12075] x_tables: duplicate underflow at hook 2 [ 1462.515699][T12078] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1462.863271][T12093] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1462.868547][T12093] bond10: entered allmulticast mode [ 1462.869059][T12093] bond0: (slave bond10): Enslaving as an active interface with an up link [ 1463.197363][T24039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.270829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1463.284217][T23479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.284401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.369428][T12129] xt_NETMAP: bad rangesize 37. [ 1463.479936][T12133] ip6tnl0: entered promiscuous mode [ 1463.685702][T12152] sctp: [Deprecated]: syz.0.10995 (pid 12152) Use of int in max_burst socket option. [ 1463.685702][T12152] Use struct sctp_assoc_value instead [ 1463.695388][T12155] sctp: [Deprecated]: syz.0.10995 (pid 12155) Use of int in max_burst socket option. [ 1463.695388][T12155] Use struct sctp_assoc_value instead [ 1463.914074][T23474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.964217][T12153] netlink: 'syz.4.10996': attribute type 5 has an invalid length. [ 1463.998765][T12172] bond8: (slave veth0_to_bond): Releasing backup interface [ 1464.032266][T12172] bond0: (slave bond_slave_0): Releasing backup interface [ 1464.066647][T12172] bond0: (slave bond_slave_1): Releasing backup interface [ 1464.101673][T12172] team0: Port device team_slave_0 removed [ 1464.127387][T12172] team0: Port device team_slave_1 removed [ 1464.128266][T12172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1464.128285][T12172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.128693][T12182] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 1464.128728][T12182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1464.174198][T12172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1464.174218][T12172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1464.259749][T12178] team0: Port device xfrm0 added [ 1464.278965][T12183] tipc: Enabled bearer , priority 0 [ 1464.445684][T12194] __nla_validate_parse: 15 callbacks suppressed [ 1464.445701][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11008'. [ 1464.445725][T12194] netlink: 'syz.2.11008': attribute type 18 has an invalid length. [ 1464.445737][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11008'. [ 1464.484319][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11008'. [ 1464.484346][T12194] netlink: 'syz.2.11008': attribute type 18 has an invalid length. [ 1464.484358][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11008'. [ 1464.511505][ T1050] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1464.512821][ T1050] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1464.512857][ T1050] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1464.524639][T12197] veth1_to_batadv: entered allmulticast mode [ 1464.641720][T12201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11012'. [ 1464.645369][T12202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11012'. [ 1465.007631][T12226] netlink: 'syz.0.11017': attribute type 10 has an invalid length. [ 1465.025472][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11017'. [ 1465.180243][T12236] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11021'. [ 1465.268222][T12242] netlink: 312 bytes leftover after parsing attributes in process `syz.3.11023'. [ 1465.392028][ T4717] tipc: Node number set to 1734585998 [ 1465.414308][T12250] netlink: 112 bytes leftover after parsing attributes in process `syz.1.11026'. [ 1465.425735][T12252] netlink: 'syz.0.11027': attribute type 1 has an invalid length. [ 1465.468880][T12252] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1465.535242][T12252] bond11: (slave geneve4): making interface the new active one [ 1465.540218][T12252] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 1466.155567][T12300] can: request_module (can-proto-0) failed. [ 1466.368280][T12319] hsr0: entered allmulticast mode [ 1466.368302][T12319] hsr_slave_0: entered allmulticast mode [ 1466.368319][T12319] hsr_slave_1: entered allmulticast mode [ 1466.628094][T12334] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1466.819467][T12341] syzkaller1: entered promiscuous mode [ 1466.819522][T12341] syzkaller1: entered allmulticast mode [ 1467.225618][T12366] net_ratelimit: 11 callbacks suppressed [ 1467.225638][T12366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1467.227949][T12367] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1467.430726][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1467.519362][T12376] netlink: 'syz.1.11062': attribute type 1 has an invalid length. [ 1467.579105][T12376] bond20: option mode: invalid value (23) [ 1467.601327][T12376] bond20 (unregistering): Released all slaves [ 1467.699785][T12397] netlink: 'syz.1.11062': attribute type 10 has an invalid length. [ 1467.778458][T12402] ip_tables: iptables: counters copy to user failed while replacing table [ 1467.843668][T12397] dummy0: entered promiscuous mode [ 1467.966580][T12406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1468.102048][T12414] netlink: 'syz.3.11065': attribute type 9 has an invalid length. [ 1468.197719][T12420] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1468.199831][T12420] bond12: entered allmulticast mode [ 1468.216671][T12420] bond0: (slave bond12): Enslaving as an active interface with an up link [ 1468.300235][T12426] tipc: Trying to set illegal importance in message [ 1468.364486][T12429] team0: Device xfrm0 is of different type [ 1468.383801][T12427] netlink: 'syz.3.11068': attribute type 9 has an invalid length. [ 1468.470575][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1468.509563][T12439] sctp: [Deprecated]: syz.2.11073 (pid 12439) Use of int in maxseg socket option. [ 1468.509563][T12439] Use struct sctp_assoc_value instead [ 1468.509607][T12439] sctp: [Deprecated]: syz.2.11073 (pid 12439) Use of int in maxseg socket option. [ 1468.509607][T12439] Use struct sctp_assoc_value instead [ 1468.509647][T12439] sctp: [Deprecated]: syz.2.11073 (pid 12439) Use of int in maxseg socket option. [ 1468.509647][T12439] Use struct sctp_assoc_value instead [ 1468.509683][T12439] sctp: [Deprecated]: syz.2.11073 (pid 12439) Use of int in maxseg socket option. [ 1468.509683][T12439] Use struct sctp_assoc_value instead [ 1468.509719][T12439] sctp: [Deprecated]: syz.2.11073 (pid 12439) Use of int in maxseg socket option. [ 1468.509719][T12439] Use struct sctp_assoc_value instead [ 1468.509755][T12439] sctp: [Deprecated]: syz.2.11073 (pid 12439) Use of int in maxseg socket option. [ 1468.509755][T12439] Use struct sctp_assoc_value instead [ 1468.509791][T12439] sctp: [Deprecated]: syz.2.11073 (pid 12439) Use of int in maxseg socket option. [ 1468.509791][T12439] Use struct sctp_assoc_value instead [ 1468.509826][T12439] sctp: [Deprecated]: syz.2.11073 (pid 12439) Use of int in maxseg socket option. [ 1468.509826][T12439] Use struct sctp_assoc_value instead [ 1468.509862][T12439] sctp: [Deprecated]: syz.2.11073 (pid 12439) Use of int in maxseg socket option. [ 1468.509862][T12439] Use struct sctp_assoc_value instead [ 1468.509898][T12439] sctp: [Deprecated]: syz.2.11073 (pid 12439) Use of int in maxseg socket option. [ 1468.509898][T12439] Use struct sctp_assoc_value instead [ 1468.794885][T12447] syzkaller1: entered promiscuous mode [ 1468.794905][T12447] syzkaller1: entered allmulticast mode [ 1468.893991][T12454] vlan0: entered promiscuous mode [ 1469.091710][T12459] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1469.108372][T12459] bond0: (slave bond12): Enslaving as an active interface with an up link [ 1469.407309][T12481] netlink: 'syz.3.11087': attribute type 1 has an invalid length. [ 1469.469201][T12488] __nla_validate_parse: 12 callbacks suppressed [ 1469.469219][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11089'. [ 1469.510937][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1469.656635][T12493] bond18: (slave bridge5): making interface the new active one [ 1469.657195][T12493] bond18: (slave bridge5): Enslaving as an active interface with an up link [ 1469.709378][T12500] geneve5: entered promiscuous mode [ 1469.795570][T12489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11088'. [ 1469.795598][T12489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11088'. [ 1469.904500][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11096'. [ 1469.904781][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11096'. [ 1470.020960][T12530] netlink: 'syz.0.11099': attribute type 1 has an invalid length. [ 1470.024389][T23486] tipc: Subscription rejected, illegal request [ 1470.115400][T12530] bond13: entered promiscuous mode [ 1470.115981][T12530] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1470.135412][T12527] Cannot find del_set index 65532 as target [ 1470.445345][T12545] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1470.461609][T12545] bond0: (slave bond13): Enslaving as an active interface with an up link [ 1470.550573][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1470.618608][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11104'. [ 1470.618992][T12556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11104'. [ 1470.659911][T12558] bond14: Removing last ns target with arp_interval on [ 1470.800094][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11108'. [ 1470.804967][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11108'. [ 1470.874985][T12570] sctp: [Deprecated]: syz.2.11111 (pid 12570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1470.874985][T12570] Use struct sctp_sack_info instead [ 1470.939435][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11113'. [ 1471.590721][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1471.727602][T23483] IPVS: starting estimator thread 0... [ 1471.811198][T12632] IPVS: using max 29 ests per chain, 69600 per kthread [ 1471.943454][T12646] batman_adv: batadv0: Adding interface: syzkaller0 [ 1471.943465][T12646] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1471.943603][T12646] batman_adv: batadv0: Interface activated: syzkaller0 [ 1471.954340][T12646] ieee802154 phy1 wpan1: encryption failed: -22 [ 1471.995829][T12635] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1472.046999][T12635] batman_adv: batadv0: Removing interface: syzkaller0 [ 1472.108606][T12648] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1472.125122][T12648] bond0: (slave bond15): Enslaving as an active interface with an up link [ 1472.316302][T12664] netlink: 'syz.3.11136': attribute type 4 has an invalid length. [ 1472.630687][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1472.817687][T12689] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1472.824660][T12689] bond0: (slave bond20): Enslaving as an active interface with an up link [ 1472.839164][T12696] tc_dump_action: action bad kind [ 1473.210035][T12704] bond21 (unregistering): Released all slaves [ 1473.381182][T12716] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1473.670708][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1473.864810][T12731] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1474.083501][T12741] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1474.085506][T12741] bond14: entered allmulticast mode [ 1474.087297][T12741] bond0: (slave bond14): Enslaving as an active interface with an up link [ 1474.203001][T12746] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1474.275464][T12754] openvswitch: netlink: Multiple metadata blocks provided [ 1474.383020][T12761] netlink: 'syz.3.11164': attribute type 1 has an invalid length. [ 1474.446850][T12761] bond19: entered promiscuous mode [ 1474.447365][T12761] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1474.474849][T12761] __nla_validate_parse: 81 callbacks suppressed [ 1474.474864][T12761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11164'. [ 1474.475563][T12761] bond19: entered allmulticast mode [ 1474.523742][T12761] bond19: (slave bridge6): making interface the new active one [ 1474.523761][T12761] bridge6: entered promiscuous mode [ 1474.523923][T12761] bridge6: entered allmulticast mode [ 1474.538622][T12761] bond19: (slave bridge6): Enslaving as an active interface with an up link [ 1474.710596][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1474.712817][T12782] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1474.716058][T12782] bond0: (slave bond11): Enslaving as an active interface with an up link [ 1474.798297][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11173'. [ 1474.798323][T12792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11173'. [ 1475.082453][T12803] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1475.358539][T12818] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1475.359098][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11181'. [ 1475.359115][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11181'. [ 1475.418170][T12820] openvswitch: netlink: Duplicate key (type 0). [ 1475.550132][T12823] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1475.566699][T12823] bond0: (slave bond21): Enslaving as an active interface with an up link [ 1475.724734][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11187'. [ 1475.773655][T12837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1475.773675][T12837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.825526][T12839] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11189'. [ 1476.058242][T12861] netlink: 260 bytes leftover after parsing attributes in process `syz.1.11198'. [ 1476.094489][T12858] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1476.096365][T12858] bond0: (slave bond16): Enslaving as an active interface with an up link [ 1476.164397][T12868] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.11199'. [ 1476.546262][T12898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11208'. [ 1476.619246][T12898] veth7: entered allmulticast mode [ 1476.698124][T12904] netlink: 'syz.0.11210': attribute type 1 has an invalid length. [ 1476.698294][T12899] veth7: entered allmulticast mode [ 1476.780033][T12904] bond15: entered promiscuous mode [ 1476.780667][T12904] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1476.837333][T12904] macvtap1: entered allmulticast mode [ 1476.877088][T12904] macvtap2: entered allmulticast mode [ 1476.923879][T12904] bond15: (slave bridge1): making interface the new active one [ 1476.923899][T12904] bridge1: entered promiscuous mode [ 1476.925877][T12904] bond15: (slave bridge1): Enslaving as an active interface with an up link [ 1477.093725][T12917] ipvlan0: entered promiscuous mode [ 1477.093753][T12917] ipvlan0: entered allmulticast mode [ 1477.093765][T12917] veth0_vlan: entered allmulticast mode [ 1477.127298][T12913] ipvlan0: left promiscuous mode [ 1477.495829][T12943] netlink: 'syz.2.11216': attribute type 83 has an invalid length. [ 1477.546058][T12949] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1477.813055][T12967] xt_recent: Unsupported userspace flags (000000b1) [ 1477.830649][ C0] net_ratelimit: 7 callbacks suppressed [ 1477.830673][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1477.925487][T12975] netlink: Conntrack attr has 1 unknown bytes [ 1477.925519][T12975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1477.944074][T12975] smc: net device lo applied user defined pnetid SYZ0 [ 1477.944096][T12975] smc: smcd device lo applied user defined pnetid SYZ0 [ 1478.272319][T13000] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 1478.301607][T12995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1478.489902][T13006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1478.500237][T13006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1478.870636][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1479.000176][T13038] xt_cluster: node mask cannot exceed total number of nodes [ 1479.000306][T13038] xt_cluster: node mask cannot exceed total number of nodes [ 1479.011321][T13038] xt_cluster: node mask cannot exceed total number of nodes [ 1479.011445][T13038] xt_cluster: node mask cannot exceed total number of nodes [ 1479.011551][T13038] xt_cluster: node mask cannot exceed total number of nodes [ 1479.011655][T13038] xt_cluster: node mask cannot exceed total number of nodes [ 1479.011757][T13038] xt_cluster: node mask cannot exceed total number of nodes [ 1479.011857][T13038] xt_cluster: node mask cannot exceed total number of nodes [ 1479.011954][T13038] xt_cluster: node mask cannot exceed total number of nodes [ 1479.012061][T13038] xt_cluster: node mask cannot exceed total number of nodes [ 1479.134650][T13031] bond17: Invalid ad_actor_system MAC address. [ 1479.134667][T13031] bond17: option ad_actor_system: invalid value (1) [ 1479.149894][T13031] bond17 (unregistering): Released all slaves [ 1479.795338][T13073] __nla_validate_parse: 6 callbacks suppressed [ 1479.795357][T13073] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11248'. [ 1479.920667][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1480.165666][T13101] ip6t_rt: too many addresses specified [ 1480.185983][T13094] syzkaller0: entered promiscuous mode [ 1480.186005][T13094] syzkaller0: entered allmulticast mode [ 1480.258681][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11253'. [ 1480.258711][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11253'. [ 1480.362734][T13100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11253'. [ 1480.502404][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11254'. [ 1480.749992][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11260'. [ 1480.750153][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11260'. [ 1480.950654][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1481.173083][T13160] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1481.239948][T13156] netlink: 'syz.1.11270': attribute type 1 has an invalid length. [ 1481.277742][T13163] xt_hashlimit: size too large, truncated to 1048576 [ 1481.840940][T13187] tipc: Started in network mode [ 1481.840969][T13187] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1481.842295][T13187] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 1481.842426][T13187] tipc: Enabled bearer , priority 0 [ 1481.899128][T13178] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11278'. [ 1481.990712][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1482.163372][T13206] xt_socket: unknown flags 0x4 [ 1482.406279][T13218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11290'. [ 1482.558193][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11292'. [ 1482.873857][T13254] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1482.897444][T13256] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1482.961974][ T4717] tipc: Node number set to 1 [ 1483.034589][T13324] tipc: Subscription rejected, illegal request [ 1483.040720][ C0] net_ratelimit: 1 callbacks suppressed [ 1483.040738][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1483.116824][T23483] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1483.227944][T13285] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 1483.248381][T13289] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 1483.665610][T13318] netlink: get zone limit has 4 unknown bytes [ 1483.723824][T13321] ip_tables: iptables: counters copy to user failed while replacing table [ 1483.962646][T13343] No such timeout policy "s" [ 1483.962663][T13343] netlink: Failed to associated timeout policy 's' [ 1484.070700][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1484.093725][T13353] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1484.275402][T13372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1484.276776][T13370] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1484.393006][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.731235][T13397] IPVS: sh: FWM 1 0x00000001 - no destination available [ 1484.847661][T13413] tipc: Started in network mode [ 1484.847686][T13413] tipc: Node identity 6a6c104b7d8d, cluster identity 4711 [ 1484.849925][T13413] tipc: Enabled bearer , priority 0 [ 1484.874026][T13413] __nla_validate_parse: 19 callbacks suppressed [ 1484.874041][T13413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1484.893247][T13409] xt_ipvs: protocol family 7 not supported [ 1484.945059][T13413] veth8: entered promiscuous mode [ 1484.945077][T13413] veth8: entered allmulticast mode [ 1484.986319][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1484.986348][T13418] netlink: 'syz.2.11335': attribute type 18 has an invalid length. [ 1484.986360][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1484.987127][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1484.987150][T13418] netlink: 'syz.2.11335': attribute type 18 has an invalid length. [ 1484.987162][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1484.989535][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1484.989557][T13418] netlink: 'syz.2.11335': attribute type 18 has an invalid length. [ 1484.989567][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1484.990391][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1484.996367][T13418] netlink: 'syz.2.11335': attribute type 18 has an invalid length. [ 1484.996382][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1484.998533][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1484.998554][T13418] netlink: 'syz.2.11335': attribute type 18 has an invalid length. [ 1484.999086][T13418] netlink: 'syz.2.11335': attribute type 18 has an invalid length. [ 1485.001814][T13418] netlink: 'syz.2.11335': attribute type 18 has an invalid length. [ 1485.002416][T13418] netlink: 'syz.2.11335': attribute type 18 has an invalid length. [ 1485.005491][T13418] netlink: 'syz.2.11335': attribute type 18 has an invalid length. [ 1485.007038][T13418] netlink: 'syz.2.11335': attribute type 18 has an invalid length. [ 1485.207355][T13427] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 1485.208804][T13427] x_tables: duplicate underflow at hook 3 [ 1485.225236][T13412] tipc: Disabling bearer [ 1485.276363][T13431] syz.3.11340: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1485.276558][T13431] CPU: 1 UID: 0 PID: 13431 Comm: syz.3.11340 Not tainted syzkaller #0 PREEMPT(full) [ 1485.276581][T13431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1485.276593][T13431] Call Trace: [ 1485.276602][T13431] [ 1485.276612][T13431] dump_stack_lvl+0xe8/0x150 [ 1485.276649][T13431] warn_alloc+0x24d/0x270 [ 1485.276673][T13431] ? kasan_save_track+0x4f/0x80 [ 1485.276696][T13431] ? kasan_save_track+0x3e/0x80 [ 1485.276722][T13431] ? __pfx_warn_alloc+0x10/0x10 [ 1485.276741][T13431] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1485.276764][T13431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.276805][T13431] __vmalloc_node_range_noprof+0x127/0x1540 [ 1485.276850][T13431] ? rcu_is_watching+0x16/0xb0 [ 1485.276884][T13431] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1485.276905][T13431] ? __kmalloc_cache_noprof+0x321/0x600 [ 1485.276930][T13431] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1485.276953][T13431] ? xskq_create+0x56/0x220 [ 1485.276987][T13431] xskq_create+0x148/0x220 [ 1485.277009][T13431] ? xsk_init_queue+0x8a/0xe0 [ 1485.277032][T13431] xsk_init_queue+0x8a/0xe0 [ 1485.277055][T13431] xsk_setsockopt+0x52a/0x960 [ 1485.277089][T13431] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1485.277119][T13431] ? __pfx_aa_sk_perm+0x10/0x10 [ 1485.277158][T13431] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1485.277186][T13431] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1485.277217][T13431] do_sock_setsockopt+0x17c/0x1b0 [ 1485.277242][T13431] __x64_sys_setsockopt+0x13d/0x1b0 [ 1485.277269][T13431] do_syscall_64+0x166/0x520 [ 1485.277291][T13431] ? trace_irq_disable+0x3b/0x140 [ 1485.277313][T13431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.277333][T13431] ? clear_bhb_loop+0x70/0xc0 [ 1485.277357][T13431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.277377][T13431] RIP: 0033:0x7fec5c19f559 [ 1485.277395][T13431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1485.277412][T13431] RSP: 002b:00007fec5cfaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1485.277432][T13431] RAX: ffffffffffffffda RBX: 00007fec5c425fa0 RCX: 00007fec5c19f559 [ 1485.277446][T13431] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1485.277457][T13431] RBP: 00007fec5c236b20 R08: 0000000000000004 R09: 0000000000000000 [ 1485.277469][T13431] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1485.277484][T13431] R13: 00007fec5c426038 R14: 00007fec5c425fa0 R15: 00007ffc063ad948 [ 1485.277518][T13431] [ 1485.277653][T13431] Mem-Info: [ 1485.277663][T13431] active_anon:10547 inactive_anon:0 isolated_anon:0 [ 1485.277663][T13431] active_file:19 inactive_file:44097 isolated_file:0 [ 1485.277663][T13431] unevictable:0 dirty:145 writeback:0 [ 1485.277663][T13431] slab_reclaimable:14599 slab_unreclaimable:159082 [ 1485.277663][T13431] mapped:31829 shmem:533 pagetables:1478 [ 1485.277663][T13431] sec_pagetables:0 bounce:0 [ 1485.277663][T13431] kernel_misc_reclaimable:0 [ 1485.277663][T13431] free:1206412 free_pcp:11803 free_cma:0 [ 1485.277713][T13431] Node 0 active_anon:42188kB inactive_anon:0kB active_file:76kB inactive_file:176184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127316kB dirty:580kB writeback:0kB shmem:2132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:23216kB pagetables:5776kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1485.277765][T13431] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1485.277812][T13431] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1485.277864][T13431] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1485.277900][T13431] Node 0 DMA32 free:880060kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:42188kB inactive_anon:0kB active_file:76kB inactive_file:176184kB unevictable:0kB writepending:580kB zspages:0kB present:3129332kB managed:2527488kB mlocked:0kB bounce:0kB free_pcp:40000kB local_pcp:20648kB free_cma:0kB [ 1485.277955][T13431] lowmem_reserve[]: 0 0 0 0 0 [ 1485.277996][T13431] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1485.278048][T13431] lowmem_reserve[]: 0 0 0 0 0 [ 1485.278082][T13431] Node 1 Normal free:3930228kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:7304kB local_pcp:0kB free_cma:0kB [ 1485.278136][T13431] lowmem_reserve[]: 0 0 0 0 0 [ 1485.278168][T13431] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1485.278278][T13431] Node 0 DMA32: 1765*4kB (UM) 909*8kB (UM) 646*16kB (UM) 517*32kB (UM) 161*64kB (UM) 39*128kB (UM) 75*256kB (UME) 25*512kB (UME) 13*1024kB (UME) 4*2048kB (UM) 188*4096kB (UM) = 880060kB [ 1485.278429][T13431] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1485.278553][T13431] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3930228kB [ 1485.278849][T13431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1485.278866][T13431] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1485.278882][T13431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1485.278897][T13431] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1485.278913][T13431] 44645 total pagecache pages [ 1485.278921][T13431] 0 pages in swap cache [ 1485.278928][T13431] Free swap = 124996kB [ 1485.278936][T13431] Total swap = 124996kB [ 1485.278944][T13431] 2097051 pages RAM [ 1485.278952][T13431] 0 pages HighMem/MovableOnly [ 1485.278959][T13431] 433563 pages reserved [ 1485.278966][T13431] 0 pages cma reserved [ 1485.349087][T13433] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1485.917354][T13447] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1486.368326][T13474] Bluetooth: hci0: unsupported parameter 5135 [ 1486.368349][T13474] Bluetooth: hci0: unsupported parameter 8192 [ 1486.368364][T13474] Bluetooth: hci0: unsupported parameter 5135 [ 1486.368375][T13474] Bluetooth: hci0: unsupported parameter 8192 [ 1486.456153][T13496] Bluetooth: hci0: unsupported parameter 5135 [ 1486.456171][T13496] Bluetooth: hci0: unsupported parameter 8192 [ 1486.456182][T13496] Bluetooth: hci0: unsupported parameter 5135 [ 1486.456193][T13496] Bluetooth: hci0: unsupported parameter 8192 [ 1486.477053][ T9617] Bluetooth: hci4: command 0x0406 tx timeout [ 1487.444745][T13565] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1487.450075][T13565] bond0: (slave bond20): Enslaving as an active interface with an up link [ 1488.251093][ C0] net_ratelimit: 5 callbacks suppressed [ 1488.251114][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1488.487559][T13621] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1488.489900][T13621] bond0: (slave bond22): Enslaving as an active interface with an up link [ 1488.760727][T13479] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1488.761827][T13479] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1488.761860][T13479] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1488.761887][T13479] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1488.834901][T13654] vlan3: entered promiscuous mode [ 1488.919920][T13663] vlan3: entered promiscuous mode [ 1489.184178][T13682] bond16: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1489.187077][T13682] bond16 (unregistering): Released all slaves [ 1489.270620][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1489.297301][T13684] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1489.300172][T13684] bond0: (slave bond12): Enslaving as an active interface with an up link [ 1489.649367][T13709] syzkaller0: entered promiscuous mode [ 1489.649387][T13709] syzkaller0: entered allmulticast mode [ 1489.831136][ T9617] Bluetooth: hci4: command 0x0406 tx timeout [ 1490.135955][T13715] tipc: Resetting bearer [ 1490.206952][T13715] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1490.310617][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1490.356097][T13731] __nla_validate_parse: 138 callbacks suppressed [ 1490.356113][T13731] netlink: 108 bytes leftover after parsing attributes in process `syz.0.11417'. [ 1490.388887][T13726] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1490.402122][T13726] bond0: (slave bond23): Enslaving as an active interface with an up link [ 1490.516687][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11419'. [ 1490.518834][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11419'. [ 1490.609365][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803aa93800: rx timeout, send abort [ 1490.742158][T13757] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 [ 1490.769285][T13757] bond24: invalid ARP target 0.0.0.0 specified for addition [ 1490.769299][T13757] bond24: option arp_ip_target: invalid value (0) [ 1490.786353][T13757] bond24 (unregistering): Released all slaves [ 1491.117290][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888057c58c00: rx timeout, send abort [ 1491.117326][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803aa93800: abort rx timeout. Force session deactivation [ 1491.319452][T13793] validate_nla: 60 callbacks suppressed [ 1491.319499][T13793] netlink: 'syz.1.11431': attribute type 21 has an invalid length. [ 1491.319513][T13793] netlink: 128 bytes leftover after parsing attributes in process `syz.1.11431'. [ 1491.319579][T13793] netlink: 'syz.1.11431': attribute type 5 has an invalid length. [ 1491.319592][T13793] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11431'. [ 1491.353009][T13799] netlink: 'syz.0.11432': attribute type 1 has an invalid length. [ 1491.354519][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1491.617337][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888057c58c00: abort rx timeout. Force session deactivation [ 1492.032052][T13835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11440'. [ 1492.068535][T13835] syzkaller0: entered promiscuous mode [ 1492.068555][T13835] syzkaller0: entered allmulticast mode [ 1492.390626][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1492.541877][T13865] netlink: 'syz.0.11445': attribute type 8 has an invalid length. [ 1492.589622][T13865] netlink: 'syz.0.11445': attribute type 8 has an invalid length. [ 1492.623026][T13865] netlink: 'syz.0.11445': attribute type 8 has an invalid length. [ 1492.642832][T13865] netlink: 'syz.0.11445': attribute type 8 has an invalid length. [ 1492.717547][T13869] bond0: Error: Cannot enslave bond to itself. [ 1492.727715][T13865] netlink: 'syz.0.11445': attribute type 8 has an invalid length. [ 1492.774315][T13865] netlink: 'syz.0.11445': attribute type 8 has an invalid length. [ 1492.818177][T13865] netlink: 'syz.0.11445': attribute type 8 has an invalid length. [ 1492.893360][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11451'. [ 1493.107143][T13902] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11454'. [ 1493.413538][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11457'. [ 1493.431665][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1493.443380][T13916] bond24: Setting coupled_control to off (0) [ 1493.452237][T13916] nbd: socks must be embedded in a SOCK_ITEM attr [ 1494.011990][T13950] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11465'. [ 1494.099027][T13958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.100705][T13958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.470606][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1494.679555][T14000] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1494.688997][T14005] bond25: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1494.706903][T14005] bond25: entered allmulticast mode [ 1494.812180][T14000] bond25: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1495.158260][T14025] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1495.167651][T14025] bond0: (slave bond26): Enslaving as an active interface with an up link [ 1495.510583][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1495.605881][T14057] FAULT_INJECTION: forcing a failure. [ 1495.605881][T14057] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.605908][T14057] CPU: 1 UID: 0 PID: 14057 Comm: syz.0.11499 Not tainted syzkaller #0 PREEMPT(full) [ 1495.605928][T14057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1495.605939][T14057] Call Trace: [ 1495.605946][T14057] [ 1495.605954][T14057] dump_stack_lvl+0xe8/0x150 [ 1495.605996][T14057] should_fail_ex+0x410/0x560 [ 1495.606025][T14057] ? __alloc_skb+0x1db/0x7a0 [ 1495.606042][T14057] should_failslab+0xa8/0x100 [ 1495.606069][T14057] ? __alloc_skb+0x1db/0x7a0 [ 1495.606084][T14057] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1495.606105][T14057] ? __alloc_skb+0x18d/0x7a0 [ 1495.606121][T14057] ? __alloc_skb+0x1db/0x7a0 [ 1495.606144][T14057] __alloc_skb+0x1db/0x7a0 [ 1495.606165][T14057] netlink_sendmsg+0x5d4/0xb40 [ 1495.606199][T14057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.606230][T14057] ? apparmor_socket_sendmsg+0x98/0x360 [ 1495.606258][T14057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.606279][T14057] sock_sendmsg_nosec+0x13a/0x180 [ 1495.606306][T14057] ____sys_sendmsg+0x54e/0x850 [ 1495.606331][T14057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1495.606360][T14057] ? import_iovec+0x73/0xa0 [ 1495.606392][T14057] ___sys_sendmsg+0x2a5/0x360 [ 1495.606411][T14057] ? __lock_acquire+0x747/0x2de0 [ 1495.606436][T14057] ? __pfx____sys_sendmsg+0x10/0x10 [ 1495.606496][T14057] ? __fget_files+0x2a/0x420 [ 1495.606514][T14057] ? __fget_files+0x3a2/0x420 [ 1495.606541][T14057] __x64_sys_sendmsg+0x1b1/0x290 [ 1495.606562][T14057] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1495.606595][T14057] do_syscall_64+0x166/0x520 [ 1495.606612][T14057] ? trace_irq_disable+0x3b/0x140 [ 1495.606629][T14057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.606644][T14057] ? clear_bhb_loop+0x70/0xc0 [ 1495.606663][T14057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.606677][T14057] RIP: 0033:0x7fd8d7f9f559 [ 1495.606691][T14057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.606704][T14057] RSP: 002b:00007fd8d8dc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1495.606720][T14057] RAX: ffffffffffffffda RBX: 00007fd8d8225fa0 RCX: 00007fd8d7f9f559 [ 1495.606731][T14057] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1495.606740][T14057] RBP: 00007fd8d8dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.606749][T14057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.606758][T14057] R13: 00007fd8d8226038 R14: 00007fd8d8225fa0 R15: 00007ffff957f8e8 [ 1495.606782][T14057] [ 1496.005214][T14075] Bluetooth: hci0: unsupported parameter 5135 [ 1496.005234][T14075] Bluetooth: hci0: unsupported parameter 8192 [ 1496.005245][T14075] Bluetooth: hci0: unsupported parameter 5135 [ 1496.005257][T14075] Bluetooth: hci0: unsupported parameter 8192 [ 1496.328657][T14093] bond27: entered promiscuous mode [ 1496.328964][T14093] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1496.352044][T14093] macvtap2: entered allmulticast mode [ 1496.357922][T14093] macvtap3: entered allmulticast mode [ 1496.360390][T14093] validate_nla: 31 callbacks suppressed [ 1496.360522][T14093] netlink: 'syz.1.11511': attribute type 58 has an invalid length. [ 1496.360537][T14093] __nla_validate_parse: 4 callbacks suppressed [ 1496.360547][T14093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11511'. [ 1496.425083][T14095] bond27: (slave bridge1): making interface the new active one [ 1496.425103][T14095] bridge1: entered promiscuous mode [ 1496.426796][T14095] bond27: (slave bridge1): Enslaving as an active interface with an up link [ 1496.550804][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1496.587612][T14105] netlink: zone id is out of range [ 1496.587625][T14105] netlink: zone id is out of range [ 1496.587633][T14105] netlink: zone id is out of range [ 1496.587640][T14105] netlink: zone id is out of range [ 1496.587648][T14105] netlink: zone id is out of range [ 1496.587655][T14105] netlink: zone id is out of range [ 1496.736495][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11516'. [ 1496.736783][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11516'. [ 1497.206887][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11526'. [ 1497.264086][T14145] vlan3: entered promiscuous mode [ 1497.264106][T14145] bond0: entered promiscuous mode [ 1497.264119][T14145] bond1: entered promiscuous mode [ 1497.264327][T14145] bond2: entered promiscuous mode [ 1497.264514][T14145] bond3: entered promiscuous mode [ 1497.264699][T14145] bond7: entered promiscuous mode [ 1497.266154][T14145] bond10: entered promiscuous mode [ 1497.266354][T14145] bond11: entered promiscuous mode [ 1497.266541][T14145] bond12: entered promiscuous mode [ 1497.548176][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11528'. [ 1497.548454][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11528'. [ 1497.896185][T14179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11535'. [ 1498.007545][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11536'. [ 1498.013364][T14181] netlink: 'syz.1.11536': attribute type 1 has an invalid length. [ 1498.013381][T14181] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11536'. [ 1498.013395][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11536'. [ 1498.029750][T14181] macvlan0: entered promiscuous mode [ 1498.474339][T14195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.512286][T14195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.630599][ C0] net_ratelimit: 70 callbacks suppressed [ 1498.630618][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1499.670595][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1499.927555][T14252] netlink: 'syz.2.11550': attribute type 3 has an invalid length. [ 1500.234207][T13476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.399836][T13476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.409358][T13476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.580129][T14274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.585323][T14274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.585550][T14274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.641919][T13481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.666567][T14276] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.698070][T14283] netlink: 'syz.4.11558': attribute type 1 has an invalid length. [ 1500.735099][T14276] tunl0: entered promiscuous mode [ 1500.747754][T14276] netlink: 'syz.3.11557': attribute type 3 has an invalid length. [ 1501.587216][T14301] __nla_validate_parse: 12 callbacks suppressed [ 1501.587236][T14301] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11565'. [ 1501.587257][T14301] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11565'. [ 1501.587841][T14301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11565'. [ 1501.852624][T14306] FAULT_INJECTION: forcing a failure. [ 1501.852624][T14306] name failslab, interval 1, probability 0, space 0, times 0 [ 1501.852656][T14306] CPU: 1 UID: 0 PID: 14306 Comm: syz.2.11566 Not tainted syzkaller #0 PREEMPT(full) [ 1501.852677][T14306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1501.852690][T14306] Call Trace: [ 1501.852697][T14306] [ 1501.852706][T14306] dump_stack_lvl+0xe8/0x150 [ 1501.852739][T14306] should_fail_ex+0x410/0x560 [ 1501.852770][T14306] ? __alloc_skb+0x1db/0x7a0 [ 1501.852788][T14306] should_failslab+0xa8/0x100 [ 1501.852817][T14306] ? __alloc_skb+0x1db/0x7a0 [ 1501.852833][T14306] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1501.852855][T14306] ? __alloc_skb+0x18d/0x7a0 [ 1501.852871][T14306] ? __alloc_skb+0x1db/0x7a0 [ 1501.852895][T14306] __alloc_skb+0x1db/0x7a0 [ 1501.852917][T14306] netlink_ack+0x136/0xb30 [ 1501.852938][T14306] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1501.852956][T14306] ? ref_tracker_free+0x689/0x830 [ 1501.852986][T14306] ? __pfx_ref_tracker_free+0x10/0x10 [ 1501.853024][T14306] netlink_rcv_skb+0x2a4/0x4a0 [ 1501.853049][T14306] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1501.853070][T14306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1501.853106][T14306] ? netlink_deliver_tap+0x2e/0x1b0 [ 1501.853129][T14306] ? netlink_deliver_tap+0x2e/0x1b0 [ 1501.853158][T14306] netlink_unicast+0x8ef/0xa80 [ 1501.853197][T14306] netlink_sendmsg+0x813/0xb40 [ 1501.853230][T14306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1501.853263][T14306] ? apparmor_socket_sendmsg+0x98/0x360 [ 1501.853291][T14306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1501.853313][T14306] sock_sendmsg_nosec+0x13a/0x180 [ 1501.853341][T14306] ____sys_sendmsg+0x54e/0x850 [ 1501.853373][T14306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1501.853404][T14306] ? import_iovec+0x73/0xa0 [ 1501.853435][T14306] ___sys_sendmsg+0x2a5/0x360 [ 1501.853454][T14306] ? __lock_acquire+0x747/0x2de0 [ 1501.853480][T14306] ? __pfx____sys_sendmsg+0x10/0x10 [ 1501.853538][T14306] ? __fget_files+0x2a/0x420 [ 1501.853555][T14306] ? __fget_files+0x3a2/0x420 [ 1501.853584][T14306] __x64_sys_sendmsg+0x1b1/0x290 [ 1501.853608][T14306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1501.853651][T14306] do_syscall_64+0x166/0x520 [ 1501.853673][T14306] ? trace_irq_disable+0x3b/0x140 [ 1501.853693][T14306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.853714][T14306] ? clear_bhb_loop+0x70/0xc0 [ 1501.853737][T14306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.853756][T14306] RIP: 0033:0x7f7f5139f559 [ 1501.853774][T14306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1501.853790][T14306] RSP: 002b:00007f7f52254028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1501.853810][T14306] RAX: ffffffffffffffda RBX: 00007f7f51625fa0 RCX: 00007f7f5139f559 [ 1501.853824][T14306] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1501.853836][T14306] RBP: 00007f7f52254090 R08: 0000000000000000 R09: 0000000000000000 [ 1501.853848][T14306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1501.853859][T14306] R13: 00007f7f51626038 R14: 00007f7f51625fa0 R15: 00007ffdbe0ffc78 [ 1501.853887][T14306] [ 1502.060737][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11567'. [ 1502.240330][T14308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11567'. [ 1503.187508][T14339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11574'. [ 1503.276283][T14346] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11575'. [ 1503.634590][T14345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11575'. [ 1503.830624][ C0] net_ratelimit: 10 callbacks suppressed [ 1503.830644][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1504.200035][T13486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1504.208702][T14369] netlink: 'syz.3.11579': attribute type 1 has an invalid length. [ 1504.210352][T14369] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1504.462343][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11581'. [ 1504.552941][T14377] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 1504.569364][T14375] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11581'. [ 1504.899518][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1505.008881][T14392] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1505.009054][T14392] tipc: Enabled bearer , priority 0 [ 1505.140895][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1505.281526][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1505.332745][T13486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.420581][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1505.512615][T13486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1506.121522][T32444] tipc: Node number set to 400625739 [ 1506.953417][T14460] __nla_validate_parse: 2 callbacks suppressed [ 1506.953437][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11607'. [ 1506.973420][T14460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11607'. [ 1507.174143][T14467] netlink: 'syz.2.11609': attribute type 1 has an invalid length. [ 1507.847143][T14496] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11619'. [ 1507.908301][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11620'. [ 1507.937703][T14498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11620'. [ 1508.124935][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11622'. [ 1508.125415][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11622'. [ 1508.533255][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11629'. [ 1508.590207][T14534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11630'. [ 1508.686539][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11631'. [ 1509.031289][ C0] net_ratelimit: 23 callbacks suppressed [ 1509.031309][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1509.095815][T14557] netlink: 'syz.1.11636': attribute type 4 has an invalid length. [ 1509.143420][T14561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.190593][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1509.354488][T13479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.368576][T14574] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 1509.490051][T14581] nbd8: detected capacity change from 0 to 274877906944 [ 1509.503881][T14583] netlink: 'syz.1.11644': attribute type 1 has an invalid length. [ 1509.508607][T20971] block nbd8: Receive control failed (result -32) [ 1509.529089][ T2040] block nbd8: Dead connection, failed to find a fallback [ 1509.529119][ T2040] block nbd8: shutting down sockets [ 1509.529207][ T2040] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1509.529307][ T2040] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1509.538267][ T2040] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1509.538294][ T2040] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1509.538702][ T2040] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1509.538727][ T2040] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1509.545437][ T2040] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1509.545464][ T2040] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1509.545612][ T2040] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1509.545635][ T2040] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1509.545783][ T2040] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1509.545806][ T2040] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1509.545929][ T2040] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1509.545952][ T2040] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1509.557043][ T2040] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1509.557070][ T2040] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1509.557149][T13783] ldm_validate_partition_table(): Disk read failed. [ 1509.557247][ T2040] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1509.557269][ T2040] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1509.566731][ T2040] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1509.567608][ T2040] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1509.577334][T14583] bond29: (slave veth0_to_bond): making interface the new active one [ 1509.578494][T14583] bond29: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1509.586998][T13783] Dev nbd8: unable to read RDB block 0 [ 1509.618204][T13783] nbd8: unable to read partition table [ 1509.657372][T14587] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1509.659777][T14587] bond0: (slave bond30): Enslaving as an active interface with an up link [ 1509.751244][T13783] ldm_validate_partition_table(): Disk read failed. [ 1509.751623][T13783] Dev nbd8: unable to read RDB block 0 [ 1509.755297][T13783] nbd8: unable to read partition table [ 1509.806454][T13476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.813634][T14589] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1509.906836][T14595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1509.922872][T14596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1509.992372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1510.070823][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1510.071851][T14614] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 1510.202521][T14620] netlink: 'syz.3.11656': attribute type 21 has an invalid length. [ 1510.230575][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1510.641558][T14649] team0: Port device macvlan0 added [ 1510.709896][T14655] team0: Device xfrm0 is of different type [ 1510.733226][T14658] FAULT_INJECTION: forcing a failure. [ 1510.733226][T14658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1510.733254][T14658] CPU: 0 UID: 0 PID: 14658 Comm: syz.1.11664 Not tainted syzkaller #0 PREEMPT(full) [ 1510.733275][T14658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1510.733286][T14658] Call Trace: [ 1510.733295][T14658] [ 1510.733303][T14658] dump_stack_lvl+0xe8/0x150 [ 1510.733335][T14658] should_fail_ex+0x410/0x560 [ 1510.733367][T14658] _copy_from_user+0x2d/0xb0 [ 1510.733397][T14658] ___sys_sendmsg+0x1c6/0x360 [ 1510.733417][T14658] ? __lock_acquire+0x747/0x2de0 [ 1510.733444][T14658] ? __pfx____sys_sendmsg+0x10/0x10 [ 1510.733503][T14658] ? __fget_files+0x2a/0x420 [ 1510.733521][T14658] ? __fget_files+0x3a2/0x420 [ 1510.733558][T14658] __x64_sys_sendmsg+0x1b1/0x290 [ 1510.733582][T14658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1510.733626][T14658] do_syscall_64+0x166/0x520 [ 1510.733648][T14658] ? trace_irq_disable+0x3b/0x140 [ 1510.733669][T14658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.733688][T14658] ? clear_bhb_loop+0x70/0xc0 [ 1510.733710][T14658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.733728][T14658] RIP: 0033:0x7f03ca99f559 [ 1510.733745][T14658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1510.733761][T14658] RSP: 002b:00007f03cb8b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1510.733782][T14658] RAX: ffffffffffffffda RBX: 00007f03cac25fa0 RCX: 00007f03ca99f559 [ 1510.733797][T14658] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1510.733809][T14658] RBP: 00007f03cb8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1510.733821][T14658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1510.733833][T14658] R13: 00007f03cac26038 R14: 00007f03cac25fa0 R15: 00007fff0ee37478 [ 1510.733866][T14658] [ 1510.862716][T14660] [ 1510.940175][T14660] ====================================================== [ 1510.947200][T14660] WARNING: possible circular locking dependency detected [ 1510.954271][T14660] syzkaller #0 Not tainted [ 1510.958693][T14660] ------------------------------------------------------ [ 1510.965746][T14660] syz.0.11665/14660 is trying to acquire lock: [ 1510.971931][T14660] ffff88801d2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 1510.982267][T14660] [ 1510.982267][T14660] but task is already holding lock: [ 1510.989613][T14660] ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1511.000472][T14660] [ 1511.000472][T14660] which lock already depends on the new lock. [ 1511.000472][T14660] [ 1511.010874][T14660] [ 1511.010874][T14660] the existing dependency chain (in reverse order) is: [ 1511.019882][T14660] [ 1511.019882][T14660] -> #10 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1511.028638][T14660] down_read+0x4a/0x330 [ 1511.033320][T14660] kernfs_remove_by_name_ns+0x3f/0x140 [ 1511.039294][T14660] internal_create_group+0x58e/0x1180 [ 1511.045176][T14660] sysfs_update_groups+0x60/0x130 [ 1511.050712][T14660] pmu_dev_alloc+0x29b/0x300 [ 1511.055851][T14660] perf_event_sysfs_init+0x76/0x100 [ 1511.061664][T14660] do_one_initcall+0x250/0x870 [ 1511.066950][T14660] do_initcall_level+0x10a/0x1a0 [ 1511.072518][T14660] do_initcalls+0x59/0xa0 [ 1511.077363][T14660] kernel_init_freeable+0x29d/0x3e0 [ 1511.083075][T14660] kernel_init+0x22/0x1d0 [ 1511.087920][T14660] ret_from_fork+0x514/0xb70 [ 1511.093070][T14660] ret_from_fork_asm+0x1a/0x30 [ 1511.098351][T14660] [ 1511.098351][T14660] -> #9 (pmus_lock){+.+.}-{4:4}: [ 1511.105457][T14660] __mutex_lock+0x19d/0x1550 [ 1511.110573][T14660] perf_event_init_cpu+0x1d1/0x7a0 [ 1511.116189][T14660] cpuhp_invoke_callback+0x434/0x810 [ 1511.121985][T14660] cpuhp_thread_fun+0x362/0x780 [ 1511.127346][T14660] smpboot_thread_fn+0x565/0xa70 [ 1511.132795][T14660] kthread+0x38b/0x480 [ 1511.137382][T14660] ret_from_fork+0x514/0xb70 [ 1511.142477][T14660] ret_from_fork_asm+0x1a/0x30 [ 1511.147756][T14660] [ 1511.147756][T14660] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1511.155297][T14660] cpuhp_thread_fun+0x127/0x780 [ 1511.160662][T14660] smpboot_thread_fn+0x565/0xa70 [ 1511.166130][T14660] kthread+0x38b/0x480 [ 1511.170704][T14660] ret_from_fork+0x514/0xb70 [ 1511.175803][T14660] ret_from_fork_asm+0x1a/0x30 [ 1511.181068][T14660] [ 1511.181068][T14660] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1511.188782][T14660] cpus_read_lock+0x42/0x160 [ 1511.193910][T14660] static_key_slow_inc+0x12/0x30 [ 1511.199360][T14660] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1511.205623][T14660] nbd_genl_foreach_sock+0x265/0x450 [ 1511.211420][T14660] nbd_genl_reconfigure+0xbbb/0x1040 [ 1511.217212][T14660] genl_family_rcv_msg_doit+0x233/0x340 [ 1511.223270][T14660] genl_rcv_msg+0x614/0x7a0 [ 1511.228291][T14660] netlink_rcv_skb+0x226/0x4a0 [ 1511.233573][T14660] genl_rcv+0x28/0x40 [ 1511.238068][T14660] netlink_unicast+0x8ef/0xa80 [ 1511.243337][T14660] netlink_sendmsg+0x813/0xb40 [ 1511.248611][T14660] sock_sendmsg_nosec+0x13a/0x180 [ 1511.254157][T14660] ____sys_sendmsg+0x54e/0x850 [ 1511.259432][T14660] ___sys_sendmsg+0x2a5/0x360 [ 1511.264613][T14660] __x64_sys_sendmsg+0x1b1/0x290 [ 1511.270061][T14660] do_syscall_64+0x166/0x520 [ 1511.275157][T14660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.281565][T14660] [ 1511.281565][T14660] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1511.289200][T14660] __mutex_lock+0x19d/0x1550 [ 1511.294305][T14660] nbd_queue_rq+0x373/0xff0 [ 1511.299316][T14660] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1511.305390][T14660] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1511.312235][T14660] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1511.318737][T14660] blk_mq_run_work_fn+0x16c/0x300 [ 1511.324269][T14660] process_scheduled_works+0xc3d/0x1630 [ 1511.330322][T14660] worker_thread+0xa47/0xfb0 [ 1511.335444][T14660] kthread+0x38b/0x480 [ 1511.340020][T14660] ret_from_fork+0x514/0xb70 [ 1511.345114][T14660] ret_from_fork_asm+0x1a/0x30 [ 1511.350391][T14660] [ 1511.350391][T14660] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1511.357595][T14660] __mutex_lock+0x19d/0x1550 [ 1511.362697][T14660] nbd_queue_rq+0xc1/0xff0 [ 1511.367653][T14660] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1511.373709][T14660] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1511.380552][T14660] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1511.387042][T14660] blk_mq_run_work_fn+0x16c/0x300 [ 1511.392604][T14660] process_scheduled_works+0xc3d/0x1630 [ 1511.398687][T14660] worker_thread+0xa47/0xfb0 [ 1511.403791][T14660] kthread+0x38b/0x480 [ 1511.408365][T14660] ret_from_fork+0x514/0xb70 [ 1511.413458][T14660] ret_from_fork_asm+0x1a/0x30 [ 1511.418745][T14660] [ 1511.418745][T14660] -> #4 (set->srcu){.+.+}-{0:0}: [ 1511.425870][T14660] __synchronize_srcu+0xc9/0x2f0 [ 1511.431317][T14660] elevator_switch+0x1e8/0x7b0 [ 1511.436602][T14660] elevator_change+0x2fa/0x480 [ 1511.441875][T14660] elevator_set_default+0x375/0x440 [ 1511.447590][T14660] blk_register_queue+0x3f3/0x4e0 [ 1511.453127][T14660] __add_disk+0x6b8/0xdb0 [ 1511.457986][T14660] add_disk_fwnode+0x100/0x3a0 [ 1511.463263][T14660] nbd_dev_add+0x733/0xb60 [ 1511.468197][T14660] nbd_init+0x168/0x1f0 [ 1511.472934][T14660] do_one_initcall+0x250/0x870 [ 1511.478211][T14660] do_initcall_level+0x10a/0x1a0 [ 1511.483663][T14660] do_initcalls+0x59/0xa0 [ 1511.488513][T14660] kernel_init_freeable+0x29d/0x3e0 [ 1511.494231][T14660] kernel_init+0x22/0x1d0 [ 1511.499073][T14660] ret_from_fork+0x514/0xb70 [ 1511.504165][T14660] ret_from_fork_asm+0x1a/0x30 [ 1511.509437][T14660] [ 1511.509437][T14660] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1511.517242][T14660] __mutex_lock+0x19d/0x1550 [ 1511.522340][T14660] elevator_change+0x1af/0x480 [ 1511.527612][T14660] elevator_set_none+0xb5/0x140 [ 1511.532971][T14660] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1511.539292][T14660] nbd_start_device+0x189/0xb30 [ 1511.544651][T14660] nbd_genl_connect+0x167d/0x1cd0 [ 1511.550180][T14660] genl_family_rcv_msg_doit+0x233/0x340 [ 1511.556242][T14660] genl_rcv_msg+0x614/0x7a0 [ 1511.561303][T14660] netlink_rcv_skb+0x226/0x4a0 [ 1511.566574][T14660] genl_rcv+0x28/0x40 [ 1511.571069][T14660] netlink_unicast+0x8ef/0xa80 [ 1511.576337][T14660] netlink_sendmsg+0x813/0xb40 [ 1511.581630][T14660] sock_sendmsg_nosec+0x13a/0x180 [ 1511.587165][T14660] ____sys_sendmsg+0x54e/0x850 [ 1511.592434][T14660] ___sys_sendmsg+0x2a5/0x360 [ 1511.597625][T14660] __x64_sys_sendmsg+0x1b1/0x290 [ 1511.603069][T14660] do_syscall_64+0x166/0x520 [ 1511.608164][T14660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.614565][T14660] [ 1511.614565][T14660] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1511.623151][T14660] blk_alloc_queue+0x544/0x690 [ 1511.628422][T14660] __blk_mq_alloc_disk+0x194/0x390 [ 1511.634050][T14660] nbd_dev_add+0x494/0xb60 [ 1511.638982][T14660] nbd_init+0x168/0x1f0 [ 1511.643645][T14660] do_one_initcall+0x250/0x870 [ 1511.648948][T14660] do_initcall_level+0x10a/0x1a0 [ 1511.654396][T14660] do_initcalls+0x59/0xa0 [ 1511.659243][T14660] kernel_init_freeable+0x29d/0x3e0 [ 1511.664962][T14660] kernel_init+0x22/0x1d0 [ 1511.669800][T14660] ret_from_fork+0x514/0xb70 [ 1511.674895][T14660] ret_from_fork_asm+0x1a/0x30 [ 1511.680164][T14660] [ 1511.680164][T14660] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1511.687354][T14660] fs_reclaim_acquire+0x71/0x100 [ 1511.692805][T14660] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 1511.699039][T14660] alloc_inode+0xb8/0x1b0 [ 1511.703878][T14660] iget_locked+0x131/0x6a0 [ 1511.708809][T14660] kernfs_get_inode+0x4f/0x770 [ 1511.714086][T14660] kernfs_get_tree+0x5cd/0x980 [ 1511.719360][T14660] vfs_get_tree+0x92/0x2a0 [ 1511.724280][T14660] do_new_mount+0x325/0xb00 [ 1511.729330][T14660] __se_sys_mount+0x31d/0x420 [ 1511.734521][T14660] do_syscall_64+0x166/0x520 [ 1511.739619][T14660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.746018][T14660] [ 1511.746018][T14660] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 1511.754003][T14660] __lock_acquire+0x164c/0x2de0 [ 1511.759360][T14660] lock_acquire+0x115/0x350 [ 1511.764368][T14660] down_write+0x96/0x200 [ 1511.769123][T14660] kernfs_remove_by_name_ns+0x4e/0x140 [ 1511.775092][T14660] del_nbp+0x93/0x9f0 [ 1511.779584][T14660] br_dev_delete+0x6e/0x130 [ 1511.784617][T14660] br_del_bridge+0xb1/0xf0 [ 1511.789549][T14660] br_ioctl_stub+0x746/0xd60 [ 1511.794692][T14660] sock_ioctl+0x4e1/0x7e0 [ 1511.799535][T14660] __se_sys_ioctl+0xfc/0x170 [ 1511.804631][T14660] do_syscall_64+0x166/0x520 [ 1511.809728][T14660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.816124][T14660] [ 1511.816124][T14660] other info that might help us debug this: [ 1511.816124][T14660] [ 1511.826331][T14660] Chain exists of: [ 1511.826331][T14660] &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem [ 1511.826331][T14660] [ 1511.840183][T14660] Possible unsafe locking scenario: [ 1511.840183][T14660] [ 1511.847616][T14660] CPU0 CPU1 [ 1511.852962][T14660] ---- ---- [ 1511.858354][T14660] rlock(&root->kernfs_supers_rwsem); [ 1511.863799][T14660] lock(pmus_lock); [ 1511.870200][T14660] lock(&root->kernfs_supers_rwsem); [ 1511.878076][T14660] lock(&root->kernfs_rwsem); [ 1511.882848][T14660] [ 1511.882848][T14660] *** DEADLOCK *** [ 1511.882848][T14660] [ 1511.890972][T14660] locks held by syz.0.11665/14660: 3, last CPU#0: [ 1511.897414][T14660] #0: ffffffff91236d20 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b8/0x7e0 [ 1511.906546][T14660] #1: ffffffff91255d80 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 1511.915581][T14660] #2: ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 1511.926880][T14660] [ 1511.926880][T14660] stack backtrace: [ 1511.932777][T14660] CPU: 0 UID: 0 PID: 14660 Comm: syz.0.11665 Not tainted syzkaller #0 PREEMPT(full) [ 1511.942215][T14660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1511.952254][T14660] Call Trace: [ 1511.955519][T14660] [ 1511.958436][T14660] dump_stack_lvl+0xe8/0x150 [ 1511.963019][T14660] print_circular_bug+0x2e2/0x300 [ 1511.968039][T14660] check_noncircular+0x12f/0x150 [ 1511.972974][T14660] __lock_acquire+0x164c/0x2de0 [ 1511.977818][T14660] ? __lock_acquire+0x747/0x2de0 [ 1511.982745][T14660] lock_acquire+0x115/0x350 [ 1511.987263][T14660] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1511.992899][T14660] down_write+0x96/0x200 [ 1511.997137][T14660] ? kernfs_remove_by_name_ns+0x4e/0x140 [ 1512.002762][T14660] ? __pfx_down_write+0x10/0x10 [ 1512.007604][T14660] ? down_read+0x2be/0x330 [ 1512.012014][T14660] kernfs_remove_by_name_ns+0x4e/0x140 [ 1512.017464][T14660] del_nbp+0x93/0x9f0 [ 1512.021438][T14660] ? full_name_hash+0x92/0xe0 [ 1512.026112][T14660] br_dev_delete+0x6e/0x130 [ 1512.030609][T14660] br_del_bridge+0xb1/0xf0 [ 1512.035022][T14660] br_ioctl_stub+0x746/0xd60 [ 1512.039610][T14660] ? trace_contention_end+0x3d/0x140 [ 1512.044889][T14660] ? __mutex_lock+0x30b/0x1550 [ 1512.049641][T14660] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1512.054754][T14660] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1512.059774][T14660] ? sock_ioctl+0x4b8/0x7e0 [ 1512.064284][T14660] ? hook_file_ioctl+0x1f2/0x600 [ 1512.069222][T14660] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1512.074328][T14660] sock_ioctl+0x4e1/0x7e0 [ 1512.078676][T14660] ? __pfx_sock_ioctl+0x10/0x10 [ 1512.083514][T14660] ? __fget_files+0x2a/0x420 [ 1512.088093][T14660] ? __fget_files+0x3a2/0x420 [ 1512.092754][T14660] ? __fget_files+0x2a/0x420 [ 1512.097342][T14660] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1512.102273][T14660] ? __pfx_sock_ioctl+0x10/0x10 [ 1512.107112][T14660] __se_sys_ioctl+0xfc/0x170 [ 1512.111693][T14660] do_syscall_64+0x166/0x520 [ 1512.116271][T14660] ? trace_irq_disable+0x3b/0x140 [ 1512.121282][T14660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.127334][T14660] ? clear_bhb_loop+0x70/0xc0 [ 1512.131999][T14660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.137888][T14660] RIP: 0033:0x7fd8d7f9f559 [ 1512.142290][T14660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1512.161911][T14660] RSP: 002b:00007fd8d8dc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1512.170310][T14660] RAX: ffffffffffffffda RBX: 00007fd8d8225fa0 RCX: 00007fd8d7f9f559 [ 1512.178267][T14660] RDX: 0000200000000380 RSI: 00000000000089a1 RDI: 0000000000000004 [ 1512.186228][T14660] RBP: 00007fd8d8036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1512.194190][T14660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1512.202146][T14660] R13: 00007fd8d8226038 R14: 00007fd8d8225fa0 R15: 00007ffff957f8e8 [ 1512.210136][T14660] [ 1512.265266][T14660] veth0: left allmulticast mode [ 1512.265284][T14660] veth0: left promiscuous mode [ 1512.265428][T14660] bridge0: port 4(veth0) entered disabled state [ 1512.339955][T14660] gretap0: left allmulticast mode [ 1512.340090][T14660] bridge0: port 3(gretap0) entered disabled state [ 1512.359358][T14660] bridge_slave_1: left allmulticast mode [ 1512.359376][T14660] bridge_slave_1: left promiscuous mode [ 1512.373728][T14660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.384700][T14660] bridge_slave_0: left allmulticast mode [ 1512.384718][T14660] bridge_slave_0: left promiscuous mode [ 1512.384885][T14660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.438401][T14664] __nla_validate_parse: 12 callbacks suppressed [ 1512.438416][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11666'. [ 1514.320750][ C0] net_ratelimit: 10 callbacks suppressed [ 1514.320764][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1514.320856][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1514.471017][T13486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1514.471189][T13479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.112751][T13476] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1515.113539][T13483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.350751][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1515.350946][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1515.591054][T13479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.390872][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1516.391029][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1519.510803][ C0] net_ratelimit: 11 callbacks suppressed [ 1519.510825][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1519.510983][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1520.011453][T13479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.230596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.235658][T13479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1520.550764][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1520.550915][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1520.871078][T13479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog