last executing test programs: 5.174508889s ago: executing program 3 (id=11138): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)={0x14, 0x1, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x80c1}, 0x8040) 5.064731779s ago: executing program 3 (id=11140): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) close(0x3) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x5) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x4, 0xe, 0x2, @vifc_lcl_addr=@loopback, @multicast2}, 0x10) 5.064303324s ago: executing program 2 (id=11141): syz_emit_ethernet(0x92, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x84, 0x0, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1c, 0x8, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @sack={0x5, 0x1a, [0x8, 0x3, 0x72, 0x8, 0x7, 0x9]}, @timestamp={0x8, 0xa, 0x7, 0x8a}, @fastopen={0x22, 0x3, "e2"}, @exp_fastopen={0xfe, 0x14, 0xf989, "079d22d6961c5af4c2cc061f44954a96"}, @fastopen={0x22, 0x8, "da0647316a11"}, @mptcp=@capable={0x1e, 0xc, 0x4, 0x1, 0x40, 0x1}]}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0x4}]}], {0x14}}, 0x7c}}, 0x0) 5.003446632s ago: executing program 2 (id=11142): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000004c0)=0x4) (async, rerun: 32) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x6}]}) (async, rerun: 32) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000007c0)={0x1, &(0x7f0000000000)=[{0x6, 0x60}]}) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(xxhash64-generic)\x00'}, 0x58) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) (async) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) 1.911537032s ago: executing program 1 (id=11146): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000010000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000aea50c"], 0x48) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@mcast2, @mcast1, @remote, 0x1, 0x3, 0x7904, 0x500, 0x0, 0x40000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000011dc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r5, &(0x7f0000012380)={&(0x7f0000012080)=@generic={0x1e, "3c8d3b4d83b69172b85c60d54a5faa2fdee7af0b69f3ee83d14731ce8d03eccfd7fa67526f73f7445d55147fedac962d6f5d4eacd05ad23808ad770c3078fac37af7ddacd9a7aaee6bc7b134a8f387148861475187fc20355b56d582e97851a29f1d82d195aea4e29f75a7294256a2c0890ceff90596246c07bb3378b1c3"}, 0x80, 0x0}, 0x150) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000001000900000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a8}, 0x94) 1.816186689s ago: executing program 3 (id=11148): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno', 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="1c91662188b2e27c9ef680b1", 0xc}, {&(0x7f00000002c0)="21f0659e1934c9303f8a809abac4cb1117d9e2db8e9727fec78babb7189dcd3093bd81eb20aee6791da8ace38abd3783f7d5a239b4fb35a3d91f33d6e1982b7bfdd2239da0955d07c80aba459b1ba9b075bbada8b3c8eba377c02632af6d2bf3e33dc8ab9d3fc69dcb418674ddad69c2ebf9a75f7856d7c0f526fcfbf5f90f0443feb230", 0x84}, {&(0x7f0000000100)="507e2ad05b008b6cdeca8449fb", 0xd}, {&(0x7f0000000200)="f0be63f3845aee882ef4c448c8b9bd6946adf8a955275d4c3434ef720a7724f01c772a45ea4975225fa0be373788fdfcb6ad9afdd517d63ab656715344c3a286766e4a4b200a63572c444f", 0x4b}, {&(0x7f0000000380)="9853b375a59013e3fe3eff57cc9fd5bdb53ec4c9cbd7e611a7ff73f91192ec804fd1b4cc2d1c1f22ac4418310ea3e5e72056f3fc00bbe5d4040eaa557a1f4b0981934d05f349af63a6637cd02dac783e3ef7f48794751c8bc4a987032f96ccc3d34d9d41c34b310b1c04b07071b897c5d07b35ef78368acc1485b778af6489cc", 0x80}, {&(0x7f0000000500)="eb14138a43d7212954cee0cea4573e8e7c188c134d74373800c6db045db5fdf168d27c25f4e0939c3b2916415d061dd309fa4b85415ee00f56024e3e8b3c9c7db27bd9c71f3023dd77526f7f07b942988a0288364e50334253ab488ccec6344a46e4cb9f7cd7f0a94cf9c4c17e1c47990341b45c7f94aa61c35aa675e5e01e4f350b726ef1de1b46713b0416bcf5d7009d81cfb562bdeef2fc1d01c5a27689af834ffc3702e3881cd75df61a55d9101e5900e007628d717131d10b1cbaa8e11098d68584da754ad599331a", 0xcb}, {&(0x7f0000000600)="f0ca4b3f788109416307cbed9062a7bc1d163c4eb8d5b6a39595b85475b5ca3c3843fc31c3a125a0d510d1cb8f00babf6f12f04e98269c915a8af221f3f4155a96cc2b281008b5e7d6ba007c8ad15c3629fc16d185f72e0ea3ff", 0x5a}], 0x7, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast1}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xb8}}, {{&(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000880)="21bb7d8b15ce8d89a368ceeab991f2e4842c317cbcdead0a369877aed19c64ba2c0f552041549a44bb2f936cdbe3ea858dabdc310808", 0x36}, {&(0x7f00000009c0)="4f3d355b21efcc0bfdb4cfa4a105a5aeb74209a77879e528428b49f5ca28d530293a5719c314572a2a1379f17dfe636bc32ecc5bc9af1287831ce23f96c26a50d8bd6e9ae6dd52", 0x47}], 0x2}}], 0x2, 0xa040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000005}, 0x10) 1.794147353s ago: executing program 2 (id=11150): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)="e79a85cd51be3244ab5d3824c6173efd7b35d683cb6f6d479de5c893608f34f8dc2af1", 0x23}, {&(0x7f0000000080)="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", 0xfe}, {&(0x7f0000000180)="4ac663178ef496fdcb79c0ad5531afbb1029c753fe2b5e9ee0eb2f31291c45247b1d583e3f4deef8ac563863452c5f933aec29c6be56c5c4a14018cf5e2facdf26058fc015f52bab83459e3e3aded8763efdc6b1e29c143e236f77b69987a77c9ec02fb0d801ae96ae4fc944756e5b464fbbdd69fbf8d22727d4e2e87755ad85f9", 0x81}, {&(0x7f0000000240)="22a53f58ae0e2e0db9f9d1f0205ff5159cd3e27af26ba4cb395adbeb7dddd1d66a4d6318fa2fb5a95a6ea20d6788835e5bcef155d81bd29f95cdca37f096bf037158a31b3dab3415", 0x48}], 0x4) close(r0) socket$l2tp(0x2, 0x2, 0x73) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/31, 0x1f) 1.724008933s ago: executing program 3 (id=11152): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0xfffffff8, 0x2, 0x8003, 0x6, 0xffff7fff, 0x4, 0x9, 0x2}}}}]}, 0x58}}, 0xc4) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f0000000240)="00cf87dc6d8b947ab1a56284d0fc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0xa}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x10000000, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1.641236537s ago: executing program 0 (id=11153): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c0009000800", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB='\b'], 0x38}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x0, 0x401}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x0, 0x6, 0x800}) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x78}}, 0x4000010) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.638582334s ago: executing program 1 (id=11154): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) (async) shutdown(r1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcc1, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x40, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @mcast1, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) r5 = accept4(r0, 0x0, &(0x7f0000000000), 0x800) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', r4, 0x4, 0x52, 0x9, 0x41b0769b, 0x2, @empty, @mcast1, 0x8, 0x40, 0x3, 0x368e}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x13dc, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x12f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "6979fdfa16da5a9f143b76dc4d0476ac9cb7f20907b6fda4feaace4751f0cbbddaefaccfda537512d26febf75ff91a93113d88fa1321e5be3d257aae865d4fc01d5ef3a7ea4dfca98c9f90812691f5d44d3dd75ac0c77e30c29e587334dc44e4ce266b4aa1b6d6bd619f89afc62243659eb5e33cf638fc1e05317a63a68b0a12f3e11e91bdee3b782fd0265ac596660f652fabdb88fa362d33a840a61adf5157378ffbc9f5551a800d473329efa6b0401305c6a38356548d4bf761422f74c4c80dfd6b7202a1a49e19f99a0f675570b6baedf2ea8d3e66c75db55d306fecbb79356d63359738249b9972d2f135de4c40ee6589056bab30741bdfba69263bbe962c16554aa7775ac832ee0e31472debc9ab34b06b1ddf7a98ef5e4c16b3f0c151cf044879675f86ba6d0f011433cc791abbb1d40c53aecb57e0c4b14d167583019d17230ebac1fddf9dbd6289798fceacdcbb9e572afeb957ce3e0369cd17a9e9157a0d7f71a978bc387a9629a9a19a8b1226fa59214f732ad231bbc82a445f0e61d51b9debcbcc813bbe9b2cc10d2c46078173740cb9dbe637e728c1146ea023722b387e3059e3af5b8c48fd1560d27e9223b377fc7e9ca697654e7c13ef89897ef5c82335c2cddacce9ac205932d0d375521c07890262825b4b80bed8782f0cc0590bc42319c2d57faeb4e3fffe5469c1f5328e59626af304715e3db52d6f2fc99c2b6acf8134d72bfa8848c1ea078a423815d453b15c2b0ea5c4b11648162305c76bef01371c2873c2a39f6bfa5f76bd293267748d453f638ebf2440b20f60c39d553e503aeea644c244652a0aaa5e486e24cb66b5f8bb51305d57fd3ed83725d9b6b431849dce92451a516e44c446a1078414356f4e766606c1e719745f757bbef6d4ad9762459abe281ac244d8714beacf2ebed18909a7b66c228a10cd49a5fa285ec109626785c8684f520a42ed604985f946af89a64db3ff7dda5a44a0a4fe6e542dd23bfd462015149e5754273e6131be5b31e1d20c474c53ab6445c3b593e4daf5c47b925281a545553f88953b6b3594be5947f67ec054cfc250568cf9bcbf28e473e3783b389a4de3666e83348f40aec1230f7fce8c3cb8bd85b31587aeaa1775f74f7625a8b42c0787ffd111f8b1f92e67ff79ddd1f3138b277395e3215fca9f9829deb13580f5038df3fec54ca3c0ea81ae0a85ff2c6aa0e9a1d7759eb8cc42c07e2aaa5f62a584e808836cd544d493ac1d8c2ddf5bcd412f96934aea81eb73bb2abb86681bf4b4938f1b264fcb498378ee430a4b0b3f90454675886ff889f0bcb127c70940e6b258bcaa054351535c7b6031a589323667fbf457686dc9f7a2bf6bc220e3dca81f74e657c79f5790a3a1fc0e2e02e83f59fe65b6fc5aff1d8a27b21c91a8740d60d8ab4c452807f094d0abb3797b42bab3f562fac074ea65eea109a282c6bd6a2f94cfe8b0ac33bba6801a7add89b4ae3c6defed78fdb276708efedc697bad96ea8d582868a4b5341ad87aaac1a5678da53793c02a1dbcd513f03d7e2792b4f312e091358a16b0b92d0a8c2e4f0f73352373bcbc9bf0b772421e58d9040d47ed55a873e30f8a730b7d9fec8ccf6e1179ee9b0c0d4bd8c5450cb0d4904fd07ec7c7a1a653bd7d51f679b9fa8d49468d5ba7c4f352b87b8d1c83711e33054eb136493ba48fe4ad3a5e3fe877025725613d248a90e283bcf783d7fa49f277bfdaa07b2b41955fec81fe67f135d2c8e2cbf61c7ee96116bd73052806e796cc571caa84316fb1a0cc89beef13315ad3fecafe1e2e2150476d87c8f9f738317be2ca95c4f6e3c343466d311578485656814497c5743574e61e00618de17e619af29e530591942e4faabb0da751610a23b5ce59fb2f510dbb4c7eabf9966acc2c66ebbccc2dcccf2c60b17a2e5be7bb3e7c617643686c8af1493e952c1082c866ea5d569c91f6f14bdc9e7996519e276640c5047308bdfb91baa2e903cd151134849b1900ee6d1e06fdd2f3ad0b29b26143e40aef3b378a751c48f18fa398abc3ca3b90e89ac3b89e5b3c779d327ca43332b9511feb12192e9d797d1fbe132162b9cae5262d0dfcb8c8918b2ff58777d2d38c1cd011be8c80e1d8f5ba91acbc3be4d78089ab990fb0e107f77d1649f1e2d796adf0cba7f8219856797aa03af96313e47c56dbd8279499c0e3445a28ddbbad193191b84d4b300d3e10f0803a683a3229630bacccfd133eafa4028aefad638332f7516b4791884ec846355a6ef2b297c32f31a67b9636c23d127ca449e4486f209fb22e278d4317c59f1c37fd6982fce7910a12501c372505e416478b60511a9999c38b7e6feefd520f07942d07a213d7b092cb30259f47eebdc17d77d6b79b11405093ae983bc2d2e5e4eb8951451636f6ea8170c2a126d576fb1bd1e8bb36ff5e03a5565fa956cd7e95f60b80b17b1f0ef993cf22a4a1a8f71c0b4ae2907432b981333b58d57d0e9e3b0486d648509a53be76657b09d1d752afb41ff602c8407e457dfd528b3efd8b699c4a4f3f930ee0e8945a8ba55bf79662f2a3921fc4510807e7bd5ce48b1c98de8e4d9f9d954e945dd34ead38b20ba5012653034a062945e1f50de2bb8743d7abe921bb05802eb729c11de85e110db75967b441f07d96e25e52f7c204bd8b3709b4d5c5c71305e59595f26bd3b048db17648e53eac693ad064087373b388692c694a92653ef6d9e2b58bacd1aaa0bfa61699f51bd716dd2dfe3d9ec721ef2e7532c4aa43da358de6d1d62daf8ed3c0140cba7c8cea68c7a5e570c620cdfbb02877ee337d2188d9cf0fa96a23b48cf64cf331d72c177809217b78e61dc478aacc4311d7f672c8d33a7ee514155a771bca965b7e8192c5b8a8ff501db9852c266f54760e2c03e58291809359caec7b59bbde5407d81f9e52dccfbae89281fd916547514054ce9aa773514e4752476174c8e65051f7229b21fa61b5fce8e10a8c536ade28ee72286b2f17b04bdc4c27ec0eef4db03939b2d1e82d0ba3e81b48b875794611855d4faedbe377a8b5bc4a1cf9132929073e145969ee3e1227812c0385b52cdc986132a9f59d33d9a75eadc891db6410ca986e7bf0a73ea421ce2f04054cf5c51e981a19e795b7a0fafaf306f8b9d1193145d430a0c95aaa6f1be8c59393e3429c4b538968daf73438811c4d14a12df35526cb251276e6a859f8e57d7f8fd3bc0869927125e48dd2ea8cb044c2a3c07d51b796cdec755868c03278c56a733b7fcfe5023460bffb7a2016dc8be82c62f1b19c09c5cce6f68dff27c454b91c965f2f8a108dfc19b1d532ad116f5229e58a5797fa32bab706db9f333145351143b4d700d7d71950b9769a06563577a55a3e55628a0cc30efce8ffbc24ee75d38431b97a17c16b2dd5c609a784aee79fa2780dda6dd01d47b935f17785d7f5eded22f26c175a269ed901ad584b7c15eae5517d0b0590c9566b5f822b8c287723e72468dd73d1181275b485429994aa809114ccf7f63fff1711e7ecd3ae63a236162d9a61943d8a0fe007e563a99a4bdc7911ff058623fd614e6af7b0ea48b65f3383225bf0bdda9e13c852fab88b840974ef831f36c07f637344f4c9bb2587975e144787357dafb2a307e794028cd214efc85a38aca829d1762c381bc704f3d65fe0234a75c8d576511a427c1e0157faf3b276978331f9650fcf99ab47ddb273f1dbfd107b24a1afcb2c36064efbeb808fc557acb980c6696e72fbb63cb589fdb386423af51b9d5658b7c57b15d0bcc9db6c5147ccf48116166847f738f9e648e00736a881e1316b8f1b8d52fc5ebe563fe4559d9e01cbec9bc1e2b7e4aee6e413c3d3a56624b8799247abba079b07c4e4205e2bbf6c0e13b66ddfce0b1f1de09226621ca6c21376bfd7a436e0a786db6f1d5baecb0e1bc812179901672f4f68a9118331af8bb1214af5c995898c141a7ffe1b80d7e1550932459681fecdc889ce93879d291e5627047e3fe7d0b3ef58a08f5a2bb7e646fa6d0223d0699620b5678c03adc215731115bead5468eba611c9b506ee6f884fbc2eab1327f98d812ba6fc1c0918b9267737ea5c59f00a8172f1439393ee679a0a189b5ebedbb96f17005faa69d12a40c1e39e89d83214d1ecef75124c00c1f283d457ef99cfcefd4328faf661c5c91e42fb491559669b13dbc3379f30db4c9848471e4ebe982160021b16e53d74a762855325c848ed6c54312269365da23923a5629203c0988d7e9c069d9a75fd1a99e3d9b005647ce2bec0689ff0dffcc409dcacb15f2a1ee69563fe61797308e19ce4c9cf7fd47d7d1a34ca261c88d268d22c70cd1155be00bffb3ee8db9f61e003dacdc7982026994e69ae9b9b7ddd2825780ef141ee4b82e9f5863af0fe6941e637024265cd6ab572a9d7668199d1bf86c18c0d7f979d1f3ad994fc01079c3a2663848195cba38d97061b2a0b52c9982ca9cc3cb4177f7791df8748dac9018e1a3d12003f614badce5edf5a885701fafbb6fe2bba50dd25eb31dd12bf8814d648539e26c3fd9b27b9e0f5af9289a3cf2e1e1294f45d37290f15b7c0481a558cec63647d249daa73b1ffc762b39ebe4b00d0f85edbf4fe675a07c774942b694f8f8c6d280d299145474a0857d5677a7e30a04c21b74e5e532b9ec7af3872b12e2f98e83a044b78cd3cc548440f0784c4ce28b6bc77647364612e08adcb82bd8ae274642c7718f0c5d5941b9d148afb6ff3ba389d85a34f3489e08010a8324ff09ee55fa3283295c25e5912e1e9bbfc750a085eab53ccfcba2e1bbb5a98311582d0c1b755a2f913a139bad7b08cd8f8e14368b91b0394897c07559992c734612fbf31180c1484cb6ed0426ee16492bf4888873f45d098f76c5335dae2f84a6c851c11759b70133c7337b4e6d3f12f10549266fea14ecd8b2c4350dd11a8bb42ca4666086eeee467c89bf0694b542671ff86f4fec32bf047199ab24f71dc84c8ff1cf46f72270e09c054497ce9c0a4ed6bc363e44cc1dce88e987044fec9ab2088b13bf9618b1dd9723efec666d003bf596666b736f8ac6ce8df57ec3d8173bee74a215e7ef554d0c79593973efb7dbbe130450677ed1f966f51dc21b60301958543dd6a4e01f295fdf4e27070e094f649dd4b96aedd37292b364cca9c54e2ad9969d3c7ce7fd14a06eee841d7e36a99f7af519ec8ab6109c3ac68a3a35ffeb8fccc0120414b2a2dd7d5b5e12510a46c96a7ce2269ea6007b564568d5fdfddd4a57f9ad9a5133b4e6a062a9c6c7cc9f9f346982ee5230d32775cdca0f7db9d5936b816f8847cf24b12326e8ad86472436f6402a2bc866e6c09982349341465b49c3ca9052e24679e15787a0cc7d8ee8fc4b60b1019c30433f502216c3c71d57b25bf618ab84a5cf4a27f8e1fd7886d6a5ea6d3c0edbeb236e897e6bf1e713590abbcdae3dbd4a3202ed8a6ca9fcc3fcebfc842702a63f3bc3adf6d082b5a64bd4b7d9d7d13918e54eda95a34071d8d8fd635900f118c6055b19cbc81b8f3a1c325e2c585aaea560465f08e90c9a3d9a76bc210904f32f335bb34e7961d5a90f57c6c137e15e19c26df57b7f5b82e5b5ebca6f4aeb5e48a6eb7b865c699675094fb8bf7715aac8032561e8738671bcc42eeadce362d620fe57c85b185349d825cdab50dedc1de36ae6c22249d3dd0c48eac9f7131fc28f66e5277cc01421cd59202908c0eb73141cd4c5c0704bdd6c3be4d137beed5c71bc3f14b435d051245639bd62b96803d0f777bb9e9056d5b823a0d9cbe12d97"}, @ETHTOOL_A_BITSET_MASK={0xce, 0x5, "fc892cb37a0c4af32afd2267ad2e8f1321334f32517a0ab9e0fcc1bbcbad118189724953edbb437c4a7287dc410845c46d8d047d080af51da3ee08a0ced6dee58fda24e0631022ef18a3f65e284b0631361ccb2fb398c99fc7e47573ed3bddcbc124d52c0f19d109f959403cadb4ecc26919b168225b1729b5b2587fb78ab797e08b9c3e0a29a1142b0b87a8853aa38e6a73e5daa624722964e91d5ab68a2d9139d49b965bcc2759cb5febc16d464d789689f278a0c2c53d69922d80a4ad4d5c7fd2c99b14abdcfb27d2"}, @ETHTOOL_A_BITSET_MASK={0x93, 0x5, "111e6796c39c0c2f5f91739073192d956e48bab693dd7ed10f2111585ca1be7bfc9df1c38ba340500c98d7f76c4485ae0d0fab4c8f22485428fcbb0e7bba69e25043ad62aaba3675bc91e3e30130622354688f99f61c0a5d9b2676a313524edeff175a459e4d6c44187ab5c72c641e088b8ae4b7d9fe23a0a148be53c7c7b7dc5d16b0cacad04d30cb03c765e7a7b7"}, @ETHTOOL_A_BITSET_MASK={0xee, 0x5, "8046065c1116776077a786c88520c1299341d3b0389503e9a3856f781065851ffb33e862cd97a65a4d2ef809b8639aa16429932cf110e3c25103be1da48f1738d27cccd80a4a63babf73392c776f12527dd52b4dfa934674bbbfae4e40984a3e62faa69b82559b75202da8df6488b56684f5c75a707850e86a9cef258728b74f831421da279499f15b8db4062a0de8a170c1e1a82f1f6821b8ba11c4d5c2be6fdc821c6ef003beba8f8e598b1a57951686356816b862a136f87a7e031e9cce8cb37b22e8d1adb7a9c1a0ad00c1a3736a2ddaf8b90de3b5b8c7881e2f236e94020107d548e9722d82cbf4"}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "a5e05038fea152d3fc91b3658ac92bd614c4772eee6b749377bad82b697cc750f53927031ecde22571f931f911d80d7c6c108b463814d60b2f67f2fc7c8d6d901518d6d76a6e667d3933bdd22d99c7aac4544137234f392fc88339dae8d442b0017243b04d7d389f978a355d01a47f2b2386ce858d3740fa607e28c7ffa8baa6558baf58f3020d262db80e347ba393de"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x13dc}, 0x1, 0x0, 0x0, 0x12}, 0x40000) 1.540901206s ago: executing program 2 (id=11156): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0xbc5, 0x101, 0xffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0x10, 0x1, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xd, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.478314689s ago: executing program 0 (id=11158): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000030101030000000000000000010000061400198008000200200000000800018085"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r0, 0x8, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x5, 0x10}, 0xc) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x5}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@fallback=r5, r2, 0x10, 0x0, r1, @void, @value=r1, @void, @void, r4}, 0x20) 1.478131864s ago: executing program 2 (id=11159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_AF_SPEC={0x44, 0x1a, 0x0, 0x1, [@AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.458178017s ago: executing program 4 (id=11160): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000208"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x40081}, 0x4004844) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x1, 0x7fdd01b6}) r4 = accept$unix(r3, &(0x7f0000000300), &(0x7f0000000040)=0x6e) recvfrom$unix(r4, &(0x7f0000000240)=""/129, 0x81, 0x2141, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001900010000000000ffdbdf250a01090008000980c32d540400ce8004001280"], 0x20}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) read(r6, &(0x7f0000000080)=""/38, 0x26) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800040, 0x25dfdbff, {0x2, 0x1f, 0x42401837745673e4, 0xff, r11}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000003c0)={0x0, 'wg0\x00', {0x2}, 0xedd6}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e1e, @local}}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x800) syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @random="be9689ce9f88", @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x6, 0x4, 0x1, 0x1, 0x60, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010100, @local, {[@end, @generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3, [0x9]}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x8]}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x7, 0x2, 0x1, 0x0, 0x2, 0xc}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, 0x2, {0x1, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) 1.392762114s ago: executing program 3 (id=11161): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x40000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0x5, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@deltclass={0x44, 0x29, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xffff, 0xc}, {0xffe0, 0xfff2}, {0x1, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_netem={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r11, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r12, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000580)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r13}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.31662418s ago: executing program 1 (id=11162): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno', 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="1c91662188b2e27c9ef680b1", 0xc}, {&(0x7f00000002c0)="21f0659e1934c9303f8a809abac4cb1117d9e2db8e9727fec78babb7189dcd3093bd81eb20aee6791da8ace38abd3783f7d5a239b4fb35a3d91f33d6e1982b7bfdd2239da0955d07c80aba459b1ba9b075bbada8b3c8eba377c02632af6d2bf3e33dc8ab9d3fc69dcb418674ddad69c2ebf9a75f7856d7c0f526fcfbf5f90f0443feb230", 0x84}, {&(0x7f0000000100)="507e2ad05b008b6cdeca8449fb", 0xd}, {&(0x7f0000000200)="f0be63f3845aee882ef4c448c8b9bd6946adf8a955275d4c3434ef720a7724f01c772a45ea4975225fa0be373788fdfcb6ad9afdd517d63ab656715344c3a286766e4a4b200a63572c444f", 0x4b}, {&(0x7f0000000380)="9853b375a59013e3fe3eff57cc9fd5bdb53ec4c9cbd7e611a7ff73f91192ec804fd1b4cc2d1c1f22ac4418310ea3e5e72056f3fc00bbe5d4040eaa557a1f4b0981934d05f349af63a6637cd02dac783e3ef7f48794751c8bc4a987032f96ccc3d34d9d41c34b310b1c04b07071b897c5d07b35ef78368acc1485b778af6489cc", 0x80}, {&(0x7f0000000500)="eb14138a43d7212954cee0cea4573e8e7c188c134d74373800c6db045db5fdf168d27c25f4e0939c3b2916415d061dd309fa4b85415ee00f56024e3e8b3c9c7db27bd9c71f3023dd77526f7f07b942988a0288364e50334253ab488ccec6344a46e4cb9f7cd7f0a94cf9c4c17e1c47990341b45c7f94aa61c35aa675e5e01e4f350b726ef1de1b46713b0416bcf5d7009d81cfb562bdeef2fc1d01c5a27689af834ffc3702e3881cd75df61a55d9101e5900e007628d717131d10b1cbaa8e11098d68584da754ad599331a", 0xcb}, {&(0x7f0000000600)="f0ca4b3f788109416307cbed9062a7bc1d163c4eb8d5b6a39595b85475b5ca3c3843fc31c3a125a0d510d1cb8f00babf6f12f04e98269c915a8af221f3f4155a96cc2b281008b5e7d6ba007c8ad15c3629fc16d185f72e0ea3ff", 0x5a}], 0x7, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast1}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xb8}}, {{&(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000880)="21bb7d8b15ce8d89a368ceeab991f2e4842c317cbcdead0a369877aed19c64ba2c0f552041549a44bb2f936cdbe3ea858dabdc310808", 0x36}, {&(0x7f00000009c0)="4f3d355b21efcc0bfdb4cfa4a105a5aeb74209a77879e528428b49f5ca28d530293a5719c314572a2a1379f17dfe636bc32ecc5bc9af1287831ce23f96c26a50d8bd6e9ae6dd52", 0x47}], 0x2}}], 0x2, 0xa040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000005}, 0x10) 1.286357152s ago: executing program 2 (id=11163): socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0xfc, 0x8, 0xfffff00c}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x4986beeb32c9c15e, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) bind$bt_hci(r2, &(0x7f0000000380)={0x1f, 0x0, 0x1}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="dc9ebe30", 0x4}], 0x2}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) socket$netlink(0x10, 0x3, 0x0) unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x3c, @rand_addr=0x640100ff, 0x4e22, 0x20007, 'sh\x00', 0x1, 0x10000b7e, 0x1000070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) 1.168533085s ago: executing program 1 (id=11164): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/23, @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x3, 0x8bb, 0x2}, 0x10, 0xffffffffffffffff}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000008000000000000000000000000000000000000000000571d51b062d7082a1b64ea5fabd113b918e2ec2de7015c0b7b87dfa099996501d8a53e3c8f564d0d913d04f122390b31a1966e8abba6978e7941310cdab09029ffd9ee6e2e21c30f735151257d622a481095cc7cf59e3fc19931082091ed3be3875cb7137c72dc1a960dc76a88109e5e3da1a90e0000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000140)=0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb9", 0xd7}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d", 0x56}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYBLOB, @ANYRES16], 0xfdef) 984.222487ms ago: executing program 0 (id=11165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYBLOB="41bf0359dedeb1c9a2af5381a5e01b0749a78b97f0047d6f64b166f1c4bdd43a558ca6ce35d71616429ddc0de0190ec6fa84fffe5aff637d197bfbc63394a4dc076cb4b82623", @ANYRESHEX, @ANYRESHEX=r0], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="104e"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="123c938e1d3a14140000001000010000000000000000000300000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000160800044000000004050003000100000008000240000000030900010073797a30000000000900020073797a320000000014000000110001000000000000"], 0x8c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket(0xb, 0x0, 0x8000000) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00}', @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf25010000000000000001410000001800170000000a000000057564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x50890}, 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff000000003900000008000300", @ANYRES32=r7, @ANYBLOB="18005a801400018005000a"], 0x34}}, 0x0) r10 = epoll_create(0x3ff) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f0000000280)={0x2000000}) 978.576272ms ago: executing program 4 (id=11166): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000021000100feffffff00000000fc020000000000000000000000000005ac14141d00000000000000000000000000000000000000000a0000002e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bd6b6e00000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000001fc00000000000000000001a8000000013c040000013500000a000a000a0101010000000000000000000000007f000001000000000000000000000000ac141438000000000000000000000000640101000000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) 931.628136ms ago: executing program 1 (id=11167): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x8001}, 0x50) getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000077c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x1, 0xfff3}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @local, 0x3}, 0x10) 825.011257ms ago: executing program 4 (id=11168): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c0009000800", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB='\b'], 0x38}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 697.280921ms ago: executing program 3 (id=11169): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x16}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0400f9f40700090401802a202000000000000000002e7ee24d0d000800", 0x24) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x48, 0x140f, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004014}, 0x20000040) write$cgroup_int(r4, 0x0, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) 634.435626ms ago: executing program 4 (id=11170): r0 = socket(0x1, 0x80000, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3b4, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xda9e, 0x5a}}}}, [@NL80211_ATTR_TX_RATES={0x36c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xd000, 0x4, 0xfff1, 0xbf, 0x2, 0xaf9b, 0x100]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x2}, {0x3, 0x9}, {0x5, 0x5}, {0x7, 0x9}, {0x2, 0x8}, {0x4, 0x3}, {0x2, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x7}, {0x5, 0x1}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x2, 0x8}, {}, {0x7, 0x6}, {0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x7, 0x6}, {0x1, 0x4}, {0x5, 0x1}, {0x4, 0x9}, {0x1, 0x4}, {0x4, 0x3}, {0x5, 0x2}, {0x6, 0x8}, {}, {0x4, 0xa}, {0x7, 0x9}, {0x4, 0x9}, {0x4, 0x5}, {0x7, 0x6}, {0x1, 0x6}, {0x1}, {0x1, 0x1}, {0x5, 0x6}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x7, 0x6}, {0x7, 0x9}, {0x7, 0x8}, {0x0, 0x7}, {0x7, 0xa}, {0x3, 0x3}, {0x6, 0x9}, {0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3d, 0x24, 0x3c, 0x1b, 0x3, 0x36, 0x30, 0x6c, 0x9, 0x36, 0x6, 0x6c, 0x0]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc1, 0xfae, 0x1913, 0x40, 0x2dc, 0x0, 0x7bc8, 0x1]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x7}, {0x7, 0xa}, {0x5, 0x3}, {}, {}, {0x5, 0x1}, {0x0, 0x9}, {0x5, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x0, 0x9}, {0x7}, {0x4, 0x9}, {0x6, 0x3}, {0x4, 0x1}, {0x1, 0x6}, {0x4, 0x9}, {0x2, 0x5}, {0x1, 0x8}, {0x7}, {0x2, 0x2}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x4, 0x1d}, {0x6, 0x4}, {0x1, 0x6}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x9}, {0x2, 0x4}, {0x5, 0x4}, {0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x9}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x1}, {0x5, 0xa}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x3}, {0x3, 0x3}, {0x5, 0x7}, {0x7}, {0x6, 0xa}, {0x7, 0x5}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x7}, {0x4, 0x2}, {0x4, 0x6}, {0x6, 0x9}, {0x2, 0x4}, {0x7, 0x2}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x4}, {0x4, 0x1}, {0x3, 0x4}, {0x2, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x4}, {0x6, 0x7}, {0x4, 0x2}, {0x6, 0x2}, {0x7, 0x1}, {0x7, 0x9}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x7}, {0x5, 0x1}, {0x6, 0xa}, {0x2, 0x6}, {0x4, 0x7}, {0x1}, {0x6, 0x8}, {0x6, 0xa}, {0x2, 0x5}, {0x4, 0x7}, {0x5, 0x2}, {0x5, 0x7}, {0x1, 0x2}, {0x2, 0x7}, {0x7, 0x4}, {0x6, 0x1}, {0x7, 0x4}, {0x3}, {0x7, 0x8}, {0x1, 0x7}, {0x1, 0x2}, {0x2, 0x8}, {0x5}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x6, 0xa}, {0x6, 0x4}, {0x5, 0x5}, {0x7, 0x9}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x5}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xd0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x10}, @NL80211_TXRATE_HT={0x39, 0x2, [{}, {0x3, 0x1}, {0x3, 0xa}, {0x5, 0x4}, {0x2}, {0x2, 0x5}, {0x3, 0x1}, {0x1, 0x9}, {0x3, 0x2}, {0x0, 0x4}, {0x4}, {0x6, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0xa}, {0x2, 0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x2, 0x3}, {0x4, 0x9}, {0x5, 0x5}, {0x3, 0x8}, {0x2, 0x6}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x4}, {0x7, 0x6}, {0x3, 0x6}, {0x2, 0x7}, {0x5, 0x8}, {0x1, 0x4}, {0x4, 0x3}, {0x4, 0x4}, {0x2, 0xa}, {0x1, 0x5}, {0x4, 0x2}, {0x3, 0x5}, {0x3, 0x4}, {0x1, 0x3}, {0x0, 0xa}, {0x2}, {0x3, 0x6}, {0x1}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x3}, {0x5, 0x6}, {0x6, 0x7}, {0x1, 0x4}, {0x7, 0x6}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0xa839, 0xfff, 0x0, 0x7f, 0x0, 0x10]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1ff, 0x7, 0x9, 0x90d, 0xfff, 0x4, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x1, 0x8, 0x5, 0x4, 0x6, 0x900]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x3d0, 0x8000, 0x6, 0x8, 0x94f8, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x5, 0x401, 0x4, 0xeee6, 0x814b, 0x51d, 0x100]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x12, 0x30, 0x9, 0x6c, 0x12, 0x18, 0x0, 0xb, 0x2, 0x36, 0x18, 0x4f, 0x1b, 0x16, 0x18, 0x36, 0x6c, 0x48, 0x2, 0x60, 0x6c, 0x1b, 0x1b, 0x60, 0x4, 0x4, 0xc, 0x18]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x6, 0x6c, 0x24, 0x16, 0x60, 0x5, 0x48, 0xb, 0xc, 0x16, 0x14, 0x24, 0x16, 0x12, 0x24, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x18, 0x7, 0x0, 0x6, 0x7, 0x4, 0x6e04, 0x1]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x3, 0x1}, {0x4, 0x6}, {0x2, 0x1}, {0x7, 0xa}, {0x0, 0x4}, {0x5, 0x5}, {0x7, 0x2}]}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x45, 0x0, 0xffff, 0x6, 0x9ef2, 0x3, 0xa, 0x7]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5}, {0x5, 0x2}, {0x4, 0x3}, {0x5, 0x9}, {0x2, 0x1}, {0x2, 0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x6}, {0x1, 0x8}, {0x3, 0x8}, {0x6, 0x7}, {0x5, 0x3}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0xa}, {0x2, 0x8}, {0x1, 0x1}, {0x5, 0x6}, {0x6, 0x7}, {0x6, 0x9}, {0x5, 0x6}, {0x5, 0x9}, {0x5, 0x7}, {0x7, 0x9}, {0x6, 0x8}, {0x4, 0x7}, {0x6, 0x1}, {0x7, 0x5}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0x3}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0x5}, {0x1, 0x5}, {0x3, 0x8}, {0x3}, {0x6, 0x6}, {0x3, 0x9}, {0x4, 0x8}, {0x6, 0x1}, {0x2, 0x7}, {0x0, 0xa}, {0x5, 0x3}, {0x5, 0x6}, {0x2, 0x4}, {0x1, 0x5}, {0x4, 0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x0, 0xc, 0x3, 0x6d63, 0x401, 0x100]}}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x4, 0x81, 0x6, 0x6, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x9, 0x4, 0x60, 0xc, 0x6c, 0x60, 0x9, 0x36, 0x6, 0x18, 0x6, 0xb, 0x3, 0x1b, 0x60, 0x9]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x5}, {0x2, 0x5}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x6}, {0x6, 0x7}, {0x7, 0x8}, {0x5, 0x8}, {0x7, 0x6}, {0x2, 0x3}, {0x2, 0x9}, {0x1, 0x5}, {0x7}, {0x6}, {0x6, 0x9}, {0x5, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x9}, {}, {0x1, 0x9}, {0x5}, {0x1}, {0x5, 0x4}, {0x7, 0x2}, {0x6}, {0x4, 0x4}, {0x4, 0x7}, {0x0, 0xc}, {0x5, 0x5}, {0x5, 0x2}, {0x4, 0x5}, {0x5, 0x7}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x2, 0xaf88, 0x6, 0x200, 0x3, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfff7, 0x6, 0x7f, 0x8, 0x5]}}]}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PBSS={0x4}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x4000010}, 0x30000040) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1cc, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x178, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @private1, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x76, @loopback, 0xc9d}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3733, @loopback, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @private2, 0x800}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @loopback, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8000, @remote, 0x1}}}}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9f74}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x108, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x32f6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x62ac7d86}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "0c863c1db9f5e9413f05bbd2ab7a63ec8d1c79eccf91"}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}]}]}, 0x108}}, 0x20000000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x2404c000) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x48004) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000f00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x20c, r1, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x29}}}}, [@NL80211_ATTR_TX_RATES={0x1ec, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0x48, 0x1, 0x6c, 0x4, 0x1b, 0x4, 0x1, 0x1b, 0x48, 0xc, 0xc, 0x30, 0x4, 0x9, 0x30, 0x9, 0x12, 0x18, 0x6c, 0x0, 0x12, 0xb, 0x4, 0x4, 0x18, 0x6]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x3, 0x7}, {0x2, 0xa}, {0x6, 0x1}, {0x4, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0x3}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x9}, {0x7, 0x3}, {0x4}, {0x7, 0xa}, {0x5, 0xa}, {0x3, 0xa}, {0x6, 0x9}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0x2}, {0x2, 0x3}, {0x0, 0x7}, {0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x5}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x7, 0x8}, {0x1, 0x1}, {0x3, 0x6}, {0x1, 0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x7}, {0x1, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x5e2, 0x4, 0x3b5, 0x6c, 0x5, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3800, 0x3ff, 0x5, 0x1, 0x8, 0x769c, 0xffff, 0xa0e]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x1, 0x0, 0x3, 0x6a, 0x0, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x3, 0x0, 0x30, 0x14, 0x9, 0xc1c9, 0xf]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x36, 0x6c, 0x6c, 0x16, 0x2, 0x4, 0x1, 0x60, 0x24, 0x5, 0x36, 0x36, 0x18, 0x30, 0x45, 0xb, 0x4c, 0x5, 0x2, 0x1b, 0x69, 0x4, 0x1b, 0xc, 0x4, 0x60, 0x9, 0x36, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2000, 0x5, 0xd63, 0x81, 0x1, 0x98, 0xa90e]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3c, 0xff, 0x7ff, 0x7, 0xa, 0x5, 0x7, 0x1ff]}}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0xfffb, 0x1, 0x0, 0x8, 0x5, 0xd13, 0xb859]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xc24d, 0xe684, 0x9, 0xc, 0x5, 0x6, 0x2]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xc, 0x16, 0x1, 0x3, 0x3, 0x16, 0x4, 0x3, 0x2, 0xb, 0x12, 0x0, 0x48, 0x48, 0x4, 0x48, 0x5, 0x48, 0x2, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2d, 0x79, 0x4000, 0x4, 0x8001, 0xb, 0x6, 0x3]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x7}, {0x0, 0x5}, {0x3, 0x2}, {0x0, 0x4}, {0x5, 0x2}, {0x2, 0x7}, {0x5, 0x7}, {0x3, 0x4}, {0x6, 0x7}, {0x2, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20014000}, 0x800) syz_emit_ethernet(0xfd, &(0x7f0000000f40)={@random="2ad238aee59d", @multicast, @void, {@x25={0x805, {0x0, 0xfc, 0xff, "842258145c1af4e8bb8937ed8433b4cda50e60d0d485994fe9cf8ba624480edfa67c54087447076def85144c3284ede2bb7de1776de4e50565d8fff8dd14237ee2fda77e68dc2c30dee7395e8734c624a5648755038796d8234a1dd901c4619002c16df6bb084c17a53c10a71cf3df7d18c8ed049cf08b871d2b80302b96b8b7c006841acb0e17f29e7ae981e0dc24aa216363d49c348a41a929da931f188e24f7b5a3450eec505c9426d42ea6e0655666101512552cbf63fa3b3b06673533fe223d4d94118bc2b7dae583d649c28041809b10c7db46616b59bcd1a894f86c0561c1acb4700cf3243509b7a0"}}}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000001040), r0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000010c0)={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) socket$alg(0x26, 0x5, 0x0) r6 = accept$nfc_llcp(r0, &(0x7f0000001100), &(0x7f0000001180)=0x60) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000011c0)={r6}) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000001200)=0x2, 0x4) r7 = accept$inet6(r0, 0x0, &(0x7f0000001240)) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000012c0), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x68, r8, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) sendto$l2tp6(r7, &(0x7f0000001400)="569d345b27a19347e7bcf19249d6809fa4617ec9834f2f1609572ec3e0", 0x1d, 0x20008844, &(0x7f0000001440)={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket(0x25, 0x5, 0xf) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x64, r5, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f00000015c0)={'security\x00', 0x0, [0x5, 0x8, 0x6, 0x7, 0x7fff]}, &(0x7f0000001640)=0x54) 400.926233ms ago: executing program 0 (id=11171): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x5, &(0x7f0000000180)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3b000}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002200)=""/260, 0x104}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000002340)=""/4076, 0xfe6}, {&(0x7f00000007c0)=""/231, 0xe7}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000001f00)=""/203, 0xcb}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/205, 0xfe}, {&(0x7f0000000140)=""/37, 0x1a}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f0000000ac0)=""/101, 0x65}, {&(0x7f0000000440)=""/53, 0x35}, {&(0x7f0000000b40)=""/135, 0x87}], 0xd}, 0x40002100) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xfffffffffffffffe, 0xd) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, r3, 0x0, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 333.643526ms ago: executing program 1 (id=11172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f0000000380)={0x0, 0x0}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7ff203fb0b3527b5b73942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x0) (async) write(r5, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newqdisc={0x108, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@TCA_STAB={0xe4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x1, 0x81, 0x80, 0x0, 0x8001, 0x2, 0xa}}, {0x18, 0x2, [0xbd, 0x3, 0x4, 0x60, 0x8, 0xfff, 0xe, 0x1fa5, 0x7, 0x7604]}}, {{0x1c, 0x1, {0x2f, 0x6, 0xe7f, 0x0, 0x2, 0x1, 0x5, 0x5}}, {0xe, 0x2, [0x0, 0x7, 0x1, 0x2, 0x99ad]}}, {{0x1c, 0x1, {0x4, 0x0, 0x6, 0x4c69, 0x0, 0xda15, 0x7, 0x4}}, {0xc, 0x2, [0x1, 0xb, 0x2, 0x7]}}, {{0x1c, 0x1, {0x8f, 0xbe, 0xbcfa, 0x218, 0x1, 0xffffff00, 0x5, 0x8}}, {0x14, 0x2, [0x2, 0x9ebe, 0x8, 0x3, 0x6, 0x3, 0x4b, 0x1]}}, {{0x1c, 0x1, {0x6, 0xc0, 0x7, 0x2, 0x0, 0x3, 0xffffffff, 0x4}}, {0xc, 0x2, [0x7b, 0xf3ea, 0x2000, 0x200]}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r10, 0x541b, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x82, &(0x7f0000000180)={r8, 0x8000}, 0x8) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r8, @in6={{0xa, 0x4e23, 0x6b2, @local, 0x2}}}, 0x84) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe6, 0xb}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x0, 0x9, 0x200, 0x3000000, 0x80000002, 0x5, 0x10, 0x7fff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x850}, 0x8804) (async) r11 = socket(0x1a, 0x4, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r13 = socket$packet(0x11, 0x2, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r14, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r13, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r15, 0x0, 0x5ac}, 0x80, 0x0}}], 0x1, 0x20000802) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x0, 0x4}, {}, {0x1, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r14, 0x84, 0x6, &(0x7f0000000780)={r8, @in6={{0xa, 0x4e23, 0x81, @private0, 0x80000001}}}, &(0x7f0000000500)=0x84) 327.693066ms ago: executing program 4 (id=11173): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}}, 0x90) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000011140102"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 140.833524ms ago: executing program 0 (id=11174): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno', 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="1c91662188b2e27c9ef680b1", 0xc}, {&(0x7f00000002c0)="21f0659e1934c9303f8a809abac4cb1117d9e2db8e9727fec78babb7189dcd3093bd81eb20aee6791da8ace38abd3783f7d5a239b4fb35a3d91f33d6e1982b7bfdd2239da0955d07c80aba459b1ba9b075bbada8b3c8eba377c02632af6d2bf3e33dc8ab9d3fc69dcb418674ddad69c2ebf9a75f7856d7c0f526fcfbf5f90f0443feb230", 0x84}, {&(0x7f0000000100)="507e2ad05b008b6cdeca8449fb", 0xd}, {&(0x7f0000000200)="f0be63f3845aee882ef4c448c8b9bd6946adf8a955275d4c3434ef720a7724f01c772a45ea4975225fa0be373788fdfcb6ad9afdd517d63ab656715344c3a286766e4a4b200a63572c444f", 0x4b}, {&(0x7f0000000380)="9853b375a59013e3fe3eff57cc9fd5bdb53ec4c9cbd7e611a7ff73f91192ec804fd1b4cc2d1c1f22ac4418310ea3e5e72056f3fc00bbe5d4040eaa557a1f4b0981934d05f349af63a6637cd02dac783e3ef7f48794751c8bc4a987032f96ccc3d34d9d41c34b310b1c04b07071b897c5d07b35ef78368acc1485b778af6489cc", 0x80}, {&(0x7f0000000500)="eb14138a43d7212954cee0cea4573e8e7c188c134d74373800c6db045db5fdf168d27c25f4e0939c3b2916415d061dd309fa4b85415ee00f56024e3e8b3c9c7db27bd9c71f3023dd77526f7f07b942988a0288364e50334253ab488ccec6344a46e4cb9f7cd7f0a94cf9c4c17e1c47990341b45c7f94aa61c35aa675e5e01e4f350b726ef1de1b46713b0416bcf5d7009d81cfb562bdeef2fc1d01c5a27689af834ffc3702e3881cd75df61a55d9101e5900e007628d717131d10b1cbaa8e11098d68584da754ad599331a", 0xcb}, {&(0x7f0000000600)="f0ca4b3f788109416307cbed9062a7bc1d163c4eb8d5b6a39595b85475b5ca3c3843fc31c3a125a0d510d1cb8f00babf6f12f04e98269c915a8af221f3f4155a96cc2b281008b5e7d6ba007c8ad15c3629fc16d185f72e0ea3ff", 0x5a}], 0x7, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @multicast1}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xb8}}, {{&(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000880)="21bb7d8b15ce8d89a368ceeab991f2e4842c317cbcdead0a369877aed19c64ba2c0f552041549a44bb2f936cdbe3ea858dabdc310808", 0x36}, {&(0x7f00000009c0)="4f3d355b21efcc0bfdb4cfa4a105a5aeb74209a77879e528428b49f5ca28d530293a5719c314572a2a1379f17dfe636bc32ecc5bc9af1287831ce23f96c26a50d8bd6e9ae6dd52", 0x47}], 0x2}}], 0x2, 0xa040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000005}, 0x10) 122.656104ms ago: executing program 4 (id=11175): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000004b80)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002400010013bd7000fcdbdf25ff03000006000300000000000600040080c9"], 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x800) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r5, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2, 0x2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="e31723d7c6012cc217028c19caeec9129ea45298e758b4d5c8a3e85d7f5ddcaf1f67e776ce1ae9514b74bd4b", 0x2c}], 0x1}, 0x388) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000100000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7, @ANYBLOB="08000a00bd88963c98180084977e09857195c1935f9c0a45fc4ee571e2", @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000004b80)) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002400010013bd7000fcdbdf25ff03000006000300000000000600040080c9"], 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x800) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) socket(0xa, 0x3, 0xff) (async) sendmsg$inet6(r5, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2, 0x2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="e31723d7c6012cc217028c19caeec9129ea45298e758b4d5c8a3e85d7f5ddcaf1f67e776ce1ae9514b74bd4b", 0x2c}], 0x1}, 0x388) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000100000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7, @ANYBLOB="08000a00bd88963c98180084977e09857195c1935f9c0a45fc4ee571e2", @ANYRES32=r9, @ANYBLOB], 0x44}}, 0x0) (async) 0s ago: executing program 0 (id=11176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x7) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf6a02bda490e5b7a}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001114020027bd7000fbdbdf25080001000000000008003e000300000008004f000200000008004a0000001730"], 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x4c804) r3 = socket$igmp(0x2, 0x3, 0x2) syz_open_procfs$namespace(0x0, 0x0) socket(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r7, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0xc080) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x4, 0x4f, [0x48, 0x80, 0xff, 0x8, 0x7, 0x8], 0x6, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000340)=""/79}, &(0x7f0000000440)=0x78) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) kernel console output (not intermixed with test programs): lmulticast mode [ 1362.714510][T19856] ip6_vti0 speed is unknown, defaulting to 1000 [ 1362.867124][T19884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9422'. [ 1362.878611][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9423'. [ 1363.046349][T19881] netlink: 'syz.2.9421': attribute type 1 has an invalid length. [ 1363.055714][T19881] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9421'. [ 1363.178930][T19885] ip6_vti0 speed is unknown, defaulting to 1000 [ 1363.188218][T19782] wg1 speed is unknown, defaulting to 1000 [ 1363.394461][T19898] syzkaller0: entered promiscuous mode [ 1363.401249][T19898] syzkaller0: entered allmulticast mode [ 1363.707056][T19858] ip6_vti0 speed is unknown, defaulting to 1000 [ 1363.777526][T19910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1363.845881][T19914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9432'. [ 1363.860393][T19913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9432'. [ 1363.907517][T19913] netlink: 176 bytes leftover after parsing attributes in process `syz.3.9432'. [ 1363.907538][T19915] netlink: 176 bytes leftover after parsing attributes in process `syz.3.9432'. [ 1364.100639][T19919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9433'. [ 1364.213588][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9434'. [ 1364.432001][T19856] wg1 speed is unknown, defaulting to 1000 [ 1364.520520][T19885] wg1 speed is unknown, defaulting to 1000 [ 1364.521031][T19936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9438'. [ 1364.574756][T19938] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 1364.591801][ T5824] IPVS: starting estimator thread 0... [ 1364.686971][T19939] IPVS: using max 26 ests per chain, 62400 per kthread [ 1364.891083][ T25] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 138 seconds [ 1364.988863][T19858] wg1 speed is unknown, defaulting to 1000 [ 1365.010698][T19941] ip6_vti0 speed is unknown, defaulting to 1000 [ 1365.193505][T19951] tipc: Started in network mode [ 1365.198734][T19951] tipc: Node identity 9e5c9addb592, cluster identity 4711 [ 1365.206121][T19951] tipc: Enabled bearer , priority 0 [ 1365.301930][T19951] syzkaller0: entered promiscuous mode [ 1365.311656][T19951] syzkaller0: entered allmulticast mode [ 1365.338602][T19951] tipc: Resetting bearer [ 1365.363470][T19950] tipc: Resetting bearer [ 1366.966995][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5270 ms [ 1366.975123][ C0] lec:lec_tx_timeout: lec0 [ 1368.198241][T19950] tipc: Disabling bearer [ 1368.227917][T17059] tipc: Node number set to 734960349 [ 1368.399865][T19955] ip6_vti0 speed is unknown, defaulting to 1000 [ 1368.653018][T19967] FAULT_INJECTION: forcing a failure. [ 1368.653018][T19967] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.673076][T19967] CPU: 1 UID: 0 PID: 19967 Comm: syz.0.9444 Not tainted syzkaller #0 PREEMPT(full) [ 1368.673124][T19967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1368.673145][T19967] Call Trace: [ 1368.673152][T19967] [ 1368.673161][T19967] dump_stack_lvl+0xe8/0x150 [ 1368.673190][T19967] should_fail_ex+0x412/0x560 [ 1368.673217][T19967] should_failslab+0xa8/0x100 [ 1368.673239][T19967] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1368.673263][T19967] ? __alloc_skb+0x186/0x7d0 [ 1368.673283][T19967] ? __alloc_skb+0x1d0/0x7d0 [ 1368.673300][T19967] ? __local_bh_enable_ip+0xd0/0x130 [ 1368.673323][T19967] __alloc_skb+0x1d0/0x7d0 [ 1368.673348][T19967] netlink_sendmsg+0x5d4/0xb40 [ 1368.673378][T19967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1368.673401][T19967] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1368.673424][T19967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1368.673445][T19967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1368.673462][T19967] ____sys_sendmsg+0xa68/0xad0 [ 1368.673485][T19967] ? __might_fault+0xaf/0x130 [ 1368.673514][T19967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1368.673545][T19967] ? import_iovec+0x73/0xa0 [ 1368.673573][T19967] ___sys_sendmsg+0x2a5/0x360 [ 1368.673594][T19967] ? __lock_acquire+0x6b5/0x2cf0 [ 1368.673620][T19967] ? __pfx____sys_sendmsg+0x10/0x10 [ 1368.673679][T19967] ? __fget_files+0x2a/0x420 [ 1368.673697][T19967] ? __fget_files+0x3a0/0x420 [ 1368.673725][T19967] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1368.673751][T19967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1368.673782][T19967] ? __pfx_ksys_write+0x10/0x10 [ 1368.673817][T19967] do_syscall_64+0xe2/0xf80 [ 1368.673839][T19967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.673856][T19967] ? trace_irq_disable+0x37/0x100 [ 1368.673874][T19967] ? clear_bhb_loop+0x60/0xb0 [ 1368.673900][T19967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.673918][T19967] RIP: 0033:0x7f62db39aeb9 [ 1368.673935][T19967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.673949][T19967] RSP: 002b:00007f62dc184028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1368.673970][T19967] RAX: ffffffffffffffda RBX: 00007f62db615fa0 RCX: 00007f62db39aeb9 [ 1368.673983][T19967] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 1368.673994][T19967] RBP: 00007f62dc184090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.674005][T19967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.674016][T19967] R13: 00007f62db616038 R14: 00007f62db615fa0 R15: 00007fff4b468978 [ 1368.674045][T19967] [ 1369.463947][T19984] netlink: 'syz.2.9450': attribute type 11 has an invalid length. [ 1369.470258][T19941] wg1 speed is unknown, defaulting to 1000 [ 1369.474784][T19984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9450'. [ 1369.487290][T19984] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1369.513823][T19955] wg1 speed is unknown, defaulting to 1000 [ 1369.588718][T19984] xt_CT: No such helper "snmp_trap" [ 1369.785265][ T30] audit: type=1107 audit(1770552532.089:26): pid=19990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1369.785845][T19993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9452'. [ 1369.835492][T19993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9452'. [ 1369.872793][T19991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1370.320385][T19996] syzkaller0: entered promiscuous mode [ 1370.340267][T19996] syzkaller0: entered allmulticast mode [ 1371.313795][ T25] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 144 seconds [ 1373.429606][T16194] bridge_slave_1: left allmulticast mode [ 1373.435283][T16194] bridge_slave_1: left promiscuous mode [ 1373.441275][T16194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.454625][T16194] bridge_slave_0: left promiscuous mode [ 1373.465192][T16194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.586276][T20010] delete_channel: no stack [ 1373.615680][T20016] FAULT_INJECTION: forcing a failure. [ 1373.615680][T20016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1373.632130][T20016] CPU: 0 UID: 0 PID: 20016 Comm: syz.0.9457 Not tainted syzkaller #0 PREEMPT(full) [ 1373.632153][T20016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1373.632162][T20016] Call Trace: [ 1373.632168][T20016] [ 1373.632175][T20016] dump_stack_lvl+0xe8/0x150 [ 1373.632199][T20016] should_fail_ex+0x412/0x560 [ 1373.632221][T20016] _copy_from_iter+0x1d3/0x1670 [ 1373.632245][T20016] ? rcu_is_watching+0x15/0xb0 [ 1373.632259][T20016] ? __pfx__copy_from_iter+0x10/0x10 [ 1373.632273][T20016] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 1373.632299][T20016] ? netlink_sendmsg+0x650/0xb40 [ 1373.632314][T20016] ? skb_put+0x11b/0x210 [ 1373.632332][T20016] netlink_sendmsg+0x6c0/0xb40 [ 1373.632354][T20016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1373.632372][T20016] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1373.632390][T20016] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1373.632408][T20016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1373.632423][T20016] ____sys_sendmsg+0xa68/0xad0 [ 1373.632442][T20016] ? __might_fault+0xaf/0x130 [ 1373.632465][T20016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1373.632489][T20016] ? import_iovec+0x73/0xa0 [ 1373.632510][T20016] ___sys_sendmsg+0x2a5/0x360 [ 1373.632526][T20016] ? __lock_acquire+0x6b5/0x2cf0 [ 1373.632548][T20016] ? __pfx____sys_sendmsg+0x10/0x10 [ 1373.632590][T20016] ? __fget_files+0x2a/0x420 [ 1373.632604][T20016] ? __fget_files+0x3a0/0x420 [ 1373.632814][T20016] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1373.632844][T20016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1373.632868][T20016] ? __pfx_ksys_write+0x10/0x10 [ 1373.632896][T20016] do_syscall_64+0xe2/0xf80 [ 1373.632916][T20016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.632929][T20016] ? trace_irq_disable+0x37/0x100 [ 1373.632943][T20016] ? clear_bhb_loop+0x60/0xb0 [ 1373.632958][T20016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.632971][T20016] RIP: 0033:0x7f62db39aeb9 [ 1373.632988][T20016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.632999][T20016] RSP: 002b:00007f62dc184028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1373.633015][T20016] RAX: ffffffffffffffda RBX: 00007f62db615fa0 RCX: 00007f62db39aeb9 [ 1373.633025][T20016] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 1373.633034][T20016] RBP: 00007f62dc184090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.633042][T20016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1373.633050][T20016] R13: 00007f62db616038 R14: 00007f62db615fa0 R15: 00007fff4b468978 [ 1373.633072][T20016] [ 1373.974904][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9459'. [ 1374.420288][T16194] bond6 (unregistering): (slave bridge4): Releasing active interface [ 1374.429538][T16194] bond6 (unregistering): (slave bridge4): the permanent HWaddr of slave - ba:2a:47:24:da:70 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1374.491205][T16194] bond6 (unregistering): (slave bridge5): Releasing active interface [ 1374.675984][T16194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.687666][T16194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.700099][T16194] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1374.711245][T16194] bond0 (unregistering): Released all slaves [ 1374.725747][T16194] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1374.734966][T16194] bond1 (unregistering): Released all slaves [ 1374.750508][T16194] bond2 (unregistering): Released all slaves [ 1374.763355][T16194] bond3 (unregistering): Released all slaves [ 1374.782247][T16194] bond4 (unregistering): Released all slaves [ 1374.798404][T16194] bond5 (unregistering): Released all slaves [ 1374.815754][T16194] bond6 (unregistering): Released all slaves [ 1374.829738][T16194] bond7 (unregistering): Released all slaves [ 1374.842396][T16194] bond8 (unregistering): Released all slaves [ 1374.870348][T20008] pim6reg: entered allmulticast mode [ 1375.043443][T16194] : left promiscuous mode [ 1375.179868][T16194] tipc: Disabling bearer [ 1375.185997][T16194] tipc: Left network mode [ 1375.207971][T20049] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9464'. [ 1375.272319][T20038] ip6_vti0 speed is unknown, defaulting to 1000 [ 1375.515465][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9466'. [ 1375.893754][T20084] netlink: 'syz.1.9471': attribute type 6 has an invalid length. [ 1376.148698][T20093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9473'. [ 1377.697504][ T25] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 150 seconds [ 1378.250178][T20093] ipvlan3: entered promiscuous mode [ 1378.267842][T20093] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1378.287840][T20061] ip6_vti0 speed is unknown, defaulting to 1000 [ 1378.304377][T20102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.352497][T20106] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 1378.363450][T20106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9475'. [ 1378.588775][T20112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9477'. [ 1378.604716][T20112] : entered promiscuous mode [ 1378.705855][T20116] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1378.788384][T20119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9478'. [ 1378.857876][T20122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9482'. [ 1379.220698][T20038] wg1 speed is unknown, defaulting to 1000 [ 1379.304962][T20061] wg1 speed is unknown, defaulting to 1000 [ 1379.511394][T20137] netlink: 'syz.4.9486': attribute type 21 has an invalid length. [ 1379.688976][T16194] hsr_slave_0: left promiscuous mode [ 1379.704206][T16194] hsr_slave_1: left promiscuous mode [ 1379.760137][T16194] pim6reg (unregistering): left allmulticast mode [ 1380.174901][T20141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9486'. [ 1380.778171][T20152] FAULT_INJECTION: forcing a failure. [ 1380.778171][T20152] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.798433][T20152] CPU: 0 UID: 0 PID: 20152 Comm: syz.4.9489 Not tainted syzkaller #0 PREEMPT(full) [ 1380.798461][T20152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1380.798473][T20152] Call Trace: [ 1380.798480][T20152] [ 1380.798489][T20152] dump_stack_lvl+0xe8/0x150 [ 1380.798518][T20152] should_fail_ex+0x412/0x560 [ 1380.798546][T20152] should_failslab+0xa8/0x100 [ 1380.798568][T20152] __kmalloc_noprof+0xde/0x7e0 [ 1380.798587][T20152] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1380.798613][T20152] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1380.798642][T20152] genl_family_rcv_msg_doit+0xd9/0x330 [ 1380.798669][T20152] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1380.798699][T20152] ? apparmor_capable+0x137/0x1a0 [ 1380.798723][T20152] ? bpf_lsm_capable+0x9/0x20 [ 1380.798742][T20152] ? security_capable+0x7e/0x2c0 [ 1380.798765][T20152] genl_rcv_msg+0x61c/0x7a0 [ 1380.798791][T20152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1380.798816][T20152] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1380.798831][T20152] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1380.798851][T20152] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1380.798870][T20152] ? __pfx_ref_tracker_free+0x10/0x10 [ 1380.798896][T20152] netlink_rcv_skb+0x232/0x4b0 [ 1380.798915][T20152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1380.798936][T20152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1380.798950][T20152] ? genl_rcv+0x19/0x40 [ 1380.798982][T20152] ? down_read+0x272/0x2e0 [ 1380.798995][T20152] ? genl_rcv+0xd/0x40 [ 1380.799016][T20152] genl_rcv+0x28/0x40 [ 1380.799033][T20152] netlink_unicast+0x80f/0x9b0 [ 1380.799066][T20152] ? __pfx_netlink_unicast+0x10/0x10 [ 1380.799090][T20152] ? netlink_sendmsg+0x650/0xb40 [ 1380.799106][T20152] ? skb_put+0x11b/0x210 [ 1380.799131][T20152] netlink_sendmsg+0x813/0xb40 [ 1380.799157][T20152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1380.799179][T20152] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1380.799200][T20152] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1380.799221][T20152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1380.799239][T20152] ____sys_sendmsg+0xa68/0xad0 [ 1380.799261][T20152] ? __might_fault+0xaf/0x130 [ 1380.799291][T20152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1380.799323][T20152] ? import_iovec+0x73/0xa0 [ 1380.799349][T20152] ___sys_sendmsg+0x2a5/0x360 [ 1380.799369][T20152] ? __lock_acquire+0x6b5/0x2cf0 [ 1380.799397][T20152] ? __pfx____sys_sendmsg+0x10/0x10 [ 1380.799455][T20152] ? __fget_files+0x2a/0x420 [ 1380.799474][T20152] ? __fget_files+0x3a0/0x420 [ 1380.799502][T20152] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1380.799527][T20152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1380.799557][T20152] ? __pfx_ksys_write+0x10/0x10 [ 1380.799594][T20152] do_syscall_64+0xe2/0xf80 [ 1380.799616][T20152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.799633][T20152] ? trace_irq_disable+0x37/0x100 [ 1380.799649][T20152] ? clear_bhb_loop+0x60/0xb0 [ 1380.799667][T20152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1380.799683][T20152] RIP: 0033:0x7f72caf9aeb9 [ 1380.799718][T20152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1380.799732][T20152] RSP: 002b:00007f72cbe20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1380.799751][T20152] RAX: ffffffffffffffda RBX: 00007f72cb215fa0 RCX: 00007f72caf9aeb9 [ 1380.799764][T20152] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000004 [ 1380.799775][T20152] RBP: 00007f72cbe20090 R08: 0000000000000000 R09: 0000000000000000 [ 1380.799787][T20152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1380.799797][T20152] R13: 00007f72cb216038 R14: 00007f72cb215fa0 R15: 00007ffcde174478 [ 1380.799826][T20152] [ 1380.851760][T20150] syzkaller0: entered promiscuous mode [ 1381.204114][T20150] syzkaller0: entered allmulticast mode [ 1381.254423][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9490'. [ 1381.699492][ T5908] IPVS: starting estimator thread 0... [ 1381.760118][T20175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9492'. [ 1381.788963][T20173] IPVS: using max 33 ests per chain, 79200 per kthread [ 1384.097693][ T25] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 156 seconds [ 1384.320997][T16194] IPVS: stop unused estimator thread 0... [ 1384.365422][T20169] ip6_vti0 speed is unknown, defaulting to 1000 [ 1385.069692][T20213] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 1385.243944][T20217] netlink: 'syz.0.9505': attribute type 10 has an invalid length. [ 1385.252040][T20217] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9505'. [ 1385.261478][T20217] bond0: entered promiscuous mode [ 1385.266757][T20217] bond_slave_0: entered promiscuous mode [ 1385.272618][T20217] bond_slave_1: entered promiscuous mode [ 1385.282025][T20217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.298657][T20217] bridge0: port 3(bond0) entered blocking state [ 1385.305358][T20217] bridge0: port 3(bond0) entered disabled state [ 1385.312755][T20217] bond0: entered allmulticast mode [ 1385.318445][T20217] bond_slave_0: entered allmulticast mode [ 1385.325022][T20217] bond_slave_1: entered allmulticast mode [ 1385.342548][T20219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9506'. [ 1385.353496][T20219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9506'. [ 1385.384080][T20169] wg1 speed is unknown, defaulting to 1000 [ 1385.551506][T20234] netlink: 'syz.0.9510': attribute type 9 has an invalid length. [ 1385.619806][T20234] netlink: 'syz.0.9510': attribute type 11 has an invalid length. [ 1385.665571][T20234] netlink: 'syz.0.9510': attribute type 12 has an invalid length. [ 1385.704184][T20234] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.9510'. [ 1385.945329][T20251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9511'. [ 1385.997690][T20255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9511'. [ 1386.249732][T20255] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1386.269253][T20258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1386.301106][T20244] netlink: 'syz.3.9511': attribute type 21 has an invalid length. [ 1386.341879][T20244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9511'. [ 1386.425030][T20269] syz_tun: entered allmulticast mode [ 1386.578722][T20267] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9519'. [ 1386.621967][T20276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9520'. [ 1386.639251][T20276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9520'. [ 1389.713982][T20289] ip6_vti0 speed is unknown, defaulting to 1000 [ 1389.809684][T20299] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9526'. [ 1390.223284][T20304] ip6_vti0 speed is unknown, defaulting to 1000 [ 1390.499543][ T25] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 162 seconds [ 1390.760778][T20289] wg1 speed is unknown, defaulting to 1000 [ 1390.771681][T20341] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9534'. [ 1390.792028][T20340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9534'. [ 1391.066161][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9536'. [ 1391.292863][T20304] wg1 speed is unknown, defaulting to 1000 [ 1391.894944][T20362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9540'. [ 1392.822765][T20383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9545'. [ 1392.905241][T20386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9546'. [ 1392.933796][T20386] netlink: 'syz.4.9546': attribute type 15 has an invalid length. [ 1393.453005][T20404] nbd: socks must be embedded in a SOCK_ITEM attr [ 1393.599949][T20417] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 1393.622892][T20417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1393.739101][T20426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9558'. [ 1393.884246][T20438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9562'. [ 1393.894684][T20439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9562'. [ 1394.010141][T20446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9564'. [ 1394.173717][T20453] syzkaller0: entered promiscuous mode [ 1394.187469][T20453] syzkaller0: entered allmulticast mode [ 1394.329995][T20462] ip6_vti0 speed is unknown, defaulting to 1000 [ 1394.376199][T20467] netlink: 'syz.0.9570': attribute type 33 has an invalid length. [ 1394.388278][T20467] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9570'. [ 1394.397931][T20467] `: renamed from team0 [ 1394.523369][T20478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9569'. [ 1394.710083][T20483] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1395.079466][T20497] sctp: [Deprecated]: syz.3.9578 (pid 20497) Use of int in max_burst socket option deprecated. [ 1395.079466][T20497] Use struct sctp_assoc_value instead [ 1395.145306][T20500] xt_limit: Overflow, try lower: 271964/0 [ 1395.256187][T20506] netlink: 27 bytes leftover after parsing attributes in process `syz.0.9577'. [ 1395.574180][T20509] netlink: 'syz.2.9579': attribute type 3 has an invalid length. [ 1396.930335][ T25] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 168 seconds [ 1397.690033][ T5191] udevd[5191]: worker [14288] /devices/virtual/block/nbd3 timeout; kill it [ 1397.710021][ T5191] udevd[5191]: seq 54959 '/devices/virtual/block/nbd3' killed [ 1398.117200][T20462] wg1 speed is unknown, defaulting to 1000 [ 1398.123805][T20509] netlink: 'syz.2.9579': attribute type 5 has an invalid length. [ 1398.147946][T16194] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1398.199839][T20514] netlink: 'syz.0.9580': attribute type 3 has an invalid length. [ 1398.737441][ T5935] syzkaller0: tun_net_xmit 76 [ 1399.418991][T20562] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9589'. [ 1399.609083][T28015] Bluetooth: hci1: command 0x0406 tx timeout [ 1401.758588][T20553] syzkaller0: entered promiscuous mode [ 1401.764107][T20553] syzkaller0: entered allmulticast mode [ 1401.912363][T20573] netlink: 'syz.0.9592': attribute type 1 has an invalid length. [ 1401.974337][T20573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1402.042729][T20573] bond2: (slave gretap2): making interface the new active one [ 1402.052511][T20573] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1402.064991][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9592'. [ 1402.103128][T20573] bond2 (unregistering): (slave gretap2): Releasing active interface [ 1402.131538][T20573] bond2 (unregistering): Released all slaves [ 1402.255831][T20594] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9598'. [ 1402.372263][T20598] syzkaller0: entered promiscuous mode [ 1402.382854][T20598] syzkaller0: entered allmulticast mode [ 1402.780078][T20611] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.9603'. [ 1403.307548][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 174 seconds [ 1405.487626][T20604] bridge2: entered promiscuous mode [ 1405.492875][T20604] bridge2: entered allmulticast mode [ 1405.501907][T20604] team0: Port device bridge2 added [ 1405.508029][T20608] bridge0: port 3(team0) entered blocking state [ 1405.514640][T20608] bridge0: port 3(team0) entered disabled state [ 1405.524955][T20608] team0: entered allmulticast mode [ 1405.536413][T20608] team_slave_0: entered allmulticast mode [ 1405.542273][T20608] team_slave_1: entered allmulticast mode [ 1405.550687][T20608] team0: entered promiscuous mode [ 1405.555763][T20608] team_slave_0: entered promiscuous mode [ 1405.562787][T20608] team_slave_1: entered promiscuous mode [ 1405.570313][T20608] bridge0: port 3(team0) entered blocking state [ 1405.576928][T20608] bridge0: port 3(team0) entered forwarding state [ 1405.681830][T20630] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9607'. [ 1405.794213][T20631] bond4: option arp_all_targets: invalid value (129) [ 1405.801312][T14404] lec:lec_start_xmit: lec0:No lecd attached [ 1405.819043][T20631] bond4 (unregistering): Released all slaves [ 1405.849195][T20616] ip6_vti0 speed is unknown, defaulting to 1000 [ 1406.131937][T20648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9612'. [ 1406.164362][T20651] gretap0: entered promiscuous mode [ 1406.499525][T20666] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1406.630382][T20672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9621'. [ 1406.655591][T20672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9621'. [ 1406.681750][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9621'. [ 1406.745875][T20676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9621'. [ 1406.747069][T20616] wg1 speed is unknown, defaulting to 1000 [ 1406.756313][ T1868] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1406.772656][ T1868] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1406.844522][T20675] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9622'. [ 1406.919163][ T1868] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1406.950807][ T1868] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1407.066160][ T5908] IPVS: starting estimator thread 0... [ 1407.168165][T20692] IPVS: using max 37 ests per chain, 88800 per kthread [ 1407.218017][T20688] ip6_vti0 speed is unknown, defaulting to 1000 [ 1408.051570][T20729] netlink: 'syz.4.9632': attribute type 21 has an invalid length. [ 1408.168383][T20733] bond0: (slave bond_slave_1): Releasing backup interface [ 1408.196014][T20733] bond_slave_1: left promiscuous mode [ 1408.255154][T20733] bond_slave_1: left allmulticast mode [ 1408.273154][T20729] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9632'. [ 1408.433481][T20734] ip6_vti0 speed is unknown, defaulting to 1000 [ 1408.452141][T20739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9630'. [ 1408.462224][T20739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9630'. [ 1408.616775][T20688] wg1 speed is unknown, defaulting to 1000 [ 1409.691062][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 180 seconds [ 1409.912659][T20734] wg1 speed is unknown, defaulting to 1000 [ 1410.008376][T20782] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1410.555531][T20788] syzkaller0: entered promiscuous mode [ 1410.570441][T20788] syzkaller0: entered allmulticast mode [ 1410.885005][T20802] tipc: New replicast peer: 255.255.255.255 [ 1410.925075][T20802] tipc: Enabled bearer , priority 6 [ 1410.967529][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms [ 1410.975738][ C0] lec:lec_tx_timeout: lec0 [ 1411.114147][T20808] 0ªî{X¹¦: left allmulticast mode [ 1411.447361][T20832] __nla_validate_parse: 4 callbacks suppressed [ 1411.447381][T20832] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9653'. [ 1411.773848][T20849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9658'. [ 1411.887862][T20855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9660'. [ 1411.925298][T20858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9662'. [ 1411.950726][T20855] openvswitch: netlink: Key type 260 is out of range max 32 [ 1411.973663][T20855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9660'. [ 1411.975485][T20858] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9662'. [ 1412.021632][T20858] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1412.140031][T20865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1412.221772][T20830] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1412.274543][T20868] syzkaller1: entered promiscuous mode [ 1412.281257][T20868] syzkaller1: entered allmulticast mode [ 1412.531213][T20894] tipc: Enabled bearer , priority 0 [ 1412.540685][T20899] netlink: 'syz.2.9671': attribute type 5 has an invalid length. [ 1412.577949][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9671'. [ 1412.586836][T20894] syzkaller0: entered promiscuous mode [ 1412.586861][T20894] syzkaller0: entered allmulticast mode [ 1412.618630][T20894] tipc: Resetting bearer [ 1412.631034][T20893] tipc: Resetting bearer [ 1412.690306][T20893] tipc: Disabling bearer [ 1412.713689][T20905] netlink: 428 bytes leftover after parsing attributes in process `syz.4.9672'. [ 1412.727584][T20905] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9672'. [ 1412.745905][T20906] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1412.991239][T20920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9678'. [ 1413.060539][T20920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1413.111699][T20920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1413.120291][T20920] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 1413.133235][T20920] bond1: (slave sit1): Error -95 calling set_mac_address [ 1413.188362][T20928] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1413.201202][T20928] bridge1: entered allmulticast mode [ 1413.222134][T20927] tipc: Started in network mode [ 1413.229733][T20927] tipc: Node identity 3a8d375b11f, cluster identity 4711 [ 1413.237602][T20927] tipc: Enabled bearer , priority 0 [ 1413.245387][T20927] syzkaller0: entered promiscuous mode [ 1413.276232][T20927] syzkaller0: entered allmulticast mode [ 1413.291675][T20933] syzkaller1: entered promiscuous mode [ 1413.299865][T20933] syzkaller1: entered allmulticast mode [ 1413.348175][T20935] tipc: Started in network mode [ 1413.353182][T20935] tipc: Node identity 5eabd5e8193d, cluster identity 4711 [ 1413.361406][T20935] tipc: Enabled bearer , priority 0 [ 1413.381743][T20935] syzkaller0: entered promiscuous mode [ 1413.388487][T20935] syzkaller0: entered allmulticast mode [ 1413.409606][T20935] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1413.447062][ T5834] Bluetooth: hci2: command 0x0401 tx timeout [ 1413.504095][T20931] tipc: Resetting bearer [ 1413.561356][T20935] tipc: Resetting bearer [ 1413.589618][T20926] tipc: Resetting bearer [ 1413.613345][T20926] tipc: Disabling bearer [ 1413.626017][T20934] tipc: Resetting bearer [ 1413.645815][T20934] tipc: Disabling bearer [ 1414.679689][T21010] netlink: 'syz.4.9704': attribute type 13 has an invalid length. [ 1414.760838][T21010] gretap0: refused to change device tx_queue_len [ 1414.793009][T21010] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1414.967092][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 1415.254566][T21019] ip6_vti0 speed is unknown, defaulting to 1000 [ 1415.301560][T21034] ipvlan2: entered promiscuous mode [ 1415.325020][T21034] bridge0: port 2(ipvlan2) entered blocking state [ 1415.338688][T21034] bridge0: port 2(ipvlan2) entered disabled state [ 1415.357115][T21034] ipvlan2: entered allmulticast mode [ 1415.362553][T21034] bridge0: entered allmulticast mode [ 1415.370642][T21034] ipvlan2: left allmulticast mode [ 1415.386604][T21034] bridge0: left allmulticast mode [ 1416.098390][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 186 seconds [ 1416.130572][T21019] wg1 speed is unknown, defaulting to 1000 [ 1416.199481][T21019] tipc: can't start tipc receive workqueue [ 1416.629540][T21083] __nla_validate_parse: 5 callbacks suppressed [ 1416.629567][T21083] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9723'. [ 1416.690601][T21081] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9723'. [ 1416.769638][T21083] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9723'. [ 1416.978622][T21089] xt_hashlimit: size too large, truncated to 1048576 [ 1417.166017][T21094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9726'. [ 1417.216283][T21094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9726'. [ 1417.395363][T21100] netlink: 160 bytes leftover after parsing attributes in process `syz.0.9729'. [ 1417.500466][T21106] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9731'. [ 1417.813961][T21121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9734'. [ 1417.823539][T21126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9735'. [ 1417.838022][T21126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9735'. [ 1417.857672][T21121] wg1: entered promiscuous mode [ 1417.864017][T21121] wg1: entered allmulticast mode [ 1417.922248][T21130] netlink: 'syz.4.9736': attribute type 2 has an invalid length. [ 1417.940660][T21123] batadv_slave_0: entered promiscuous mode [ 1417.971448][T21130] !©9: entered promiscuous mode [ 1417.994876][T21132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1418.051370][T21130] netlink: 'syz.4.9736': attribute type 2 has an invalid length. [ 1418.110735][T21130] !©9: left promiscuous mode [ 1418.454575][T21155] sctp: [Deprecated]: syz.1.9742 (pid 21155) Use of int in max_burst socket option. [ 1418.454575][T21155] Use struct sctp_assoc_value instead [ 1418.560086][T21122] batadv_slave_0: left promiscuous mode [ 1418.908746][T21183] netlink: 'syz.3.9747': attribute type 21 has an invalid length. [ 1419.099872][T21190] batman_adv: batadv0: Adding interface: macvlan1 [ 1419.121883][T21190] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.184164][T21190] batman_adv: batadv0: Not using interface macvlan1 (retrying later): interface not active [ 1419.342984][T21207] netlink: 'syz.3.9755': attribute type 10 has an invalid length. [ 1419.353986][T21207] team0: Device ipvlan1 failed to register rx_handler [ 1419.378222][T17059] IPVS: starting estimator thread 0... [ 1419.469192][T21209] IPVS: using max 32 ests per chain, 76800 per kthread [ 1419.710666][T21224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1419.720098][T21224] bond0: (slave bond2): Enslaving as an active interface with a down link [ 1421.340705][T21310] tipc: Enabling of bearer rejected, failed to enable media [ 1421.520808][T21321] netlink: 'syz.0.9791': attribute type 2 has an invalid length. [ 1421.530573][T21321] netlink: 'syz.0.9791': attribute type 5 has an invalid length. [ 1421.595436][T21323] syzkaller0: entered promiscuous mode [ 1421.608855][T21323] syzkaller0: entered allmulticast mode [ 1421.770259][T21333] ip6_vti0 speed is unknown, defaulting to 1000 [ 1421.802217][T21336] netlink: 'syz.4.9795': attribute type 4 has an invalid length. [ 1421.945073][T21326] __nla_validate_parse: 11 callbacks suppressed [ 1421.945093][T21326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9793'. [ 1421.963916][T21343] netlink: 'syz.1.9796': attribute type 1 has an invalid length. [ 1422.010179][T21336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.017983][T21336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.083038][T21346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9796'. [ 1422.142737][T21336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.156057][T21336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1422.457396][T21343] bond3: entered promiscuous mode [ 1422.462526][T21343] bond3: entered allmulticast mode [ 1422.499702][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 192 seconds [ 1422.569390][T21345] bond3: (slave ip6gretap1): making interface the new active one [ 1422.591866][T21345] ip6gretap1: entered promiscuous mode [ 1422.599847][T21361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9801'. [ 1422.610841][T21345] ip6gretap1: entered allmulticast mode [ 1422.634361][T21345] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1422.671519][T21346] bond3: left promiscuous mode [ 1422.685212][T21346] ip6gretap1: left promiscuous mode [ 1422.690980][T21346] bond3: left allmulticast mode [ 1422.699251][T21346] ip6gretap1: left allmulticast mode [ 1422.706917][T21346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1422.714640][T16194] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.740524][T16194] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.779963][T16194] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.813222][T16194] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.989405][T21383] netlink: 'syz.2.9807': attribute type 2 has an invalid length. [ 1423.138997][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1423.359821][T21398] ip6gre1: entered promiscuous mode [ 1423.455544][T21333] wg1 speed is unknown, defaulting to 1000 [ 1423.593233][T21405] syzkaller0: entered promiscuous mode [ 1423.601036][T21405] syzkaller0: entered allmulticast mode [ 1423.615228][T21405] TC_ACT_REPEAT abuse ? [ 1423.793234][T21419] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9817'. [ 1424.024495][T21430] tls_set_device_offload: netdev not found [ 1424.173801][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9822'. [ 1424.183252][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9822'. [ 1424.193824][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9822'. [ 1424.197490][T21430] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1424.207669][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9822'. [ 1424.228530][T21437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9822'. [ 1424.238009][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9822'. [ 1424.530887][T21458] netlink: 'syz.2.9827': attribute type 1 has an invalid length. [ 1424.654569][T21469] netlink: 'syz.3.9829': attribute type 13 has an invalid length. [ 1425.442536][T21513] bond2: Invalid ad_actor_system MAC address. [ 1425.479955][T21513] bond2: option ad_actor_system: invalid value (7) [ 1425.491484][T21513] bond2 (unregistering): Released all slaves [ 1425.588285][T21537] netlink: 'syz.4.9844': attribute type 4 has an invalid length. [ 1425.642742][T21514] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1425.671025][T21537] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1425.844745][T21528] syzkaller0: entered promiscuous mode [ 1425.852617][T21528] syzkaller0: entered allmulticast mode [ 1425.853868][T21549] netlink: 'syz.2.9846': attribute type 1 has an invalid length. [ 1425.985032][ T5908] hid-generic 0005:0006:5508.0006: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1426.083060][T21556] fido_id[21556]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 1426.118847][T28015] block nbd10: Receive control failed (result -32) [ 1428.817879][T21549] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1428.891486][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 198 seconds [ 1428.936234][T21562] __nla_validate_parse: 73 callbacks suppressed [ 1428.936250][T21562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9849'. [ 1428.966415][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1428.974473][ C0] lec:lec_tx_timeout: lec0 [ 1429.056165][T21562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9849'. [ 1429.069406][T21576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9853'. [ 1429.080340][T21576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9853'. [ 1429.090186][T21576] netlink: 'syz.1.9853': attribute type 20 has an invalid length. [ 1429.307511][T21581] ip6_vti0 speed is unknown, defaulting to 1000 [ 1429.844832][T21608] bridge0: port 3(team0) entered disabled state [ 1429.851392][T21608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.859194][T21608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.895688][T21612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9860'. [ 1430.103230][T21608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1430.121676][T21608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1430.253299][T21638] xt_CONNSECMARK: invalid mode: 253 [ 1430.262582][T21608] ip6gre1: left promiscuous mode [ 1430.272331][T21581] wg1 speed is unknown, defaulting to 1000 [ 1430.301316][T21612] hsr_slave_0: left promiscuous mode [ 1430.309431][T21612] hsr_slave_1: left promiscuous mode [ 1430.353539][ T1868] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.378010][ T1868] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.425041][T21638] pim6reg1: entered promiscuous mode [ 1430.431700][T21638] pim6reg1: entered allmulticast mode [ 1430.444057][T18687] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.459976][T18687] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.487879][T21646] netlink: 'syz.3.9869': attribute type 66 has an invalid length. [ 1430.553129][T21647] netlink: 'syz.3.9869': attribute type 66 has an invalid length. [ 1430.687011][T21656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9871'. [ 1430.715138][T21655] netlink: 'syz.0.9872': attribute type 3 has an invalid length. [ 1430.723696][T21655] netlink: 'syz.0.9872': attribute type 3 has an invalid length. [ 1430.791532][T21657] ip6_vti0 speed is unknown, defaulting to 1000 [ 1430.961705][T21663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9875'. [ 1431.912111][T21671] netlink: 'syz.4.9878': attribute type 1 has an invalid length. [ 1431.970412][T21686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9878'. [ 1432.086129][T21702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9886'. [ 1432.118579][T21657] wg1 speed is unknown, defaulting to 1000 [ 1432.295075][T21693] tipc: Started in network mode [ 1432.301381][T21693] tipc: Node identity 52f403317acb, cluster identity 4711 [ 1432.311157][T21693] tipc: Enabled bearer , priority 0 [ 1432.321340][T21702] syzkaller0: entered promiscuous mode [ 1432.343341][T21702] syzkaller0: entered allmulticast mode [ 1432.439852][T21702] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 1432.547305][T21702] tipc: Resetting bearer [ 1432.560878][T21720] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9891'. [ 1432.608508][T21702] tipc: Disabling bearer [ 1432.721937][T21723] bridge0: port 3(bond0) entered blocking state [ 1432.728412][T21723] bridge0: port 3(bond0) entered forwarding state [ 1432.741856][T21723] 8021q: adding VLAN 0 to HW filter on device ` [ 1432.746449][T21727] sock: sock_set_timeout: `syz.1.9894' (pid 21727) tries to set negative timeout [ 1432.778629][T21723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1432.851143][T21728] gtp0: entered promiscuous mode [ 1432.856143][T21728] gtp0: entered allmulticast mode [ 1432.905670][T21734] syz_tun: left allmulticast mode [ 1433.160343][T21751] ip6gretap1: entered promiscuous mode [ 1433.431532][T21759] netlink: 'syz.0.9902': attribute type 2 has an invalid length. [ 1433.891528][T21779] xt_hashlimit: max too large, truncated to 1048576 [ 1434.235724][T21781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.259721][T21781] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.272840][T21781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1434.314092][T21796] tipc: Enabled bearer , priority 0 [ 1434.324214][T21796] syzkaller0: entered promiscuous mode [ 1434.331893][T21796] syzkaller0: entered allmulticast mode [ 1434.388973][T21799] tipc: Enabled bearer , priority 0 [ 1434.431083][T21802] __nla_validate_parse: 4 callbacks suppressed [ 1434.431100][T21802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9916'. [ 1434.445371][T21799] syzkaller0: entered promiscuous mode [ 1434.453956][T21799] syzkaller0: entered allmulticast mode [ 1434.461119][T21799] tipc: Resetting bearer [ 1434.469325][T21796] tipc: Resetting bearer [ 1434.479841][T21795] tipc: Resetting bearer [ 1434.509344][T21795] tipc: Disabling bearer [ 1434.575907][T21798] tipc: Resetting bearer [ 1434.592614][T21807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9917'. [ 1434.766612][T21812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9919'. [ 1435.325364][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 204 seconds [ 1438.039804][T21798] tipc: Disabling bearer [ 1438.063741][T21818] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1438.065350][ T5659] tipc: Node number set to 729626459 [ 1438.088871][T21813] ip6_vti0 speed is unknown, defaulting to 1000 [ 1438.285965][T21831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9923'. [ 1438.588137][T21843] syzkaller0: entered promiscuous mode [ 1438.605739][T21843] syzkaller0: entered allmulticast mode [ 1438.787789][T21850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9930'. [ 1438.955578][T21813] wg1 speed is unknown, defaulting to 1000 [ 1439.104708][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9926'. [ 1439.281564][ T2943] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1439.298100][ T2943] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1439.341483][ T2943] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1439.367596][ T2943] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1439.680393][T21877] netlink: 'syz.1.9935': attribute type 11 has an invalid length. [ 1440.289122][T21923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9948'. [ 1440.372101][T21928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9949'. [ 1440.381440][T21928] netlink: 336 bytes leftover after parsing attributes in process `syz.4.9949'. [ 1440.390736][T21928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9949'. [ 1440.413188][T21928] netlink: 336 bytes leftover after parsing attributes in process `syz.4.9949'. [ 1440.442347][T21930] bond2: option lp_interval: invalid value (0) [ 1440.445188][T21928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9949'. [ 1440.449613][T21930] bond2: option lp_interval: allowed values 1 - 2147483647 [ 1440.460753][T21934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9951'. [ 1440.482660][T21930] bond2 (unregistering): Released all slaves [ 1440.490971][T21933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9951'. [ 1440.625063][T19331] IPVS: starting estimator thread 0... [ 1440.645960][T21942] ªªªªª»: renamed from bond_slave_0 [ 1440.661287][T21944] Bluetooth: MGMT ver 1.23 [ 1440.716694][T21946] IPVS: using max 29 ests per chain, 69600 per kthread [ 1440.940153][T21959] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.9956'. [ 1440.965426][T21959] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1441.001100][T21963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9958'. [ 1441.031551][T21966] netlink: 'syz.0.9957': attribute type 3 has an invalid length. [ 1441.112549][T18687] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.145644][T18687] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.165070][T18687] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.202676][T18687] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.606088][T21996] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1441.639394][T21996] bond2 (unregistering): Released all slaves [ 1441.688275][T22006] dvmrp12: entered allmulticast mode [ 1441.697814][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 210 seconds [ 1441.701214][T22002] dvmrp12: left allmulticast mode [ 1441.934946][T22020] syzkaller0: entered promiscuous mode [ 1441.959015][T22020] syzkaller0: entered allmulticast mode [ 1442.538791][T22061] netlink: 'syz.3.9987': attribute type 5 has an invalid length. [ 1442.595614][T22065] sctp: [Deprecated]: syz.3.9989 (pid 22065) Use of int in max_burst socket option deprecated. [ 1442.595614][T22065] Use struct sctp_assoc_value instead [ 1442.651026][T22065] syzkaller0: entered promiscuous mode [ 1442.656832][T22065] syzkaller0: entered allmulticast mode [ 1442.665130][ T1868] 0: reclassify loop, rule prio 0, protocol 700 [ 1442.780270][T22071] syzkaller0: entered promiscuous mode [ 1442.797007][T22071] syzkaller0: entered allmulticast mode [ 1443.038465][T22087] syzkaller0: entered promiscuous mode [ 1443.044167][T22087] syzkaller0: entered allmulticast mode [ 1443.324839][T22096] team0 (unregistering): Port device team_slave_0 removed [ 1443.338522][T22096] team0 (unregistering): Port device team_slave_1 removed [ 1443.386277][T22108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1443.408602][T22108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1443.466037][T22108] bond0 (unregistering): (slave bond2): Releasing backup interface [ 1443.495654][T22108] bond0 (unregistering): Released all slaves [ 1443.755355][T22128] netlink: 'syz.0.10009': attribute type 13 has an invalid length. [ 1443.863403][T22128] bridge0: port 3(bond0) entered disabled state [ 1443.985453][ T2978] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.007811][ T2978] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.032177][ T2978] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.042138][ T2978] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.065801][T22139] netlink: 'syz.0.10012': attribute type 2 has an invalid length. [ 1444.081477][T22133] ip6_vti0 speed is unknown, defaulting to 1000 [ 1444.405144][T22152] netlink: 'syz.2.10015': attribute type 6 has an invalid length. [ 1447.994658][T22153] ip6_vti0 speed is unknown, defaulting to 1000 [ 1448.009326][T22173] ip6gretap1: entered promiscuous mode [ 1448.096653][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 216 seconds [ 1448.150424][T22194] netlink: 'syz.0.10020': attribute type 1 has an invalid length. [ 1448.404789][T22212] __nla_validate_parse: 20 callbacks suppressed [ 1448.404811][T22212] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10025'. [ 1448.456924][T22212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10025'. [ 1448.478032][T22212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10025'. [ 1448.565983][T22215] bond2: option arp_validate: invalid value (55553) [ 1448.589852][T22215] bond2 (unregistering): Released all slaves [ 1448.631584][T22220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10027'. [ 1448.654429][T22133] wg1 speed is unknown, defaulting to 1000 [ 1448.877069][T22227] netlink: 'syz.0.10028': attribute type 11 has an invalid length. [ 1449.375970][T22153] wg1 speed is unknown, defaulting to 1000 [ 1450.151282][T22274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10040'. [ 1450.362112][T22282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10042'. [ 1450.502394][T22287] tipc: Enabled bearer , priority 0 [ 1450.528565][T22286] tipc: Disabling bearer [ 1450.846253][T22304] pim6reg1: entered allmulticast mode [ 1451.104175][T22317] netlink: 43 bytes leftover after parsing attributes in process `syz.3.10055'. [ 1451.116159][T22316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10054'. [ 1451.135520][T22317] IPv6: sit1: Disabled Multicast RS [ 1451.150932][T22317] sit1: entered allmulticast mode [ 1451.359363][T22337] netlink: 'syz.3.10060': attribute type 30 has an invalid length. [ 1451.373777][T22337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10060'. [ 1451.436210][T22337] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1451.453210][T22337] bond4 (unregistering): Released all slaves [ 1451.465579][T22345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10063'. [ 1451.941334][T18686] wlan1: Trigger new scan to find an IBSS to join [ 1452.882790][T22410] ip6_vti0 speed is unknown, defaulting to 1000 [ 1452.921649][T22419] gtp0: entered promiscuous mode [ 1452.936520][T22419] gtp0: entered allmulticast mode [ 1453.492739][T22443] __nla_validate_parse: 8 callbacks suppressed [ 1453.492760][T22443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10093'. [ 1453.510989][T22443] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1453.528687][T22443] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10093'. [ 1454.518433][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 222 seconds [ 1454.967273][ T1868] wlan1: Trigger new scan to find an IBSS to join [ 1455.927000][T28015] Bluetooth: hci5: command 0x040f tx timeout [ 1456.674525][T22410] wg1 speed is unknown, defaulting to 1000 [ 1456.758455][T22469] netlink: 'syz.3.10100': attribute type 9 has an invalid length. [ 1456.937898][T22485] netlink: 'syz.1.10104': attribute type 13 has an invalid length. [ 1457.182827][T16193] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1457.204956][T16193] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1457.234047][T16193] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1457.262081][T16193] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1457.786679][T22517] veth0_virt_wifi: entered promiscuous mode [ 1457.799169][T22517] veth0_virt_wifi: left promiscuous mode [ 1457.814941][T22518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10113'. [ 1457.826146][T22518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10113'. [ 1458.052753][T22529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10118'. [ 1458.065140][T22531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10119'. [ 1458.137791][T22542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10121'. [ 1458.170106][T22538] pim6reg1: entered promiscuous mode [ 1458.175679][T22538] pim6reg1: entered allmulticast mode [ 1458.383451][T22550] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 1458.630796][T22568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10131'. [ 1458.847885][T22579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1458.921267][T22583] xt_CONNSECMARK: invalid mode: 0 [ 1459.159142][T22597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10138'. [ 1459.195569][T22595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10138'. [ 1459.366259][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10140'. [ 1459.439328][T22609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1459.568641][T22611] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10142'. [ 1459.598284][T22611] netlink: 'syz.3.10142': attribute type 1 has an invalid length. [ 1459.624780][T22611] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10142'. [ 1459.940355][T22635] ip6_vti0 speed is unknown, defaulting to 1000 [ 1460.071958][T22646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10148'. [ 1460.581191][T22665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10151'. [ 1460.742486][T22671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10152'. [ 1460.762396][T22635] wg1 speed is unknown, defaulting to 1000 [ 1460.783261][T28015] Bluetooth: hci4: link tx timeout [ 1460.793407][T28015] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1460.897668][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 228 seconds [ 1460.962057][T22679] netlink: 'syz.4.10154': attribute type 21 has an invalid length. [ 1460.997849][T22681] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10153'. [ 1461.049054][T16599] Bluetooth: hci2: command 0x0401 tx timeout [ 1461.062092][T22684] netlink: 'syz.4.10154': attribute type 21 has an invalid length. [ 1461.614291][T22605] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1461.626249][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 1461.667519][T22605] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1462.111582][T22713] batadv_slave_1: entered promiscuous mode [ 1462.119715][T22713] netlink: 'syz.3.10157': attribute type 1 has an invalid length. [ 1462.179987][T22716] bond4: entered allmulticast mode [ 1462.191865][T22716] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1462.216264][T22712] batadv_slave_1: left promiscuous mode [ 1462.244207][T22605] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1462.264255][T22605] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1462.313850][T22605] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1462.325415][T22605] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1462.345613][T22605] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1462.353170][T22605] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1462.887222][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 1462.898034][T22605] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1462.904004][T22605] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1463.037127][T22751] xt_NFQUEUE: number of total queues is 0 [ 1463.615313][T22784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1463.677790][T22790] __nla_validate_parse: 14 callbacks suppressed [ 1463.677812][T22790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10179'. [ 1463.720063][T22782] batman_adv: batadv0: Adding interface: dummy0 [ 1463.736657][T22782] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.763317][T22782] batman_adv: batadv0: Interface activated: dummy0 [ 1463.803052][T22793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10178'. [ 1463.958487][T22807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10184'. [ 1464.142272][T22820] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10188'. [ 1464.202857][T22823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10185'. [ 1464.215774][T22825] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10187'. [ 1464.237090][T22819] ipvlan2: entered allmulticast mode [ 1464.249119][T22819] veth0_vlan: entered allmulticast mode [ 1464.251326][T22827] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10188'. [ 1464.255166][T22812] ip6_vti0 speed is unknown, defaulting to 1000 [ 1464.265556][T22827] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10188'. [ 1464.279422][T22819] netlink: 'syz.4.10189': attribute type 1 has an invalid length. [ 1464.316900][T22819] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10189'. [ 1464.679585][T22824] ip6_vti0 speed is unknown, defaulting to 1000 [ 1464.767668][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10193'. [ 1464.832458][T22839] netlink: 'syz.4.10192': attribute type 1 has an invalid length. [ 1464.924216][T22812] wg1 speed is unknown, defaulting to 1000 [ 1465.421089][T22860] SET target dimension over the limit! [ 1465.489311][T22824] wg1 speed is unknown, defaulting to 1000 [ 1466.556078][T22890] ip6_vti0 speed is unknown, defaulting to 1000 [ 1466.638674][T22895] geneve2: entered promiscuous mode [ 1466.656465][T22895] geneve2: entered allmulticast mode [ 1466.880644][T22903] netlink: 'syz.4.10210': attribute type 1 has an invalid length. [ 1467.294483][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 234 seconds [ 1467.503477][T22890] wg1 speed is unknown, defaulting to 1000 [ 1467.916165][T22925] ip6_vti0 speed is unknown, defaulting to 1000 [ 1468.239513][T22939] syzkaller1: entered promiscuous mode [ 1468.245041][T22939] syzkaller1: entered allmulticast mode [ 1468.714225][T22956] netlink: 'syz.0.10221': attribute type 1 has an invalid length. [ 1468.738485][T22958] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1468.749810][T22925] wg1 speed is unknown, defaulting to 1000 [ 1468.756133][T22956] __nla_validate_parse: 6 callbacks suppressed [ 1468.756151][T22956] netlink: 280 bytes leftover after parsing attributes in process `syz.0.10221'. [ 1469.050235][T22970] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 1469.090089][T22970] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 1469.162210][T22977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10227'. [ 1469.266056][T22980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10228'. [ 1469.321207][T22983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10228'. [ 1469.374075][T22969] bond2: option mode: invalid value (110) [ 1469.395625][T22969] bond2 (unregistering): Released all slaves [ 1469.499955][T22980] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1469.657827][T22988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10229'. [ 1469.691195][T22988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10229'. [ 1469.939474][T23010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10233'. [ 1469.978471][T23015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10234'. [ 1470.033168][T23019] netlink: 'syz.1.10235': attribute type 1 has an invalid length. [ 1470.069034][T23019] netlink: 280 bytes leftover after parsing attributes in process `syz.1.10235'. [ 1470.362542][T14404] lec:lec_start_xmit: lec0:No lecd attached [ 1470.439621][T23044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10242'. [ 1470.488226][T23044] netlink: 'syz.4.10242': attribute type 1 has an invalid length. [ 1470.529020][T23045] bridge0: port 3(bond0) entered blocking state [ 1470.535702][T23045] bridge0: port 3(bond0) entered forwarding state [ 1470.557454][T23045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1470.600398][T23045] 8021q: adding VLAN 0 to HW filter on device ` [ 1470.643138][T23045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1470.690342][T23056] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 1471.224017][T23078] tipc: Enabled bearer , priority 0 [ 1471.385522][T23080] syzkaller0: entered promiscuous mode [ 1471.401047][T23080] syzkaller0: entered allmulticast mode [ 1471.449032][T23071] tipc: Resetting bearer [ 1471.462878][T23090] x_tables: duplicate underflow at hook 2 [ 1471.656255][T23071] tipc: Disabling bearer [ 1472.041264][T23125] team0: Device gtp1 is of different type [ 1472.192907][ T30] audit: type=1800 audit(1770552634.499:27): pid=23107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10252" name="cgroup.controllers" dev="tmpfs" ino=1076 res=0 errno=0 [ 1472.233348][T23132] syzkaller0: entered promiscuous mode [ 1472.240346][T23132] syzkaller0: entered allmulticast mode [ 1472.251848][T23132] tipc: Enabled bearer , priority 0 [ 1472.263827][T23132] tipc: Resetting bearer [ 1472.281418][T23130] tipc: Resetting bearer [ 1472.322380][T23130] tipc: Disabling bearer [ 1472.509726][T23136] ip6_vti0 speed is unknown, defaulting to 1000 [ 1472.932230][T23159] syzkaller0: entered promiscuous mode [ 1472.946838][T23159] syzkaller0: entered allmulticast mode [ 1473.412161][T23157] ip6_vti0 speed is unknown, defaulting to 1000 [ 1473.690875][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 240 seconds [ 1473.892430][T23185] __nla_validate_parse: 4 callbacks suppressed [ 1473.892451][T23185] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.10275'. [ 1473.917310][T23185] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1473.941263][T23187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10275'. [ 1473.951145][T23187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10275'. [ 1474.212282][T23189] ip6_vti0 speed is unknown, defaulting to 1000 [ 1474.311879][T23136] wg1 speed is unknown, defaulting to 1000 [ 1474.550759][T23199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10278'. [ 1475.423943][T23222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10281'. [ 1475.542342][T23157] wg1 speed is unknown, defaulting to 1000 [ 1475.548690][T23192] ip6_vti0 speed is unknown, defaulting to 1000 [ 1475.651796][T23228] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1475.671933][T23189] wg1 speed is unknown, defaulting to 1000 [ 1475.684223][T23228] netlink: 'syz.1.10284': attribute type 11 has an invalid length. [ 1475.927158][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5560 ms [ 1475.935323][ C0] lec:lec_tx_timeout: lec0 [ 1476.031204][T23228] bond0: option downdelay: invalid value (18446744073709547007) [ 1476.039242][T23228] bond0: option downdelay: allowed values 0 - 2147483647 [ 1476.095143][T23228] bond0 (unregistering): Released all slaves [ 1476.157867][T23236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10286'. [ 1476.477578][T23241] ip6t_srh: unknown srh invflags 4000 [ 1476.512136][T23243] xt_bpf: check failed: parse error [ 1477.438423][T23192] wg1 speed is unknown, defaulting to 1000 [ 1477.449693][T23272] tipc: Enabled bearer , priority 0 [ 1477.542953][T23272] syzkaller0: entered promiscuous mode [ 1477.568664][T23272] syzkaller0: entered allmulticast mode [ 1477.759562][T23284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1477.889306][T23280] tipc: Resetting bearer [ 1478.048034][T23271] tipc: Resetting bearer [ 1478.176253][T23296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10300'. [ 1478.208133][T23271] tipc: Disabling bearer [ 1478.442105][T23302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10302'. [ 1478.535404][T23304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10303'. [ 1478.656592][T23306] netlink: 'syz.0.10303': attribute type 83 has an invalid length. [ 1480.103578][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 246 seconds [ 1481.537400][T23308] can: request_module (can-proto-0) failed. [ 1481.781147][T23325] netlink: 'syz.1.10310': attribute type 2 has an invalid length. [ 1482.030314][T23339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10313'. [ 1482.123449][T23342] netlink: 'syz.0.10314': attribute type 1 has an invalid length. [ 1482.150370][T23342] netlink: 280 bytes leftover after parsing attributes in process `syz.0.10314'. [ 1482.735311][T23364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10320'. [ 1482.947990][T23381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10325'. [ 1483.042441][T23383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10326'. [ 1483.476109][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10332'. [ 1483.544629][T23414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10333'. [ 1483.574731][T23412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1483.603280][T23414] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10333'. [ 1483.642911][T23414] delete_channel: no stack [ 1483.790223][T23426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10336'. [ 1483.823303][T23429] netlink: 'syz.4.10338': attribute type 1 has an invalid length. [ 1483.892845][T23429] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1484.349129][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10344'. [ 1484.400235][T23462] erspan1: entered promiscuous mode [ 1484.405514][T23462] erspan1: entered allmulticast mode [ 1484.550960][T23473] ¾x9ÿ: renamed from bridge_slave_0 [ 1484.590806][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1485.050183][T23485] ip6_vti0 speed is unknown, defaulting to 1000 [ 1485.631967][T23511] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1485.909586][T23525] netlink: 'syz.3.10363': attribute type 3 has an invalid length. [ 1485.947908][T23525] xt_TCPMSS: Only works on TCP SYN packets [ 1486.017958][T23528] ip6_vti0 speed is unknown, defaulting to 1000 [ 1486.157923][T23539] netlink: 'syz.2.10366': attribute type 13 has an invalid length. [ 1486.210625][T23540] IPVS: set_ctl: invalid protocol: 0 172.20.20.56:20003 [ 1486.273976][T23539] gretap0: refused to change device tx_queue_len [ 1486.283189][T23539] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1486.316995][T23485] wg1 speed is unknown, defaulting to 1000 [ 1486.490017][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 252 seconds [ 1489.886291][T23561] __nla_validate_parse: 6 callbacks suppressed [ 1489.905270][T23561] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10369'. [ 1489.926395][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 1489.934718][ C0] lec:lec_tx_timeout: lec0 [ 1490.043027][T23566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10372'. [ 1490.058119][T23562] ip6_vti0 speed is unknown, defaulting to 1000 [ 1490.418265][T23563] ip6_vti0 speed is unknown, defaulting to 1000 [ 1490.991336][T23600] IPVS: length: 234 != 8 [ 1491.039518][T23602] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10382'. [ 1491.079131][T23528] wg1 speed is unknown, defaulting to 1000 [ 1491.097908][T23563] wg1 speed is unknown, defaulting to 1000 [ 1491.119996][T23605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10384'. [ 1491.574096][T23562] wg1 speed is unknown, defaulting to 1000 [ 1491.718082][T23622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10392'. [ 1491.903936][T19331] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1491.937727][T23629] netlink: 'syz.2.10391': attribute type 10 has an invalid length. [ 1492.093275][T23629] dummy0: entered promiscuous mode [ 1492.101669][T23629] dummy0: entered allmulticast mode [ 1492.109560][T23629] team0: Port device dummy0 added [ 1492.116281][T23632] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10393'. [ 1492.150296][ T5659] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1492.503942][T16194] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1492.712897][T23647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10397'. [ 1492.895435][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 258 seconds [ 1492.942517][T23653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10400'. [ 1493.293352][T23670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10405'. [ 1493.404198][T23675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10407'. [ 1493.428513][T23675] batadv_slave_0: entered promiscuous mode [ 1493.473249][T23675] netlink: 'syz.2.10407': attribute type 10 has an invalid length. [ 1493.487504][T23675] veth0_vlan: left promiscuous mode [ 1493.494945][T23675] veth0_vlan: entered promiscuous mode [ 1493.510431][T23675] team0: Device veth0_vlan failed to register rx_handler [ 1493.570070][T23691] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1493.580968][T18687] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1493.589360][T18687] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1493.624647][T23692] ip6gre1: entered promiscuous mode [ 1493.648841][T23692] ip6gre1: entered allmulticast mode [ 1493.672850][T18687] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1493.691004][T19331] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1493.693844][T18687] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1493.718831][T19331] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1493.817040][T23703] nbd: must specify at least one socket [ 1494.088431][T18168] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1494.179997][T23730] netlink: 'syz.1.10423': attribute type 11 has an invalid length. [ 1494.422429][T23740] xt_hashlimit: max too large, truncated to 1048576 [ 1494.508319][T23738] netlink: 'syz.4.10427': attribute type 29 has an invalid length. [ 1494.574520][T23743] netlink: 'syz.4.10427': attribute type 29 has an invalid length. [ 1494.615023][T23749] syzkaller1: entered promiscuous mode [ 1494.621341][T23749] syzkaller1: entered allmulticast mode [ 1494.748747][T23755] syzkaller0: entered promiscuous mode [ 1494.767537][T23755] syzkaller0: entered allmulticast mode [ 1494.990219][T23755] __nla_validate_parse: 11 callbacks suppressed [ 1494.990242][T23755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10431'. [ 1495.450636][T23773] ip6_vti0 speed is unknown, defaulting to 1000 [ 1495.532727][T23764] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1495.681873][T23764] netlink: 'syz.2.10434': attribute type 9 has an invalid length. [ 1495.915117][T23803] netlink: 'syz.3.10441': attribute type 1 has an invalid length. [ 1495.924351][T23803] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10441'. [ 1496.281079][T23815] vlan2: entered promiscuous mode [ 1496.299666][T23815] bond0: entered promiscuous mode [ 1496.304858][T23815] ªªªªª»: entered promiscuous mode [ 1496.319098][T23815] bond_slave_1: entered promiscuous mode [ 1496.380651][T23821] tipc: Enabled bearer , priority 0 [ 1496.391337][T23821] syzkaller0: entered promiscuous mode [ 1496.402662][T23821] syzkaller0: entered allmulticast mode [ 1496.505017][T23821] tipc: Resetting bearer [ 1496.549593][T23820] tipc: Resetting bearer [ 1496.597757][T23820] tipc: Disabling bearer [ 1496.686197][T23830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10449'. [ 1496.789623][T23837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10451'. [ 1496.829236][T23838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10451'. [ 1496.851637][T23773] wg1 speed is unknown, defaulting to 1000 [ 1497.024609][T23847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10455'. [ 1497.113937][T23853] tipc: Enabled bearer , priority 0 [ 1497.165336][T23853] tipc: Disabling bearer [ 1497.210609][T23857] vcan1: entered promiscuous mode [ 1497.215700][T23857] vcan1: entered allmulticast mode [ 1497.464664][T23872] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10463'. [ 1497.534527][T23877] netlink: 'syz.2.10465': attribute type 3 has an invalid length. [ 1497.716801][T23870] ip6_vti0 speed is unknown, defaulting to 1000 [ 1497.846495][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1497.846516][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1498.090992][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1498.520294][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10469'. [ 1498.555783][T23897] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10470'. [ 1498.584561][T23897] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10470'. [ 1498.828148][T23870] wg1 speed is unknown, defaulting to 1000 [ 1499.055450][T23923] netlink: 'syz.0.10476': attribute type 1 has an invalid length. [ 1499.296502][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 264 seconds [ 1499.880609][T23961] netlink: 'syz.3.10489': attribute type 1 has an invalid length. [ 1500.067323][T23970] __nla_validate_parse: 8 callbacks suppressed [ 1500.067346][T23970] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10493'. [ 1500.112011][T23974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10494'. [ 1500.159884][T23974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10494'. [ 1500.301782][T23985] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10496'. [ 1500.328542][T23985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10496'. [ 1500.423842][T23990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10498'. [ 1500.424859][T23991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10496'. [ 1500.667223][T23998] netlink: 'syz.1.10500': attribute type 1 has an invalid length. [ 1500.675136][T23998] netlink: 280 bytes leftover after parsing attributes in process `syz.1.10500'. [ 1500.860379][T24006] netlink: 'syz.1.10503': attribute type 29 has an invalid length. [ 1500.870314][T24007] netlink: 'syz.1.10503': attribute type 29 has an invalid length. [ 1500.901328][T24007] netlink: 500 bytes leftover after parsing attributes in process `syz.1.10503'. [ 1500.961667][T24010] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.10504'. [ 1500.983148][T24010] openvswitch: netlink: EtherType 0 is less than min 600 [ 1501.215937][T24022] netlink: 'syz.1.10509': attribute type 1 has an invalid length. [ 1501.454201][T24038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1501.985777][T24056] bond0: option lp_interval: invalid value (0) [ 1502.030551][T24056] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1502.113486][T24061] netlink: 'syz.4.10514': attribute type 1 has an invalid length. [ 1502.174349][T24065] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 1502.175259][T24061] netlink: 'syz.4.10514': attribute type 2 has an invalid length. [ 1502.217067][T24066] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1502.427536][T24080] netlink: 'syz.4.10519': attribute type 3 has an invalid length. [ 1502.842438][T24101] ip6_vti0 speed is unknown, defaulting to 1000 [ 1503.027989][T24113] geneve2: entered promiscuous mode [ 1503.048855][T24113] geneve2: entered allmulticast mode [ 1503.056641][T18687] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.077456][T18687] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.103274][T18687] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.144761][T18687] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.423098][T24132] netlink: 'syz.3.10531': attribute type 1 has an invalid length. [ 1503.498263][T24135] gretap1: entered allmulticast mode [ 1503.556760][T24135] bond5: (slave gretap1): making interface the new active one [ 1503.582458][T24135] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1503.628266][T24122] ip6_vti0 speed is unknown, defaulting to 1000 [ 1504.301906][T24101] wg1 speed is unknown, defaulting to 1000 [ 1504.308956][T24171] tipc: Enabled bearer , priority 0 [ 1504.344151][T24171] syzkaller0: entered promiscuous mode [ 1504.352885][T24171] syzkaller0: entered allmulticast mode [ 1504.401090][T24178] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1504.483678][T24177] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1504.622865][T24183] tipc: Resetting bearer [ 1504.794517][T24183] tipc: Resetting bearer [ 1504.878634][T24183] tipc: Disabling bearer [ 1504.912912][T24122] wg1 speed is unknown, defaulting to 1000 [ 1505.075388][T24202] ip6_vti0 speed is unknown, defaulting to 1000 [ 1505.301697][T24214] __nla_validate_parse: 145 callbacks suppressed [ 1505.301722][T24214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10548'. [ 1505.392341][T24217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10549'. [ 1505.407875][T24217] FAULT_INJECTION: forcing a failure. [ 1505.407875][T24217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1505.437991][T24217] CPU: 0 UID: 0 PID: 24217 Comm: syz.1.10549 Not tainted syzkaller #0 PREEMPT(full) [ 1505.438039][T24217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1505.438064][T24217] Call Trace: [ 1505.438071][T24217] [ 1505.438081][T24217] dump_stack_lvl+0xe8/0x150 [ 1505.438110][T24217] should_fail_ex+0x412/0x560 [ 1505.438138][T24217] _copy_to_user+0x31/0xb0 [ 1505.438164][T24217] simple_read_from_buffer+0xe1/0x170 [ 1505.438189][T24217] proc_fail_nth_read+0x1bb/0x230 [ 1505.438216][T24217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1505.438242][T24217] ? rw_verify_area+0x2a6/0x4d0 [ 1505.438265][T24217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1505.438289][T24217] vfs_read+0x20c/0xa70 [ 1505.438309][T24217] ? fdget_pos+0x246/0x320 [ 1505.438332][T24217] ? __pfx___mutex_lock+0x10/0x10 [ 1505.438356][T24217] ? __pfx_vfs_read+0x10/0x10 [ 1505.438380][T24217] ? __fget_files+0x2a/0x420 [ 1505.438403][T24217] ? __fget_files+0x3a0/0x420 [ 1505.438420][T24217] ? __fget_files+0x2a/0x420 [ 1505.438448][T24217] ksys_read+0x150/0x270 [ 1505.438473][T24217] ? __pfx_ksys_read+0x10/0x10 [ 1505.438507][T24217] do_syscall_64+0xe2/0xf80 [ 1505.438529][T24217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.438545][T24217] ? trace_irq_disable+0x37/0x100 [ 1505.438562][T24217] ? clear_bhb_loop+0x60/0xb0 [ 1505.438583][T24217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.438601][T24217] RIP: 0033:0x7f3567f5b78e [ 1505.438618][T24217] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1505.438633][T24217] RSP: 002b:00007f3568dd9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1505.438653][T24217] RAX: ffffffffffffffda RBX: 00007f3568dda6c0 RCX: 00007f3567f5b78e [ 1505.438667][T24217] RDX: 000000000000000f RSI: 00007f3568dda0a0 RDI: 0000000000000004 [ 1505.438678][T24217] RBP: 00007f3568dda090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.438690][T24217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1505.438708][T24217] R13: 00007f3568216038 R14: 00007f3568215fa0 R15: 00007ffd760eae28 [ 1505.438739][T24217] [ 1505.772328][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 270 seconds [ 1505.917241][T24228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10550'. [ 1506.096721][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10551'. [ 1506.115928][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10551'. [ 1506.129002][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10551'. [ 1506.145755][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10551'. [ 1506.240472][T24240] netlink: 'syz.3.10552': attribute type 4 has an invalid length. [ 1506.252397][T24239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10553'. [ 1506.262349][T24241] netlink: 'syz.3.10552': attribute type 4 has an invalid length. [ 1506.297227][T24246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10554'. [ 1506.342780][T24239] bond0: Invalid ad_actor_system MAC address. [ 1506.350233][T24239] bond0: option ad_actor_system: invalid value (7) [ 1506.373326][T24239] bond0 (unregistering): Released all slaves [ 1506.555581][T24202] wg1 speed is unknown, defaulting to 1000 [ 1506.966493][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1506.966612][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1507.007805][T24273] tipc: Enabled bearer , priority 0 [ 1507.036795][T24280] syzkaller0: entered promiscuous mode [ 1507.042421][T24280] syzkaller0: entered allmulticast mode [ 1507.082386][T24273] tipc: Resetting bearer [ 1507.098364][T24285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10563'. [ 1507.119070][T24271] tipc: Resetting bearer [ 1507.162718][T24271] tipc: Disabling bearer [ 1508.055654][T24332] netlink: 'syz.3.10577': attribute type 1 has an invalid length. [ 1508.343083][T24353] ip6_vti0 speed is unknown, defaulting to 1000 [ 1508.395027][T24347] netlink: 'syz.3.10581': attribute type 4 has an invalid length. [ 1508.950003][T24337] lec:lec_atm_close: lec0: Shut down! [ 1509.055217][T24378] netpci0: tun_chr_ioctl cmd 2149341215 [ 1509.074122][T24378] netpci0: tun_chr_ioctl cmd 1074025678 [ 1509.093441][T24378] netpci0: group set to 0 [ 1509.102014][T24378] netpci0: tun_chr_ioctl cmd 1074328848 [ 1509.136792][T24380] netlink: 'syz.0.10589': attribute type 1 has an invalid length. [ 1509.161718][T24380] netlink: 'syz.0.10589': attribute type 1 has an invalid length. [ 1509.177644][T24380] netlink: 'syz.0.10589': attribute type 1 has an invalid length. [ 1509.185713][T24380] netlink: 'syz.0.10589': attribute type 1 has an invalid length. [ 1509.209638][T24380] netlink: 'syz.0.10589': attribute type 1 has an invalid length. [ 1509.431811][ T30] audit: type=1800 audit(1770552671.729:28): pid=24394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10594" name="memory.events" dev="tmpfs" ino=1455 res=0 errno=0 [ 1509.439536][T24392] pim6reg99999999: entered allmulticast mode [ 1509.473023][T24353] wg1 speed is unknown, defaulting to 1000 [ 1509.483408][ T30] audit: type=1804 audit(1770552671.729:29): pid=24394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.10594" name="/newroot/282/memory.events" dev="tmpfs" ino=1455 res=1 errno=0 [ 1509.591984][T24407] netlink: 'syz.1.10597': attribute type 1 has an invalid length. [ 1509.639649][T24410] openvswitch: netlink: IP tunnel dst address not specified [ 1509.797661][T24412] bond0: (slave bridge5): making interface the new active one [ 1509.806116][T24412] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 1509.974199][T24404] syzkaller1: entered promiscuous mode [ 1509.989533][T24404] syzkaller1: entered allmulticast mode [ 1510.186883][T24447] xt_hashlimit: size too large, truncated to 1048576 [ 1510.273730][T24448] bridge_slave_0 (unregistering): left allmulticast mode [ 1510.340910][T24448] bridge_slave_0 (unregistering): left promiscuous mode [ 1510.372277][T24451] No such timeout policy "syz1" [ 1510.389130][T24448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.410707][T24456] __nla_validate_parse: 13 callbacks suppressed [ 1510.410729][T24456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10607'. [ 1510.618533][T24454] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1510.634106][T24454] bond3 (unregistering): Released all slaves [ 1510.684460][T24456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10607'. [ 1510.694814][T24456] tipc: Enabling of bearer rejected, failed to enable media [ 1510.924828][T24476] pim6reg: entered allmulticast mode [ 1510.954201][T24475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10609'. [ 1510.954201][T24472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10609'. [ 1511.050370][T24475] bond6: entered allmulticast mode [ 1511.105292][T24486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10614'. [ 1511.115702][T24486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10614'. [ 1511.284078][T24497] sit0: entered promiscuous mode [ 1511.292865][T24497] netlink: 'syz.1.10618': attribute type 1 has an invalid length. [ 1511.301079][T24497] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10618'. [ 1511.367640][T24500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1511.389198][T24504] xfrm0: entered promiscuous mode [ 1511.404581][T24504] xfrm0: entered allmulticast mode [ 1511.430413][T24509] netlink: 'syz.1.10622': attribute type 1 has an invalid length. [ 1511.606191][T24523] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 1511.615540][T24523] openvswitch: netlink: Message has 8 unknown bytes. [ 1511.802717][T24539] syzkaller0: entered promiscuous mode [ 1511.809169][T24539] syzkaller0: entered allmulticast mode [ 1512.015695][T24551] IPVS: set_ctl: invalid protocol: 51 172.30.0.4:20003 [ 1512.099310][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 276 seconds [ 1512.150413][T24559] netlink: 76 bytes leftover after parsing attributes in process `syz.0.10635'. [ 1512.381392][T24578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10642'. [ 1512.497073][T24582] netlink: 'syz.1.10640': attribute type 9 has an invalid length. [ 1512.510318][T24586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10644'. [ 1512.680444][T24603] x_tables: duplicate underflow at hook 1 [ 1513.041788][T24628] delete_channel: no stack [ 1513.957306][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1513.965491][ C0] lec:lec_tx_timeout: lec0 [ 1514.855131][T24723] bond5: entered promiscuous mode [ 1514.911405][T24727] vcan2: entered promiscuous mode [ 1514.936413][T24727] vcan2: entered allmulticast mode [ 1514.949860][T24727] bond5: (slave vcan2): The slave device specified does not support setting the MAC address [ 1515.000738][T24727] bond5: (slave vcan2): Error -95 calling set_mac_address [ 1515.494605][T24753] __nla_validate_parse: 8 callbacks suppressed [ 1515.494629][T24753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10690'. [ 1515.561697][T24757] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10692'. [ 1515.579526][T24758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10691'. [ 1515.612154][T24760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10693'. [ 1515.785316][T24769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10696'. [ 1515.898039][T24769] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1515.915868][T24775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10697'. [ 1515.971508][T24775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10697'. [ 1515.991884][T24764] netlink: 'syz.1.10694': attribute type 62 has an invalid length. [ 1516.016033][T24776] bond6: option miimon: invalid value (18446744071562067968) [ 1516.047571][T24776] bond6: option miimon: allowed values 0 - 2147483647 [ 1516.061806][ T5486] veth0_macvtap: left promiscuous mode [ 1516.131332][T24774] ip6_vti0 speed is unknown, defaulting to 1000 [ 1516.200571][T24789] netlink: 'syz.3.10698': attribute type 7 has an invalid length. [ 1516.222460][T24789] netlink: 'syz.3.10698': attribute type 8 has an invalid length. [ 1516.304461][T24794] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10699'. [ 1516.373914][T24793] bond6: Unable to set up delay as MII monitoring is disabled [ 1516.402073][T24793] bond6 (unregistering): Released all slaves [ 1516.872891][T24805] ip6_vti0 speed is unknown, defaulting to 1000 [ 1516.899584][T24808] netlink: 'syz.4.10703': attribute type 1 has an invalid length. [ 1516.913001][T24808] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10703'. [ 1516.938488][T24808] netlink: 'syz.4.10703': attribute type 1 has an invalid length. [ 1516.962766][T24808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10703'. [ 1517.309603][T24774] wg1 speed is unknown, defaulting to 1000 [ 1517.705618][T24805] wg1 speed is unknown, defaulting to 1000 [ 1518.489938][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 282 seconds [ 1518.840112][T24869] netlink: 'syz.0.10715': attribute type 8 has an invalid length. [ 1519.026112][T24873] bond3: entered promiscuous mode [ 1519.035891][T24873] bond3: entered allmulticast mode [ 1519.043270][T24873] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1520.276137][T24938] lo: entered allmulticast mode [ 1520.299680][T24938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1520.325725][T24933] netlink: 'syz.3.10736': attribute type 1 has an invalid length. [ 1520.710427][T24971] netlink: 'syz.2.10745': attribute type 5 has an invalid length. [ 1520.828912][T24975] __nla_validate_parse: 5 callbacks suppressed [ 1520.828932][T24975] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10747'. [ 1521.018778][T24990] syzkaller0: entered promiscuous mode [ 1521.024313][T24990] syzkaller0: entered allmulticast mode [ 1521.040722][T24993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10752'. [ 1521.240438][T24991] ip6_vti0 speed is unknown, defaulting to 1000 [ 1521.255880][T25002] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10755'. [ 1521.275984][T24998] netlink: 348 bytes leftover after parsing attributes in process `syz.1.10753'. [ 1521.518370][T25016] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10758'. [ 1521.747622][T25025] netlink: 'syz.4.10763': attribute type 1 has an invalid length. [ 1521.748739][T25023] ip6_vti0 speed is unknown, defaulting to 1000 [ 1521.833606][T25025] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1521.877879][T25031] batman_adv: batadv0: Interface deactivated: dummy0 [ 1521.890254][T25031] batman_adv: batadv0: Removing interface: dummy0 [ 1521.911320][T25031] bond7: (slave dummy0): making interface the new active one [ 1521.938501][T25031] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1521.978950][T25032] netlink: 632 bytes leftover after parsing attributes in process `syz.2.10764'. [ 1522.116023][T25036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10766'. [ 1522.201867][T25040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10767'. [ 1522.224202][T24991] wg1 speed is unknown, defaulting to 1000 [ 1522.337486][T25046] netlink: 184916 bytes leftover after parsing attributes in process `syz.2.10765'. [ 1522.349520][T25042] syzkaller1: entered promiscuous mode [ 1522.350127][T25046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10765'. [ 1522.355379][T25042] syzkaller1: entered allmulticast mode [ 1522.788633][T25066] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1522.819004][T25023] wg1 speed is unknown, defaulting to 1000 [ 1523.606528][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1523.855908][T16988] udevd[16988]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1524.459426][T25127] bond4: entered promiscuous mode [ 1524.471846][T25129] vcan1: entered promiscuous mode [ 1524.481646][T25129] vcan1: entered allmulticast mode [ 1524.489856][T25129] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 1524.524603][T25129] bond4: (slave vcan1): Error -95 calling set_mac_address [ 1524.788142][T25151] netlink: 'syz.0.10798': attribute type 1 has an invalid length. [ 1524.809258][T25151] netlink: 'syz.0.10798': attribute type 2 has an invalid length. [ 1524.818460][T25151] netlink: 'syz.0.10798': attribute type 1 has an invalid length. [ 1524.886988][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1524.905407][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 288 seconds [ 1526.970213][T25110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1527.267794][T25187] __nla_validate_parse: 15 callbacks suppressed [ 1527.267819][T25187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10808'. [ 1527.530878][T25197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10810'. [ 1527.540722][T25197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10810'. [ 1527.551451][T25197] netlink: 58 bytes leftover after parsing attributes in process `syz.1.10810'. [ 1527.664429][T25212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10814'. [ 1527.674291][T25207] ip6_vti0 speed is unknown, defaulting to 1000 [ 1527.753300][T25214] netlink: 'syz.2.10815': attribute type 29 has an invalid length. [ 1527.772638][T25214] netlink: 'syz.2.10815': attribute type 29 has an invalid length. [ 1527.815645][T25214] netlink: 500 bytes leftover after parsing attributes in process `syz.2.10815'. [ 1528.052328][T25207] wg1 speed is unknown, defaulting to 1000 [ 1528.143585][T25220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10818'. [ 1528.226949][T25220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10818'. [ 1528.605158][T25249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10823'. [ 1528.723180][T25255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10826'. [ 1528.726103][T25239] syzkaller0: entered promiscuous mode [ 1528.757368][T25239] syzkaller0: entered allmulticast mode [ 1528.971111][T25259] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1531.289696][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 294 seconds [ 1532.188553][T25271] erspan0: entered promiscuous mode [ 1532.410275][T25290] syzkaller0: entered promiscuous mode [ 1532.423313][T25290] syzkaller0: entered allmulticast mode [ 1532.458546][T25290] __nla_validate_parse: 2 callbacks suppressed [ 1532.458568][T25290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10834'. [ 1532.465261][T25297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10838'. [ 1532.525743][T25299] netlink: 'syz.1.10837': attribute type 1 has an invalid length. [ 1532.535745][T25299] netlink: 'syz.1.10837': attribute type 2 has an invalid length. [ 1532.574025][T25299] netlink: 'syz.1.10837': attribute type 1 has an invalid length. [ 1532.607361][T25304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10839'. [ 1532.617540][T25299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10837'. [ 1532.800089][T25311] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1532.855068][T25314] syzkaller1: entered promiscuous mode [ 1532.868981][T25314] syzkaller1: entered allmulticast mode [ 1533.237813][T25335] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.10848'. [ 1533.247352][T25335] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1533.325150][T25342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10850'. [ 1533.389781][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10851'. [ 1533.432567][T25349] netlink: 'syz.1.10853': attribute type 1 has an invalid length. [ 1533.452295][T25347] x_tables: duplicate underflow at hook 2 [ 1533.464613][T25349] netlink: 'syz.1.10853': attribute type 2 has an invalid length. [ 1533.484591][T25349] netlink: 'syz.1.10853': attribute type 1 has an invalid length. [ 1533.499082][T25353] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10854'. [ 1533.504914][T25349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10853'. [ 1533.691089][T25373] netlink: 43 bytes leftover after parsing attributes in process `syz.4.10859'. [ 1533.730928][T25373] IPv6: sit1: Disabled Multicast RS [ 1533.738162][T25373] sit1: entered allmulticast mode [ 1533.822131][T25377] netlink: 'syz.4.10860': attribute type 6 has an invalid length. [ 1533.830500][T25377] netlink: 'syz.4.10860': attribute type 5 has an invalid length. [ 1533.903408][T25377] netlink: 'syz.4.10860': attribute type 4 has an invalid length. [ 1533.968881][T25390] netlink: 'syz.4.10860': attribute type 4 has an invalid length. [ 1534.302779][T25402] netlink: 'syz.4.10868': attribute type 1 has an invalid length. [ 1534.337429][T25402] netlink: 'syz.4.10868': attribute type 2 has an invalid length. [ 1534.361746][T25402] netlink: 'syz.4.10868': attribute type 1 has an invalid length. [ 1534.385886][T25404] FAULT_INJECTION: forcing a failure. [ 1534.385886][T25404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1534.501987][T25404] CPU: 0 UID: 0 PID: 25404 Comm: syz.0.10869 Not tainted syzkaller #0 PREEMPT(full) [ 1534.502015][T25404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1534.502027][T25404] Call Trace: [ 1534.502037][T25404] [ 1534.502045][T25404] dump_stack_lvl+0xe8/0x150 [ 1534.502074][T25404] should_fail_ex+0x412/0x560 [ 1534.502128][T25404] _copy_from_user+0x2d/0xb0 [ 1534.502165][T25404] ___sys_sendmsg+0x1c6/0x360 [ 1534.502189][T25404] ? __lock_acquire+0x6b5/0x2cf0 [ 1534.502216][T25404] ? __pfx____sys_sendmsg+0x10/0x10 [ 1534.502245][T25404] ? kstrtouint+0x6e/0xe0 [ 1534.502289][T25404] ? __fget_files+0x2a/0x420 [ 1534.502308][T25404] ? __fget_files+0x3a0/0x420 [ 1534.502337][T25404] __sys_sendmmsg+0x27c/0x4e0 [ 1534.502365][T25404] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1534.502385][T25404] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1534.502433][T25404] ? ksys_write+0x242/0x270 [ 1534.502459][T25404] ? __pfx_ksys_write+0x10/0x10 [ 1534.502488][T25404] __x64_sys_sendmmsg+0xa0/0xc0 [ 1534.502513][T25404] do_syscall_64+0xe2/0xf80 [ 1534.502535][T25404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.502553][T25404] ? trace_irq_disable+0x37/0x100 [ 1534.502570][T25404] ? clear_bhb_loop+0x60/0xb0 [ 1534.502591][T25404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.502609][T25404] RIP: 0033:0x7f62db39aeb9 [ 1534.502626][T25404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.502642][T25404] RSP: 002b:00007f62dc184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1534.502662][T25404] RAX: ffffffffffffffda RBX: 00007f62db615fa0 RCX: 00007f62db39aeb9 [ 1534.502676][T25404] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1534.502689][T25404] RBP: 00007f62dc184090 R08: 0000000000000000 R09: 0000000000000000 [ 1534.502700][T25404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1534.502711][T25404] R13: 00007f62db616038 R14: 00007f62db615fa0 R15: 00007fff4b468978 [ 1534.502742][T25404] [ 1534.723402][T14404] lec:lec_start_xmit: lec0:No lecd attached [ 1535.022828][T25424] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1535.232896][T25427] NCSI netlink: No device for ifindex 813332851 [ 1535.725239][T25461] team0: Device ipvlan1 failed to register rx_handler [ 1536.463142][T25489] bridge_slave_0: left allmulticast mode [ 1536.469206][T25489] bridge_slave_0: left promiscuous mode [ 1536.475203][T25489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.508135][T25491] FAULT_INJECTION: forcing a failure. [ 1536.508135][T25491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1536.539150][T25491] CPU: 1 UID: 0 PID: 25491 Comm: syz.2.10895 Not tainted syzkaller #0 PREEMPT(full) [ 1536.539177][T25491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1536.539189][T25491] Call Trace: [ 1536.539197][T25491] [ 1536.539205][T25491] dump_stack_lvl+0xe8/0x150 [ 1536.539230][T25491] should_fail_ex+0x412/0x560 [ 1536.539256][T25491] _copy_from_iter+0x1d3/0x1670 [ 1536.539287][T25491] ? rcu_is_watching+0x15/0xb0 [ 1536.539306][T25491] ? __pfx__copy_from_iter+0x10/0x10 [ 1536.539325][T25491] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 1536.539354][T25491] ? netlink_sendmsg+0x650/0xb40 [ 1536.539370][T25491] ? skb_put+0x11b/0x210 [ 1536.539390][T25491] netlink_sendmsg+0x6c0/0xb40 [ 1536.539414][T25491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.539433][T25491] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1536.539453][T25491] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1536.539474][T25491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.539491][T25491] ____sys_sendmsg+0xa68/0xad0 [ 1536.539513][T25491] ? __might_fault+0xaf/0x130 [ 1536.539538][T25491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1536.539565][T25491] ? import_iovec+0x73/0xa0 [ 1536.539590][T25491] ___sys_sendmsg+0x2a5/0x360 [ 1536.539611][T25491] ? __lock_acquire+0x6b5/0x2cf0 [ 1536.539636][T25491] ? __pfx____sys_sendmsg+0x10/0x10 [ 1536.539660][T25491] ? kstrtouint+0x6e/0xe0 [ 1536.539702][T25491] ? __fget_files+0x2a/0x420 [ 1536.539721][T25491] ? __fget_files+0x3a0/0x420 [ 1536.539748][T25491] __sys_sendmmsg+0x27c/0x4e0 [ 1536.539776][T25491] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1536.539795][T25491] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1536.539843][T25491] ? ksys_write+0x242/0x270 [ 1536.539876][T25491] ? __pfx_ksys_write+0x10/0x10 [ 1536.539904][T25491] __x64_sys_sendmmsg+0xa0/0xc0 [ 1536.539928][T25491] do_syscall_64+0xe2/0xf80 [ 1536.539950][T25491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.539965][T25491] ? trace_irq_disable+0x37/0x100 [ 1536.539982][T25491] ? clear_bhb_loop+0x60/0xb0 [ 1536.540002][T25491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.540019][T25491] RIP: 0033:0x7faace19aeb9 [ 1536.540036][T25491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.540051][T25491] RSP: 002b:00007faacf0fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1536.540071][T25491] RAX: ffffffffffffffda RBX: 00007faace415fa0 RCX: 00007faace19aeb9 [ 1536.540084][T25491] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1536.540097][T25491] RBP: 00007faacf0fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.540108][T25491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1536.540119][T25491] R13: 00007faace416038 R14: 00007faace415fa0 R15: 00007fffb50bbd08 [ 1536.540148][T25491] [ 1536.545672][T25489] team0: Port device team_slave_0 removed [ 1536.856226][T25489] team0: Port device team_slave_1 removed [ 1536.864407][T25489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1536.972547][T25504] bond7: (slave dummy0): Releasing active interface [ 1536.990904][T25504] team0: Port device dummy0 added [ 1537.060683][T25504] team0: Port device dummy0 removed [ 1537.081985][T25504] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1537.240648][T25524] No such timeout policy "syz0" [ 1537.561919][T25541] __nla_validate_parse: 20 callbacks suppressed [ 1537.561940][T25541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10909'. [ 1537.684231][T25549] ip6_vti0 speed is unknown, defaulting to 1000 [ 1537.694255][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 300 seconds [ 1539.926396][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 1539.934654][ C0] lec:lec_tx_timeout: lec0 [ 1541.273598][T25594] validate_nla: 17 callbacks suppressed [ 1541.273617][T25594] netlink: 'syz.2.10922': attribute type 5 has an invalid length. [ 1541.518282][T25607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10924'. [ 1541.549633][T25549] wg1 speed is unknown, defaulting to 1000 [ 1541.594269][T25611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10928'. [ 1541.751917][T25618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10930'. [ 1541.781889][T25623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10932'. [ 1541.886167][T25627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10933'. [ 1542.057112][T25638] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10934'. [ 1542.334024][T25654] netlink: 'syz.2.10940': attribute type 16 has an invalid length. [ 1542.355196][T25654] netlink: 'syz.2.10940': attribute type 3 has an invalid length. [ 1542.377616][T25654] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.10940'. [ 1542.399378][T25658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10941'. [ 1542.423210][T25654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10940'. [ 1542.437614][T25658] FAULT_INJECTION: forcing a failure. [ 1542.437614][T25658] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.467857][T25658] CPU: 0 UID: 0 PID: 25658 Comm: syz.0.10941 Not tainted syzkaller #0 PREEMPT(full) [ 1542.467885][T25658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1542.467897][T25658] Call Trace: [ 1542.467904][T25658] [ 1542.467913][T25658] dump_stack_lvl+0xe8/0x150 [ 1542.467941][T25658] should_fail_ex+0x412/0x560 [ 1542.467969][T25658] should_failslab+0xa8/0x100 [ 1542.467991][T25658] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1542.468017][T25658] ? skb_clone+0x212/0x3a0 [ 1542.468045][T25658] skb_clone+0x212/0x3a0 [ 1542.468071][T25658] __netlink_deliver_tap+0x404/0x850 [ 1542.468104][T25658] ? netlink_deliver_tap+0x2e/0x1b0 [ 1542.468125][T25658] netlink_deliver_tap+0x19c/0x1b0 [ 1542.468146][T25658] netlink_sendskb+0x68/0x140 [ 1542.468165][T25658] netlink_unicast+0x3a3/0x9b0 [ 1542.468191][T25658] ? __pfx_netlink_unicast+0x10/0x10 [ 1542.468220][T25658] netlink_rcv_skb+0x2b6/0x4b0 [ 1542.468241][T25658] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1542.468264][T25658] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1542.468295][T25658] ? netlink_deliver_tap+0x2e/0x1b0 [ 1542.468322][T25658] netlink_unicast+0x80f/0x9b0 [ 1542.468349][T25658] ? __pfx_netlink_unicast+0x10/0x10 [ 1542.468369][T25658] ? netlink_sendmsg+0x650/0xb40 [ 1542.468387][T25658] ? skb_put+0x11b/0x210 [ 1542.468418][T25658] netlink_sendmsg+0x813/0xb40 [ 1542.468447][T25658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1542.468470][T25658] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1542.468493][T25658] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1542.468518][T25658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1542.468536][T25658] ____sys_sendmsg+0xa68/0xad0 [ 1542.468559][T25658] ? __might_fault+0xaf/0x130 [ 1542.468588][T25658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1542.468618][T25658] ? import_iovec+0x73/0xa0 [ 1542.468660][T25658] ___sys_sendmsg+0x2a5/0x360 [ 1542.468680][T25658] ? __lock_acquire+0x6b5/0x2cf0 [ 1542.468705][T25658] ? __pfx____sys_sendmsg+0x10/0x10 [ 1542.468732][T25658] ? kstrtouint+0x6e/0xe0 [ 1542.468778][T25658] ? __fget_files+0x2a/0x420 [ 1542.468797][T25658] ? __fget_files+0x3a0/0x420 [ 1542.468825][T25658] __sys_sendmmsg+0x27c/0x4e0 [ 1542.468854][T25658] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1542.468874][T25658] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1542.468923][T25658] ? ksys_write+0x242/0x270 [ 1542.468949][T25658] ? __pfx_ksys_write+0x10/0x10 [ 1542.468979][T25658] __x64_sys_sendmmsg+0xa0/0xc0 [ 1542.469004][T25658] do_syscall_64+0xe2/0xf80 [ 1542.469026][T25658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.469042][T25658] ? trace_irq_disable+0x37/0x100 [ 1542.469059][T25658] ? clear_bhb_loop+0x60/0xb0 [ 1542.469079][T25658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.469097][T25658] RIP: 0033:0x7f62db39aeb9 [ 1542.469114][T25658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1542.469129][T25658] RSP: 002b:00007f62dc184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1542.469149][T25658] RAX: ffffffffffffffda RBX: 00007f62db615fa0 RCX: 00007f62db39aeb9 [ 1542.469162][T25658] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1542.469174][T25658] RBP: 00007f62dc184090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.469185][T25658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.469196][T25658] R13: 00007f62db616038 R14: 00007f62db615fa0 R15: 00007fff4b468978 [ 1542.469226][T25658] [ 1542.873795][T25666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10944'. [ 1543.140437][T25684] openvswitch: netlink: Message has 572 unknown bytes. [ 1543.173272][T25684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1543.562858][T25708] syzkaller0: entered promiscuous mode [ 1543.570375][T25708] syzkaller0: entered allmulticast mode [ 1543.730497][T25716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10955'. [ 1543.791382][T25718] batman_adv: batadv0: Removing interface: macvlan1 [ 1543.894520][T25730] netlink: 'syz.2.10959': attribute type 1 has an invalid length. [ 1543.905288][T25730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10959'. [ 1543.918541][T25729] netlink: 'syz.2.10959': attribute type 1 has an invalid length. [ 1543.930798][T25729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10959'. [ 1544.013768][T25738] netlink: 'syz.4.10961': attribute type 3 has an invalid length. [ 1544.050069][T25738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10961'. [ 1544.113891][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 306 seconds [ 1544.167464][T25745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10963'. [ 1544.304570][T25757] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10967'. [ 1544.358680][T25757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10967'. [ 1545.348644][T25772] netlink: 'syz.2.10972': attribute type 21 has an invalid length. [ 1545.377427][T25777] netlink: 'syz.2.10972': attribute type 21 has an invalid length. [ 1545.764696][T25803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10981'. [ 1545.898188][T25810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1545.908098][T25810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.934278][T25802] delete_channel: no stack [ 1545.935317][T25814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10980'. [ 1545.952815][T25799] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1545.975157][T25809] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1546.001775][T25813] syzkaller0: entered promiscuous mode [ 1546.016186][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1546.024432][T25813] syzkaller0: entered allmulticast mode [ 1546.119494][T25819] netlink: 'syz.0.10985': attribute type 1 has an invalid length. [ 1546.132659][T25819] netlink: 'syz.0.10985': attribute type 2 has an invalid length. [ 1546.368120][T25835] validate_nla: 1 callbacks suppressed [ 1546.368140][T25835] netlink: 'syz.0.10990': attribute type 10 has an invalid length. [ 1546.520908][T25843] ip6_vti0 speed is unknown, defaulting to 1000 [ 1546.849120][T25864] netlink: 'syz.3.11000': attribute type 1 has an invalid length. [ 1546.885704][T25864] netlink: 'syz.3.11000': attribute type 2 has an invalid length. [ 1546.899977][T25864] netlink: 'syz.3.11000': attribute type 1 has an invalid length. [ 1547.020499][T25872] netlink: 'syz.3.11003': attribute type 15 has an invalid length. [ 1547.110883][T25874] bridge0: port 4(batadv1) entered blocking state [ 1547.129626][T25874] bridge0: port 4(batadv1) entered disabled state [ 1547.138547][T25874] batadv1: entered allmulticast mode [ 1547.152867][T25874] batadv1: entered promiscuous mode [ 1547.174622][T25875] bridge0: port 5(batadv2) entered blocking state [ 1547.186758][T25875] bridge0: port 5(batadv2) entered disabled state [ 1547.200626][T25875] batadv2: entered allmulticast mode [ 1547.212012][T25875] batadv2: entered promiscuous mode [ 1547.598813][ T3020] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1547.608508][ T3020] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1547.634119][T25898] netlink: 'syz.4.11013': attribute type 1 has an invalid length. [ 1547.677002][ T3020] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1547.677113][T25898] netlink: 'syz.4.11013': attribute type 2 has an invalid length. [ 1547.686642][ T3020] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1547.723193][T25898] netlink: 'syz.4.11013': attribute type 1 has an invalid length. [ 1547.755596][T25843] wg1 speed is unknown, defaulting to 1000 [ 1547.937699][T25887] __nla_validate_parse: 11 callbacks suppressed [ 1547.937720][T25887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11009'. [ 1548.769691][T25935] netlink: 'syz.1.11024': attribute type 1 has an invalid length. [ 1548.780690][T25935] netlink: 'syz.1.11024': attribute type 2 has an invalid length. [ 1548.791053][T25935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11024'. [ 1548.938949][T25948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11027'. [ 1549.050712][T25955] tipc: Enabled bearer , priority 0 [ 1549.059808][T25955] syzkaller0: entered promiscuous mode [ 1549.065346][T25955] syzkaller0: entered allmulticast mode [ 1549.139519][T25955] tipc: Resetting bearer [ 1549.161287][T25953] tipc: Resetting bearer [ 1549.253099][T25953] tipc: Disabling bearer [ 1549.344792][T25972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11037'. [ 1549.577521][T25993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11042'. [ 1549.818480][T26015] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11047'. [ 1550.018210][T26025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11049'. [ 1550.141487][T26037] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11054'. [ 1550.154498][T26037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11054'. [ 1550.467596][T26056] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11057'. [ 1550.500096][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 312 seconds [ 1550.631866][T26065] tipc: Enabled bearer , priority 0 [ 1550.643523][T26065] syzkaller0: entered promiscuous mode [ 1550.647192][T26072] openvswitch: netlink: Key type 30 is not supported [ 1550.668086][T26065] syzkaller0: entered allmulticast mode [ 1550.720410][T26077] bridge0: port 1(batadv0) entered blocking state [ 1550.730648][T26077] bridge0: port 1(batadv0) entered disabled state [ 1550.738725][T26077] batadv0: entered allmulticast mode [ 1550.749010][T26077] batadv0: entered promiscuous mode [ 1550.777126][T26065] tipc: Resetting bearer [ 1550.803473][T26063] tipc: Resetting bearer [ 1550.869838][T26086] xt_ecn: cannot match TCP bits for non-tcp packets [ 1550.899854][T26063] tipc: Disabling bearer [ 1550.992747][T26089] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1551.027366][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1551.035593][ C0] lec:lec_tx_timeout: lec0 [ 1551.087713][T26099] geneve2: entered promiscuous mode [ 1551.093156][T26099] geneve2: entered allmulticast mode [ 1551.228795][ T1868] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1551.239200][ T1868] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1552.090505][T26164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1553.074162][T26218] __nla_validate_parse: 53 callbacks suppressed [ 1553.074175][T26218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11111'. [ 1553.173974][T26221] netlink: 176 bytes leftover after parsing attributes in process `syz.1.11112'. [ 1553.272714][T26227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11115'. [ 1553.362772][T26231] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11116'. [ 1553.441156][T26237] validate_nla: 12 callbacks suppressed [ 1553.441183][T26237] netlink: 'syz.4.11117': attribute type 3 has an invalid length. [ 1553.468425][T26237] netlink: 'syz.4.11117': attribute type 1 has an invalid length. [ 1553.483479][T26237] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11117'. [ 1553.495697][T26237] NCSI netlink: No device for ifindex 65572 [ 1553.606896][T26245] batadv_slave_0: entered promiscuous mode [ 1553.638606][T26247] batadv_slave_0: left promiscuous mode [ 1553.846996][T26259] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11125'. [ 1553.940814][T26266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11125'. [ 1553.950317][T26266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11125'. [ 1554.094369][T26276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11125'. [ 1554.297262][T26259] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 1554.644886][T26304] bond5 (unregistering): Released all slaves [ 1554.814710][T26310] syzkaller0: entered promiscuous mode [ 1554.840006][T26310] syzkaller0: entered allmulticast mode [ 1555.152715][T26332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1555.241139][T26338] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11144'. [ 1555.327770][T26344] Bluetooth: MGMT ver 1.23 [ 1555.612316][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1556.923530][T20512] block nbd3: Possible stuck request ffff888025378000: control (read@0,4096B). Runtime 318 seconds [ 1558.152317][T26340] pimreg: entered allmulticast mode [ 1558.306494][T26348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1558.488506][T26359] syzkaller0: entered promiscuous mode [ 1558.495983][T26359] syzkaller0: entered allmulticast mode [ 1558.778431][T26384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11160'. [ 1558.806592][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1558.957240][T26393] netlink: 'syz.2.11163': attribute type 21 has an invalid length. [ 1558.987434][T26393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11163'. [ 1559.100708][T26396] ip6_vti0 speed is unknown, defaulting to 1000 [ 1559.346646][T26413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11168'. [ 1559.742503][T26432] netlink: 'syz.0.11171': attribute type 29 has an invalid length. [ 1559.789045][T26432] netlink: 'syz.0.11171': attribute type 29 has an invalid length. [ 1559.891950][T26423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11169'. [ 1559.937066][T26441] netlink: 'syz.1.11172': attribute type 4 has an invalid length. [ 1559.953036][T26441] netlink: 17 bytes leftover after parsing attributes in process `syz.1.11172'. [ 1560.091507][ T31] INFO: task udevd:14288 blocked for more than 143 seconds. [ 1560.109741][ T31] Not tainted syzkaller #0 [ 1560.123900][ T31] Blocked by coredump. [ 1560.134403][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1560.163659][ T31] task:udevd state:D stack:23480 pid:14288 tgid:14288 ppid:5191 task_flags:0x40054c flags:0x00080003 [ 1560.205553][ T31] Call Trace: [ 1560.217163][ T31] [ 1560.226667][ T31] __schedule+0x14ea/0x5050 [ 1560.241562][ T31] ? lockdep_unlock+0x5d/0xd0 [ 1560.261620][ T31] ? __lock_acquire+0x146e/0x2cf0 [ 1560.282082][ T31] ? __pfx___schedule+0x10/0x10 [ 1560.299869][ T31] ? schedule+0x90/0x360 [ 1560.312157][ T31] schedule+0x164/0x360 [ 1560.319019][ T31] io_schedule+0x7f/0xd0 [ 1560.329305][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 1560.338110][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1560.350692][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1560.366477][ T31] ? __filemap_get_folio_mpol+0x81/0xb00 [ 1560.372401][ T31] __filemap_get_folio_mpol+0x13e/0xb00 [ 1560.383545][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 1560.392818][T26389] IPVS: set_ctl: invalid protocol: 60 100.1.0.255:20002 [ 1560.422041][ T31] truncate_inode_pages_range+0x48b/0xe30 [ 1560.428439][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1560.438871][ T31] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 1560.445531][ T31] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1560.452626][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1560.457818][ T31] ? __pfx_has_bh_in_lru+0x10/0x10 [ 1560.463177][ T31] blkdev_flush_mapping+0x109/0x2f0 [ 1560.468635][ T31] bdev_release+0x417/0x650 [ 1560.473311][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 1560.478772][ T31] blkdev_release+0x15/0x20 [ 1560.483573][ T31] __fput+0x44f/0xa70 [ 1560.492004][ T31] task_work_run+0x1d9/0x270 [ 1560.497345][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1560.502494][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1560.507891][ T31] do_exit+0x69b/0x2310 [ 1560.512188][ T31] ? cgroup1_freezing+0x20/0x350 [ 1560.517377][ T31] ? __pfx_do_exit+0x10/0x10 [ 1560.522080][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1560.527310][ T31] do_group_exit+0x21b/0x2d0 [ 1560.532366][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1560.537767][ T31] get_signal+0x1284/0x1330 [ 1560.542408][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 1560.548664][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1560.555013][ T31] ? ksys_read+0x1fc/0x270 [ 1560.559629][ T31] exit_to_user_mode_loop+0x86/0x480 [ 1560.564944][ T31] ? rcu_is_watching+0x15/0xb0 [ 1560.570026][ T31] do_syscall_64+0x2b7/0xf80 [ 1560.574670][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.580878][ T31] ? trace_irq_disable+0x37/0x100 [ 1560.585952][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1560.590774][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.597749][ T31] RIP: 0033:0x7f42486a7407 [ 1560.602330][ T31] RSP: 002b:00007ffc0eb2b200 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1560.610902][ T31] RAX: fffffffffffffffc RBX: 00007f4248dc7880 RCX: 00007f42486a7407 [ 1560.619350][ T31] RDX: 0000000000000200 RSI: 00007f4248dc6000 RDI: 0000000000000009 [ 1560.627528][ T31] RBP: 00005587757bc050 R08: 0000000000000000 R09: 0000000000000000 [ 1560.635689][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1560.643749][ T31] R13: 0000000000000000 R14: 00005587757bd638 R15: 00007f4248eee39c [ 1560.652547][ T31] [ 1560.655915][ T31] [ 1560.655915][ T31] Showing all locks held in the system: [ 1560.671223][ T31] 3 locks held by ksoftirqd/0/15: [ 1560.676479][ T31] 1 lock held by khungtaskd/31: [ 1560.681350][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1560.697364][ T31] 1 lock held by dhcpcd/5486: [ 1560.702190][ T31] #0: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 1560.714530][ T31] 2 locks held by getty/5579: [ 1560.719503][ T31] #0: ffff88814dfa50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1560.729916][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1560.740628][ T31] 3 locks held by kworker/u8:23/18686: [ 1560.746224][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1560.758694][ T31] #1: ffffc90003fffbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1560.770009][ T31] #2: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1560.779388][ T31] 3 locks held by kworker/u8:9/1868: [ 1560.784835][ T31] #0: ffff88814d8ad948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1560.797315][ T31] #1: ffffc9000dfb7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1560.810593][ T31] #2: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1560.821494][ T31] 1 lock held by udevd/14288: [ 1560.826173][ T31] #0: ffff8880251bf358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 1560.835965][ T31] 6 locks held by syz.2.11163/26396: [ 1560.841335][ T31] #0: ffffffff8f99d690 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1560.851221][ T31] #1: ffffffff8f7058d0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 1560.861450][ T31] #2: ffffffff8f705a90 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 1560.871717][ T31] #3: ffff888047d8cf98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 1560.882887][ T31] #4: ffff888047d8d290 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 1560.892879][ T31] #5: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 1560.902637][ T31] 1 lock held by syz.3.11169/26422: [ 1560.911167][ T31] #0: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1560.920327][ T31] 6 locks held by syz.3.11169/26426: [ 1560.925630][ T31] #0: ffffffff8f99d690 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1560.935118][ T31] #1: ffffffff8f7058d0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 1560.945165][ T31] #2: ffffffff8f705a90 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 1560.955192][ T31] #3: ffff88807a20cf98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 1560.966110][ T31] #4: ffff88807a20d290 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3d0 [ 1560.976076][ T31] #5: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 1560.985750][ T31] 2 locks held by syz.1.11172/26441: [ 1560.991179][ T31] #0: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1561.000335][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1561.011688][ T31] 2 locks held by syz.0.11176/26457: [ 1561.017434][ T31] #0: ffffffff8ff14dd8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1561.027138][ T31] #1: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1561.036232][ T31] 3 locks held by syz.0.11176/26459: [ 1561.041703][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1561.050135][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1561.059389][ T31] #2: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0xbc/0x9d0 [ 1561.068817][ T31] 2 locks held by syz.0.11176/26463: [ 1561.074108][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1561.082533][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1561.095369][ T31] [ 1561.100460][ T31] ============================================= [ 1561.100460][ T31] [ 1561.115947][ T31] NMI backtrace for cpu 1 [ 1561.115967][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1561.115982][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1561.115989][ T31] Call Trace: [ 1561.115994][ T31] [ 1561.115999][ T31] dump_stack_lvl+0xe8/0x150 [ 1561.116017][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1561.116030][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1561.116047][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1561.116060][ T31] sys_info+0x135/0x170 [ 1561.116070][ T31] watchdog+0xf90/0xfe0 [ 1561.116083][ T31] ? watchdog+0x209/0xfe0 [ 1561.116098][ T31] kthread+0x726/0x8b0 [ 1561.116119][ T31] ? __pfx_watchdog+0x10/0x10 [ 1561.116136][ T31] ? __pfx_kthread+0x10/0x10 [ 1561.116156][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1561.116175][ T31] ? __pfx_kthread+0x10/0x10 [ 1561.116192][ T31] ret_from_fork+0x51b/0xa40 [ 1561.116203][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1561.116218][ T31] ? __switch_to+0xc82/0x1410 [ 1561.116234][ T31] ? __pfx_kthread+0x10/0x10 [ 1561.116245][ T31] ret_from_fork_asm+0x1a/0x30 [ 1561.116276][ T31] [ 1561.231859][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1561.237415][ C0] NMI backtrace for cpu 0 [ 1561.237434][ C0] CPU: 0 UID: 0 PID: 16191 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full) [ 1561.237460][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1561.237471][ C0] Workqueue: kvfree_rcu_reclaim kfree_rcu_work [ 1561.237491][ C0] RIP: 0010:__lock_acquire+0x66e/0x2cf0 [ 1561.237513][ C0] Code: ee ba 05 00 00 00 eb 38 85 c9 74 19 31 ed 48 8b 7c 24 08 4c 89 ee 31 d2 e8 8f 44 00 00 85 c0 0f 84 c3 0d 00 00 48 8b 44 24 08 <83> b8 14 0b 00 00 00 74 1a 48 8b 7c 24 08 4c 89 ee ba 04 00 00 00 [ 1561.237526][ C0] RSP: 0018:ffffc90010a7f7f0 EFLAGS: 00000046 [ 1561.237539][ C0] RAX: ffff88803fd73d00 RBX: ffff88803fd748a0 RCX: 0000000000000000 [ 1561.237549][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1561.237559][ C0] RBP: ffff88803fd74880 R08: ffffffff820c965f R09: ffff8880b8734408 [ 1561.237570][ C0] R10: dffffc0000000000 R11: fffffbfff1fde92f R12: 00000000ffffff05 [ 1561.237581][ C0] R13: ffff88803fd74880 R14: ffff88803fd73d00 R15: 0000000000000002 [ 1561.237592][ C0] FS: 0000000000000000(0000) GS:ffff8881256ea000(0000) knlGS:0000000000000000 [ 1561.237604][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1561.237615][ C0] CR2: 00007f8169280e9c CR3: 00000000765e8000 CR4: 00000000003526f0 [ 1561.237634][ C0] Call Trace: [ 1561.237640][ C0] [ 1561.237650][ C0] ? look_up_lock_class+0x57/0x110 [ 1561.237669][ C0] ? register_lock_class+0x31/0x2e0 [ 1561.237689][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1561.237709][ C0] ? kfree_rcu_work+0x3f/0x170 [ 1561.237722][ C0] lock_acquire+0x106/0x330 [ 1561.237739][ C0] ? kfree_rcu_work+0x3f/0x170 [ 1561.237754][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1561.237773][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 1561.237790][ C0] ? kfree_rcu_work+0x3f/0x170 [ 1561.237803][ C0] kfree_rcu_work+0x3f/0x170 [ 1561.237819][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 1561.237839][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 1561.237858][ C0] process_scheduled_works+0xaec/0x17a0 [ 1561.237887][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1561.237904][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1561.237920][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1561.237934][ C0] ? schedule+0x90/0x360 [ 1561.237955][ C0] worker_thread+0xda6/0x1360 [ 1561.237983][ C0] kthread+0x726/0x8b0 [ 1561.238000][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1561.238018][ C0] ? __pfx_kthread+0x10/0x10 [ 1561.238034][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1561.238050][ C0] ? __pfx_kthread+0x10/0x10 [ 1561.238065][ C0] ret_from_fork+0x51b/0xa40 [ 1561.238079][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1561.238098][ C0] ? __switch_to+0xc82/0x1410 [ 1561.238118][ C0] ? __pfx_kthread+0x10/0x10 [ 1561.238133][ C0] ret_from_fork_asm+0x1a/0x30 [ 1561.238157][ C0] [ 1561.518848][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1561.525814][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1561.534915][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1561.544990][ T31] Call Trace: [ 1561.548269][ T31] [ 1561.551215][ T31] vpanic+0x1e0/0x670 [ 1561.555380][ T31] panic+0xc5/0xd0 [ 1561.559098][ T31] ? __pfx_panic+0x10/0x10 [ 1561.563512][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1561.568892][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1561.575228][ T31] watchdog+0xfda/0xfe0 [ 1561.579428][ T31] ? watchdog+0x209/0xfe0 [ 1561.583868][ T31] kthread+0x726/0x8b0 [ 1561.587943][ T31] ? __pfx_watchdog+0x10/0x10 [ 1561.592733][ T31] ? __pfx_kthread+0x10/0x10 [ 1561.597341][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1561.602647][ T31] ? __pfx_kthread+0x10/0x10 [ 1561.607399][ T31] ret_from_fork+0x51b/0xa40 [ 1561.612008][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1561.617145][ T31] ? __switch_to+0xc82/0x1410 [ 1561.622051][ T31] ? __pfx_kthread+0x10/0x10 [ 1561.626649][ T31] ret_from_fork_asm+0x1a/0x30 [ 1561.631614][ T31] [ 1561.635104][ T31] Kernel Offset: disabled [ 1561.639500][ T31] Rebooting in 86400 seconds..