last executing test programs: 3.53118742s ago: executing program 0 (id=2444): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0xc0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYBLOB="85980000080001002400128009000100626f6e64000000001400028008000f00040000000500100088000000"], 0x44}}, 0x0) write(r6, &(0x7f0000000340), 0x11000) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) writev(r6, &(0x7f0000000380)=[{&(0x7f0000001340)='\ra,', 0x3}], 0x1) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), r3) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff1, 0x8}, {0xb, 0xb}, {0x4, 0x11}}, [@TCA_CHAIN={0x8, 0xb, 0xc}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x2f}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 3.250982608s ago: executing program 0 (id=2446): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x3, 0x4, 0x8001, 0x8, [0x6, 0xd, 0x6, 0x3, 0x80000001, 0xaff6]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x46d9]}, &(0x7f00000000c0)=0x6) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x4, 0x6, [0x8b7, 0x9, 0x4, 0x7, 0x1, 0x10]}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @private=0xa010100}}, 0x7, 0x3}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x1, 0x4, 0x8000, 0x7, 0x4, 0x40, 0x7, 0xfffffffc, r3}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={r3, 0x1, 0x0, 0x3, 0x440f}, &(0x7f00000003c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000400)={r4, 0x4}, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x4200, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000480)={0x0, 0x7, [@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @broadcast, @random="53dc53fe358f", @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}]}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0), 0x10) sendmmsg$inet_sctp(r2, &(0x7f0000000500), 0x0, 0x40004) sendmsg$xdp(r2, &(0x7f00000018c0)={&(0x7f0000000540)={0x2c, 0x1, 0x0, 0x6}, 0x10, &(0x7f0000001840)=[{&(0x7f0000000580)="ccd61c10fc58ff828f7ba201475811bd8ae9e877ccda9510bedcd150e497d9de1d07d0847b110d7c6a9f4beb931787fb5babb0b7837369f35b765fe5a2fb74597a7c44e8316a3a76cbe7503628054d2d5430d3a6f08e5b45cb4cf25512ff8cd565429e9296abed7845d0d4bd3f4e67b85586164a659eb8f68e00de3cc459340c37d4a8835bdb895809c02a0d72a5c5f330f03f9e40a58f5c44f8c9919551da47b94dc19f9ce1068d973d2a048ec2c93f9502fe0704eac3", 0xb7}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="0b77f234fdc1bad545b7033d3f8afc551d4cd946993f8cbbf6c12c68b28040faceb3482c3de4a7d7bfb63390fde60a4d0da715e8ae42d954d54a71d1e99462d8b9ce9919fac420c11f262503ebbad3c0288debdecb4d6c8a88907b5e9a3deb8fe454d0890f75a232947e452184b0eb702d0a1fd6a217c7b1de87bda7f85be11699a1e1904e8642f53c6d022d1489cd1f22a1c108fde0ffd1d3477d273813dd769502a6bdf941e2d48ffa80d889ccf8a30cbc2018a017873e7452f6ebe2", 0xbd}, {&(0x7f0000001700)}, {&(0x7f0000001740)="4f2550759337a9a52e00cdfa419e0a3fc7c5916d215759bdaea2cc97671540b5146726b5698458372bafe945256979856e46747e172b13c4e0abb798007abb4063f0609f144623466c86ae09858a112fa26efb9e7de21cafce0e3a0ec1857f4d784df4fe44ac61b92f21d09ecceeb0083aa5b92c68adc601b77dca14ee249f272e121a8401fcb3973e6361bc", 0x8c}, {&(0x7f0000001800)="a507fd263a9beeb0ae5e326760eb78c853023cb0557b08864554cbb172b03940faf9ab836c3594bf7eb1f2aab0", 0x2d}], 0x6, 0x0, 0x0, 0x20040850}, 0x8000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001940), r2) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r6, 0x100, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000001a40), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a80)={'pim6reg0\x00'}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000002680)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002640)={&(0x7f0000001bc0)={0xa34, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x16a, 0x80, [@tim={0x5, 0x42, {0x86, 0x7f, 0x8, "f8d40bab4164826d38de535b2cecc74f7c98fdf7be0673801399bc1248689474dc3d1815964c72cde6fbde251157b2754fa540b520b0fa9d8e83375e25c4fc"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xc, 0xc, 0x4}}, @perr={0x84, 0xca, {0x7, 0xe, [{{}, @device_b, 0x8}, {{}, @broadcast, 0x1, @void, 0x3b}, {{}, @device_b, 0x100, @void, 0x27}, {{}, @device_b, 0x5, @void, 0x22}, {{}, @device_b, 0xfffff80a, @void, 0x1c}, {{}, @device_b, 0x7, @void, 0x38}, {{}, @device_b, 0x8, @void, 0x2a}, {{}, @device_a, 0x6, @void, 0x1a}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0xb}, {{0x0, 0x1}, @device_a, 0x47b0a044, @value, 0x36}, {{}, @broadcast, 0x32b, @void, 0x11}, {{0x0, 0x1}, @device_b, 0x2, @value, 0x3b}, {{}, @broadcast, 0x3, @void, 0x29}, {{}, @device_a, 0x0, @void, 0x25}]}}, @preq={0x82, 0x46, {{0x1}, 0x2, 0x8, 0x1, @device_a, 0xd, @void, 0xdcb, 0x17d, 0x4, [{{0x1, 0x0, 0x1}, @broadcast, 0x2}, {{}, @device_a, 0x8}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x1c1, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xbfc}, @device_a, @device_b, @random="4d700dc364af", {0x9, 0x9}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x2, 0x0, 0x1}}, 0x4, @default, 0x8000, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x4}, {0x4}, {0xb}]}, @val={0x3, 0x1, 0xd}, @void, @val={0x6, 0x2, 0xf70}, @val={0x5, 0x23, {0x6, 0xa0, 0xff, "4cb803d986c98921547c50f41804cb2b66294321f4e72a55dc56ac2883f5bab2"}}, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x38, 0xa8}}, @val={0x2d, 0x1a, {0x8, 0x1, 0x3, 0x0, {0x9, 0xb, 0x0, 0x10, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x401, 0xb5}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2, 0xc, 0x28, 0x6}}, [{0xdd, 0xfd, "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"}, {0xdd, 0x26, "0e5e31610142ceb4b21fb771474bad9e5177e865659742c48739df6b45223fd1f18b3b3d9bb1"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x23c, 0x7f, [@ht={0x2d, 0x1a, {0x8000, 0x0, 0x3, 0x0, {0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x8, 0xfffffffe, 0x8}}, @challenge={0x10, 0x1, 0xdd}, @fast_bss_trans={0x37, 0xc2, {0x1, 0x6, "add568e8b07f8a7583021e2596714b7b", "427e9a01b248782c5da894e928eb33ca1adfd13ffad91b3de791f94da5997360", "a20d53d9184aec4eed5f6614712009a0bc3caa00057e4a1ee6827b721a9fdf48", [{0x3, 0x7, "c8f71c0ec73c0c"}, {0x3, 0xf, "8b6b364b917ec29753a1da186b8e87"}, {0x1, 0x1c, "57080702b5407f1e38cedf4529f4eed19ed51099aad974202cc74569"}, {0x4, 0x1b, "ad83080ab7936bdc6c7216c3c9076a24d23ae982af2fafe96283ee"}, {0x3, 0x13, "28decad3eec2c7bcdff1688b405c72ed1d370c"}, {0x2, 0x4, "b3b2f397"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @random={0x4, 0xd8, "a0925bdc96c105a10db8f66557533204530a2548d50525423ce5a7b93851a5317947f3a07c738142274e18e217c2459454d809dd304186949e7084972c3a8b8d6e2e338f1f141647863f63cfcdff6cdd78986934fc75a372bcd93b1850c9660c42d88edcfa02cc0593857d59b599d171210f395647e7d7b47687834881df97f1a918bae4dba6baf2b9cc0b3c5ba031691b8e5002731ede3142463e6cb322337f3aae142b98628de8284f015b7a8043116f0be487b0669fdd0e4131df076096a53581ad9091adbd1b57bd6c7b0f5304e333e9763d2e587a97"}, @random={0x0, 0x76, "8144350e755b306850f0a5f3b4b1a470eb04940a608bf2854904f4521ea987fa198fbff1fc6f39f69bf31427e3ed8ed48c56fb94dd3b5aee0e6ba843af5828fa97ce5a5749a7dbf8be0653e3b7012f69157b26965deadaea6d2eaad0dec72bcafbae4081173ce7a054fb2c0ca87231627226d01505db"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1ae, 0x80, [@ht={0x2d, 0x1a, {0x800, 0x2, 0x0, 0x0, {0x2, 0x7, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x0, 0xe0}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @broadcast}, @fast_bss_trans={0x37, 0x152, {0x7, 0xa, "b9590c926ba43b5dcdcec779e46665f1", "41bd5012a9ed383a0365a8e89aac682b98df593c892288a9fc3b443ec10803f4", "948bf17e3fe499fab5a0adfde77e9e55b078d492dde0e7ea7b5c309659510d8e", [{0x1, 0x18, "8e54bc88befa16fa11dd59c75b204273e01da243d7cc5011"}, {0x4, 0x20, "8e22fce85a9617363a1067391a784000ef0dc8b9fd9cdf9857f8a0430ee15dc4"}, {0x3, 0x15, "5484aad332b2e549048c3f08e7d6b613946f996c1f"}, {0x3, 0x1f, "d423d394542e5a0100ddb0b12acc2dbbe5bd044660d109b929bfe974d75cb8"}, {0x2, 0x1a, "328b11e8450f7be6b5efad7cc942b9860ffa8bcb2330f99eefd7"}, {0x4, 0x1d, "947f77ebe24afcb83bb3de5f4cff352011b7db2f6be22e48c38a8871f7"}, {0x2, 0x15, "64a4261f036fe58d649c1e15dc41f40d601f1afdd8"}, {0x4, 0x19, "9d637d993038b62659239f05695696b5522df37bc48ba28a16"}, {0x2, 0x18, "4ef270daec553c463b97206bb3458ca4401d680c7267a361"}, {0x2, 0x3, "fc6a8b"}]}}, @ht={0x2d, 0x1a, {0x1, 0x0, 0x2, 0x0, {0x1, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xfffffff7, 0x8}}, @cf={0x4, 0x6, {0xc1, 0x80, 0x0, 0x5}}, @chsw_timing={0x68, 0x4, {0x1, 0xff}}]}, @NL80211_ATTR_IE={0x169, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x2, 0xff, 0x8}}, @measure_req={0x26, 0xe9, {0x6, 0xf9, 0x9, "d8d12e00809c21ecd4ed7526876972ba8b020c3ab1d2822f94ab6a7d9e4c349ec55b2174e6b2e4a55889bb96a7458ed609d4a1f5e9432216bec064bd60361efe50f7eec4d4f8b1311bbc3e5665b987949ac0a3016b9661c11efa1c4681ebf1c68127737d150d1a02d2e3f085e1a84290892239aa4318df151a5c66a6b4f3ddb60011361756ac14e9130110f801c4c930fbe29e60ec805668655d765eca1a2ed9ae0f54d9c9be0b861911313976e23f32dd01b5f84967a092adcdc10ef89324d2f2d6e5b2e8c25333d9648c0f639ab13050244ff356763378bae33693b0e77b027c80cdef9251"}}, @dsss={0x3, 0x1, 0x3c}, @fast_bss_trans={0x37, 0x6c, {0x5, 0x1, "f6039f43250c9e9ad4c38a073151d281", "708c92383a0270996300654fbd104b7d545d9fb24dc126bc8a84716731781ce0", "1c1d61ea9c7b978dba6c6b734b560ac45cf8a1240be1acebe51596024a633d14", [{0x4, 0x18, "6c7c7e0f4e9499566f8e1cdfe1b83ac50d58024bb4ee1276"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x20, 0x7f, [@ht={0x2d, 0x1a, {0x310, 0x1, 0x1, 0x0, {0x3, 0x7, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x2, 0x2}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe3, 0x80, [@tim={0x5, 0xdd, {0x8, 0x62, 0xd, "55975cfbf8a2f3774d90d5653609ac533cb4fe3cd610cdc16861171af90f6d1bb7c9c44c02d1a0b8c8668436f845b73f136c9da1025e50ec77aaca3ee6a253bc6b17a8ba426f6616b1a4ddf868f0700886e404ca4b1245623a090e78aabe8bd88464cb8bbb83525bc82dfdc74243a1812c86629fa2cfce5d32cf143c1d8926f7dc322dbb90b58010e41c3eeefb4dcd96bccdb3035bf660b1089e6be43c09bfddd901d66be3c47477dfda31e05f588f142d06c33b63caa9ebd551aad74be47440fc63aa21f11ed548c209f1f70b2d1d4a4106d0ace1172c899020"}}]}, @NL80211_ATTR_BEACON_TAIL={0x58, 0xf, [@cf={0x4, 0x6, {0x7f, 0x0, 0x5, 0x4}}, @channel_switch={0x25, 0x3, {0x1, 0x1, 0x6}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ibss={0x6, 0x2, 0x68}, @ssid={0x0, 0x6, @default_ibss_ssid}, @dsss={0x3, 0x1, 0x8}, @tim={0x5, 0xb, {0x0, 0x2c, 0x8, "6f6d3835e5a2725b"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1e, 0x59}}, @cf={0x4, 0x6, {0x2, 0x4, 0x1000, 0x7}}, @rann={0x7e, 0x15, {{0x0, 0x40}, 0x2, 0x2, @device_b, 0x71c, 0x3ff, 0xe7}}]}, @NL80211_ATTR_IE={0x34, 0x2a, [@gcr_ga={0xbd, 0x6}, @erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x2, 0x50, 0x60}}, @random={0x1, 0x12, "84fd8022a9fd6991b548e61fa91c76c4c2c7"}]}]}, 0xa34}, 0x1, 0x0, 0x0, 0x400}, 0x48080) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f00000026c0), &(0x7f0000002700)=0x8) getsockname$packet(r0, &(0x7f0000002740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002780)=0x14) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000027c0)=0x222041, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000002840)={0xb6d, 0x18, '\x00', 0x1, &(0x7f0000002800)=[0x0, 0x0, 0x0]}) 2.903675491s ago: executing program 0 (id=2448): r0 = socket$packet(0x11, 0x3, 0x300) socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r1) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x40, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20001095}, 0x20000000) accept4(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x80, 0x800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010001009a7cb8efdccb41659593ca570000000000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeab, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000851}, 0x24000840) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0xd8, @local, 0x5}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000005d8"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1, 0xfffffffa}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.702938058s ago: executing program 0 (id=2451): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none, 0x2000}, 0xe) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x97) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001a000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de", 0x24}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77", 0x1e}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x148}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e", 0x68}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0xd, 0x91, 0x10001, 0x5, 0xff}) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.080477564s ago: executing program 2 (id=2459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a3100000000090001007331b41f2a47927905000000000054000380500000804c0001804500010038e1776c4230bbe85205ffb4c748f027147aca01f0e004be7fe3f4efe7b9ac576270f3757c7369194fec774e079a214fff4687577f295f1f21bce26afc6ec15ef4000000"], 0x80}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000680)="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", 0x107}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)}}], 0x2, 0x2090) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.732508283s ago: executing program 0 (id=2464): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf2508"], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x1404, 0x100, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x240088c5) unshare(0x62000000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x8000000000000000, 0x9) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x17}, 0x1e, r4}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @broadcast}, r4}, 0x14) 1.564475679s ago: executing program 4 (id=2468): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xffffffffffffffa5}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff7ff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80820}, 0xc0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001800070101027c000004003480113c9ea088d300000000000000"], 0x18}, 0x1, 0x0, 0x0, 0xc880}, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 1.509851485s ago: executing program 1 (id=2469): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0), 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000600)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fe7a8fe9f885c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3de783fe4ceec3d0bbaa1d128ea33f7858235f2c12f0e619ecaab458b32259f3eb4dcd6ffef0b21a13280864cd7c3435c4000000000000", &(0x7f0000000300)=""/131, 0x0, 0x0, 0x1, r1, 0x4}, 0x62) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4", 0x86}], 0x1}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.388515481s ago: executing program 1 (id=2471): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x14, 0x0, "6b786dc6dc54991471094f58063c684fd63d53d6c82d12b904899320e1596485272b5769545eafd88696877a138e979996384611bbeeeb0e23d401bbb58f5cff23213f03eff7e6b6e0948caf8a7ef0de"}, 0xd8) r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @null}, [@remote, @null, @netrom, @default, @rose, @netrom, @rose, @rose]}, &(0x7f0000000180)=0x48) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000240)={0x3, 0x6, 0xabb, 0xfffffff9}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x7, &(0x7f0000000280)=[{0x5, 0x6, 0xb, 0x8}, {0x5, 0xff, 0x1, 0x1}, {0x81, 0x4, 0x1, 0x80}, {0x7f, 0x46, 0x9, 0x4}, {0x0, 0x2, 0x2, 0x3b}, {0x8, 0x5, 0x2, 0x4}, {0xfff7, 0x3, 0xbb, 0x3}]}, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40008080}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)={0x44c, 0x3f3, 0xb13, 0x70bd29, 0x25dfdbfc, {0x1, 0x0, 0x2c, [0x200, 0xd, 0x0, 0x0, 0x2, 0x3, 0x0, 0x9, 0x6, 0x8, 0x2, 0x8, 0x7, 0x7, 0x2, 0x36, 0xa9f6, 0x7, 0xa, 0x1, 0x9, 0x400, 0x0, 0x3, 0x3, 0x10, 0xe8c, 0x3, 0x8, 0xfffffffe, 0x2, 0x1, 0x7160, 0x5, 0x7f, 0x7, 0x5, 0x3, 0xfffffffd, 0x8, 0x9, 0x0, 0x2, 0x7, 0x62d, 0x4, 0x3, 0x4, 0x234, 0x8, 0x80, 0x31, 0x7, 0x2, 0x2, 0xd, 0x9a2a, 0x4, 0x1, 0x0, 0x8000, 0x7, 0xff, 0x1ff], [0x9a, 0xfffffffd, 0x33fe, 0x0, 0x8, 0x8, 0xfffffff8, 0x8, 0x81, 0xca1, 0x3, 0x2, 0x3d20, 0x9, 0x6, 0x7, 0x5, 0x8, 0x9, 0x7ff, 0x6, 0x0, 0x0, 0xcd39, 0x5, 0x8, 0x7ff, 0x0, 0xa, 0xd4f, 0x6c1, 0x0, 0x2, 0x9, 0x1, 0x6, 0x6, 0x7, 0x5, 0xfffffffd, 0x4, 0x6, 0x7, 0x1ff, 0x10, 0x3, 0x9, 0x81, 0x1, 0x1, 0x1000, 0x8, 0x9, 0x101, 0x1000, 0x1, 0x2ae, 0x4, 0x9, 0xa8e, 0x6, 0x42f, 0x1, 0x4], [0x2, 0xde, 0x0, 0xa7c, 0x5, 0xcb6, 0x5, 0x1, 0x6e98000, 0x80000001, 0xfffffff9, 0x4, 0x6, 0x0, 0xffffffa1, 0x7, 0x10, 0xbd, 0xfffffffe, 0x35a3, 0x9, 0x6df, 0x3, 0x9, 0x3, 0x100, 0x2, 0x3, 0x2, 0xfffff7a2, 0x9, 0x5, 0x9, 0xe, 0x8, 0x400, 0x1, 0x6, 0x48, 0xad, 0x1, 0x5, 0x1a, 0xce40, 0x3, 0x8001, 0x5, 0x4, 0x9, 0x62f5817b, 0xd4, 0xffff, 0x7, 0x1, 0x5, 0x6, 0x2, 0x5fa9, 0x10001, 0x1, 0x0, 0x9, 0x3], [0x4, 0x9, 0x5, 0x3, 0x8, 0xfffff03a, 0x78, 0xf398, 0x101, 0x3, 0x4, 0x80000001, 0x28, 0x2, 0xfe7, 0x8, 0x100, 0x80000001, 0xcf19, 0xae, 0x0, 0x7, 0x0, 0xfffffff8, 0x66454775, 0x1, 0x0, 0x1000, 0xc, 0x80000000, 0x400, 0x2, 0x4, 0x81, 0xff1, 0x8, 0x8000, 0xe, 0x109, 0xfffffff7, 0x6, 0x1, 0x9, 0x99, 0x9d69, 0x1000, 0xb205, 0x761, 0xc, 0x3, 0xfffffff9, 0x5, 0x7, 0xff, 0x2, 0x8, 0x9, 0x6, 0x6, 0xe, 0x7, 0x0, 0xd, 0x6], 0x2a, ['/proc/sys/net/ipv4/tcp_congestion_control\x00']}, [""]}, 0x44c}}, 0x20044885) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@ipv4_newrule={0x30, 0x20, 0x200, 0x70bd25, 0x25dfdbfb, {0x2, 0x80, 0x20, 0x29, 0x1, 0x0, 0x0, 0x7, 0x5}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xc5d}, @FRA_FLOW={0x8, 0xb, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040010}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r3) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x48, 0x140b, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044844}, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000b00)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = getpid() ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000b40)={0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000d00), 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r6) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000e80)={&(0x7f0000000d40), 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x5c, r7, 0x10a, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2f}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x0, 0x7, 0x8, 0x3ff}}]}, @NL80211_ATTR_SSID={0x24, 0x34, @random="5fadc728805bfd13fd93c814b45916576cb052507c0bf3ab03a3bd3dc550556c"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r6) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001040), r6) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000001240)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x180, r9, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x180}}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) pwritev(r2, &(0x7f0000001440)=[{&(0x7f0000001280)="22f7f1213eb1f4b40bf1f5ced111159ee330709f5aa4628b632aa295fb690575938f49c3c234244007642126e600abaca2cd32c7aa046b1d8323e3e272768b02ee305cca607a7173b6c395142d7c26e2ce192dc9cac095837f649fdcb800d9b0b0d4354c7a65e5d1a1149f197c75905919d59971633427d420f4e21201ee569abc2ebcd78fed81ef4d15b425fa3d4da321acadf1a1", 0x95}, {&(0x7f0000001340)="ef13260fde29c16e21d613ba811fe1a1355613e2007979b3fc4ef8cc643cb2ef07f52acce8b0333540d6c442216cccda0d3ce9956ddf8fc0c687a64373b55db69314e4224ae67bb31269d6f9c4932610428471cdc242c53505f2fc6fbbe8831dbcda47f09f960566d70c4f69f9daf156727c20d7e3beea5b522070a51916851d332fc6767ae49460b4891ffe6a122fc5d9ec0bd9aaebe628fd2e1d3ef22cd0fa610a324d8d4a1e8326f3fc6fa4aca732a920a741764c", 0xb6}, {&(0x7f0000001400)="232f97127ace287fa65f14", 0xb}], 0x3, 0x5, 0xb) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000001480)={0x1, 0x4}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x3c, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x697}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x555}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x7bb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8597f13ca1bb04c5}, 0x4800) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x68, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) 1.301000221s ago: executing program 3 (id=2472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r1, 0x26, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x4, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.297987932s ago: executing program 4 (id=2473): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket(0xa, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x79}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_EVENT={0x8, 0x2c, 0x2ce6}]}, 0x60}}, 0x8000) 1.124981574s ago: executing program 1 (id=2474): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100)=']#-+^\x00', 0x2000, &(0x7f0000000140)={@align=0x8001, {0x6, 0xffff, 0x1, 0x692e}}, 0x97d4, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x100}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000280)={0x2, 0x8, 0x6c1, 0x1230}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd60fca33f00306700fe800000000000000000000000000000fe8000000000000000000000000000aa2100"], 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x2, 0x7, 0x8, 0x4, 0x10, 0x4], 0x1, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0xf, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0xba48, 0xd, 0x100], [0xfff1, 0x5, 0x101, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x56}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000040)=0x80000007, 0x4) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x11, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r13, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$bt_rfcomm(r11, &(0x7f0000000000)={0x1f, @any, 0x1}, 0xa) r14 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r14, 0x10c, 0x7, &(0x7f0000001b00), &(0x7f0000000000)=0x4) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6d}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010013000000000000000000000a28000000000a0101000000005e1affd50200000009007a0073797a300000000008000240000000032c000000030a01030000c3831acc88e6ff0000feff020000000900010073797a8e210000000901000080797a320000000014000000110001"], 0x7c}}, 0x8040) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r1) 1.090357146s ago: executing program 2 (id=2475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd}]}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000200)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118b6000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x243, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r2}, 0x4) 1.088134328s ago: executing program 3 (id=2476): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) socket$nl_route(0x10, 0x3, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000000}, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb}, 0x50) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newnexthop={0x7c, 0x68, 0x2, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x22}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP_TYPE={0x6}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_GATEWAY={0x14, 0x6, @ip4=@dev={0xac, 0x14, 0x14, 0xc}}, @NHA_RES_GROUP={0x34, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}]}, @NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}]}, 0x7c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x1, 0x6) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x0, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}}}, &(0x7f0000000200)=0xe8) r7 = getpid() (async) r8 = gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x170, 0x2e, 0x1, 0x70bd27, 0x25dfdbff, {0x7}, [@typed={0x8, 0x155, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0xd, 0x0, 0x0, @uid=r6}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="41a884db8b5b90bdf9c621c87bb523a17e54d2c747a78dd13f8e6a266f7411114dc43a1296a2ab07eef0a82fcb82ba2b537005810e9159f45cf4c59a65cde6036b78861b50f19dbb0fd8e8f67a0c3e751b93b47073f3a4715e202d", @typed={0xc, 0x141, 0x0, 0x0, @u64=0x7f}, @nested={0xc7, 0xf7, 0x0, 0x1, [@generic="2dda0ffa13ff773cf48dfab902c595e58e60c89ac281f59ee687ef4cf101e1e29f0d15260f1ad699f2507e5c8c1cab1189bc08247524709a8a4a57c0fc01945c8696fbb6ae1e4a9e9ca04549c1300734f5e3b3994e2df2fa610f55dc5857d93ce8261f3bb18896416b1bb2bd673e99b5c51323fe80ffe0af488a874c10e8044952a3fa6ed6d03b411ef7bb376ab39eb0a21d989d76af5c2e32abd37992db594deedf97dde720da", @typed={0x8, 0x14f, 0x0, 0x0, @str=':$!\x00'}, @typed={0x8, 0x1c, 0x0, 0x0, @pid=r7}, @generic="8a0e7a43300d170b21de3d32"]}, @typed={0x8, 0x4b, 0x0, 0x0, @pid=r8}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080c0) (async) ioctl$XFS_IOC_INUMBERS(r5, 0x80405880, &(0x7f0000000700)={{0x5c, 0x3, 0x7, 0x10000, 0xd}, [{0x5, 0x9, 0x4}, {0x800, 0x6, 0x4, 0xff}, {0x7b, 0x4, 0x18, 0xc4}, {0x5, 0xc23, 0xf2, 0x5}, {0x1000, 0x90a4, 0x9, 0x3}, {0x3ff, 0x3ffffffffffffefe, 0x5c}, {0x6, 0x2, 0x4, 0x8}, {0x8, 0x9, 0x4, 0x7}, {0x400, 0x5848, 0x5, 0xb}, {0x3, 0x9, 0x93, 0xf3}]}) 901.007621ms ago: executing program 3 (id=2477): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x40000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000080)=0x9, 0x4) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r10, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r11 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000000100)={r11}) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f00000000c0)) close(0x3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 886.646228ms ago: executing program 4 (id=2478): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=0xffffffffffffffff, 0x0, 0xb56039c214c1041d, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="d1f8a5b9b0d8e38946f321efb69acd31f2e4470c5b753d15c0fc235b23da6093cae3e843a3419843ef4b98167fbe8e77bb2eac555c8566e6be3edabce56acc1850fbeaed88ac77e816bf5fcbfce6d1b5f20f8e3c88e0568f41a2073626b0e179418ba75190849ba54f721aa0b891ea3df6e2bcc0d7f9b5052ac2dadca02a8f2267d5604447a2944ac7d42a6a4d1a002712f0c4797044e97d911b2a57ca43874768c93d221b8dad55676b95297be223ea77bf", 0xb2) 845.971866ms ago: executing program 0 (id=2479): socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r0, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/14}, {&(0x7f0000000280)=""/104, 0x83c9716b6170739e}, {&(0x7f0000000540)=""/168, 0xa5}], 0x3}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r2, 0x0, 0x0, 0x4000001, 0x0, 0x0) (async) write$cgroup_devices(r1, 0x0, 0x9) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 770.062547ms ago: executing program 2 (id=2480): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x8000) 761.523685ms ago: executing program 4 (id=2481): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0xfffffff9, 0x25df5bfc, {0x4, 0x7c}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x800007}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xb, 0x1e, 0x0, 0x0, @str='dummy0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48800}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) 579.911167ms ago: executing program 3 (id=2482): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xf}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008041) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r1, 0x0, &(0x7f0000000280), 0x800) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv4_getrule={0x1c, 0x22, 0x8, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0x14, 0x3, 0x89, 0x0, 0x0, 0x1, 0x1003a}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c084) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='C', 0x1}], 0x1, 0x6) splice(r1, 0x0, r2, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x38) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x63, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000020000000000000000000005ff070000000000000100000d"], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0xa, 0x32e}, 0x28) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC(r8, 0x0, 0xcc, &(0x7f0000000400)={@broadcast, @empty, 0x1, "7d1f88f80bbe8d286c57f04c843abbec3737db4a9d77a557438242a50a4dad20", 0xaa4, 0x3, 0x3, 0x582}, 0x3c) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r8, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000100)=""/243, 0xf3}) socket$inet6(0xa, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000240)="0bc3f63ab04098a8beff", 0xa}, {&(0x7f0000000340)='G', 0x1}, {&(0x7f0000000300)="d336bd75", 0x4}], 0x3) 575.797686ms ago: executing program 4 (id=2483): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e22, 0x8, @loopback, 0x6b1c}}, 0x0, 0x0, 0x3a, 0x0, "8e53101e43987faa47f6a2bea28a5c33a270f58269949b3c1bb29851e2912c37e253f7328116de113fdac0288f00a5ac244f190848e1645385ed8fd231ac364cf22aee0fa335c5a261388d96bef6a576"}, 0xd8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='net_prio.prioidx\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x04'}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x40010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000001a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000480)={0x152c, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x25, 0xf, [@prep={0x83, 0x1f, {{}, 0xc, 0xf, @device_a, 0xf7f00, @void, 0x0, 0x3, @broadcast, 0x1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4f, 0x7f, [@link_id={0x65, 0x12, {@random="ad6a5cd7e569", @device_a, @broadcast}}, @peer_mgmt={0x75, 0x8, {0x1, 0x3, @val=0x80, @val, @void}}, @chsw_timing={0x68, 0x4, {0x7fff, 0x52}}, @dsss={0x3, 0x1, 0x30}, @cf={0x4, 0x6, {0x7f, 0xd2, 0x4, 0x5}}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x3, 0x0, {0x8, 0x542, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x7c5, 0x2}}]}, @NL80211_ATTR_PROBE_RESP={0x270, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x77a, 0x91, "fb71c97b827103c8aef3b80dd0b8cb5fcc56d891f2a3b5ac6a5a9f565296197aa86d2ebef543ee38ad092cd804af46f3df0a9a98d912774866c73b939ce6129376773fcf94922b14a56a2f389a9dcd3263128d924cb8ab70616611ef519c7ee6df448f8f17b594872a770be1d779f94576739a9a884917e9246b6e77cb114f17071f36b26fc13e410fc23728bc57def6ace1e8264e2465612f5f76475011652d6545cda22027d50ef3aa2b564ca99de486860c4c4cf709da246d24cdc3480fa83014a40b477b16552d4b9cee5b8ab09d5431a69139b50b7560d8c6c16434052338daf2f272d4fa3f13c7258986246f88a1dc1fddaadf0eab5f4ccd7a856ed49f6f79cbcf5da52db6459b9cf0024cc7140c8afbf0537293defecbf5f93bbffe5c185f0a033acb7dbd81b88c81e31ae37b4cf09a2176d35d3e9d72f0248a7d4211e15a0be3453ed559f05234a90b232a8f659d8eaacf96d2f74371496505026a963e00248baf61a86360fdb7e2ee834fcc3a1655304738e2167d180a589ebbb7fa85071f83608673de473c8d30cc29c0d6b6bc7aa7053716d884d58bd15dc0f5c74cd0c06cb018e4b94c984a77a037a4bcb9d7128755aa6f32a1227664479fd1d2d00c921ad9e21033c44ffcd9303b387c3b59e81fe5b58d980016727882d64f7dc51fdb43203bc4cbd4dbefaf2ddd0de7de103a316e8739a498c18d6430888b4172d2dec21cbcd1a28a27650a2108b3bde516198d6ecf8784b95c5f8af393bcdbbc2e47090fae11a9d1d57c3f17624880dc30f7c89cc1452e89935dbc2fe767cf9c9853328ec79a68fd2c0be1746b2955ce54ebaafc58c7d2bdc1cc59746dc125012e18101bd35e81ebfc7e1a1dd06136ed1791172e640d12bd00540a7807fef73a69d54a7435719020a9f10f07e5ae960520a0f895d7cfdaa682cf2a17dfbd374ef68b0e3a304cbb42b40e266e2af358dad9630d245b8845205e879b131f1e84014867293dea3299aaad034edd40e547456aa61a64f0cb349e33c6c8ea8053409b710c57e123f69d5a373e2fcf60cdfb5ead452968869cf32a4b2240c1930b732dacb25a5944952c4fc317da0ecd6d11c77e1e2aba2697f60faef5285231b0e4d18a2261088525b4cf564aba14a431110d62c081bf1a2471819896e0731c85805acf226a9d970059f5ae1ce3e09e7009acbc76fe129c73fab5cba7914f490b98ce99244850290e0d6d5ab1cfa63c81ceb0fc1e6c83afb15c4ce0f5bad91b2c7a95f71acbe3ac228fcb4a8138245c834ae8d58a4b1ed2730e0311cd7c8c4af690f11104e5376b30bf2dda2bdb4d416f22d4dca15ba40d278f2d8c191328d8c13259ff64126eccbee943d841751f63ec589a5679ae622000afb2b405a20a953b6a4f64ed07a1d7cf12702c6493f2ab570afc1619118ff8fc7b73e6089befc52819cb1f19f6424d40e98c74c2c378664fc54b3f330805c876364fc5285e79e0a03d1e5999f70cca595c450c8726638baeeb3dbaa90716951d25ca42cecd916321f630e8a6e0bc83e5f84d7148c4be81046391950191f1d73c991a82134d6c6ce0e2db8a7e92bae43ffe221ad5c9990306f1afe7279318d7aec86acce5a56363173dfcf7062d1a94588332c8200c1c219c09ab8dc0b78c28daab222806b1208c2c1fe33b081813b83b713b0ef242e7b59fc5e5dcbb003dff3dee80f934a0480f677050ededbc2e038e128caca637e48a0eae49ea1793777bdf7cea98e2ba7d1d5a26c270a0eee3d3b02158a3c30d88b92c408bef5c83de70b1769440567b72afe3a60088255441dbb33f2f810c76c6e31d02f22e2c3d51ca9361481310d6e296ea500db26971f2376221e35313069e5e27e5a7c474fde8d8fff8900cd472a6b7cb495d4a128b2b0d33785d09719e2d5e5f7fa476120f675977104370b10957c9f5310f44ef5ad587038b5d315c221bd97da761fab539b952da4ead174227fa49e7d77bd1492f183e8c7e1eb487f949947425a0bc79c5473e06d91cc9a99329a1a2f6d9cdf85e4e8d81d05a3f0ce74f9095d9db59391ab587b3f03ce29f428bf34e6d5f0a250b2a4c0dab4931c9dadcc9dd176c6f5a706ce060dbf2816680531005a4a664b6fa3f990aaac66bd10717006743fb4cbbbec057e2b433262050577e491d518fd493ee0f2fde50c01ba4bde2d1b882a1e3ca61696be1cc4994354e8715760157419a0a0fb4d63989882f39ceee85a68761cc91f3e714d6e9f61e9cdac8774995cc15d5b7ea7025f49fc61efec1c860775ba1832888a65e65a4616356772b9fbd6c545ca84303840633296fa68e4071434df5224bbd53508590d602bb179c01faf1c20312af205a353da6b3a835259225d95fc5366457c0ed81185d6a8ba40d479d35482d37534a648d67152d05348bda5eea358a269b526d8c78532f7271645aecf4fef585d50a12ab394591e4fd55869d3de2d81477782ed72d3df406da0f739c7505c46492a4138e83a1ef1ab032661b43231a452dd3cd1cf19343204b7e0465cf77fbc81dc226690806f7442ffa0d8f12932cfeb0d8856163b3245221a6705e12cdf07bf78d738078bf5d355e6118eab816e98b9e6f1b43064d94f5b1f54775449f421540b899f67ed7c81b5367a618ab86862d7fb07b70127501a4c25085cb9d7d3767b8276bdb6b458159695acbfbbd1fef"}, @NL80211_ATTR_IE_ASSOC_RESP={0xc8, 0x80, [@link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @random_vendor={0xdd, 0x37, "2d846ca1a6648b2f342aa0bf6176f8d99a030b3f2c2ea7e45d7ef2926fa4b0056cf8aec160328baf76bdea301a2056058ebf3d7bc3fc6d"}, @perr={0x84, 0x4e, {0xc, 0x4, [{{0x0, 0x1}, @device_a, 0x6, @value, 0xb}, {{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x35}, {{0x0, 0x1}, @device_a, 0xf, @value=@broadcast, 0x10}, {{0x0, 0x1}, @broadcast, 0xfffffc00, @value, 0x2f}]}}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x0, 0x0, {0x81, 0x3, 0x0, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x8, 0x7, 0x6}}, @dsss={0x3, 0x1, 0x30}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x97, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7}, @broadcast, @device_b, @initial, {0xd, 0x8}}, 0x6, @random=0x5, 0x2070, @val={0x0, 0x3, @random="fda1ea"}, @val, @void, @void, @val={0x6, 0x2, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x2}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xa9, 0x6}}, @void, @void, @void, @val={0x76, 0x6, {0x9, 0x6, 0x10, 0x400}}, [{0xdd, 0x4c, "14f9f4f8413d0df858089cf49a815791ab1d10dc00f617ac9bae86e052bb29d75dfb9272175175b9cf9e33336b4c322e75e68f57c06f81077794c2a4753441df5b3745974e681f2631b69e27"}]}}, @NL80211_ATTR_BEACON_TAIL={0x98, 0xf, [@challenge={0x10, 0x1, 0x7a}, @mic={0x8c, 0x10, {0x1b7, "3e04a12fd452", @short="c2461d1e82e1a6a7"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ibss={0x6, 0x2, 0x101}, @random_vendor={0xdd, 0x6b, "e499984689475452dc811c5af1245109916dd81254bf0423aba5de6ac887e197d8d568c36c95adc7780270d9705f574355e94494a3b75dda575f0de638815d3daa0c059edbecd033cb958dbabc0329ce4fc737779bc33526cc0f0e516b414bc1a035ad6b749ba1274aac5e"}, @dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_PROBE_RESP={0x828, 0x91, "23e552cee7c6433ef0ed021086320a7c0eed9da0abd973c9069ceb37f2f7540fed4351521edbf03f2159df8dda6aeaa644519dd991504dda02d56a1229f12dd71dbd28bf9cd8a897f35f06492ddc2f37ba48d493b3dfbb23a40d137ed6a91d6aa01bd6c4dc45abe58a01922cac6e0c0049e064e05c658f06f960788d394be9f15a9b9a54be2589027c7187d6a69d84ab7c7680b2acc782cb5d87eacf35c97f90bb2bc7cf197bd8913445cc7492c8ba3e44efccd3d3b182ae45cc28036fad85c9af84182c623368ba18debbf0116769f9717a1c75f294181e8191515337b2752e5ad04ebd96b75eee7dfbdb94c9fc0ef36af3c1d6f070b394558ce669db6014a8c82ddf9c647b2b006cf7bdf8e81f0411e91a0b3059a7111397b65e5990b5bf71856c73300315474c98637883efe8f0f17717363ea1d62eecc4ca585a7aba3102c7f2692265dfa776c93794eb24155016bc0772e4a4c6501965d073ff3e251d6d45b3a1dc2fa87a3d7a36b9318fb3a913814cb6854bbc98670e615f8ebf1f855d7502b002138fd0dc3827d65e1c900c597362122f16629bbe445ccdbe1b3eebedcba2a83651d3c7d8c0c10768009a6839fe8b0cb8155bcbb90ca6949aa84b2ff842e51ea0261919e24507124621f28e2c7130b978b48aecc12ec43338e06ad99f57c91f2f20ccf4ee031a2998dc7f06c80bdceca8aebb09677febd4ede98900329f0fd12b9e77514a6d2bf4aad5700edb20ca9eb80cc3d36e55563c519b9f7cde694827f169da044ebea3bbfc357c85f23d1bf92eec063e169c5f9bf01eb21e17be872587aae322ef8cf978c3cf155c594c7450f865db5d18be0e72e12c747c74fb0fd559abe705400767e1fa3249a12c5ae3534cb6a27181d9656dac28e3c29756d29ed5613bfcbac1edef39f8a9c6c9af12dc4153616ad3b1a33aff4f496829179c21af07bffa8f1d4aa5fa9b4b76a6359f365c160cf76ce5d43fde121d040854d54fe9fec14056bb9fd34008b54c78d9a7c57a05b6201343bd944c910be3e8c70b85779e3e8c6933b59adad565165516d77cccf6a2985275eee95f615c0fc1f4d3ab0624874d3dac4b5f67b6a3c745226ce3a4dc20259616962f64575b3abd5f38f601ec747eeb4d11464db90599ee5886bd1a8681f986df10f7f3aeaaabe0c28cd890e64af4bc1277f464ec2da6890a805d16f75d78777c73635324e3bd24872c10b57490dbc9107c065a013085668e07402e01bcfb9cf765c071aff1bb2799ce135662fdef0ae452e85c9519d53aae8d1140ab8f28c084194869f42aac8ebc19354121fad7330a458e5f14a05f25308a81c57558d86060914ae420b8b8bb59d67c6504904a71a29f06cf91bc3085550b5a9ba696284fb81b2d93608e13c17a89aad90ad692593b191bb1dd9d65574bda3a9cda39fcd1c50174b618c152e2f8be0ecda0bd7a59137d57eaf9ca950e4d018bc162ef4059e440e508b3e59b0a2b400c09bef6036b9e29dc5156e587abee18b1ab8bd936acb0804927b892a5f0b878b5dee77b70fda009a9d373b573b6bcaf35874cefb274a7e665ddeded5f4699dcabfb8d49a8e6a2711d39c432beddee25e41d7847fe31204ccea2f97e0eeeaeb6f9a909060bba40b262f6ed34e4f94293fcff5ca0138b697f43070fb43194c1d415bb24cd7fb5bafcdc177f5083f9020c119a1c7e1296417c27bad390145b3405e42cad7a99dfc8418b7d2ec1e4139eac233208761124d70f4b2eb354538758f3e0bbd7a250ea3da755253d2758c2d456cbfd3a74a944fc75186bfa45c67df36d89425bd5c81a1c6bfb0f018f6788812e1a24da9729602e535b6907fdd3eae49cea8983a245fcf8b781edbdff5d74b2f1bb12c0df09462933756d5d3ace4eb774904fe9184269624a5a1f8ccee8bbc83544ab807fcde6eb8a680a2f8277678a67b5590e992c5fc0074d1b80b53381b27c81881bb3dfbf7cd2d57494fef01e16e527d091f7334c42669a87a8936d66756cd07f2a038ceacb37a511a19814a6851a23e34a515d26035de43034b63d3b141fea0d189c45fb281d5000fa3c750a2513c1852bf848221248d629eb59f6a3637434e5e9a916904589b23a6fe9e87ee1b1028530f780f677bf6ce148888f02156a348c4bff63d50385114a50e9b514db0998ecf812a8b3898bd52d0c5a6af7077433fe9a343528ab66501cc8b94ac05efe931fb42409ccff3422ed25388328f53e389120acf2fe18254be27cd1c0d8fe5ccac6e85238455f44e4520bc2921928f1106b89e6ea086ad70073e0dfb0e07ad602e569fad8e063427461d4c591c468152917494ff2109fa51000001cbf5ec2bf863f7f1f1f7de858232c5a1baadf37c890b2a9c8a3e3cc8c8e521a4e8325df2a4ab7fb9b012df4740b18c6144fd055bba26fd2fcc6050c683bd11e94fcd618bf1b7856c182e86c45571433b91a633009313acc2a29686fe0ebd0a7f948a5595c1d3eecf4645642a77fa06e53e32a11deb15f264383ea76bac77c95791c51d62a25585acab41dd1df9d909ad3e3b821eca4b56a0aa8ea30b146a9be20b59ffceba1e0783314fd6a36e47eddadcce96c81309b96c649e0dc4b63d54278c0dc1cd6fa0f3471962fa56e4b880ad493952fc95a053b929634ba78b0de98d13f8586b1346c415100067366e602034867320f94fadd7d935a0633bfac7c5fa8af7561539facba8f4cebc82193cdff5e91724f7ed1461e896548b05ec68067286a6153c7177acbec31052e27ab1b2002094b5b23d6cb36c881edb85d7e3b9b3e7bd9380b15b109ff5b860c5a83bc865116af529948372c3680ffba42baeb1324d7314957dac23100766ccf096893631460bd1229dc484278df2f8de8b8203982fa684534c2fcb1836a87475aeafc33d2b53070c1373ef59fc6dc3b22e098cd0fde08cce372d0"}, @NL80211_ATTR_BEACON_TAIL={0x8b, 0xf, [@chsw_timing={0x68, 0x4, {0xfffe, 0x401}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x8, 0x6, 0x1b, 0x3ff}}, @random={0x9, 0x6f, "a6bc3903c847fab9b0cfa0767aab6cc482afbb4d08c630a3b3af01865f5a3a56add1b5e2d0a5b499e4c059ac8d641014040f9ec03690cf1944ba9957cec58d95b1d143f94193536433a060b5f49cdc2f9b8cfad1e384225d093fc50fa9e5302dbf53002d03e4ef61225e00fb10fb2b"}, @channel_switch={0x25, 0x3, {0x0, 0x9d, 0x10}}]}]}, 0x152c}, 0x1, 0x0, 0x0, 0x40049c0}, 0x4000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x1c, r2, 0x4, 0x70bd29, 0xc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_opts(r10, 0x0, 0x9, &(0x7f0000001b40)=""/3, &(0x7f0000001b80)=0x3) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c00), r1) sendmsg$IEEE802154_ASSOCIATE_RESP(r11, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x4c, r12, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xed}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x81}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040800}, 0x10) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_lsm={0x1d, 0x26, &(0x7f0000001d40)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x14, 0x3, 0x0, 0x5}, @generic={0xfd, 0x3, 0x3, 0x8001, 0x100}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xebd2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @alu={0x4, 0x0, 0x7, 0x4, 0xb, 0x100, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x3, 0x2, 0x8, 0x18, 0xfffffffffffffff0}], &(0x7f0000001e80)='syzkaller\x00', 0x787, 0x28, &(0x7f0000001ec0)=""/40, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001f00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001f40)={0x4, 0xd, 0xb250}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001f80)=[r3, r3, r3], 0x0, 0x10, 0x80}, 0x94) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r7) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x30, r14, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x38}, @val={0x8}, @val={0xc, 0x99, {0x5, 0x77}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x40) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r13, 0x80047210, &(0x7f00000021c0)) getpeername$inet6(r0, &(0x7f0000002200)={0xa, 0x0, 0x0, @private0}, &(0x7f0000002240)=0x1c) r15 = syz_genetlink_get_family_id$batadv(&(0x7f00000022c0), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x2c, r15, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000024c0)={&(0x7f0000002400), 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x14, r15, 0x100, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f0000002700)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000026c0)={&(0x7f0000002580)={0x108, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x9df}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x10}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4079}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x2ab}}]}, 0x108}, 0x1, 0x0, 0x0, 0xc001}, 0x80) 558.502451ms ago: executing program 2 (id=2484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000007000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80100001000030027bd7000fb08df2500000000", @ANYRES32=r7, @ANYBLOB="20a0040000000000080028008b540000080020000800000098011680980001800c000400ff0f000002000000280001000700000000000000000000000000000000000000000000000000000000000000000000000c00030002000000030000000c000300ffffffff060000000c000500070000000800000028000100ffffff7f"], 0x1c8}, 0x1, 0x0, 0x0, 0x24008011}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_route={{0xa}, {0x18, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r9}, @TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xb9f7}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 513.886798ms ago: executing program 1 (id=2485): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042cbd7000fbdbdf250d00000000001d000600000005001d000500000005001b0005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4801) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, r2, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x20002041}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000240)=0x10) accept4(r6, &(0x7f00000004c0)=@alg, &(0x7f00000002c0)=0x80, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="110026bd7000ffdbdf2518000000100030800c000180080001000000000008000300", @ANYRES32=r7, @ANYBLOB="d049909eb41b60ca09457bd5af0004008398ff85f8fd83328ae604be83a3dd00efa9531e51df9cce2a8bb0803963e9039b2197c770ccf51aaac15594a63d847d94c9a1baf1837c723505e02aad208f029f6abba50771ba93faaa304ffd20cc1a9156fd1b50cef91557834b1e31316f591c0968175bd378f1146b6b13ab364a149ae1d331be64971635b5b6e18a5cdadc29fa000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000b60000000000006a1957278f4a00000000000c000780080008000000008905000100060000000500050002000000050004000200000009000200737909000000000000000300686173683a69702c706f72742c6e6574000000"], 0x5c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x10, 0x1403, 0x1}, 0x10}}, 0x20000000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r14 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r14) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r12, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x48, r12, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r16, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @typed={0xc, 0x11, 0x0, 0x0, @u64=0xe0000000000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 478.756447ms ago: executing program 4 (id=2486): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x6, @dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x0, 'wrr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x327, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x400c015}, 0x40001) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x4a) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=@ipv6_getnetconf={0x44, 0x52, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x41a}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_FORWARDING={0x8, 0x2, 0x3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, &(0x7f00000000c0)=r5, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="813e785600", 0x5}, {&(0x7f0000000440)="739135680a1d6fb520a135d74fcb507ba32aad7141e7c84382b075f75900bfba6841728e5b4c8a67abb35cf32dabf4feff1183ecaeead6a4c72e99892e55e2159959e12d4c06b8bb0e3b92a227bcddfc9de9b16bac13757c6dfa3c8764ea3fea50e0664cf70a842c69d3e914d4fcef3d553f0cd60f1ddb1074f8e570e868e2068ca79d988a43bfd31c69e3b1393380bd163b85f4b6b15e", 0x97}], 0x2, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) 352.051771ms ago: executing program 3 (id=2487): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000540)={r1, 0x1ff, 0xffffffff, 0x9f2}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x27, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r3}, @jmp={0x5, 0x0, 0x3, 0x6, 0x0, 0x100, 0x1}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x22000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@li}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0x7, '\x00', r10, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xc, 0xfed3, 0xfffffffe}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[r2, r11, r2, r2, r3, r3, r3, r12], &(0x7f00000005c0)=[{0x2, 0x5, 0x6}], 0x10, 0x9}, 0x94) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'gretap0\x00', {0x2, 0x4e21, @empty}}) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000) 257.210981ms ago: executing program 2 (id=2488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x88, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x4, 0x0, 'Qh'}, {0x1, 0xe, "78676b5529157c4a4f2468a8f55ab301a031c43b00a9d84d0a2336bb418ea68a2e44f59b8f4d4beae7bf367e646889390c945b9efb324d3ace080eaf2477ebdbb7bf1b03371a36b22c4192c19a9c68215d40fb38ed96129794604b1ff4171f0091c19f35f0e25a2626f54aad286f"}]}}}}}}, 0x0) (async) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6d}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x81) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004e0001"], 0x14}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x98, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffff9}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1c2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4000890) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000500)={0x40, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x11000400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xd4}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x1ff}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6}]}, 0x40}}, 0x0) (async, rerun: 32) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_TXPOWER={0x5}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa0000c5}, 0x20000080) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe41}, 0x2}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/192}], 0x0, &(0x7f0000000b40)=""/4096}, 0xc6}], 0x1, 0x40012062, 0x0) socket$kcm(0x29, 0x0, 0x0) 91.499766ms ago: executing program 1 (id=2489): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@map, 0xffffffffffffffff, 0x13, 0x10}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@map, 0xffffffffffffffff, 0x13, 0x10}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3, 0x6}, @func={0x801, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x2e, 0x61]}}, 0x0, 0x46}, 0x28) 13.626323ms ago: executing program 2 (id=2490): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) unshare(0x22020400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x2}, &(0x7f0000000180)=0x28) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x2}, &(0x7f0000000180)=0x28) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0}, 0x18) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32, @ANYBLOB="0800010000389cbd"], 0x38}}, 0x20000000) setsockopt$inet_buf(r0, 0x0, 0x30, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x20000000, 0x6, 0x6}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x20000000, 0x6, 0x6}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000800000003125ce882cbf490d908f1523f000000000000", 0x2e}, {0x0}, {0x0}], 0x3}, 0x4005) unshare(0x400) (async) unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 11.679493ms ago: executing program 3 (id=2491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x250, 0x30, 0x100, 0x70bd26, 0x25dfdbff, {}, [{0x23c, 0x1, [@m_nat={0x168, 0x0, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x40, 0x6, 0x2, 0x4, 0xfffffffc}, @loopback, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0x1cb, 0x1, 0x7, 0x5}, @loopback, @remote, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x80, 0x6, 0x8, 0x5}, @broadcast, @broadcast, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x14f7da99, 0x8, 0x7, 0x9}, @rand_addr=0x64010102, @remote, 0x0, 0x1}}]}, {0x9d, 0x6, "c742f1b42141281099361f82ed543929830a449b71ac52e3d45e2ead46051b7547d28aaa2d53fa683d7ee02bd29d27c5fc92c161c553228e21b0cbad1a363deb67cc9ca6a6aa4a065c23d8f7a6662f47d495f185d25c91e2acde8667e773bfe4b2331c66a8c50a98c377761c3f926029d56e036355103a7765f8832229006fccc7d67a073efc9727b9ffb269f6d391f8f7baa08fccfbb1313d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0xd0, 0x20, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x2a8f}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xae9}]}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x400}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}]}]}, {0x2a, 0x6, "04a7b8a8564e871ef29e81efaf7ee71decfa8e4b41d2557b8b0fff1066ceacf7272296e1ead5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x56, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x1, 0x6}]}}}}}}}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x240448c1) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010000) sendmmsg$inet6(r3, &(0x7f0000001a40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c, 0x0}}], 0x1, 0x24044000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xc}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000400)=@proc={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc, &(0x7f0000000440)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="840100001900000025bd7000fbdbdf251c004b800700e300c229000008000900", @ANYRES32=0x0, @ANYBLOB="040052806c8aacf95074e085d9764704007c802854f804272c2f5bf214fe05deeb30e6e16585c004a41bdb886a20d12f64bccd7df8043409ae01240cc6134e14645cbe04614b7eed33498b9451e14619496bd718f688add2f1f0aab4e34b02d89672c4de3b0000000099f5d6c33dcbc8388ef971c608a4575232ae4520f4a0bfdff5d8020c34b804a7c4e64729742077", @ANYRES32=r2, @ANYBLOB="47d7ef08d9db68ca5b133902b6ca72a77daab30f85aa45c536b029df5d80f1bcc47ed7d5607f2d75ed57367b4d070033e588380a80e09ca52ff814992914255e141217cfd7acd0a9f6e21185c6b55d16aab284f65b00e88df4348c66fcc08bc031560e0670bd93a9f0442f6d174d12a6eac56c31f47c103f722d87ec6f379dfdaeb4906b54c630a22e63f4da6d459d890ef7070a0cb3a43b2304abec354d05086a6469ddf051b5dfa4dac6d61151f9d479507ad0d394eee0e21271c54ee7629d6308009100ac1414bb000000"], 0x184}], 0x1, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES8=r7, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="00a4ee1c"], 0xd8, 0x80}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffff, 0xc}, {0x2, 0xc}, {0xfff2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r8, 0x4, 0x6, 0x1, 0x4, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x8, 0x7, 0x6}}) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb30}], 0x1, 0x40002042, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000e00)=ANY=[@ANYRESOCT], 0x444}, 0x1, 0x0, 0x0, 0x20048085}, 0x4) 0s ago: executing program 1 (id=2492): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x700, 0x20, 0x8, 0x100, {{0x20, 0x4, 0x0, 0x38, 0x80, 0x64, 0x0, 0x1f, 0x2f, 0x0, @local, @private=0xa010101, {[@rr={0x7, 0x27, 0xa, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, @empty, @remote, @private=0xa010100, @private=0xa010101, @local, @multicast2, @private=0xa010102]}, @timestamp_addr={0x44, 0x34, 0xa8, 0x1, 0x0, [{@private=0xa010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x200}, {@multicast2, 0x9}, {@empty, 0x868}, {@empty, 0x401}, {@empty, 0x4}]}, @ssrr={0x89, 0xf, 0x45, [@dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010102, @multicast2]}]}}}}}) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000540)={r0, &(0x7f0000000440)='@&*\x00', 0x0, &(0x7f0000000480)={@_ha_fsid={[0x6c, 0xfffffff8]}, {0x8, 0xff, 0x3, 0x9}}, 0x1, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000100)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x0, 0x2, 0x3, 0x9, 0x2, 0x1, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000180)='syzkaller\x00', 0x2f2dd367, 0xc7, &(0x7f00000001c0)=""/199, 0x41000, 0x63, '\x00', r2, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xf, 0xffffffff, 0x1}, 0x10, 0x124fd, r3, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000680)={{r0}, 0x2, &(0x7f0000000640)=[0x1000, 0x4], 0x7fff, 0xd}) r5 = accept4$inet(r3, 0x0, &(0x7f0000000700), 0x81800) getsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000740)=""/16, &(0x7f0000000780)=0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0xffffffff, 0x200, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f00000007c0), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@rand_addr=0x64010100, [0x0, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010102, [0xffffff00, 0xffffffff, 0xff, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffff00, 0xffffff00], @ipv4=@local, [0x0, 0x0, 0xffffffff, 0xff000000], 0x6, 0x4, 0xff, 0x4e24, 0x4e23, 0x4e20, 0x4e20, 0x0, 0x404}, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x20, "f7eff173fdc87fa86691677de7b4fa3f6ae981c03593292ccaeee0d3e318"}}}, {{@ip={@multicast2, @multicast1, 0x0, 0xffffff00, 'veth0_to_batadv\x00', '\x00', {}, {}, 0x75a434905c512e5f, 0x2, 0x2}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r6 = accept4(r3, &(0x7f0000000bc0)=@nl, &(0x7f0000000c40)=0x80, 0x80800) sendto(r5, &(0x7f0000000c80)="b1fbadee00d81ef97bec8e7cfbeb8b56442cbbfd4c7a513483dbb8df55d5fb0bd67467a2db40b79cdd9ea31a4c692055c22bb68638789ae97be2c37a06d926f272bee0c295de3adc4c6cd87c03aaf3663d4cba5d43a3f317e8ea999fc4ac8da77ccb43d3cc11e19aaffae03e3c67bdddc29e50a3d1943d70b4686108b3a6a85fb7f12c487547548728d916d57707e5d53ff541eb068d26947459a45a29eb6c07b38ad6493602411a9ad4b83f73bd56096d723deb4c505b9caa04820b1fced70ad973efdb74d41106901f046bdbfd9da277082a5f0e40e4bd57ee5f5f4ca4f34a5fcb774b057fe5d6", 0xe8, 0x0, &(0x7f0000000d80)=@nl=@kern={0x10, 0x0, 0x0, 0x400000}, 0x80) getsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000e80)={0x9, {{0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}}, 0x1, 0x2, [{{0xa, 0x4e21, 0x9, @remote, 0x9}}, {{0xa, 0x4e24, 0x8001, @private2, 0x401}}]}, 0x190) r7 = openat$cgroup_ro(r3, &(0x7f0000001040)='net_prio.prioidx\x00', 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x84, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x9}, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip_vti0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xa1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xa, 0x1a, 'tunl0\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x40884}, 0x10) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001280)={0x0, @initdev, @multicast1}, &(0x7f00000012c0)=0xc) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x6, [@typedef={0x6, 0x0, 0x0, 0x8, 0x5}, @enum64={0x9, 0x3, 0x0, 0x13, 0x1, 0x5, [{0x3, 0x80000001, 0x1}, {0x8, 0x10, 0x100}, {0x2, 0x4, 0x81}]}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2}, @volatile={0x2, 0x0, 0x0, 0x9, 0x2}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x7a, 0x1}]}, {0x0, [0x2e, 0x5f, 0x61, 0x0]}}, &(0x7f00000013c0)=""/158, 0x86, 0x9e, 0x0, 0x9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x14, 0x4, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c4f}, [@generic={0x7, 0xd, 0x8, 0x1c, 0x6}]}, &(0x7f0000001240)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x2d, '\x00', r8, @fallback=0x6, r9, 0x8, &(0x7f00000014c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001500)={0x1, 0xf, 0x1, 0x9}, 0x10, 0x0, r4, 0x2, 0x0, &(0x7f0000001540)=[{0x1, 0x2, 0x1}, {0x0, 0x5, 0x4, 0x4}], 0x10, 0x7}, 0x94) write$cgroup_subtree(r4, &(0x7f0000001640)={[{0x2b, 'memory'}, {0x2b, 'cpuset'}, {0x2b, 'perf_event'}, {0x2d, 'cpuset'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'rlimit'}, {0x2b, 'net_cls'}, {0x2d, 'cpuacct'}, {0x2b, 'cpuset'}]}, 0x53) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x20, 0x1402, 0x800, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x84) r10 = openat$cgroup_subtree(r3, &(0x7f00000017c0), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r10, 0x941c, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = accept4$vsock_stream(r6, &(0x7f0000001800)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000001940)={r12, &(0x7f0000001840)='ip_vti0\x00', 0x420102, &(0x7f0000001880)={@_ha_fsid={[0x8001, 0x80000000]}, {0xc, 0xe2, 0x7, 0x32}}, 0x4, &(0x7f00000018c0)={@_ha_fsid}, &(0x7f0000001900)=0xabcd}) sendmsg$tipc(r3, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001980)="17cb78e29c255ac5fd0a4fe01cdb54955f31cd9184eb7892192021764aeefdcd7a4e05e3b4124fc576c3156d8f11e896b4a4a469c90389aaf406e374248e89999acbb1098c842cbdb1112dbf00e860506e9188889927d3d673c4c05fc1f0f7f9bf6bdac0594d898373a2bf385d4df17db81f5a8d5d915f669bb7c6d819279b19c2407a3b08b812436f6f42659abfa902b7eec7c180f48711bc853cc38ae27f0a40c95f18fbb2fe7210a535ff950262a61fe916865e792f9127", 0xb9}, {&(0x7f0000001a40)="e22eef157b30f0044bc0bff124439c0befaa3ecf170626608d38372d7afa9b3bc5e92dbd3db981bfe4ae78db6f3876b2fa5fdbfbd00338365eab28d1cd839f9ae6b01c59071b140767df73cff763b283a7f29bd78a2c37644169cb74ebd70c6a6ce59430bb825565de380a28185537f817e850b8d3b9aedebbb1db11d58213dc8a76a178fe42c18386e678e01df75144fd69f0f0891c71d96afb06b89d6b116173821cb289f8b6156980079a588118", 0xaf}, {&(0x7f0000001b00)="44bc1929930ea17bec38751315b380699e5868bd3b2cca6d8ff96ba7bfee0308fdc5897bc85fba8f29b23ca035de7e7c9a94c1465268e8365a30ccf97cafdc781d1120d93b83fcfeada2fbe89168806ad0bfd893f888e3256815c0f4f557d8c6fb84b6708ed58ca3a135db02e03e28c6c9bc62c31d081c761c3b6c962e881633680f856d2c2e0be479cdec832da5a0224ef4b76c1968e57d12ff2f4fadcb40253db57cb50d23ea7d06239d13da606b11f31058051dfbe624e7d18f36e78c", 0xbe}, {&(0x7f0000001bc0)="c7e8d0db749c4ee08d09c3fc2a5db05ce9e5478780936e0052a1579cc83968e386bbd8d9f665aadf08bd6bb0708ee32307bb01fe0effc4c104c3ed4c2d3dc8187ce457893a01e11220bb7af762b98a8bbf0a1f0c4720f14163fc8b81a5c4680053fd0c260530541884ff4f1ce47d8da298913b8454e4e74ddac3696036c7dfcd092649ceec8fbb0ccdf48c583e9fd372dd7cfb9a94d085822145ba20eeb572e888df3221561a428b04cd86cd0f7f74dfbec531ac978d9ee610a41d677afed2c980aa2a859dfca487d8c0a959b86b96", 0xcf}, {&(0x7f0000001cc0)="e58627e10a578a732283c2a702c96edecdf277e2150e3916b1ff8ffa303ab9e56db958e4aa6e2b66391ec90baae10a177f65aa341d5161cb2b71ac7669f40d806a8fc02215294fc68076f78a38ac2cec1d7de62bbc40cdd540f2837855c2eba2d0e040d5d87ad76b70ee58622abaad34f3654078cb39acdccf57b912d2f8d4fe3abc68720b0a2a75f2720e4b0a425e78b8fdc8f8fc0216e50f680c1b66e1fe96be8fadeba834367c5194194e6d7d2bb50214ef50eba0eb46d5cbd3b8e3925602dd5f376c9756654e0d58e6fce38f8c060f093b0fbcbef8355b", 0xd9}, {&(0x7f0000001dc0)="54cb50461b5fecc4aa3cf7ab8c75d1177d3968398e906627b65123b0dafce6f699668bc6fd926dd357d453d13d58353188a75e82146882268ead5273048a032d78c2a102d756d69d4a2bcf2e0c09d855f6b5f129744246fb", 0x58}], 0x6, &(0x7f0000001ec0)="47784690d56643ce358781205058bdf8f9b488e0de797a7aad989ba59ce316d2f325161ad92d6498058663633ebb", 0x2e, 0x45}, 0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000001f40)={0x2, "721d"}, 0x3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r11, 0x4048587b, &(0x7f00000021c0)={{0xffffffffffffffff, &(0x7f0000001f80)='[$X\xf2*\x00', 0x103602, &(0x7f0000001fc0)={@_ha_fsid={[0x0, 0x5]}, {0x9, 0x800, 0x10000}}, 0x5, &(0x7f0000002000), &(0x7f0000002040)=0x5}, 0x2, &(0x7f0000002180)=[{0x3, 0x9, &(0x7f0000002080)='!\x95:\xc8$\x00', &(0x7f00000020c0)="591ca93807a9b0f20d93f340761501a1d4232d7018294ef856fc1c894c35b47a22d60c", 0x23, 0x10}, {0x2, 0x7, &(0x7f0000002100)='gretap0\x00', &(0x7f0000002140)="196751b21f1e1e86535f00d479a6fc26563956b6cd19e3470c318b7d68787277d2211d120563e36ff0", 0x29}]}) kernel console output (not intermixed with test programs): ][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.729393][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 187.758178][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 187.799305][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 187.950717][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'. [ 187.965922][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.977115][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.955'. [ 187.984735][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.013207][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.103453][ T9945] virt_wifi0 speed is unknown, defaulting to 1000 [ 188.304663][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.336053][ T9963] netlink: 'syz.3.960': attribute type 83 has an invalid length. [ 188.336945][ T9964] netlink: 'syz.3.960': attribute type 83 has an invalid length. [ 188.375672][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.652548][ T9982] tipc: Enabling of bearer rejected, failed to enable media [ 188.727761][ T9986] virt_wifi0 speed is unknown, defaulting to 1000 [ 188.762781][ T9987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.005527][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.206125][T10017] sctp: [Deprecated]: syz.4.971 (pid 10017) Use of int in maxseg socket option. [ 189.206125][T10017] Use struct sctp_assoc_value instead [ 189.377095][T10024] __nla_validate_parse: 5 callbacks suppressed [ 189.377118][T10024] netlink: 34 bytes leftover after parsing attributes in process `syz.0.976'. [ 189.467285][T10028] syz.3.978 uses old SIOCAX25GETINFO [ 189.506590][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.567865][T10031] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.979'. [ 189.615531][T10034] netlink: 'syz.2.977': attribute type 1 has an invalid length. [ 189.644099][T10034] netlink: 'syz.2.977': attribute type 1 has an invalid length. [ 189.652950][T10034] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.977'. [ 189.654476][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.695586][T10040] netlink: 52 bytes leftover after parsing attributes in process `syz.3.981'. [ 189.748122][T10042] netlink: 'syz.1.982': attribute type 2 has an invalid length. [ 189.768088][T10029] netlink: 'syz.2.977': attribute type 2 has an invalid length. [ 189.776109][T10042] netlink: 'syz.1.982': attribute type 1 has an invalid length. [ 189.800117][T10029] netlink: 'syz.2.977': attribute type 9 has an invalid length. [ 189.815717][T10029] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.977'. [ 189.863129][T10048] netlink: 'syz.0.984': attribute type 11 has an invalid length. [ 190.092766][T10063] netlink: 'syz.1.988': attribute type 3 has an invalid length. [ 190.758151][T10069] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 191.175901][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 191.222280][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 191.237799][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 191.276151][T10101] netlink: 'syz.0.996': attribute type 4 has an invalid length. [ 191.283992][T10101] netlink: 152 bytes leftover after parsing attributes in process `syz.0.996'. [ 191.295391][T10093] nbd1: detected capacity change from 0 to 3787601 [ 191.373193][T10089] 8021q: adding VLAN 0 to HW filter on device bond7 [ 191.402193][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.997'. [ 191.477040][T10095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.533496][T10095] bond7: (slave bond0): making interface the new active one [ 191.560116][T10095] bond7: (slave bond0): Enslaving as an active interface with an up link [ 191.620760][T10101] .`: renamed from bond0 (while UP) [ 191.675479][T10117] netlink: 'syz.1.1001': attribute type 8 has an invalid length. [ 191.924470][ T8105] bond7: (slave .`): link status definitely down, disabling slave [ 191.956076][ T8105] bond7: now running without any active interface! [ 192.182812][T10129] bond0 (unregistering): Released all slaves [ 192.293318][ T5830] block nbd1: Receive control failed (result -104) [ 192.344951][T10139] net_ratelimit: 6 callbacks suppressed [ 192.344972][T10139] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 192.685462][ T886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.796835][T10121] Cannot find del_set index 4 as target [ 192.942076][T10153] sctp: [Deprecated]: syz.1.1013 (pid 10153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.942076][T10153] Use struct sctp_sack_info instead [ 193.159372][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.173951][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.210028][T10166] GUP no longer grows the stack in syz.1.1017 (10166): 200000003000-20000000a000 (200000001000) [ 193.257227][T10166] CPU: 1 UID: 0 PID: 10166 Comm: syz.1.1017 Not tainted syzkaller #0 PREEMPT(full) [ 193.257258][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.257270][T10166] Call Trace: [ 193.257278][T10166] [ 193.257287][T10166] dump_stack_lvl+0xe8/0x150 [ 193.257324][T10166] __get_user_pages+0x2453/0x29d0 [ 193.257356][T10166] ? __lock_acquire+0x6b5/0x2cf0 [ 193.257403][T10166] ? __gup_longterm_locked+0xc4e/0x1630 [ 193.257432][T10166] ? down_read_killable+0x1bb/0x340 [ 193.257470][T10166] __gup_longterm_locked+0xdcf/0x1630 [ 193.257526][T10166] gup_fast_fallback+0x1d82/0x22e0 [ 193.257591][T10166] ? __pfx_gup_fast_fallback+0x10/0x10 [ 193.257623][T10166] ? is_valid_gup_args+0x11f/0x200 [ 193.257654][T10166] ? get_user_pages_fast+0x4d/0xb0 [ 193.257686][T10166] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 193.257724][T10166] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 193.257760][T10166] iov_iter_get_pages2+0x5e/0xa0 [ 193.257793][T10166] __se_sys_vmsplice+0x7b3/0x1490 [ 193.257845][T10166] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 193.257879][T10166] ? __pfx_futex_wake+0x10/0x10 [ 193.257918][T10166] ? lockdep_hardirqs_on+0x7a/0x110 [ 193.258010][T10166] do_syscall_64+0x14d/0xf80 [ 193.258037][T10166] ? trace_irq_disable+0x3b/0x150 [ 193.258065][T10166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.258086][T10166] ? clear_bhb_loop+0x40/0x90 [ 193.258113][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.258133][T10166] RIP: 0033:0x7fddb9f9c799 [ 193.258155][T10166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.258182][T10166] RSP: 002b:00007fddbae7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 193.258205][T10166] RAX: ffffffffffffffda RBX: 00007fddba215fa0 RCX: 00007fddb9f9c799 [ 193.258221][T10166] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 193.258233][T10166] RBP: 00007fddba032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 193.258246][T10166] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 193.258258][T10166] R13: 00007fddba216038 R14: 00007fddba215fa0 R15: 00007ffe83b744d8 [ 193.258296][T10166] [ 194.204421][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.448654][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.505434][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.779680][T10206] syzkaller0: entered promiscuous mode [ 194.792278][T10214] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20003 [ 194.810020][T10206] syzkaller0: entered allmulticast mode [ 194.819466][T10207] ip6tnl0: Caught tx_queue_len zero misconfig [ 194.829085][T10207] __nla_validate_parse: 2 callbacks suppressed [ 194.829103][T10207] netlink: 616 bytes leftover after parsing attributes in process `syz.0.1028'. [ 194.847124][T10218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.893229][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 194.943558][T10219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1031'. [ 195.026530][T10219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.035929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.121878][T10228] netlink: 'syz.2.1033': attribute type 10 has an invalid length. [ 195.245033][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.627246][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.903825][T10242] netlink: 'syz.1.1038': attribute type 2 has an invalid length. [ 197.041690][T10223] netlink: 'syz.2.1033': attribute type 309 has an invalid length. [ 197.053884][T10228] bond0: (slave wlan1): Opening slave failed [ 197.118164][T10242] !: entered promiscuous mode [ 197.242464][T10260] ipt_REJECT: TCP_RESET invalid for non-tcp [ 197.250116][T10256] syzkaller0: entered promiscuous mode [ 197.261399][T10256] syzkaller0: entered allmulticast mode [ 197.476346][ T5959] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 197.499044][ T76] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 197.584870][ T5959] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 197.721026][T10278] syzkaller0: entered promiscuous mode [ 197.732944][T10278] syzkaller0: entered allmulticast mode [ 197.742572][T10279] team_slave_1: Caught tx_queue_len zero misconfig [ 197.779324][T10290] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 197.811101][T10290] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 197.855468][ T8105] net_ratelimit: 5 callbacks suppressed [ 197.855488][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.903016][T10292] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1052'. [ 197.937588][T10292] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1052'. [ 198.369500][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.770025][ T5825] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.098416][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.409152][ T5959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.865024][ T12] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 199.873514][ T12] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 200.049525][T10316] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1060'. [ 200.068747][T10316] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1060'. [ 200.094523][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 200.162459][T10319] bridge0: left promiscuous mode [ 200.187948][T10319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.204471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.217654][T10324] bond7: option mode: unable to set because the bond device has slaves [ 200.244537][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.255923][T10325] wg2: entered promiscuous mode [ 200.262079][T10325] wg2: entered allmulticast mode [ 200.424464][T10333] sctp: [Deprecated]: syz.4.1065 (pid 10333) Use of int in max_burst socket option. [ 200.424464][T10333] Use struct sctp_assoc_value instead [ 200.450275][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.497793][T10335] bridge0: entered allmulticast mode [ 200.529388][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'. [ 200.557319][T10337] xfrm1: entered allmulticast mode [ 200.570034][T10335] bridge_slave_1: left allmulticast mode [ 200.577299][T10335] bridge_slave_1: left promiscuous mode [ 200.583217][T10335] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.657105][T10335] bridge_slave_0: left allmulticast mode [ 200.663934][T10335] bridge_slave_0: left promiscuous mode [ 200.672846][T10335] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.686253][ T24] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 200.794714][T10335] bridge0 (unregistering): left allmulticast mode [ 200.879371][T10344] dummy0: entered promiscuous mode [ 200.907678][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.917783][T10343] dummy0: left promiscuous mode [ 200.933765][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.946324][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.973865][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.230085][T10363] netlink: 'syz.0.1076': attribute type 16 has an invalid length. [ 201.238958][T10363] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1076'. [ 201.365384][ T1317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.520337][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 201.776488][T10377] netlink: 'syz.0.1080': attribute type 1 has an invalid length. [ 201.967759][T10377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.985027][T10390] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1083'. [ 202.071494][T10382] bond0: (slave veth5): Enslaving as an active interface with a down link [ 202.399824][T10380] syzkaller0: entered promiscuous mode [ 202.409231][T10380] syzkaller0: entered allmulticast mode [ 202.824854][T10428] Bluetooth: MGMT ver 1.23 [ 203.568165][ T24] net_ratelimit: 6 callbacks suppressed [ 203.568186][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.583036][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.204371][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 204.207291][T10436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.223817][T10436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.233186][T10436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.248913][T10436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.284697][T10436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.306396][T10436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.346884][T10436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.380510][T10439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.430067][T10442] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1096'. [ 204.440120][T10442] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1096'. [ 204.507388][T10451] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.518544][T10451] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.613605][T10456] FAULT_INJECTION: forcing a failure. [ 204.613605][T10456] name failslab, interval 1, probability 0, space 0, times 1 [ 204.628690][T10456] CPU: 0 UID: 0 PID: 10456 Comm: syz.3.1100 Not tainted syzkaller #0 PREEMPT(full) [ 204.628718][T10456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 204.628730][T10456] Call Trace: [ 204.628738][T10456] [ 204.628745][T10456] dump_stack_lvl+0xe8/0x150 [ 204.628778][T10456] should_fail_ex+0x412/0x560 [ 204.628807][T10456] should_failslab+0xa8/0x100 [ 204.628830][T10456] ? skb_clone+0x212/0x3a0 [ 204.628858][T10456] kmem_cache_alloc_noprof+0x87/0x650 [ 204.628887][T10456] ? __netlink_lookup+0xc6/0x8b0 [ 204.628920][T10456] skb_clone+0x212/0x3a0 [ 204.628952][T10456] __netlink_deliver_tap+0x404/0x850 [ 204.628985][T10456] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.629010][T10456] netlink_deliver_tap+0x19c/0x1b0 [ 204.629034][T10456] netlink_unicast+0x7e3/0x9b0 [ 204.629064][T10456] ? __pfx_netlink_unicast+0x10/0x10 [ 204.629086][T10456] ? netlink_sendmsg+0x650/0xb40 [ 204.629107][T10456] ? skb_put+0x11b/0x210 [ 204.629136][T10456] netlink_sendmsg+0x813/0xb40 [ 204.629207][T10456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.629234][T10456] ? aa_sock_msg_perm+0xf1/0x1b0 [ 204.629259][T10456] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.629281][T10456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.629304][T10456] ____sys_sendmsg+0xa68/0xad0 [ 204.629342][T10456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.629381][T10456] ? import_iovec+0x73/0xa0 [ 204.629413][T10456] ___sys_sendmsg+0x2a5/0x360 [ 204.629448][T10456] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.629513][T10456] ? __fget_files+0x2a/0x420 [ 204.629539][T10456] ? __fget_files+0x3a0/0x420 [ 204.629577][T10456] __x64_sys_sendmsg+0x1bd/0x2a0 [ 204.629610][T10456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.629655][T10456] ? __pfx_ksys_write+0x10/0x10 [ 204.629690][T10456] do_syscall_64+0x14d/0xf80 [ 204.629715][T10456] ? trace_irq_disable+0x3b/0x150 [ 204.629741][T10456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.629761][T10456] ? clear_bhb_loop+0x40/0x90 [ 204.629786][T10456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.629806][T10456] RIP: 0033:0x7f806339c799 [ 204.629825][T10456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.629842][T10456] RSP: 002b:00007f806433f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.629864][T10456] RAX: ffffffffffffffda RBX: 00007f8063615fa0 RCX: 00007f806339c799 [ 204.629878][T10456] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 204.629891][T10456] RBP: 00007f806433f090 R08: 0000000000000000 R09: 0000000000000000 [ 204.629902][T10456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.629914][T10456] R13: 00007f8063616038 R14: 00007f8063615fa0 R15: 00007ffd35645df8 [ 204.629946][T10456] [ 204.985427][T10451] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.996067][T10451] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.087512][T10451] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.097748][T10451] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.201341][T10451] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.213963][T10451] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.550911][ T6219] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.569991][ T6219] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.646642][ T6219] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.667417][ T6219] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.744899][ T8104] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.763446][ T8104] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.770061][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 205.810360][ T8104] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.843181][ T8104] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.872100][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 205.920109][T10498] veth1_macvtap: left promiscuous mode [ 205.926882][T10498] macsec0: entered allmulticast mode [ 205.960858][T10498] veth1_macvtap: entered promiscuous mode [ 205.975132][T10498] veth1_macvtap: entered allmulticast mode [ 205.981363][T10498] macsec0: left allmulticast mode [ 206.034259][T10498] veth1_macvtap: left allmulticast mode [ 206.104646][T10507] netlink: 'syz.2.1115': attribute type 7 has an invalid length. [ 206.115770][T10507] netlink: 'syz.2.1115': attribute type 8 has an invalid length. [ 206.160392][T10513] geneve3: entered promiscuous mode [ 206.372992][T10526] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004 [ 206.540458][T10532] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 206.579553][T10532] netlink: 796 bytes leftover after parsing attributes in process `syz.1.1124'. [ 206.639820][T10532] netlink: 796 bytes leftover after parsing attributes in process `syz.1.1124'. [ 206.938758][T10558] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1131'. [ 206.962066][T10560] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1128'. [ 207.080669][T10545] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1128'. [ 208.400692][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 208.418695][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1141'. [ 208.433601][T10604] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 208.463465][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 208.622114][T10608] netlink: 'syz.2.1141': attribute type 29 has an invalid length. [ 208.637316][T10608] netlink: 'syz.2.1141': attribute type 29 has an invalid length. [ 208.764458][ T5829] net_ratelimit: 60 callbacks suppressed [ 208.764478][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.815052][T10620] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 209.121881][T10636] netlink: 'syz.2.1146': attribute type 10 has an invalid length. [ 209.217363][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.302136][T10636] bond0: (slave wlan1): Opening slave failed [ 209.310071][T10641] sch_tbf: burst 240 is lower than device lo mtu (1550) ! [ 209.457772][T10651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.486134][ T29] audit: type=1800 audit(1772334533.602:2): pid=10652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1154" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1090 res=0 errno=0 [ 209.540121][T10641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.761096][T10659] bridge_slave_0: left allmulticast mode [ 209.770151][T10659] bridge_slave_0: left promiscuous mode [ 209.776871][T10659] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.836650][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.856093][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.926872][T10671] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 210.171606][T10659] bridge_slave_1: left allmulticast mode [ 210.178675][T10659] bridge_slave_1: left promiscuous mode [ 210.186544][T10659] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.210584][T10659] bond0: (slave bond_slave_0): Releasing backup interface [ 210.247615][T10659] bond0: (slave bond_slave_1): Releasing backup interface [ 210.307341][T10659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.325259][T10659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.335183][T10659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.343220][T10659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.355255][T10659] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.355397][ T8099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.603799][ T29] audit: type=1107 audit(1772334534.712:3): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 210.802855][T10700] __nla_validate_parse: 6 callbacks suppressed [ 210.802876][T10700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1168'. [ 210.847292][ T5825] IPVS: starting estimator thread 0... [ 210.928766][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 210.944258][T10708] IPVS: using max 34 ests per chain, 81600 per kthread [ 211.075613][T10710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.134878][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1173'. [ 211.875096][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 212.461036][T10788] IPVS: set_ctl: invalid protocol: 46 172.30.1.2:20000 [ 212.739525][T10788] 8021q: VLANs not supported on sit0 [ 212.760464][T10799] hsr0: entered promiscuous mode [ 212.776654][T10799] hsr0: entered allmulticast mode [ 212.796476][T10799] hsr_slave_0: entered allmulticast mode [ 212.814529][T10799] hsr_slave_1: entered allmulticast mode [ 213.498749][T10822] openvswitch: netlink: Flow actions attr not present in new flow. [ 213.644447][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 213.795124][T10822] geneve3: entered promiscuous mode [ 213.833098][T10826] netlink: 'syz.4.1196': attribute type 10 has an invalid length. [ 213.851582][T10826] netlink: 14126 bytes leftover after parsing attributes in process `syz.4.1196'. [ 213.903813][T10834] bond_slave_0: entered promiscuous mode [ 213.909929][T10834] bond_slave_1: entered promiscuous mode [ 213.965141][T10834] vlan2: entered promiscuous mode [ 213.970865][T10834] bond0: entered promiscuous mode [ 213.974917][T10830] netlink: 'syz.2.1198': attribute type 1 has an invalid length. [ 213.978874][T10832] netlink: 'syz.1.1199': attribute type 13 has an invalid length. [ 214.001545][T10834] dummy0: entered promiscuous mode [ 214.203410][T10844] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.213949][T10844] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.311853][T10845] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1202'. [ 214.386237][T10845] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1202'. [ 214.401467][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 214.434243][T10845] netlink: 'syz.2.1202': attribute type 5 has an invalid length. [ 214.442409][T10845] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1202'. [ 214.510756][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 214.513223][ T8105] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.567168][T10852] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 214.610741][ T8105] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.648268][T10844] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.694406][T10844] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.747583][ T8105] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.807575][T10844] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.864341][T10844] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.936265][ T8099] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.008332][T10844] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.025637][T10844] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.067994][T10869] x_tables: duplicate underflow at hook 1 [ 215.141190][T10873] tipc: Enabled bearer , priority 0 [ 215.157546][T10873] syzkaller0: entered promiscuous mode [ 215.173780][T10873] syzkaller0: entered allmulticast mode [ 215.242573][T10869] tipc: Resetting bearer [ 215.257644][T10877] syzkaller1: entered promiscuous mode [ 215.283731][T10877] syzkaller1: entered allmulticast mode [ 215.330310][T10865] tipc: Resetting bearer [ 215.360067][T10865] tipc: Disabling bearer [ 215.447791][T10882] syzkaller1: entered promiscuous mode [ 215.457120][T10882] syzkaller1: entered allmulticast mode [ 215.508701][ T8099] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.518869][ T8099] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.575798][ T8099] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.584830][ T8099] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.653079][ T8099] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.686335][ T8099] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.720512][ T8099] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.745113][ T8099] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.094749][T10909] netlink: 'syz.2.1219': attribute type 10 has an invalid length. [ 216.155499][T10909] __nla_validate_parse: 1 callbacks suppressed [ 216.155533][T10909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1219'. [ 216.219825][T10909] team0: entered promiscuous mode [ 216.299346][T10909] team0: entered allmulticast mode [ 216.322272][T10909] team_slave_0: entered allmulticast mode [ 216.341487][T10909] team_slave_1: entered allmulticast mode [ 216.351145][T10909] bridge0: port 3(team0) entered blocking state [ 216.361167][T10909] bridge0: port 3(team0) entered disabled state [ 216.389002][T10909] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 216.491910][T10916] bond3: Unable to set down delay as MII monitoring is disabled [ 216.504879][T10916] bond3 (unregistering): Released all slaves [ 217.065093][T10936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.072419][T10936] IPv6: NLM_F_CREATE should be set when creating new route [ 217.079936][T10936] IPv6: NLM_F_CREATE should be set when creating new route [ 217.087397][T10936] IPv6: NLM_F_CREATE should be set when creating new route [ 217.436179][T10945] tipc: Enabling of bearer rejected, failed to enable media [ 217.601298][T10949] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 217.763689][T10959] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1240'. [ 217.844345][T10961] netlink: 'syz.1.1240': attribute type 4 has an invalid length. [ 218.726344][T10993] netlink: 'syz.2.1248': attribute type 1 has an invalid length. [ 218.808462][T10992] kthread_run failed with err -4 [ 218.897915][T11007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1252'. [ 218.930548][T10993] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.093192][T11009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.399600][T11023] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1256'. [ 219.427466][T11023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1256'. [ 219.488898][T11023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1256'. [ 220.672863][T11082] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 220.706082][T11087] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1267'. [ 221.335987][ T1751] block nbd1: Possible stuck request ffff888026a10000: control (read@0,4096B). Runtime 30 seconds [ 221.955156][T11114] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 221.974623][T11114] bridge3: entered allmulticast mode [ 222.504177][T11130] tipc: Can't bind to reserved service type 1 [ 223.052484][T11152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1282'. [ 223.068102][T11152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1282'. [ 223.116161][T11158] netlink: 'syz.1.1284': attribute type 21 has an invalid length. [ 223.136686][T11152] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 223.156379][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1285'. [ 223.181153][T11158] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 223.189921][T11158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1284'. [ 223.259635][T11160] netlink: 'syz.4.1285': attribute type 3 has an invalid length. [ 223.288027][T11160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1285'. [ 223.451508][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1287'. [ 223.458447][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 223.484806][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 223.574844][T11171] xt_hashlimit: size too large, truncated to 1048576 [ 223.629860][T11174] netlink: 'syz.3.1289': attribute type 5 has an invalid length. [ 223.962694][T11176] syzkaller0: entered promiscuous mode [ 223.969308][T11176] syzkaller0: entered allmulticast mode [ 224.004738][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'. [ 224.589525][T11213] openvswitch: netlink: IPv4 tunnel dst address is zero [ 224.630468][T11215] sctp: [Deprecated]: syz.4.1302 (pid 11215) Use of int in maxseg socket option. [ 224.630468][T11215] Use struct sctp_assoc_value instead [ 224.924712][T11231] netlink: 'syz.4.1306': attribute type 1 has an invalid length. [ 225.036823][T11231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.042794][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'. [ 225.136936][T11236] bond0: (slave gretap1): making interface the new active one [ 225.200368][T11236] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 225.286539][T11239] bond0 (unregistering): (slave gretap1): Releasing active interface [ 225.299084][T11239] bond0 (unregistering): Released all slaves [ 225.606055][T11241] bond3: (slave ip6gretap1): making interface the new active one [ 225.637405][T11241] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 225.835126][T11254] bond0: (slave rose0): Error: Device can not be enslaved while up [ 226.256523][T11268] netlink: 'syz.4.1315': attribute type 3 has an invalid length. [ 227.349378][T11295] netlink: 'syz.0.1323': attribute type 11 has an invalid length. [ 227.622244][T11269] hsr0: left promiscuous mode [ 227.761822][T11269] bond1: left promiscuous mode [ 227.771776][T11269] veth3: left promiscuous mode [ 227.832460][T11269] geneve3: left promiscuous mode [ 227.907509][ T35] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.948478][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.977738][ T35] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.989965][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.000063][ T35] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.031024][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.051896][ T35] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.073794][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.250083][T11330] IPVS: set_ctl: invalid protocol: 6778 207.218.154.149:31258 [ 228.376950][T11334] __nla_validate_parse: 4 callbacks suppressed [ 228.376971][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'. [ 228.618181][T11344] bond3: entered promiscuous mode [ 228.955049][T11356] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1335'. [ 229.123596][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'. [ 229.360101][T11374] netlink: 'syz.4.1339': attribute type 1 has an invalid length. [ 229.369857][T11374] netlink: 16134 bytes leftover after parsing attributes in process `syz.4.1339'. [ 229.386568][T11375] netlink: 'syz.4.1339': attribute type 1 has an invalid length. [ 229.395454][T11375] netlink: 16134 bytes leftover after parsing attributes in process `syz.4.1339'. [ 230.924958][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 233.360259][T11424] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.417894][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1352'. [ 233.540055][T11424] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.669130][T11424] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.818105][T11424] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.858544][T11444] ieee802154 phy0 wpan0: encryption failed: -22 [ 233.867382][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1358'. [ 234.054060][ T6219] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.082635][ T6219] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.193536][ T1317] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.222335][ T1317] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.432890][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'. [ 234.540618][T11474] netlink: 'syz.1.1368': attribute type 4 has an invalid length. [ 234.556121][T11481] IPVS: length: 140 != 8 [ 234.576614][T11482] netlink: 'syz.1.1368': attribute type 4 has an invalid length. [ 234.929716][T11494] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.937774][T11494] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.002297][T11508] netlink: 'syz.0.1371': attribute type 10 has an invalid length. [ 235.044301][T11508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1371'. [ 235.089877][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1375'. [ 235.180124][T11506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1373'. [ 235.211829][T11506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1373'. [ 235.289471][T11494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.301820][T11494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.442252][T11508] team0: Port device geneve0 added [ 235.450654][ T8105] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.464669][ T8105] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.473419][ T8105] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.483222][ T8105] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.497292][ T8105] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.514609][ T8105] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.536047][ T8105] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.594361][ T8105] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.688924][T11531] tipc: Enabled bearer , priority 0 [ 235.719084][T11527] tipc: Disabling bearer [ 235.738715][T11534] netlink: 'syz.0.1380': attribute type 8 has an invalid length. [ 235.766892][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 235.782771][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1380'. [ 235.813062][T11534] geneve2: entered promiscuous mode [ 235.818722][T11534] geneve2: entered allmulticast mode [ 235.869095][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1382'. [ 235.996707][T11543] macsec1: entered promiscuous mode [ 236.236467][T11559] syzkaller0: entered promiscuous mode [ 236.243628][T11559] syzkaller0: entered allmulticast mode [ 237.817501][T11569] gretap2: entered promiscuous mode [ 238.624455][T11612] bond4: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 238.634082][T11612] bond4: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 238.901178][T11624] __nla_validate_parse: 1 callbacks suppressed [ 238.901200][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1402'. [ 238.913155][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1399'. [ 239.126693][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1404'. [ 239.136767][T11636] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1404'. [ 239.175618][T11631] netlink: 'syz.4.1404': attribute type 1 has an invalid length. [ 239.207909][T11631] bond0: entered promiscuous mode [ 239.213331][T11631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.359301][T11631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.368057][T11631] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 239.378818][T11631] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 239.393730][T11631] bond0: (slave vti0): making interface the new active one [ 239.401179][T11631] vti0: entered promiscuous mode [ 239.408358][T11631] bond0: (slave vti0): Enslaving as an active interface with an up link [ 239.827031][T11664] netlink: 91 bytes leftover after parsing attributes in process `syz.0.1411'. [ 239.856977][T11664] x_tables: duplicate underflow at hook 1 [ 239.965280][T11673] netlink: 'syz.3.1415': attribute type 13 has an invalid length. [ 240.107301][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1415'. [ 240.134816][T11681] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1419'. [ 241.078670][T11709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1425'. [ 242.014922][ T29] audit: type=1800 audit(1772334566.122:4): pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1439" name="memory.events" dev="tmpfs" ino=1522 res=0 errno=0 [ 242.128740][T11755] netlink: 'syz.4.1440': attribute type 1 has an invalid length. [ 242.253605][T11764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1443'. [ 242.263921][T11764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1443'. [ 242.301303][T11755] bond4: (slave gretap3): making interface the new active one [ 242.311624][T11755] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 242.359346][T11766] vlan2: entered allmulticast mode [ 242.370620][T11766] bond4: entered allmulticast mode [ 242.404329][T11766] gretap3: entered allmulticast mode [ 242.452892][T11766] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 243.535557][T11807] bond0: (slave vti0): Releasing backup interface [ 243.572960][T11807] vti0: left promiscuous mode [ 243.625477][T11807] bond4: (slave gretap3): Releasing active interface [ 243.654355][T11807] gretap3: left allmulticast mode [ 244.297261][ T29] audit: type=1800 audit(1772334568.412:5): pid=11813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1455" name="memory.events" dev="tmpfs" ino=1469 res=0 errno=0 [ 244.451901][ T29] audit: type=1107 audit(1772334568.562:6): pid=11826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 245.296149][T11861] netlink: 'syz.2.1466': attribute type 161 has an invalid length. [ 245.337498][T11863] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 245.446223][T11863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.494716][T11863] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 245.539565][T11863] bond0: (slave sit0): Error -95 calling set_mac_address [ 245.642997][T11863] __nla_validate_parse: 31 callbacks suppressed [ 245.643020][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 245.686505][T11863] netlink: zone id is out of range [ 246.619116][T11909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1473'. [ 246.665190][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1475'. [ 246.710781][T11909] netlink: 'syz.0.1473': attribute type 7 has an invalid length. [ 246.744298][T11909] netlink: 'syz.0.1473': attribute type 8 has an invalid length. [ 246.794312][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 246.907754][T11927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1478'. [ 247.129402][T11932] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1478'. [ 247.174522][T11932] nbd: device at index 64 is going down [ 247.195504][T11929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1478'. [ 247.224549][T11929] nbd: device at index 64 is going down [ 247.655144][ T5844] udevd[5844]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 247.718039][T11973] netlink: 'syz.3.1485': attribute type 1 has an invalid length. [ 247.839832][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'. [ 247.900309][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'. [ 247.961097][T11973] bond4: entered promiscuous mode [ 247.967593][T11973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 248.043102][T11981] syzkaller1: entered promiscuous mode [ 248.057443][T11981] syzkaller1: entered allmulticast mode [ 248.077881][T11993] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 248.124037][T11960] bond4: (slave bridge2): making interface the new active one [ 248.140397][T11960] bridge2: entered promiscuous mode [ 248.196105][T11960] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 248.212109][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 248.562490][T12007] bond5: entered promiscuous mode [ 248.570914][T12007] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.681747][T12019] can: request_module (can-proto-0) failed. [ 249.242573][T12042] netlink: 'syz.1.1499': attribute type 1 has an invalid length. [ 249.397174][T12058] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 249.436955][T12058] xt_ecn: cannot match TCP bits for non-tcp packets [ 249.449672][T12064] netlink: 'syz.3.1505': attribute type 83 has an invalid length. [ 249.475771][T12058] netlink: 'syz.4.1503': attribute type 30 has an invalid length. [ 249.557627][T12058] bond6: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 249.581338][T12058] bond6 (unregistering): Released all slaves [ 250.311102][T12112] syzkaller0: entered promiscuous mode [ 250.339351][T12112] syzkaller0: entered allmulticast mode [ 251.327334][T12160] xt_CT: No such helper "snmp_trap" [ 251.406538][ T1751] block nbd1: Possible stuck request ffff888026a10000: control (read@0,4096B). Runtime 60 seconds [ 251.557607][T12175] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20004 [ 251.675548][T12185] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.680510][T12187] netlink: 'syz.4.1531': attribute type 1 has an invalid length. [ 252.007790][T12200] SET target dimension over the limit! [ 252.036127][T12200] __nla_validate_parse: 7 callbacks suppressed [ 252.036147][T12200] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1535'. [ 252.309968][T12214] netlink: 'syz.3.1539': attribute type 8 has an invalid length. [ 252.536452][T12221] openvswitch: netlink: Actions may not be safe on all matching packets [ 252.562763][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1541'. [ 252.928545][T12236] netlink: 'syz.3.1545': attribute type 5 has an invalid length. [ 252.958455][T12238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1547'. [ 253.083880][T12243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1547'. [ 253.179579][T12245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1549'. [ 253.324333][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 253.358601][T12256] team1: entered promiscuous mode [ 253.363711][T12256] team1: entered allmulticast mode [ 253.369662][T12256] 8021q: adding VLAN 0 to HW filter on device team1 [ 253.389765][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 253.402635][T12256] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 253.470444][T12256] team2: entered promiscuous mode [ 253.476094][T12256] team2: entered allmulticast mode [ 253.482011][T12256] 8021q: adding VLAN 0 to HW filter on device team2 [ 254.498146][T12312] tipc: Enabled bearer , priority 0 [ 254.566459][T12312] tipc: Disabling bearer [ 254.761215][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'. [ 254.779847][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1569'. [ 254.797267][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'. [ 254.975746][T12345] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 255.009915][T12345] netlink: 'syz.4.1573': attribute type 7 has an invalid length. [ 255.065392][T12345] netlink: 'syz.4.1573': attribute type 8 has an invalid length. [ 255.092216][T12345] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 255.132414][T12345] netlink: 'syz.4.1573': attribute type 7 has an invalid length. [ 255.178763][T12345] netlink: 'syz.4.1573': attribute type 8 has an invalid length. [ 255.224628][T12345] netlink: 'syz.4.1573': attribute type 1 has an invalid length. [ 255.567279][T12371] syzkaller0: entered allmulticast mode [ 255.594744][T12371] syzkaller0 (unregistering): left allmulticast mode [ 255.889492][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.930333][T12381] raw_sendmsg: syz.3.1584 forgot to set AF_INET. Fix it! [ 255.972460][T12388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.502582][T12402] openvswitch: netlink: ufid size 43 bytes exceeds the range (1, 16) [ 257.215554][T12432] __nla_validate_parse: 37 callbacks suppressed [ 257.215578][T12432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1597'. [ 257.604889][T12449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1600'. [ 257.676195][T12448] validate_nla: 93 callbacks suppressed [ 257.676213][T12448] netlink: 'syz.0.1603': attribute type 8 has an invalid length. [ 257.718449][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 257.750356][T12456] netlink: 'syz.4.1604': attribute type 1 has an invalid length. [ 257.889995][T12461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 257.942611][T12448] bond0: entered promiscuous mode [ 257.980523][T12448] gretap0: entered promiscuous mode [ 258.010044][T12448] debugfs: 'hsr1' already exists in 'hsr' [ 258.036133][T12448] Cannot create hsr debugfs directory [ 258.042047][T12448] hsr1: entered promiscuous mode [ 258.137409][T12459] bond7: (slave geneve4): making interface the new active one [ 258.168811][T12459] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 258.189764][T12461] bond7 (unregistering): (slave geneve4): Releasing active interface [ 258.221426][T12461] bond7 (unregistering): Released all slaves [ 258.538394][T12488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1614'. [ 258.644708][T12502] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 258.775381][T12510] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1620'. [ 258.839549][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 259.362054][T12543] netlink: 'syz.0.1628': attribute type 1 has an invalid length. [ 259.493660][T12558] netlink: 'syz.3.1633': attribute type 11 has an invalid length. [ 259.576331][T12562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1632'. [ 259.588515][T12554] bond8: (slave gretap2): making interface the new active one [ 259.601885][T12554] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 259.641485][T12559] vlan2: entered allmulticast mode [ 259.669601][T12559] bond8: entered allmulticast mode [ 259.675111][T12559] gretap2: entered allmulticast mode [ 259.682947][T12559] bond8: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 259.863460][T12574] netlink: 'syz.3.1636': attribute type 1 has an invalid length. [ 259.978618][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1636'. [ 259.998604][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1636'. [ 260.037796][T12574] bond5: entered promiscuous mode [ 260.077731][T12574] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.469962][T12638] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 262.216803][T12664] netlink: 'syz.4.1655': attribute type 33 has an invalid length. [ 262.225363][T12664] __nla_validate_parse: 2 callbacks suppressed [ 262.225381][T12664] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1655'. [ 262.241292][T12664] `: renamed from team0 (while UP) [ 262.821848][T12584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.359589][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 263.360133][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1663'. [ 263.833104][T12695] syzkaller0: entered promiscuous mode [ 263.840191][T12695] syzkaller0: entered allmulticast mode [ 264.041435][T12735] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1668'. [ 265.473447][ T5486] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 265.565289][T12743] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 265.673431][T12750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1671'. [ 265.706609][T12755] IPv6: Can't replace route, no match found [ 265.713353][T12755] IPv6: Can't replace route, no match found [ 265.715228][T12751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1671'. [ 265.749299][T12743] bond5: entered promiscuous mode [ 265.756097][T12743] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.919615][T12755] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.940916][T12755] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 265.952395][T12755] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 265.967754][T12755] bond5: (slave wireguard0): making interface the new active one [ 265.976075][T12755] wireguard0: entered promiscuous mode [ 265.982751][T12755] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 266.045792][T12764] veth1_macvtap: left promiscuous mode [ 266.074711][T12766] netlink: 'syz.4.1675': attribute type 29 has an invalid length. [ 266.233221][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 266.262884][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 266.274254][T12777] IPVS: set_ctl: invalid protocol: 102 172.30.1.1:20002 [ 266.370360][T12766] netlink: 'syz.4.1675': attribute type 29 has an invalid length. [ 266.430631][T12777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1678'. [ 266.575937][T12779] netlink: 'syz.0.1678': attribute type 2 has an invalid length. [ 266.665817][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1681'. [ 266.808921][T12800] netlink: 'syz.4.1681': attribute type 4 has an invalid length. [ 266.980555][T12791] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.001688][T12795] bond0: left promiscuous mode [ 267.053954][T12795] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.100577][T12795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.122942][T12795] bond7: (slave bond0): Enslaving as an active interface with a down link [ 267.282567][T12812] __nla_validate_parse: 9 callbacks suppressed [ 267.282589][T12812] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1685'. [ 267.489027][T12816] syzkaller0: entered promiscuous mode [ 267.504447][T12816] syzkaller0: entered allmulticast mode [ 267.937069][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1694'. [ 268.106294][T12866] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1695'. [ 268.181053][T12871] netlink: 'syz.0.1696': attribute type 62 has an invalid length. [ 269.506622][T12856] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.518542][T12856] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.797653][T12856] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.837723][T12856] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.903382][T12891] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1699'. [ 269.916322][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 269.929840][T12882] netlink: 'syz.0.1700': attribute type 4 has an invalid length. [ 270.011719][T12886] ip6gretap0: entered promiscuous mode [ 270.050116][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1703'. [ 270.174398][T12856] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.195530][T12856] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.376438][T12856] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.396534][T12856] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.453930][T12911] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 270.476757][T12913] sctp: [Deprecated]: syz.1.1706 (pid 12913) Use of int in max_burst socket option deprecated. [ 270.476757][T12913] Use struct sctp_assoc_value instead [ 270.651320][ T6219] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.696637][ T6219] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.718446][ T6219] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.742686][ T6219] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.768622][ T6219] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.789078][ T6219] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.824890][ T76] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.843608][ T76] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.857406][T12933] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1711'. [ 270.949842][T12933] bond0 (unregistering): Released all slaves [ 270.980392][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1712'. [ 271.238009][T12955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.449738][T12941] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1714'. [ 272.125625][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 272.427009][T12995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1725'. [ 272.453247][T12991] syzkaller0: entered promiscuous mode [ 272.473527][T12991] syzkaller0: entered allmulticast mode [ 272.533434][T12989] tipc: Started in network mode [ 272.541052][T12989] tipc: Node identity 863d6461f1cb, cluster identity 4711 [ 272.560654][T12989] tipc: Enabled bearer , priority 0 [ 272.602795][T12989] tipc: Resetting bearer [ 272.635511][T12989] tipc: Disabling bearer [ 273.106583][T13021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.045832][T13068] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1744'. [ 274.370492][T13088] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1748'. [ 274.434750][T13091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 274.520089][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1747'. [ 274.919334][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1752'. [ 275.013105][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 275.080178][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1756'. [ 275.143157][T13104] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1752'. [ 275.204651][T13117] batadv1: entered promiscuous mode [ 275.209924][T13117] batadv1: entered allmulticast mode [ 275.229428][T13117] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 275.383626][T13126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1759'. [ 275.500423][T13131] m1Ie5nè‹Ò: entered promiscuous mode [ 275.669479][T13143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.038400][T13162] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 276.505991][T13187] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 277.023133][T13216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.077266][T13216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.137143][T13227] nbd2: detected capacity change from 0 to 63 [ 277.220804][T13220] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 277.245668][T13220] bridge4: entered allmulticast mode [ 277.271917][ T5830] block nbd2: Receive control failed (result -104) [ 277.420374][T13239] netlink: 'syz.2.1791': attribute type 3 has an invalid length. [ 277.453526][T13233] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 277.568695][T13246] __nla_validate_parse: 2 callbacks suppressed [ 277.568719][T13246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1792'. [ 278.128521][T13273] Unsupported ieee802154 address type: 0 [ 278.146376][T13278] syzkaller1: entered promiscuous mode [ 278.152219][T13278] syzkaller1: entered allmulticast mode [ 278.179416][T13277] netlink: 'syz.4.1801': attribute type 1 has an invalid length. [ 278.202480][T13272] Unsupported ieee802154 address type: 0 [ 278.414245][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 278.423624][T13284] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1803'. [ 278.444416][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 278.463404][T13286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.495780][T13286] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1804'. [ 278.514715][T13286] .70·: renamed from hsr0 (while UP) [ 278.552125][T13292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1804'. [ 278.570990][T13286] .70·: entered allmulticast mode [ 278.572114][T13292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1804'. [ 278.620508][T13286] hsr_slave_0: entered allmulticast mode [ 278.655954][T13286] hsr_slave_1: entered allmulticast mode [ 278.681251][T13286] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 278.870973][T13300] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1807'. [ 279.071977][T13306] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1810'. [ 279.075252][T13311] C: renamed from team_slave_0 [ 279.111084][T13311] netlink: 'syz.2.1812': attribute type 2 has an invalid length. [ 279.147412][T13311] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1812'. [ 279.187850][T13311] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 279.228083][T13306] tipc: Enabling of bearer rejected, failed to enable media [ 279.821290][T13350] netlink: 'syz.2.1823': attribute type 5 has an invalid length. [ 280.043663][T13369] xt_policy: neither incoming nor outgoing policy selected [ 280.074973][T13369] xt_policy: neither incoming nor outgoing policy selected [ 280.075673][T13379] netlink: 'syz.2.1827': attribute type 13 has an invalid length. [ 280.113968][T13379] netlink: 'syz.2.1827': attribute type 17 has an invalid length. [ 280.421109][T13379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.469367][T13379] team0: left promiscuous mode [ 280.483727][T13379] C: left promiscuous mode [ 280.506716][T13379] team_slave_1: left promiscuous mode [ 280.521834][T13379] team0: left allmulticast mode [ 280.550721][T13379] C: left allmulticast mode [ 280.569795][T13379] team_slave_1: left allmulticast mode [ 280.599371][T13379] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.639385][T13379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.132616][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.169288][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.202300][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.213908][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.227429][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.239218][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.254872][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.304566][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.344959][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.370661][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.405339][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.446184][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.487469][ T1751] block nbd1: Possible stuck request ffff888026a10000: control (read@0,4096B). Runtime 90 seconds [ 281.597234][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.630053][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.663042][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.663637][T13463] lo: Caught tx_queue_len zero misconfig [ 281.731775][T13417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.937445][T13480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.048356][T13472] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 282.250614][T13483] tipc: Resetting bearer [ 283.078645][T13536] __nla_validate_parse: 3 callbacks suppressed [ 283.078666][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'. [ 283.217162][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 283.229025][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'. [ 283.341035][T13540] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 283.403928][T13537] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 283.543682][T13550] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 283.652321][T13555] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1869'. [ 283.680695][T13557] netlink: 'syz.1.1870': attribute type 8 has an invalid length. [ 283.708805][T13555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.757672][T13559] netlink: 'syz.2.1871': attribute type 4 has an invalid length. [ 283.786431][T13557] batman_adv: batadv0: Adding interface: ip6gretap2 [ 283.808061][T13557] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.895168][T13557] batman_adv: batadv0: Interface activated: ip6gretap2 [ 284.058281][T13572] netlink: 'syz.3.1874': attribute type 21 has an invalid length. [ 284.365514][T13586] netlink: 'syz.0.1878': attribute type 1 has an invalid length. [ 284.480560][T13586] 8021q: adding VLAN 0 to HW filter on device bond9 [ 284.614825][T13586] netlink: 'syz.0.1878': attribute type 1 has an invalid length. [ 284.643717][T13590] macvlan2: entered promiscuous mode [ 284.652847][T13590] macvlan2: entered allmulticast mode [ 284.659289][T13590] bond9: entered allmulticast mode [ 284.665730][T13590] bond9: entered promiscuous mode [ 284.672387][T13590] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 284.687036][T13590] team0: Port device macvlan2 added [ 284.730651][T13599] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 284.744704][T13599] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 284.795263][T13608] netlink: 'syz.0.1882': attribute type 2 has an invalid length. [ 284.849712][T13608] !©9: entered promiscuous mode [ 284.854817][T13609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1882'. [ 284.912833][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 285.154786][T13623] nbd: must specify at least one socket [ 285.486207][T13639] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1892'. [ 285.514787][T13639] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1892'. [ 285.679645][T13647] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1895'. [ 285.975905][T13660] netlink: 'syz.1.1901': attribute type 1 has an invalid length. [ 285.983776][T13660] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1901'. [ 286.154156][T13680] netlink: 'syz.0.1902': attribute type 29 has an invalid length. [ 286.163399][T13680] netlink: 'syz.0.1902': attribute type 29 has an invalid length. [ 286.468020][T13693] batman_adv: batadv0: Adding interface: dummy0 [ 286.485991][T13693] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.516657][T13693] batman_adv: batadv0: Interface activated: dummy0 [ 286.617648][T13694] batadv0: mtu less than device minimum [ 286.624715][T13694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.637026][T13694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.648607][T13694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.659905][T13694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.672085][T13694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 286.684282][T13694] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.658693][T13745] vlan4: entered promiscuous mode [ 287.672755][T13745] vlan4: entered allmulticast mode [ 287.808356][T13757] x_tables: duplicate underflow at hook 2 [ 287.988693][T13766] netlink: 'syz.3.1933': attribute type 13 has an invalid length. [ 288.648979][T13799] __nla_validate_parse: 6 callbacks suppressed [ 288.649000][T13799] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1943'. [ 289.031721][T13813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1947'. [ 289.034310][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'. [ 289.060502][T13812] validate_nla: 2 callbacks suppressed [ 289.060525][T13812] netlink: 'syz.4.1944': attribute type 1 has an invalid length. [ 289.307472][T13824] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1950'. [ 289.386228][T13824] syzkaller1: entered promiscuous mode [ 289.391764][T13824] syzkaller1: entered allmulticast mode [ 289.406920][T13833] netlink: 'syz.2.1948': attribute type 1 has an invalid length. [ 289.438909][T13831] netlink: 'syz.2.1948': attribute type 7 has an invalid length. [ 289.453519][T13831] netlink: 'syz.2.1948': attribute type 8 has an invalid length. [ 289.531424][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1948'. [ 290.103801][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'. [ 290.123222][T13860] net_ratelimit: 13 callbacks suppressed [ 290.123243][T13860] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 290.703662][T13889] bridge0: port 1(gretap0) entered blocking state [ 290.722946][T13889] bridge0: port 1(gretap0) entered disabled state [ 290.756262][T13889] gretap0: entered allmulticast mode [ 290.784807][T13900] x_tables: duplicate underflow at hook 2 [ 290.813676][T13889] gretap0: entered promiscuous mode [ 291.115658][T13911] bond6: option lacp_rate: invalid value (128) [ 291.156517][T13911] bond6 (unregistering): Released all slaves [ 291.457705][T13920] ip6erspan0: entered allmulticast mode [ 291.736601][T13935] gretap0: entered promiscuous mode [ 291.753037][T13935] vlan5: entered promiscuous mode [ 291.759753][T13892] lec:lec_atm_close: lec0: Shut down! [ 292.222415][T13956] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1985'. [ 292.555453][T13967] veth0_to_bridge: entered promiscuous mode [ 292.561594][T13967] macvtap2: entered promiscuous mode [ 292.576997][T13967] macvtap2: entered allmulticast mode [ 292.591800][T13967] veth0_to_bridge: entered allmulticast mode [ 292.632802][T13967] veth0_to_bridge: left allmulticast mode [ 292.660578][T13967] veth0_to_bridge: left promiscuous mode [ 292.719567][T13980] netlink: 'syz.1.1989': attribute type 13 has an invalid length. [ 292.934634][ T5825] lec:lec_start_xmit: lec0:No lecd attached [ 293.526108][T14017] bond6 (unregistering): Released all slaves [ 293.662997][T14023] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 293.713769][T14031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2000'. [ 293.746001][T14031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2000'. [ 293.849633][T14039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.582555][T14064] syz.1.2008 (14064) used greatest stack depth: 17472 bytes left [ 295.382329][T14125] bond4: ARP target 9.0.0.0 is already present [ 295.390189][T14125] bond4: option arp_ip_target: invalid value (9) [ 295.400469][T14125] bond4 (unregistering): Released all slaves [ 295.437876][T14124] tunl0: Caught tx_queue_len zero misconfig [ 295.687451][T14136] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 295.848945][T14148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2036'. [ 296.158334][T14165] netlink: 'syz.2.2041': attribute type 1 has an invalid length. [ 296.186348][T14165] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2041'. [ 296.205429][T14162] openvswitch: netlink: Flow actions attr not present in new flow. [ 296.446031][T14150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 296.506495][T14150] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2037'. [ 296.757242][T14186] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.091702][T14188] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2047'. [ 297.138243][T14190] IPv6: addrconf: prefix option has invalid lifetime [ 297.238594][T14194] netlink: 'syz.2.2050': attribute type 10 has an invalid length. [ 297.260136][T14196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2051'. [ 297.270023][T14197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2051'. [ 297.296971][T14194] dummy0: entered promiscuous mode [ 297.305792][T14194] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 297.666802][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 298.124120][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 298.132706][ C1] lec:lec_tx_timeout: lec0 [ 298.137807][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 299.874517][T14301] __nla_validate_parse: 2 callbacks suppressed [ 299.874540][T14301] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2078'. [ 299.991100][T14304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'. [ 300.462514][T14309] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.532426][T14313] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 300.560071][T14313] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2081'. [ 300.588738][T14313] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2081'. [ 300.599750][T14313] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 300.608441][T14313] netlink: 634 bytes leftover after parsing attributes in process `syz.0.2081'. [ 300.617856][T14318] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2082'. [ 300.687647][T11301] page_pool_release_retry() stalled pool shutdown: id 48, 1 inflight 60 sec [ 300.757467][T14320] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 300.780306][T14320] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 300.797248][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2082'. [ 300.890108][T14322] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2084'. [ 300.915180][T14322] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2084'. [ 301.404518][T11307] page_pool_release_retry() stalled pool shutdown: id 49, 1 inflight 60 sec [ 301.634645][T14360] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2092'. [ 301.809785][T14358] bond6: Removing last ns target with arp_interval on [ 302.367338][T14395] nbd: must specify an index to disconnect [ 302.488988][T14402] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 302.515954][T14403] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 302.914561][T14421] x_tables: duplicate underflow at hook 1 [ 302.924489][T14422] No such timeout policy "syz1" [ 302.953593][T14421] No such timeout policy "syz1" [ 303.154430][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 303.162527][ C1] lec:lec_tx_timeout: lec0 [ 303.167716][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 303.170375][T14442] nbd: must specify an index to disconnect [ 303.508755][T14450] syzkaller0: entered promiscuous mode [ 303.525623][T14450] syzkaller0: entered allmulticast mode [ 304.896326][T14482] __nla_validate_parse: 9 callbacks suppressed [ 304.896347][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2125'. [ 304.934423][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2125'. [ 304.943789][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2125'. [ 304.944336][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2125'. [ 304.953804][T14482] netlink: 'syz.2.2125': attribute type 14 has an invalid length. [ 304.994223][T14484] netlink: 'syz.2.2125': attribute type 14 has an invalid length. [ 305.148063][T14495] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2128'. [ 305.172829][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 305.182301][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 305.191434][T14495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 305.204378][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 305.241172][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 305.785509][T14522] netlink: 'syz.1.2135': attribute type 96 has an invalid length. [ 305.918856][T14530] IPv6: NLM_F_REPLACE set, but no existing node found! [ 306.397832][T14555] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 306.723633][T14572] bond10: (slave bond_slave_1): Device is not bonding slave [ 306.763664][T14572] bond10: option active_slave: invalid value (bond_slave_1) [ 306.802126][T14572] bond10 (unregistering): Released all slaves [ 306.974855][T14571] bond10: (slave bond_slave_1): Device is not bonding slave [ 306.992640][T14571] bond10: option active_slave: invalid value (bond_slave_1) [ 307.014670][T14571] bond10 (unregistering): Released all slaves [ 307.416640][T14606] 8021q: VLANs not supported on ipvlan0 [ 307.735694][ T1751] block nbd2: Connection timed out, retrying (0/1 alive) [ 307.743823][ T1751] block nbd2: Connection timed out, retrying (0/1 alive) [ 307.751841][ T1751] block nbd2: Connection timed out, retrying (0/1 alive) [ 307.759995][ T1751] block nbd2: Connection timed out, retrying (0/1 alive) [ 307.773224][ T11] block nbd2: Dead connection, failed to find a fallback [ 308.061592][T14637] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 308.069734][T14639] openvswitch: netlink: Flow key attr not present in new flow. [ 308.092759][T14637] netlink: 'syz.0.2162': attribute type 10 has an invalid length. [ 308.121219][T14637] bond2: (slave dummy0): Releasing active interface [ 308.174217][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 308.182421][ C1] lec:lec_tx_timeout: lec0 [ 308.183350][T14637] dummy0: left allmulticast mode [ 308.187287][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 308.230838][T14637] team0: Port device dummy0 added [ 308.669033][T14668] netlink: 'syz.0.2171': attribute type 10 has an invalid length. [ 310.479098][T14729] bond2: left allmulticast mode [ 310.487396][T14729] xfrm1: left promiscuous mode [ 310.492322][T14729] xfrm1: left allmulticast mode [ 310.497862][T14729] ip6gre1: left promiscuous mode [ 310.502946][T14729] ip6gre1: left allmulticast mode [ 310.515888][T14729] ip6gre2: left promiscuous mode [ 310.531860][T14749] sctp: [Deprecated]: syz.2.2185 (pid 14749) Use of int in maxseg socket option. [ 310.531860][T14749] Use struct sctp_assoc_value instead [ 310.547165][T14729] bond5: left promiscuous mode [ 310.556711][T14729] veth1_to_hsr: left allmulticast mode [ 310.562840][T14729] macvtap1: left promiscuous mode [ 310.569350][T14729] macvtap1: left allmulticast mode [ 310.602183][T14729] geneve2: left promiscuous mode [ 310.618403][T14729] geneve2: left allmulticast mode [ 310.640614][T14729] hsr1: left promiscuous mode [ 310.721186][T14729] bond9: left allmulticast mode [ 310.734167][T14729] bond9: left promiscuous mode [ 310.747414][T14729] macvlan2: left promiscuous mode [ 310.755375][T14729] macvlan2: left allmulticast mode [ 310.772083][T14739] bridge0: entered allmulticast mode [ 310.946706][T14754] __nla_validate_parse: 77 callbacks suppressed [ 310.946730][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2193'. [ 310.957488][T14758] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2191'. [ 311.002825][T14758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2191'. [ 311.056259][ T6219] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.089082][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2192'. [ 311.113105][ T6219] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.134603][ T6219] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.143207][ T6219] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.254974][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2194'. [ 311.564610][T14629] block nbd1: Possible stuck request ffff888026a10000: control (read@0,4096B). Runtime 120 seconds [ 311.728016][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 311.744499][T14783] IPv6: Can't replace route, no match found [ 311.750662][T14777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2200'. [ 311.817034][T14789] tipc: Enabled bearer , priority 10 [ 311.896696][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2199'. [ 312.040274][T14800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2204'. [ 312.052721][T14791] netlink: 'syz.2.2199': attribute type 1 has an invalid length. [ 312.326706][T14811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2206'. [ 312.391453][T14811] veth0_macvtap: left promiscuous mode [ 312.446183][T14808] xt_ecn: cannot match TCP bits for non-tcp packets [ 312.945769][ T5825] tipc: Node number set to 1662033036 [ 313.060845][T14822] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 313.068731][T14822] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 313.168832][T14824] tap0: tun_chr_ioctl cmd 2147767507 [ 313.204450][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 313.212506][ C1] lec:lec_tx_timeout: lec0 [ 313.217366][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 313.372099][T14837] veth0: entered promiscuous mode [ 313.433714][T14836] veth0: left promiscuous mode [ 314.185296][T14877] bridge4: port 1(veth5) entered blocking state [ 314.226722][T14877] bridge4: port 1(veth5) entered disabled state [ 314.243775][T14877] veth5: entered allmulticast mode [ 314.269741][T14877] veth5: entered promiscuous mode [ 314.341114][T14878] bridge4: port 2(veth7) entered blocking state [ 314.350529][T14878] bridge4: port 2(veth7) entered disabled state [ 314.357349][T14878] veth7: entered allmulticast mode [ 314.365532][T14878] veth7: entered promiscuous mode [ 314.385288][T14881] bridge4: port 3(veth0_to_bond) entered blocking state [ 314.402539][T14881] bridge4: port 3(veth0_to_bond) entered disabled state [ 314.419517][T14881] veth0_to_bond: entered allmulticast mode [ 314.430186][T14881] veth0_to_bond: entered promiscuous mode [ 314.849720][T14901] lo: Caught tx_queue_len zero misconfig [ 315.249906][T14921] netlink: 'syz.0.2235': attribute type 10 has an invalid length. [ 315.275992][T14921] syz_tun: entered promiscuous mode [ 315.287703][T14921] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 315.383992][T14931] netlink: 'syz.2.2237': attribute type 21 has an invalid length. [ 315.421668][T14931] netlink: 'syz.2.2237': attribute type 21 has an invalid length. [ 316.147727][T14982] __nla_validate_parse: 5 callbacks suppressed [ 316.147750][T14982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2251'. [ 316.196314][T14982] bond10: option broadcast_neighbor: invalid value (30) [ 316.205897][T14982] bond10 (unregistering): Released all slaves [ 317.328681][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.224250][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 318.232263][ C1] lec:lec_tx_timeout: lec0 [ 318.236979][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 319.354454][ T5191] udevd[5191]: worker [5842] /devices/virtual/block/nbd1 is taking a long time [ 324.364165][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms [ 324.372481][ C1] lec:lec_tx_timeout: lec0 [ 324.377399][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 330.124158][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 330.132231][ C1] lec:lec_tx_timeout: lec0 [ 330.137137][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 335.144381][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 335.152674][ C1] lec:lec_tx_timeout: lec0 [ 335.157433][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 337.384805][ T5191] udevd[5191]: worker [5844] /devices/virtual/block/nbd2 is taking a long time [ 340.164259][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 340.172377][ C1] lec:lec_tx_timeout: lec0 [ 340.177122][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 341.645239][T14629] block nbd1: Possible stuck request ffff888026a10000: control (read@0,4096B). Runtime 150 seconds [ 345.184338][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 345.193615][ C1] lec:lec_tx_timeout: lec0 [ 345.198753][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 350.214407][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 350.222709][ C1] lec:lec_tx_timeout: lec0 [ 350.227484][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 356.044163][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 356.052291][ C1] lec:lec_tx_timeout: lec0 [ 356.057404][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 361.064167][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 361.072303][ C1] lec:lec_tx_timeout: lec0 [ 361.077271][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 366.084193][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 366.092325][ C1] lec:lec_tx_timeout: lec0 [ 366.097548][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 371.104191][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 371.112235][ C1] lec:lec_tx_timeout: lec0 [ 371.117208][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 371.734416][T14629] block nbd1: Possible stuck request ffff888026a10000: control (read@0,4096B). Runtime 180 seconds [ 373.438224][ T5191] udevd[5191]: worker [5842] /devices/virtual/block/nbd1 timeout; kill it [ 373.446943][ T5191] udevd[5191]: seq 15617 '/devices/virtual/block/nbd1' killed [ 376.124188][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 376.132245][ C1] lec:lec_tx_timeout: lec0 [ 376.137474][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 378.769434][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.144200][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 381.152257][ C1] lec:lec_tx_timeout: lec0 [ 381.157120][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 386.164151][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 386.172344][ C1] lec:lec_tx_timeout: lec0 [ 386.176972][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 391.184249][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 391.193076][ C1] lec:lec_tx_timeout: lec0 [ 391.197695][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 396.204391][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 396.212509][ C1] lec:lec_tx_timeout: lec0 [ 396.217313][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 401.224258][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 401.232498][ C1] lec:lec_tx_timeout: lec0 [ 401.237254][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 401.805675][T14629] block nbd1: Possible stuck request ffff888026a10000: control (read@0,4096B). Runtime 210 seconds [ 407.564212][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 407.572375][ C1] lec:lec_tx_timeout: lec0 [ 407.577407][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 413.324121][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 413.332222][ C1] lec:lec_tx_timeout: lec0 [ 413.337162][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 419.084126][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 419.092152][ C1] lec:lec_tx_timeout: lec0 [ 419.097124][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 424.104309][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 424.112321][ C1] lec:lec_tx_timeout: lec0 [ 424.116972][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 429.124256][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 429.132491][ C1] lec:lec_tx_timeout: lec0 [ 429.137445][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 431.885704][T14629] block nbd1: Possible stuck request ffff888026a10000: control (read@0,4096B). Runtime 240 seconds [ 434.144148][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 434.152361][ C1] lec:lec_tx_timeout: lec0 [ 434.157545][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 439.164561][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 439.172777][ C1] lec:lec_tx_timeout: lec0 [ 439.177510][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 440.207273][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.184475][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 444.192682][ C1] lec:lec_tx_timeout: lec0 [ 444.197564][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 445.914397][T15014] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 446.092192][T15028] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2255'. [ 446.155378][T15029] netlink: 'syz.2.2259': attribute type 11 has an invalid length. [ 446.456700][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2263'. [ 446.499339][T15047] tc_dump_action: action bad kind [ 446.597742][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2266'. [ 446.637307][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2266'. [ 446.679888][T15060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2268'. [ 446.690477][T15060] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2268'. [ 447.164255][T15089] sctp: [Deprecated]: syz.4.2273 (pid 15089) Use of int in max_burst socket option. [ 447.164255][T15089] Use struct sctp_assoc_value instead [ 447.295863][T15096] IPVS: Error connecting to the multicast addr [ 447.436395][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2278'. [ 448.178426][T15144] tipc: Enabling of bearer rejected, failed to enable media [ 448.317607][T15152] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2289'. [ 448.491308][T15159] xt_hashlimit: size too large, truncated to 1048576 [ 448.500518][ T8099] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.544397][ T8099] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.548992][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'. [ 448.642818][ T8099] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.670619][ T8099] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.749707][T15173] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2292'. [ 449.111828][T15166] bond0: (slave dummy0): Releasing backup interface [ 449.145114][T15166] dummy0: left promiscuous mode [ 449.204310][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 449.213007][ C1] lec:lec_tx_timeout: lec0 [ 449.218004][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 450.565832][T15248] netlink: 'syz.2.2313': attribute type 10 has an invalid length. [ 451.469597][T15286] __nla_validate_parse: 4 callbacks suppressed [ 451.469620][T15286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2325'. [ 451.515534][T15286] ip6gre1: entered promiscuous mode [ 451.531030][T15286] ip6gre1: entered allmulticast mode [ 451.555722][T15287] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2322'. [ 451.574268][T15287] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2322'. [ 451.655941][T15301] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2327'. [ 451.909744][T15312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2332'. [ 451.919789][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2332'. [ 451.942184][T15313] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 452.211324][T15323] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2335'. [ 452.510954][T15334] tipc: Started in network mode [ 452.544274][T15334] tipc: Node identity 080211, cluster identity 4711 [ 452.551213][T15334] tipc: Enabled bearer , priority 0 [ 452.630198][T15334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.681651][T15339] netlink: 'syz.4.2337': attribute type 7 has an invalid length. [ 453.053896][T15368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2345'. [ 453.504864][T15399] netlink: 'syz.3.2354': attribute type 1 has an invalid length. [ 453.554329][T15399] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2354'. [ 453.573672][T15399] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2354'. [ 453.669564][ T6219] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.700249][ T6219] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.713908][ T5899] tipc: Node number set to 134353152 [ 453.720634][ T6219] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.796167][T15396] syzkaller0: entered promiscuous mode [ 453.801990][T15396] syzkaller0: entered allmulticast mode [ 453.814582][ T6219] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.164535][T15422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.004126][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 455.012477][ C1] lec:lec_tx_timeout: lec0 [ 455.017947][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 456.275150][T15459] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 456.290607][T15459] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 456.541968][T15468] openvswitch: netlink: IP tunnel TTL not specified. [ 456.750755][T15488] __nla_validate_parse: 8 callbacks suppressed [ 456.750780][T15488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2380'. [ 456.861210][T15498] FAULT_INJECTION: forcing a failure. [ 456.861210][T15498] name failslab, interval 1, probability 0, space 0, times 0 [ 456.932899][T15498] CPU: 1 UID: 0 PID: 15498 Comm: syz.3.2383 Not tainted syzkaller #0 PREEMPT(full) [ 456.932930][T15498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.932942][T15498] Call Trace: [ 456.932952][T15498] [ 456.932960][T15498] dump_stack_lvl+0xe8/0x150 [ 456.933003][T15498] should_fail_ex+0x412/0x560 [ 456.933032][T15498] should_failslab+0xa8/0x100 [ 456.933060][T15498] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 456.933082][T15498] ? __lock_acquire+0x6b5/0x2cf0 [ 456.933107][T15498] ? __kernfs_new_node+0xa9/0x8e0 [ 456.933141][T15498] kstrdup+0x42/0x100 [ 456.933168][T15498] __kernfs_new_node+0xa9/0x8e0 [ 456.933194][T15498] ? arch_stack_walk+0xfb/0x150 [ 456.933226][T15498] ? __lock_acquire+0x6b5/0x2cf0 [ 456.933250][T15498] ? __pfx___kernfs_new_node+0x10/0x10 [ 456.933288][T15498] ? kernfs_root+0x1c/0x230 [ 456.933322][T15498] ? kernfs_root+0x1c/0x230 [ 456.933346][T15498] ? kernfs_root+0x1c/0x230 [ 456.933369][T15498] ? kernfs_root+0x1c/0x230 [ 456.933399][T15498] kernfs_new_node+0x102/0x210 [ 456.933433][T15498] kernfs_create_dir_ns+0x44/0x130 [ 456.933466][T15498] sysfs_create_dir_ns+0x12f/0x2a0 [ 456.933496][T15498] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 456.933525][T15498] ? do_raw_spin_unlock+0xf5/0x210 [ 456.933550][T15498] kobject_add_internal+0x62b/0xd00 [ 456.933592][T15498] kobject_add+0x163/0x240 [ 456.933627][T15498] ? __pfx_kobject_add+0x10/0x10 [ 456.933657][T15498] ? do_raw_spin_unlock+0xf5/0x210 [ 456.933682][T15498] ? get_device_parent+0x366/0x3a0 [ 456.933717][T15498] device_add+0x408/0xb70 [ 456.933752][T15498] device_create+0x269/0x300 [ 456.933777][T15498] ? timer_init_key+0x161/0x2f0 [ 456.933801][T15498] ? __pfx_device_create+0x10/0x10 [ 456.933824][T15498] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 456.933864][T15498] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 456.933911][T15498] ? __pfx_stack_trace_save+0x10/0x10 [ 456.933943][T15498] ? stack_depot_save_flags+0x33/0x810 [ 456.933974][T15498] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 456.934001][T15498] ? __kasan_kmalloc+0x93/0xb0 [ 456.934029][T15498] hwsim_new_radio_nl+0xf35/0x1bd0 [ 456.934083][T15498] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 456.934126][T15498] ? rcu_is_watching+0x15/0xb0 [ 456.934154][T15498] ? trace_kmalloc+0x2a/0x110 [ 456.934182][T15498] ? __nla_parse+0x40/0x60 [ 456.934213][T15498] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 456.934254][T15498] genl_family_rcv_msg_doit+0x22a/0x330 [ 456.934301][T15498] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 456.934347][T15498] ? bpf_lsm_capable+0x9/0x20 [ 456.934371][T15498] ? security_capable+0x7e/0x2c0 [ 456.934402][T15498] genl_rcv_msg+0x61c/0x7a0 [ 456.934438][T15498] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.934465][T15498] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 456.934493][T15498] ? __lock_acquire+0x6b5/0x2cf0 [ 456.934531][T15498] netlink_rcv_skb+0x232/0x4b0 [ 456.934556][T15498] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.934586][T15498] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.934630][T15498] ? down_read+0x272/0x2e0 [ 456.934656][T15498] ? genl_rcv+0xd/0x40 [ 456.934687][T15498] genl_rcv+0x28/0x40 [ 456.934712][T15498] netlink_unicast+0x80f/0x9b0 [ 456.934744][T15498] ? __pfx_netlink_unicast+0x10/0x10 [ 456.934769][T15498] ? netlink_sendmsg+0x650/0xb40 [ 456.934792][T15498] ? skb_put+0x11b/0x210 [ 456.934825][T15498] netlink_sendmsg+0x813/0xb40 [ 456.934860][T15498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.934890][T15498] ? aa_sock_msg_perm+0xf1/0x1b0 [ 456.934917][T15498] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.934940][T15498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.934963][T15498] ____sys_sendmsg+0xa68/0xad0 [ 456.935004][T15498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.935043][T15498] ? import_iovec+0x73/0xa0 [ 456.935075][T15498] ___sys_sendmsg+0x2a5/0x360 [ 456.935112][T15498] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.935184][T15498] ? __fget_files+0x2a/0x420 [ 456.935210][T15498] ? __fget_files+0x3a0/0x420 [ 456.935250][T15498] __x64_sys_sendmsg+0x1bd/0x2a0 [ 456.935291][T15498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.935332][T15498] ? __pfx_ksys_write+0x10/0x10 [ 456.935368][T15498] do_syscall_64+0x14d/0xf80 [ 456.935448][T15498] ? trace_irq_disable+0x3b/0x150 [ 456.935477][T15498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.935498][T15498] ? clear_bhb_loop+0x40/0x90 [ 456.935524][T15498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.935544][T15498] RIP: 0033:0x7f806339c799 [ 456.935564][T15498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.935583][T15498] RSP: 002b:00007f806433f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.935606][T15498] RAX: ffffffffffffffda RBX: 00007f8063615fa0 RCX: 00007f806339c799 [ 456.935621][T15498] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 456.935633][T15498] RBP: 00007f806433f090 R08: 0000000000000000 R09: 0000000000000000 [ 456.935646][T15498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.935658][T15498] R13: 00007f8063616038 R14: 00007f8063615fa0 R15: 00007ffd35645df8 [ 456.935693][T15498] [ 457.504302][T15498] kobject: kobject_add_internal failed for hwsim30 (error: -12 parent: mac80211_hwsim) [ 458.544707][T15494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2381'. [ 458.831709][T15523] infiniband !yz!: set down [ 458.894343][T15523] infiniband !yz!: added team_slave_0 [ 459.067368][T15523] RDS/IB: !yz!: added [ 459.098629][T15523] smc: adding ib device !yz! with port count 1 [ 459.118897][T15545] xt_hashlimit: size too large, truncated to 1048576 [ 459.136598][T15545] xt_hashlimit: overflow, try lower: 0/0 [ 459.144453][T15523] smc: ib device !yz! port 1 has no pnetid [ 459.155423][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'. [ 459.229965][T15547] FAULT_INJECTION: forcing a failure. [ 459.229965][T15547] name failslab, interval 1, probability 0, space 0, times 0 [ 459.243308][T15547] CPU: 1 UID: 0 PID: 15547 Comm: syz.3.2396 Not tainted syzkaller #0 PREEMPT(full) [ 459.243335][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.243347][T15547] Call Trace: [ 459.243355][T15547] [ 459.243364][T15547] dump_stack_lvl+0xe8/0x150 [ 459.243399][T15547] should_fail_ex+0x412/0x560 [ 459.243430][T15547] should_failslab+0xa8/0x100 [ 459.243453][T15547] ? __kernfs_new_node+0xe9/0x8e0 [ 459.243481][T15547] kmem_cache_alloc_noprof+0x87/0x650 [ 459.243520][T15547] __kernfs_new_node+0xe9/0x8e0 [ 459.243546][T15547] ? arch_stack_walk+0xfb/0x150 [ 459.243579][T15547] ? __pfx___kernfs_new_node+0x10/0x10 [ 459.243607][T15547] ? kernfs_root+0x1c/0x230 [ 459.243638][T15547] ? kernfs_root+0x1c/0x230 [ 459.243661][T15547] ? kernfs_root+0x1c/0x230 [ 459.243682][T15547] ? kernfs_root+0x1c/0x230 [ 459.243712][T15547] kernfs_new_node+0x102/0x210 [ 459.243744][T15547] kernfs_create_dir_ns+0x44/0x130 [ 459.243777][T15547] sysfs_create_dir_ns+0x12f/0x2a0 [ 459.243808][T15547] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 459.243837][T15547] ? do_raw_spin_unlock+0xf5/0x210 [ 459.243863][T15547] kobject_add_internal+0x62b/0xd00 [ 459.243904][T15547] kobject_add+0x163/0x240 [ 459.243940][T15547] ? __pfx_kobject_add+0x10/0x10 [ 459.243968][T15547] ? do_raw_spin_unlock+0xf5/0x210 [ 459.243993][T15547] ? get_device_parent+0x366/0x3a0 [ 459.244034][T15547] device_add+0x408/0xb70 [ 459.244077][T15547] device_create+0x269/0x300 [ 459.244102][T15547] ? timer_init_key+0x161/0x2f0 [ 459.244127][T15547] ? __pfx_device_create+0x10/0x10 [ 459.244150][T15547] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 459.244188][T15547] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 459.244236][T15547] ? __pfx_stack_trace_save+0x10/0x10 [ 459.244261][T15547] ? stack_depot_save_flags+0x33/0x810 [ 459.244294][T15547] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 459.244322][T15547] ? __kasan_kmalloc+0x93/0xb0 [ 459.244356][T15547] hwsim_new_radio_nl+0xf35/0x1bd0 [ 459.244410][T15547] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 459.244453][T15547] ? rcu_is_watching+0x15/0xb0 [ 459.244481][T15547] ? trace_kmalloc+0x2a/0x110 [ 459.244509][T15547] ? __nla_parse+0x40/0x60 [ 459.244541][T15547] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 459.244582][T15547] genl_family_rcv_msg_doit+0x22a/0x330 [ 459.244620][T15547] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 459.244665][T15547] ? bpf_lsm_capable+0x9/0x20 [ 459.244690][T15547] ? security_capable+0x7e/0x2c0 [ 459.244722][T15547] genl_rcv_msg+0x61c/0x7a0 [ 459.244759][T15547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.244787][T15547] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 459.244818][T15547] ? __lock_acquire+0x6b5/0x2cf0 [ 459.244857][T15547] netlink_rcv_skb+0x232/0x4b0 [ 459.244883][T15547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.244914][T15547] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.244959][T15547] ? down_read+0x272/0x2e0 [ 459.244986][T15547] ? genl_rcv+0xd/0x40 [ 459.245017][T15547] genl_rcv+0x28/0x40 [ 459.245043][T15547] netlink_unicast+0x80f/0x9b0 [ 459.245085][T15547] ? __pfx_netlink_unicast+0x10/0x10 [ 459.245110][T15547] ? netlink_sendmsg+0x650/0xb40 [ 459.245132][T15547] ? skb_put+0x11b/0x210 [ 459.245165][T15547] netlink_sendmsg+0x813/0xb40 [ 459.245201][T15547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.245229][T15547] ? aa_sock_msg_perm+0xf1/0x1b0 [ 459.245256][T15547] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.245281][T15547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.245304][T15547] ____sys_sendmsg+0xa68/0xad0 [ 459.245344][T15547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.245385][T15547] ? import_iovec+0x73/0xa0 [ 459.245418][T15547] ___sys_sendmsg+0x2a5/0x360 [ 459.245455][T15547] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.245527][T15547] ? __fget_files+0x2a/0x420 [ 459.245554][T15547] ? __fget_files+0x3a0/0x420 [ 459.245594][T15547] __x64_sys_sendmsg+0x1bd/0x2a0 [ 459.245627][T15547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.245668][T15547] ? __pfx_ksys_write+0x10/0x10 [ 459.245703][T15547] do_syscall_64+0x14d/0xf80 [ 459.245728][T15547] ? trace_irq_disable+0x3b/0x150 [ 459.245755][T15547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.245775][T15547] ? clear_bhb_loop+0x40/0x90 [ 459.245801][T15547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.245821][T15547] RIP: 0033:0x7f806339c799 [ 459.245842][T15547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.245859][T15547] RSP: 002b:00007f806433f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.245883][T15547] RAX: ffffffffffffffda RBX: 00007f8063615fa0 RCX: 00007f806339c799 [ 459.245898][T15547] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 459.245910][T15547] RBP: 00007f806433f090 R08: 0000000000000000 R09: 0000000000000000 [ 459.245922][T15547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.245934][T15547] R13: 00007f8063616038 R14: 00007f8063615fa0 R15: 00007ffd35645df8 [ 459.245969][T15547] [ 459.745588][T15547] kobject: kobject_add_internal failed for hwsim31 (error: -12 parent: mac80211_hwsim) [ 459.903057][T15561] 8021q: VLANs not supported on wg0 [ 460.044260][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 460.052353][ C1] lec:lec_tx_timeout: lec0 [ 460.057315][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 460.587842][T15598] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2407'. [ 460.601104][T15598] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2407'. [ 460.708657][T15602] IPv6: NLM_F_REPLACE set, but no existing node found! [ 460.727641][T15602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2408'. [ 460.904935][T15606] netlink: 'syz.0.2410': attribute type 4 has an invalid length. [ 461.034226][T15609] FAULT_INJECTION: forcing a failure. [ 461.034226][T15609] name failslab, interval 1, probability 0, space 0, times 0 [ 461.054323][T15606] netlink: 'syz.0.2410': attribute type 4 has an invalid length. [ 461.127930][T15609] CPU: 1 UID: 0 PID: 15609 Comm: syz.2.2411 Not tainted syzkaller #0 PREEMPT(full) [ 461.127960][T15609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.127972][T15609] Call Trace: [ 461.127981][T15609] [ 461.127990][T15609] dump_stack_lvl+0xe8/0x150 [ 461.128025][T15609] should_fail_ex+0x412/0x560 [ 461.128055][T15609] should_failslab+0xa8/0x100 [ 461.128079][T15609] ? __kernfs_new_node+0xe9/0x8e0 [ 461.128108][T15609] kmem_cache_alloc_noprof+0x87/0x650 [ 461.128140][T15609] ? kernfs_add_one+0x477/0x5c0 [ 461.128174][T15609] __kernfs_new_node+0xe9/0x8e0 [ 461.128209][T15609] ? __pfx___kernfs_new_node+0x10/0x10 [ 461.128237][T15609] ? kernfs_root+0x1c/0x230 [ 461.128270][T15609] ? kernfs_root+0x1c/0x230 [ 461.128296][T15609] ? kernfs_root+0x1c/0x230 [ 461.128328][T15609] ? kernfs_root+0x1c/0x230 [ 461.128360][T15609] kernfs_new_node+0x102/0x210 [ 461.128394][T15609] __kernfs_create_file+0x4b/0x2e0 [ 461.128419][T15609] sysfs_add_file_mode_ns+0x238/0x300 [ 461.128453][T15609] sysfs_create_file_ns+0x12b/0x1b0 [ 461.128481][T15609] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 461.128510][T15609] ? __dev_fwnode+0x50/0x80 [ 461.128540][T15609] ? device_create_file+0xf4/0x1b0 [ 461.128572][T15609] device_add+0x440/0xb70 [ 461.128608][T15609] device_create+0x269/0x300 [ 461.128632][T15609] ? timer_init_key+0x161/0x2f0 [ 461.128658][T15609] ? __pfx_device_create+0x10/0x10 [ 461.128680][T15609] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 461.128721][T15609] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 461.128768][T15609] ? __pfx_stack_trace_save+0x10/0x10 [ 461.128794][T15609] ? stack_depot_save_flags+0x33/0x810 [ 461.128826][T15609] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 461.128855][T15609] ? __kasan_kmalloc+0x93/0xb0 [ 461.128889][T15609] hwsim_new_radio_nl+0xf35/0x1bd0 [ 461.128945][T15609] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 461.128986][T15609] ? rcu_is_watching+0x15/0xb0 [ 461.129013][T15609] ? trace_kmalloc+0x2a/0x110 [ 461.129039][T15609] ? __nla_parse+0x40/0x60 [ 461.129067][T15609] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 461.129108][T15609] genl_family_rcv_msg_doit+0x22a/0x330 [ 461.129145][T15609] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 461.129186][T15609] ? bpf_lsm_capable+0x9/0x20 [ 461.129210][T15609] ? security_capable+0x7e/0x2c0 [ 461.129240][T15609] genl_rcv_msg+0x61c/0x7a0 [ 461.129277][T15609] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.129314][T15609] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 461.129344][T15609] ? __lock_acquire+0x6b5/0x2cf0 [ 461.129381][T15609] netlink_rcv_skb+0x232/0x4b0 [ 461.129406][T15609] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.129436][T15609] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.129479][T15609] ? down_read+0x272/0x2e0 [ 461.129506][T15609] ? genl_rcv+0xd/0x40 [ 461.129535][T15609] genl_rcv+0x28/0x40 [ 461.129561][T15609] netlink_unicast+0x80f/0x9b0 [ 461.129592][T15609] ? __pfx_netlink_unicast+0x10/0x10 [ 461.129617][T15609] ? netlink_sendmsg+0x650/0xb40 [ 461.129639][T15609] ? skb_put+0x11b/0x210 [ 461.129670][T15609] netlink_sendmsg+0x813/0xb40 [ 461.129705][T15609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.129733][T15609] ? aa_sock_msg_perm+0xf1/0x1b0 [ 461.129758][T15609] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.129781][T15609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.129804][T15609] ____sys_sendmsg+0xa68/0xad0 [ 461.129844][T15609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.129885][T15609] ? import_iovec+0x73/0xa0 [ 461.129917][T15609] ___sys_sendmsg+0x2a5/0x360 [ 461.129952][T15609] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.130021][T15609] ? __fget_files+0x2a/0x420 [ 461.130048][T15609] ? __fget_files+0x3a0/0x420 [ 461.130087][T15609] __x64_sys_sendmsg+0x1bd/0x2a0 [ 461.130119][T15609] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.130159][T15609] ? __pfx_ksys_write+0x10/0x10 [ 461.130210][T15609] do_syscall_64+0x14d/0xf80 [ 461.130236][T15609] ? trace_irq_disable+0x3b/0x150 [ 461.130263][T15609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.130283][T15609] ? clear_bhb_loop+0x40/0x90 [ 461.130316][T15609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.130336][T15609] RIP: 0033:0x7fd1e719c799 [ 461.130356][T15609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.130380][T15609] RSP: 002b:00007fd1e7fb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.130401][T15609] RAX: ffffffffffffffda RBX: 00007fd1e7415fa0 RCX: 00007fd1e719c799 [ 461.130415][T15609] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 461.130427][T15609] RBP: 00007fd1e7fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 461.130438][T15609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.130449][T15609] R13: 00007fd1e7416038 R14: 00007fd1e7415fa0 R15: 00007fffe985dae8 [ 461.130484][T15609] [ 461.691514][T15618] netlink: 'syz.0.2414': attribute type 6 has an invalid length. [ 461.844985][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 461.853900][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 461.964989][T14629] block nbd1: Possible stuck request ffff888026a10000: control (read@0,4096B). Runtime 270 seconds [ 462.072512][T15637] macsec1: entered allmulticast mode [ 462.094110][T15637] macsec0: entered allmulticast mode [ 462.318280][T15652] netlink: 'syz.0.2422': attribute type 13 has an invalid length. [ 462.345202][T15652] netlink: 'syz.0.2422': attribute type 17 has an invalid length. [ 462.585590][T15652] syz_tun: left promiscuous mode [ 462.600922][T15652] 8021q: adding VLAN 0 to HW filter on device .` [ 462.622776][T15652] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.659570][T15652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.836348][T15662] netlink: 'syz.3.2424': attribute type 21 has an invalid length. [ 462.853344][T15662] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2424'. [ 462.870786][T15662] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2424'. [ 462.882829][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'. [ 463.047467][T15676] FAULT_INJECTION: forcing a failure. [ 463.047467][T15676] name failslab, interval 1, probability 0, space 0, times 0 [ 463.090111][T15676] CPU: 1 UID: 0 PID: 15676 Comm: syz.3.2427 Not tainted syzkaller #0 PREEMPT(full) [ 463.090142][T15676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 463.090154][T15676] Call Trace: [ 463.090162][T15676] [ 463.090171][T15676] dump_stack_lvl+0xe8/0x150 [ 463.090206][T15676] should_fail_ex+0x412/0x560 [ 463.090236][T15676] should_failslab+0xa8/0x100 [ 463.090260][T15676] ? __kernfs_new_node+0xe9/0x8e0 [ 463.090288][T15676] kmem_cache_alloc_noprof+0x87/0x650 [ 463.090319][T15676] ? kernfs_add_one+0x477/0x5c0 [ 463.090353][T15676] __kernfs_new_node+0xe9/0x8e0 [ 463.090387][T15676] ? __pfx___kernfs_new_node+0x10/0x10 [ 463.090414][T15676] ? kernfs_root+0x1c/0x230 [ 463.090447][T15676] ? kernfs_root+0x1c/0x230 [ 463.090472][T15676] ? kernfs_root+0x1c/0x230 [ 463.090494][T15676] ? kernfs_root+0x1c/0x230 [ 463.090523][T15676] kernfs_new_node+0x102/0x210 [ 463.090555][T15676] __kernfs_create_file+0x4b/0x2e0 [ 463.090578][T15676] sysfs_add_file_mode_ns+0x238/0x300 [ 463.090612][T15676] sysfs_create_file_ns+0x12b/0x1b0 [ 463.090638][T15676] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 463.090666][T15676] ? __dev_fwnode+0x50/0x80 [ 463.090695][T15676] ? device_create_file+0xf4/0x1b0 [ 463.090725][T15676] device_add+0x440/0xb70 [ 463.090758][T15676] device_create+0x269/0x300 [ 463.090781][T15676] ? timer_init_key+0x161/0x2f0 [ 463.090807][T15676] ? __pfx_device_create+0x10/0x10 [ 463.090827][T15676] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 463.090867][T15676] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 463.090913][T15676] ? __pfx_stack_trace_save+0x10/0x10 [ 463.090939][T15676] ? stack_depot_save_flags+0x33/0x810 [ 463.090969][T15676] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 463.090997][T15676] ? __kasan_kmalloc+0x93/0xb0 [ 463.091028][T15676] hwsim_new_radio_nl+0xf35/0x1bd0 [ 463.091097][T15676] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 463.091139][T15676] ? rcu_is_watching+0x15/0xb0 [ 463.091165][T15676] ? trace_kmalloc+0x2a/0x110 [ 463.091191][T15676] ? __nla_parse+0x40/0x60 [ 463.091219][T15676] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 463.091256][T15676] genl_family_rcv_msg_doit+0x22a/0x330 [ 463.091294][T15676] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 463.091335][T15676] ? bpf_lsm_capable+0x9/0x20 [ 463.091359][T15676] ? security_capable+0x7e/0x2c0 [ 463.091389][T15676] genl_rcv_msg+0x61c/0x7a0 [ 463.091426][T15676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.091453][T15676] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 463.091482][T15676] ? __lock_acquire+0x6b5/0x2cf0 [ 463.091519][T15676] netlink_rcv_skb+0x232/0x4b0 [ 463.091543][T15676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.091575][T15676] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.091618][T15676] ? down_read+0x272/0x2e0 [ 463.091644][T15676] ? genl_rcv+0xd/0x40 [ 463.091673][T15676] genl_rcv+0x28/0x40 [ 463.091699][T15676] netlink_unicast+0x80f/0x9b0 [ 463.091729][T15676] ? __pfx_netlink_unicast+0x10/0x10 [ 463.091753][T15676] ? netlink_sendmsg+0x650/0xb40 [ 463.091775][T15676] ? skb_put+0x11b/0x210 [ 463.091806][T15676] netlink_sendmsg+0x813/0xb40 [ 463.091841][T15676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.091870][T15676] ? aa_sock_msg_perm+0xf1/0x1b0 [ 463.091895][T15676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 463.091919][T15676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.091941][T15676] ____sys_sendmsg+0xa68/0xad0 [ 463.091982][T15676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.092022][T15676] ? import_iovec+0x73/0xa0 [ 463.092052][T15676] ___sys_sendmsg+0x2a5/0x360 [ 463.092097][T15676] ? __pfx____sys_sendmsg+0x10/0x10 [ 463.092167][T15676] ? __fget_files+0x2a/0x420 [ 463.092194][T15676] ? __fget_files+0x3a0/0x420 [ 463.092230][T15676] __x64_sys_sendmsg+0x1bd/0x2a0 [ 463.092260][T15676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 463.092299][T15676] ? __pfx_ksys_write+0x10/0x10 [ 463.092333][T15676] do_syscall_64+0x14d/0xf80 [ 463.092357][T15676] ? trace_irq_disable+0x3b/0x150 [ 463.092385][T15676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.092407][T15676] ? clear_bhb_loop+0x40/0x90 [ 463.092430][T15676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.092450][T15676] RIP: 0033:0x7f806339c799 [ 463.092471][T15676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.092488][T15676] RSP: 002b:00007f806433f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.092511][T15676] RAX: ffffffffffffffda RBX: 00007f8063615fa0 RCX: 00007f806339c799 [ 463.092525][T15676] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 463.092538][T15676] RBP: 00007f806433f090 R08: 0000000000000000 R09: 0000000000000000 [ 463.092550][T15676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.092562][T15676] R13: 00007f8063616038 R14: 00007f8063615fa0 R15: 00007ffd35645df8 [ 463.092596][T15676] [ 463.586008][T15680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2428'. [ 463.789798][T15683] ipt_ECN: cannot use operation on non-tcp rule [ 463.932415][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2430'. [ 463.985739][T15690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.306874][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2434'. [ 464.328274][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2433'. [ 464.659774][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2437'. [ 465.064341][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 465.072485][ C1] lec:lec_tx_timeout: lec0 [ 465.077615][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 465.255432][T15732] netlink: 'syz.0.2440': attribute type 2 has an invalid length. [ 465.456639][T15737] netlink: 'syz.3.2442': attribute type 1 has an invalid length. [ 466.590303][T15789] netlink: 'syz.1.2455': attribute type 11 has an invalid length. [ 466.663558][T15790] xt_TCPMSS: Only works on TCP SYN packets [ 466.946602][T15802] __nla_validate_parse: 5 callbacks suppressed [ 466.946623][T15802] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2459'. [ 466.982298][T15805] netlink: 'syz.4.2461': attribute type 3 has an invalid length. [ 466.996406][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'. [ 467.007149][T15805] netlink: 'syz.4.2461': attribute type 2 has an invalid length. [ 467.016079][T15805] netlink: 'syz.4.2461': attribute type 2 has an invalid length. [ 467.111038][T15807] syzkaller0: entered promiscuous mode [ 467.117401][T15807] syzkaller0: entered allmulticast mode [ 467.527589][T15830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2468'. [ 467.548412][T15830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2468'. [ 467.989955][T15848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2474'. [ 468.262350][T15868] openvswitch: netlink: Key type 30 is not supported [ 468.462753][T15874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2484'. [ 468.496970][T15877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2484'. [ 468.517665][T15874] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 468.540789][T15876] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2485'. [ 468.577430][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2484'. [ 469.004822][ T30] INFO: task kworker/0:0H:11 blocked for more than 143 seconds. [ 469.014698][ T30] Not tainted syzkaller #0 [ 469.020737][T15901] x_tables: duplicate underflow at hook 2 [ 469.023266][T15902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2490'. [ 469.026682][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.057677][T15902] nbd: illegal input index -1113835520 [ 469.073922][ T30] task:kworker/0:0H state:D stack:26536 pid:11 tgid:11 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 469.086769][ T30] Workqueue: kblockd blk_mq_requeue_work [ 469.092530][ T30] Call Trace: [ 469.096369][ T30] [ 469.099444][ T30] __schedule+0x1585/0x5340 [ 469.104432][ T30] ? trace_irq_disable+0x3b/0x150 [ 469.109812][ T30] ? __pfx___schedule+0x10/0x10 [ 469.115105][ T30] ? schedule+0x90/0x360 [ 469.119486][ T30] schedule+0x164/0x360 [ 469.123964][ T30] schedule_timeout+0x158/0x2c0 [ 469.129457][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 469.135340][ T30] ? __pfx_process_timeout+0x10/0x10 [ 469.140851][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 469.147264][ T30] ? prepare_to_wait_event+0x436/0x480 [ 469.153008][ T30] nbd_queue_rq+0x857/0x1100 [ 469.159632][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 469.173789][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 469.180400][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 469.186734][ T30] ? sbitmap_get+0x229/0x390 [ 469.191543][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 469.198280][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 469.204635][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 469.211155][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 469.218985][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 469.225542][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 469.231043][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 469.236988][ T30] blk_mq_run_hw_queues+0x26c/0x3f0 [ 469.242317][ T30] blk_mq_requeue_work+0x71c/0x780 [ 469.248388][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 469.254529][ T30] ? process_scheduled_works+0xa25/0x1830 [ 469.260599][ T30] ? process_scheduled_works+0xa25/0x1830 [ 469.267109][ T30] process_scheduled_works+0xb02/0x1830 [ 469.272941][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 469.279956][ T30] ? assign_work+0x3d5/0x5e0 [ 469.285038][ T30] worker_thread+0xa50/0xfc0 [ 469.289943][ T30] kthread+0x388/0x470 [ 469.294593][ T30] ? __pfx_worker_thread+0x10/0x10 [ 469.299850][ T30] ? __pfx_kthread+0x10/0x10 [ 469.304785][ T30] ret_from_fork+0x51e/0xb90 [ 469.309417][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 469.314786][ T30] ? __switch_to+0xc7d/0x1450 [ 469.319679][ T30] ? __pfx_kthread+0x10/0x10 [ 469.324735][ T30] ret_from_fork_asm+0x1a/0x30 [ 469.329574][ T30] [ 469.333638][ T30] [ 469.333638][ T30] Showing all locks held in the system: [ 469.343674][ T30] 4 locks held by kworker/0:0H/11: [ 469.349115][ T30] #0: ffff88801debc148 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 469.362730][ T30] #1: ffffc90000107c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 469.376479][ T30] #2: ffff888026895418 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 469.397093][ T30] #3: ffff888026a68580 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 469.406590][ T30] 1 lock held by khungtaskd/30: [ 469.411738][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 469.422395][ T30] 2 locks held by getty/5579: [ 469.427607][ T30] #0: ffff8880329100a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 469.438008][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 469.448733][ T30] 1 lock held by syz-executor/5821: [ 469.454633][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 469.465134][ T30] 1 lock held by udevd/5842: [ 469.469762][ T30] #0: ffff8880268b5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 469.479331][ T30] 1 lock held by udevd/5844: [ 469.484598][ T30] #0: ffff888026921358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 469.494274][ T30] 1 lock held by syz.2.2490/15896: [ 469.499555][ T30] #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 469.510991][ T30] [ 469.518488][ T30] ============================================= [ 469.518488][ T30] [ 469.530559][ T30] NMI backtrace for cpu 1 [ 469.530580][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 469.530603][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.530614][ T30] Call Trace: [ 469.530621][ T30] [ 469.530629][ T30] dump_stack_lvl+0xe8/0x150 [ 469.530661][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 469.530683][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 469.530712][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 469.530737][ T30] sys_info+0x135/0x170 [ 469.530755][ T30] watchdog+0xfd9/0x1030 [ 469.530790][ T30] ? watchdog+0x21a/0x1030 [ 469.530826][ T30] kthread+0x388/0x470 [ 469.530846][ T30] ? __pfx_watchdog+0x10/0x10 [ 469.530878][ T30] ? __pfx_kthread+0x10/0x10 [ 469.530898][ T30] ret_from_fork+0x51e/0xb90 [ 469.530928][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 469.530951][ T30] ? __switch_to+0xc7d/0x1450 [ 469.530977][ T30] ? __pfx_kthread+0x10/0x10 [ 469.530997][ T30] ret_from_fork_asm+0x1a/0x30 [ 469.531042][ T30] [ 469.531090][ T30] Sending NMI from CPU 1 to CPUs 0: [ 469.646375][ C0] NMI backtrace for cpu 0 [ 469.646395][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 469.646413][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.646423][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 469.646449][ C0] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 469.646463][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 469.646479][ C0] RAX: 000000000016f8df RBX: ffffffff819a80dd RCX: 0000000080000001 [ 469.646490][ C0] RDX: 0000000000000001 RSI: ffffffff8def17f2 RDI: ffffffff8c27aa00 [ 469.646502][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 469.646513][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90117bb0 [ 469.646525][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 469.646536][ C0] FS: 0000000000000000(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 469.646549][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.646559][ C0] CR2: 00007f0c731ea4b8 CR3: 000000007853c000 CR4: 00000000003526f0 [ 469.646576][ C0] Call Trace: [ 469.646582][ C0] [ 469.646588][ C0] default_idle+0x9/0x20 [ 469.646611][ C0] default_idle_call+0x72/0xb0 [ 469.646626][ C0] do_idle+0x1bd/0x500 [ 469.646646][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 469.646668][ C0] ? __pfx_do_idle+0x10/0x10 [ 469.646693][ C0] cpu_startup_entry+0x43/0x60 [ 469.646714][ C0] rest_init+0x2de/0x300 [ 469.646730][ C0] start_kernel+0x385/0x3d0 [ 469.646753][ C0] x86_64_start_reservations+0x24/0x30 [ 469.646769][ C0] x86_64_start_kernel+0x143/0x1c0 [ 469.646792][ C0] common_startup_64+0x13e/0x147 [ 469.646816][ C0] [ 469.833500][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 469.840540][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 469.849669][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.859806][ T30] Call Trace: [ 469.863276][ T30] [ 469.866215][ T30] vpanic+0x56c/0xa60 [ 469.870221][ T30] ? __pfx___schedule+0x10/0x10 [ 469.875070][ T30] ? __pfx_vpanic+0x10/0x10 [ 469.879794][ T30] ? __pfx_console_unlock+0x10/0x10 [ 469.885013][ T30] panic+0xc5/0xd0 [ 469.888763][ T30] ? __pfx_panic+0x10/0x10 [ 469.893266][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 469.898722][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 469.904883][ T30] watchdog+0x1023/0x1030 [ 469.909246][ T30] ? watchdog+0x21a/0x1030 [ 469.913668][ T30] kthread+0x388/0x470 [ 469.917731][ T30] ? __pfx_watchdog+0x10/0x10 [ 469.922423][ T30] ? __pfx_kthread+0x10/0x10 [ 469.927009][ T30] ret_from_fork+0x51e/0xb90 [ 469.931630][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 469.936758][ T30] ? __switch_to+0xc7d/0x1450 [ 469.941448][ T30] ? __pfx_kthread+0x10/0x10 [ 469.946219][ T30] ret_from_fork_asm+0x1a/0x30 [ 469.951042][ T30] [ 469.954564][ T30] Kernel Offset: disabled [ 469.958983][ T30] Rebooting in 86400 seconds..