last executing test programs: 24m0.722379095s ago: executing program 2 (id=1900): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206010300000000000000000000000005000400000000000900020073797a31000000001400078008000840000000200500140005000000050005000200000005000100060000000c000300686173683a6970"], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1000}, 0x48) unshare(0x22020400) shutdown(0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x78, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_LABELS_MASK={0x28, 0x17, [0xfcc, 0x7, 0x0, 0x4, 0xff, 0xd7d, 0x6, 0x5f, 0x1]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x66f}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x501}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x8, 0x3]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x50, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_DPORT={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x620b}, 0x0) 24m0.424498786s ago: executing program 0 (id=1902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000000094000100f7ffffff95"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) (async) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r0, @ANYBLOB="01002bbd7000fedbdf25030000000c00050005000000000000000c0004000e000000000000000c000800ff030000000000000c00060003000000000000000c000400070000000000000008000100000000000f000a002c24212f7b29282f282e5e00340007"], 0xa8}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r2) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) (async) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) 24m0.252855606s ago: executing program 2 (id=1904): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r1, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x4e, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x3, 0x200, 0x8, 0x2, r2}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e20, @multicast2}}, [0x1ff, 0x6, 0x4, 0x698, 0x1, 0x6, 0xf6, 0x5, 0xcbe8, 0x3, 0x9, 0x1, 0x688, 0x40, 0x8]}, &(0x7f00000002c0)=0x100) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$bt_hci(r3, 0x0, 0x2, &(0x7f0000000300)=""/124, &(0x7f0000000380)=0x7c) r4 = accept4$ax25(0xffffffffffffffff, &(0x7f00000003c0)={{0x3, @bcast}, [@bcast, @bcast, @remote, @bcast, @bcast, @remote, @bcast, @netrom]}, &(0x7f0000000440)=0x48, 0x800) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000480)) r5 = socket$unix(0x1, 0x5, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r2, 0x8, 0xdc, 0xe1b4}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000540)=[@in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x4, @empty, 0x300}], 0x3c) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000001580)={&(0x7f0000000580)=""/4096, 0x1000}) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f00000015c0)={{r3}, "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"}) sendto$ax25(r4, &(0x7f00000025c0)="0603000bc3a71696076a8f585a87ad825143e65e876195ce859d598c834a61a95e088e266b10398e87ac52253a53107d6d2d332f871857a3f5b61a4a941072ceda7b912984db4191776947c2cd8d1b63188e23ee42e20fb2e30ad646096c7e49d4501289c9acee85635d3c43c8688cb2ce3da89af31d55427e402027b497c989b1c7a819b2ebef4ba1d789", 0x8b, 0x4008800, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000026c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f00000027c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x44, r7, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x44024}, 0x24004081) syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000028c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002840), &(0x7f0000002880)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002ac0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000002b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002b80)=[0x0, 0x0], 0x0, 0x74, &(0x7f0000002bc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000002c00), &(0x7f0000002c40), 0x8, 0x30, 0x8, 0x8, &(0x7f0000002c80)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x1, 0xc, &(0x7f0000002900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8218, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000002980)='GPL\x00', 0x4ec6, 0x88, &(0x7f00000029c0)=""/136, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000002a80)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000002e00)=[{0x0, 0x2, 0x10}, {0x4, 0x4}, {0x3, 0x5, 0x1, 0xb}, {0x4, 0x2, 0x5, 0x9}, {0x4, 0x2, 0xb, 0xb}, {0x1, 0x4, 0x5, 0xa}], 0x10, 0x800}, 0x94) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000002f40)={'ip6_vti0\x00', 0x1}) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002f80)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002fc0)={r10, r11, 0xe, 0x0, @void}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003000), r5) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000003080), r6) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000031c0)={&(0x7f0000003040), 0xc, &(0x7f0000003180)={&(0x7f00000030c0)={0x84, r12, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x63, 0xa8, @random="80f492d8485156d4128c5fbc6cdf51d9715c178673a6e8e22fb779cc68bb00ca83a0948aeb11c003f7a6a7c9ce68e504db2e3a820bfc0e85d7b693a58fc57d357456e963186c5b36eed8d87dee9783eaacce8264fa6aedb1e36eb7e6149c21"}]}, 0x84}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000003200)=0x2820, 0x4) 23m59.295570673s ago: executing program 0 (id=1905): r0 = socket(0xa, 0x3, 0x87) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x13}, 0x40007}, 0x80, &(0x7f0000000680)=[{0x0, 0x17}, {&(0x7f00000005c0)='r', 0x1}], 0x2}, 0xc090) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x1, {0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x4800081}}}, 0x80, 0x0}, 0x20048010) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvfrom$l2tp(r2, &(0x7f00000000c0)=""/206, 0xce, 0x2000, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000700ffff140007800800124000000005050015000900000005000100f6ffff38050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 23m59.28954703s ago: executing program 0 (id=1908): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1000000010, 0x80802, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="021831020b00000000000000fddbdf25030005000000000002000300e00000010000000000000000030012003c80000002004e20ac1414bb0000000071000000030006000000000002000001ffffffff0000000000000000"], 0x58}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c30000180001"], 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000"], 0x30}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 23m59.110041452s ago: executing program 2 (id=1910): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b80080002"], 0xd0}}, 0x571f68543cec8180) socket$unix(0x1, 0x5, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000100000000800070003000000180001"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c1400"/28, @ANYRES8=r0], 0x30}}, 0x0) 23m58.509200626s ago: executing program 2 (id=1914): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f00000000c0)={&(0x7f0000000280)=""/90, 0x5a, 0x0, &(0x7f0000001a00)=""/153, 0x99}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x14, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000ace1bb4b0c00b70400000000000085000000c3000000959b2a18"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x104, 0x4, 0x3c0, 0x1f0, 0xe8, 0x0, 0x2d8, 0x2d8, 0xe8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0xff000000, 0x0, 0x0, 0x0, {@mac=@local}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x40}, @local, 0xffffff00, 0xffffff00, 0x6, 0x8, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0x0, 0xff]}}, 0x2, 0x5, 0x797b, 0x78, 0x96a4, 0x7, 'team0\x00', 'wlan1\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, 0x0, &(0x7f0000002f00)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bind$tipc(r0, &(0x7f0000000300)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000600)={0x8, 0x2, {0x4, @struct={0xd, 0x7ca1c59e}, 0x0, 0x5, 0x5, 0x8001, 0x9, 0x2, 0x0, @usage=0x8001, 0x3, 0x4, [0xbdb, 0xc1, 0x1, 0x8, 0x60, 0xf2]}, {0xc01, @usage=0xb8, 0x0, 0x200, 0x86, 0x5, 0x46, 0x3ff, 0x89, @usage=0x100000000, 0x5, 0x4, [0xfc, 0x1, 0x9, 0x10, 0x6, 0x4]}, {0x5, @usage=0xfffffffffffffa68, 0x0, 0x9, 0x6, 0x8000, 0x9, 0xcc5, 0xb8, @struct={0x1, 0x8}, 0x8, 0x3, [0x800, 0x8, 0x401, 0x4, 0x1, 0x9]}, {0x4, 0x4, 0x4}}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0xb, @dev}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_RT_PRIORITY={0x8}]}, 0x48}}, 0x0) socket$inet6(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r9, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) close(0x4) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet_tcp_int(r11, 0x6, 0x2, 0x0, &(0x7f00000001c0)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000a00)={{}, r6, 0xe, @unused=[0x1, 0xed, 0x10000, 0x1], @devid=r7}) 23m58.412247829s ago: executing program 0 (id=1915): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff04000000", @ANYRES32=0x0, @ANYBLOB="0b570500000000001c0012800b00010062726964676500000c0002800500180001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x8, 0x10, 0x5, 0x8000, 0x20000, r3, 0x9, '\x00', r4, r5, 0x5, 0x3, 0x1}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) 23m57.961214504s ago: executing program 2 (id=1917): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) socket$netlink(0x10, 0x3, 0x4) (async) socket$netlink(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x6a040000) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x40) close(r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x6, 0x8, 0xad, 0x0, r6, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) 23m57.861342119s ago: executing program 0 (id=1918): syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff00000000080007003a3a2f09140002"], 0x44}, 0x1, 0x1000000}, 0x0) close(r0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x174, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7ce}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x30, 0x3, 0xff, 0x4, 0x4, 0x80000000]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xd, 0xd9}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x81}]}}, @CTA_NAT_SRC={0xfc, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x2}]}}, @CTA_ZONE={0x6}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x48}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448f0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000100)=[0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0xeb, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f0000000540), 0x8, 0x53, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000a00)=@ipv6_getaddrlabel={0x98, 0x4a, 0x4, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x1f, 0x0, r8, 0x1}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0xc}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x44) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 23m52.763772011s ago: executing program 0 (id=1945): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x3, 0x4, 0xe, 0x2, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0xfffff000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x3, 0x2}}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 23m52.444223269s ago: executing program 2 (id=1946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008c00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf250d11bf8b680b7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/cgroup\x00') unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x2000012, 0xc, 0x0, &(0x7f00000001c0)="538a0000000099952be3e9ff6391a65b4f000000000000", 0x0, 0x2, 0x0, 0xfffffffffffffddc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=0x3, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0x401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x4010, r7, 0x0) 23m37.557593232s ago: executing program 32 (id=1945): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x3, 0x4, 0xe, 0x2, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0xfffff000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x3, 0x2}}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 23m36.570441815s ago: executing program 33 (id=1946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008c00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf250d11bf8b680b7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/cgroup\x00') unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x2000012, 0xc, 0x0, &(0x7f00000001c0)="538a0000000099952be3e9ff6391a65b4f000000000000", 0x0, 0x2, 0x0, 0xfffffffffffffddc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=0x3, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0x401) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x4010, r7, 0x0) 5.841642018s ago: executing program 4 (id=12355): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111c9000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYRESHEX, @ANYBLOB="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", @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200"/112, @ANYRES32=r0], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x8008095) unshare(0x2020000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100feffffff00004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000fbffffffffffffff00000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005a073500c000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3d}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0xf3a, 0x0) write(r4, &(0x7f0000000240)="94", 0x1) tee(r3, r7, 0x8f5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000911909000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write(r5, 0x0, 0x0) shutdown(r1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 5.488380947s ago: executing program 4 (id=12357): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x897093f96508b29c}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x220, 0x12, 0x8, 0x70bd2a, 0x25dfdbfb, {0x11, 0x1b, 0x67, 0x2, {0x4e21, 0x4e23, [0x576a, 0x80000000, 0x5, 0x3], [0xf, 0xfffffffa, 0x5, 0x582c], 0x0, [0x4, 0x377e7c6a]}, 0x0, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "5a31ee5acd129976aaea3876797ed2f2bfd37f847b2bfe7d24e6914a0494d4f4a1"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "4dc7b3aec941c62daf6a75c4ade549200616a888ed469eeb8c4a2a5fa799f7ba71d48889814be60f36584ebbbfca4f7eeb203ce66ad162f50c39c8c0fcf14fc9aeb6186f3bf1683b9c0541625c1abd16871e8a7b1d9b4f92134124f5b606ec1b91d8474bc15e4b3db6185f60"}, @INET_DIAG_REQ_BYTECODE={0x95, 0x1, "cf1b5e7ba8c5b94b04d2ee6beab5592c1a43164d9a4a0df32dbdfcea8ebd8c4d02f2f148f837386ce60fac677292397b512e718087815af50d2b3b2bd1c69e7ef568c88e17d8ce9e7abd844fef066d8c25f00f2ed2bb64dbb48a93c85acd1c0bc35c988d24182d3e50d92dbd2d5fa9d00a6e07f37a699cf3910554cb5616865582a81a1121e305da34a4ac1799f52d9ca2"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "b8310d605f5636e82c2398403c796e27bdad57d861bbaaf61fc9ccb8870186ef1f4657f6783e094775370e1155f210e876bbfcd7d61f2e85da055ff07bb144d33628874b8f9678ae642ecd9808b24bcf59aea3b2dab1a2c53a0321bec510a7b5bd2e5eca61729234a677eed58c7fed30928015aea1191732f01ca228c728ad40bdd5ebdc1f7f82529ba6f90e7a26b190819caf5d9e3b829c2d5923ba016f"}]}, 0x220}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) 5.300856573s ago: executing program 4 (id=12359): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e980214", 0x4}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0x6, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02001a0d7f67f75d46f8dd1b66b6760000040000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000080000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70400000800000085000000950000009500200000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x2000c058) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b000000000000009291c069000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 4.327447921s ago: executing program 4 (id=12370): unshare(0x400) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r1, &(0x7f0000000040), r0, 0x0, 0x6, 0x0) (async) splice(r1, &(0x7f0000000040), r0, 0x0, 0x6, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000000380)}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000043) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ipvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x16c}, 0x1, 0x0, 0x0, 0x890}, 0x2014) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000005600040028bd7000fddbdf2507000000", @ANYRES32=r8, @ANYBLOB="3ea809000000000000002de5245d18ff19fd8bcc3ddf5ba717bac124fcb25a3963cc479bad"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) (async) bind$alg(r9, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)="b8dcba", 0x3}, 0x1, 0x0, 0x0, 0xc001}, 0x40800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r10, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r10, 0x0, 0x0) r11 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r11, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r11, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) (async) recvmmsg(r11, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 3.337840412s ago: executing program 3 (id=12379): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000080)=0x3) (async) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000080)=0x3) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0xb, 0x0, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x40040) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r3}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r3}) 3.234364071s ago: executing program 3 (id=12381): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmmsg$unix(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/160, 0xa0}], 0x1}}], 0x1, 0x2, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 3.032617177s ago: executing program 6 (id=12385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r1, 0x0, &(0x7f00000000c0)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x38, 0x10000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c0000000e0a03000000000000000000020000070900030073797a30a5e700000900010073797a3100000000140000001100010000000000000000000000000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtaction={0x1e8, 0x30, 0x8, 0x70bd25, 0x25dfdbff, {}, [{0x1d4, 0x1, [@m_sample={0x80, 0x8, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7c1}]}, {0x44, 0x6, "f3f4ef95cad0992909136f6c1cc77e8abf0122618e68131b042431be3ecdd4aa6feccdf9c6804418998d57d8f639431ec9332cf3ef1f4acc959a9ebc1c728415"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x150, 0xf, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0x10b, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x1e8}}, 0xc0) 2.977596427s ago: executing program 3 (id=12386): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x70}}, 0x0) 2.945716557s ago: executing program 1 (id=12388): connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x4, 0x10, 0x0, 0x4, 0x3b, @loopback, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x7, 0x0, 0x0, 0x6}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/19, 0x13}, 0x7}], 0x1, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 2.797776156s ago: executing program 6 (id=12389): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x66) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r0}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x2000000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040080) r9 = socket$packet(0x11, 0x2, 0x300) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x703d2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2013, 0x2021}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 2.660997437s ago: executing program 1 (id=12390): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x74, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x604a}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8024) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="09840000000000003c0012800b00010062726964676500002c000280060027000300000006000600fcff000008001d00000000000500260000000000050025"], 0x64}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000380)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000b00)='>', 0x1}], 0x1, &(0x7f0000001f40)=ANY=[@ANYBLOB="110000000000000000000000010000000b000000000000001400000000000000000000000200000001000080000000004c"], 0x80}}], 0x3, 0x48000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) close(0x3) 2.381580208s ago: executing program 3 (id=12392): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b2e0c65377}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c6d6e47b", @ANYRES16=r5, @ANYBLOB="9b0f2bbd7000ffdbdf25010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) 2.313714443s ago: executing program 1 (id=12393): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x37, 0xaeaf9ec181b6dfc9, 0x70bd28, 0x25dfdbfd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) 2.313111975s ago: executing program 6 (id=12394): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x27a}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0xe46}, &(0x7f0000000180)=0x8) 2.22401129s ago: executing program 1 (id=12395): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) (async) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @mcast2}, 0xfffffffffffffc89, 0x0}, 0x400c0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="1023b12bbd2df79fb6353eb4aef74d024ade26cab984290da5f04aa3ac42553045b231ab7a6aea528118b52a5618eabf2672590168d699d8c31cc2323be12e286ca9b337c2920a748c0315d99736d5455524d1c03c6cfa75c486c59bd6442f57665db4715d0bf4aae78d56e471917364d1d75e3e2b37a37c3e2eaebcae140c71f48038", 0x83}, {&(0x7f0000000200)="a8da945a42a1b0", 0x7}, {&(0x7f0000000240)="f69e7498a0de", 0x6}, {&(0x7f0000000280)="59a823af24a791dd0ca5bad2828d3de8a7f98c98671eacaa7de2455b355c3511f505e731da917a50be78af5ccff98b5cf582590f936bd59a089b179b9d1a3142b1290f0afdef54e69dc70b", 0x4b}, {&(0x7f0000000300)="475cc0916af4e00fa2743e19a8a9da2924ed455175689f63c2c97532b6e6d45f824ad63d4172be0fa3f6", 0x2a}], 0x5, &(0x7f0000000440)=[{0xb0, 0x1, 0xffffffff, "8b9e3f2f5fddf8c1e4034859a7b2661076a9dd4ef8bd6ef7f6630ca4413a3c1b9388baa3491d9295075a3fb78aac9654944923aabd5e04437fca1e545420320bd925a9fa4eca4576f0f61818dac0e1ccbcdf6050cfec3cc55e7a832c36d8bca52947b8438c4e5da9942cff08260291eeac2e7f4d1629df68bd26be85aef377dba82197df6de88845b1882f34a477bb73cbb91a36350e0d1b143f5a9bce644f53"}, {0xe0, 0x10b, 0x8, "f92a2cfad1610cf85d143049fb8cd7e880636bfa3adc787df0ace8a958da319c0ab5e9166b9e3c24c090e8271b3a2fa92a627f2de8753c7a9fd966f7b361f898ce41b26170486bab5a0537f77ee2c2691cdc5837fd6085d6fa14a66e54b25ea40d3e94f2df70db62e64c2fa3f834393c058ca80cd84209243843b45c9ecd71cdbc0156b8a0941b50f82721bfb8ca77598ef61f22771965b8fa4e68ea55a3fab408d3034b6e3455b84c74b3d2f4521be041bcc51d1611116e100bca39d68f467630ad824fc27bcc9ca1b9ac62e735"}, {0x68, 0x108, 0x7, "e1b710a93454f5c03b971ce5c8bd30ccf3581bdae2fd0a374dca0ae9a712da286e8c934103b803a1953f0c5fd8b4246144382d51f72b0e427cb5d9410742568c308bdb37f1d521312a2214f48941d317f2894dc78db8"}, {0x60, 0x115, 0x9, "c97b636bb45922d7a3b7fbe64b9420ba5de4349b53e872ed9eb5738cf3eb982a230a6206f00a3fb8ec76ebeba2d3fb8e7112af448986f510cd1d4992e134577829f142bacd4091f9cd"}, {0x100, 0x10b, 0x2, "8e85c3bab61e326af61c635d9182ae0df51f3b144e97d068dd311a101e86a4e2a06ac6d0e7cc2fa819ecf9d395e7ab52ac93d856633ae96e2c2d8cbbeebd09c93931cdf2531b71e8bf6a5604873fead73ff8ee8fab6778dfdb5cc5027d009e1514ecb31e141590b84ff0a2e2dac741226050d2f42250288aebb563f13a793d78d006613386cdcc17c80502fcdda5d0868afb8b570d4ba3b86a2fb371d5da47b5bba0affcdfb6d8168cd032626af65f71d50c3e4054bee9a5208189b6977ffe897086c8987c72711c4b3ad57a1abc7738e36a68b76c17cbb044eeffe3f63f53545d92c8f2c01c577026c81b51eb"}, {0xc8, 0x116, 0x65, "301e59170912195ef4fdeabc5b4c9c69fe58f55621a4d9a1f07e5b88f8d094da3e870eb896b9a58cd8e1a5312aef07663eb7f10b322d123653c86ade256121888ac85cb9e1174e4ae0cc145bf0e2f5476f37b1f43271666806a39aaf557129895486a6fcae61aa90096f481ea1879a56f5c17efdcc68896bb8e76826e818dc2684465a2f4e7a1316b26bb336de1645a1fdc7d2024644774f5f4dd86334501cd944d29e9d9752336ec0673c454090aae9248a0953"}, {0xf0, 0x117, 0xe, "4900fe56c2123954d217768e1fc9d24c325bb2242313408d298a6a2ebb7fd1f5ff5f36be52eac9300e79aa3421f10cb787448b14821a8b4633b4fa1ce3304cfa689b334375872149c04446672e2ac4f2b0ac6722926c7dceb717d48d735633e8fe1e12523b563f2d89636bfa3d6c5d87c5d7b232c2f8c09696189a91a816daa9393946631de2729bbc49d838fc6ef302bde14086ab24d11c8b72c5e2cb716b11c1267fefd52000eb2bc05ab8e2bf6746ecb11829aabc56c9cb1ebedfee0a64cc7105e005a1af09f33189ce34559031c92057dc42daa027a7ef09cfed1f4d42"}, {0x30, 0x104, 0x2, "52a1f3d51c1087304859de886e912b5d5013a3be1f6b07af26080af1"}], 0x540}, 0xc044) 2.159626205s ago: executing program 6 (id=12396): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e28, @multicast2}, 0x10) (async) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44894}, 0x4000080) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 2.087341962s ago: executing program 4 (id=12398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000101010200000000000000000a000005300002802c00018014000300fc00000058000000000000000000000114000404fe8800000000000000000000000000010c00198008000200"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000004040)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r5, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x0, &(0x7f0000002680)=[{&(0x7f0000000100)=""/227}, {&(0x7f0000000200)=""/210}, {&(0x7f0000000300)=""/169}, {&(0x7f00000003c0)=""/152}, {&(0x7f0000000480)=""/4096}, {&(0x7f0000001480)=""/4096}, {&(0x7f0000002480)=""/136}, {&(0x7f0000002540)=""/157}, {&(0x7f0000002600)=""/111}], 0x0, &(0x7f0000003f40)=""/253}}, {{&(0x7f0000002840)=@tipc=@name, 0x0, &(0x7f0000002940), 0x0, &(0x7f0000002980)=""/193}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096}, {&(0x7f0000003a80)=""/253}, {&(0x7f0000003b80)=""/215}, {&(0x7f0000003c80)=""/166}], 0x0, &(0x7f0000003ec0)=""/91}}], 0x4f, 0x0, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) accept4$inet6(r2, 0x0, &(0x7f00000001c0), 0x800) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000180)='GPL\x00', 0x1, 0xa2, &(0x7f00000004c0)=""/162, 0x40f00, 0x1c, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000003c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r3], 0x0, 0x10, 0x17800}, 0x94) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000000240)={@void, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @llc={@llc={0xd4, 0x7e, "b1bb"}}}, 0xe) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) socket$kcm(0xa, 0x1, 0x0) accept4(r9, 0x0, 0x0, 0x0) 1.800877296s ago: executing program 1 (id=12400): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="6c1c102badfe47727c582432a5b73444ffdfad7e3a474c5984ed163427b5b20dac07737ab18726b391e17b771ab287e4f4fdfc150a87d877746088e206000000000000008ac4f4f0bfb2fae2f8e69a68131f0a42deaf45f0f2b9e410cf60796f79ad15369376a8ec09b31551902fba371f378b086ace3e699cf5dff471a45c939f7baf099e6b1e54bb4461fc96f5c933c25e2151ccbbaac4ae5ef32bea8a1b277fe0b75d7ef40fbb7f9802a45bb53d0a8c1284d54f412210339ee7d33a1321cefe2cc8fabdef3d6b47651dd4abc55ffe8453daefcfa70b77f79042415c46d7deef9845c75e35154a6f6836ff4a0efeb937d94d8b83c3660e4cbad1a8d7bbf859eeeddc06f06c2ef746993a1fd4c992f30f3905dd56f100ef99457de5681dd45c523c1092887fbfa031af76a42a12d0d45d00bbcbef264fcf5f311c1fa2a5dd91c52c431aba91eab40a3b77d39875af1984fcc6889996177ae008bfc86c0146c2042885242970f2b6943027bcebad23a6201a56e0a936c08fc6beef6bc0e958cdb4cfbc0e5ed2eb112d804d1fcb", @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r1, @ANYBLOB="14005a80100001020065000000d15c1ce4574734c133ea31658162e8729ffab17deaa48c5d70e3fca05a9d454a50111eaa7badca14a15192d24a20cb00000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x20001040}, 0x14004040) 1.663426189s ago: executing program 5 (id=12401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000800}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0xc, 0x50}]}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x82, &(0x7f0000000240)=""/130}, 0x94) 1.236991811s ago: executing program 6 (id=12402): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7, 0x10, 0xf311, 0xffff, {{0x19, 0x4, 0x1, 0x28, 0x64, 0x65, 0x0, 0xfd, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@cipso={0x86, 0x17, 0x0, [{0x3, 0x11, "d21fb71b27dd8a5aa0f984c7d9ac80"}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x1e, [@broadcast, @empty, @private=0xa010100, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x2c, 0x3, 0x6, [{@local, 0x6}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x700, 0x20, 0x916a, 0x9, {{0x30, 0x4, 0x0, 0x12, 0xc0, 0x67, 0x0, 0x2c, 0x2b, 0x0, @broadcast, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0x7, [{@broadcast, 0xc557}]}, @rr={0x7, 0x1f, 0x35, [@remote, @dev={0xac, 0x14, 0x14, 0x3a}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x40, 0x0, 0x1, [0x3]}, @timestamp={0x44, 0xc, 0x83, 0x0, 0x8, [0xffffffff, 0xe4]}, @rr={0x7, 0x23, 0xb0, [@rand_addr=0x64010102, @multicast2, @local, @rand_addr=0x64010101, @private=0xa010100, @multicast2, @rand_addr=0x64010101, @empty]}, @lsrr={0x83, 0xf, 0x61, [@dev={0xac, 0x14, 0x14, 0xd}, @rand_addr=0x64010101, @local]}, @rr={0x7, 0x7, 0x16, [@empty]}, @timestamp_prespec={0x44, 0x34, 0xa7, 0x3, 0x5, [{@multicast2}, {@multicast2, 0x1}, {@multicast1, 0x18000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x8e}, {@empty, 0xfffffffb}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfff}]}, 0x50}}, 0x20048040) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%ps \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r5, &(0x7f0000000540)="650d24061ff78089640015d186fbd6476630ad30a3d0cf1799b2b3d27e6b583dbe767f671346ec90d094fd3a8e51c58249dd362235ce860adae75c089404c486acf7c8786072bbd2b9171324015cc3ac4dc1e4f46c568af791aa2b50a674c87e11a2fdf5a9e160529eda4ff1edc29401c98992d94dd872a6aa50ca5ce681b92364c2e6b802af4ccafb0688965ad3abc765a43086103bc684a81eaf38b19cd32fb0fc85de7d5e566ca4d4e6c5d00c492e31a1599cf8"}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r5, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x16, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @generic={0x4, 0x8, 0x0, 0x0, 0x7}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x10}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f00000009c0)='syzkaller\x00', 0x11f, 0x1000, &(0x7f0000000a00)=""/4096, 0x0, 0x27, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001a40)=[r5, r5, r5], &(0x7f0000001a80)=[{0x0, 0x2, 0x7, 0x5}, {0x0, 0x3, 0x0, 0xc}, {0x0, 0x3, 0xc40, 0x7}, {0x4, 0x4}, {0x5, 0x5, 0x10, 0xb}, {0x4, 0x3, 0x0, 0xb}, {0x4, 0x3, 0x9, 0x7}, {0x0, 0x3, 0x5, 0x1}], 0x10, 0x10001}, 0x94) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)={0x1b, 0x0, 0x0, 0x1, 0x0, r5, 0x9, '\x00', r4, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xb, 0x1e, &(0x7f00000006c0)=@raw=[@call={0x85, 0x0, 0x0, 0x52}, @jmp={0x5, 0x1, 0xb, 0x3, 0x3, 0xfffffffffffffffe, 0x1e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x4, 0x9, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x3}], &(0x7f00000007c0)='syzkaller\x00', 0x4, 0x3e, &(0x7f0000000800)=""/62, 0x41000, 0xd, '\x00', 0x0, @fallback=0x27, r9, 0x8, &(0x7f0000000880)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x7, 0x7, 0xd}, 0x10, 0x0, r10, 0x0, &(0x7f0000001c40)=[r5, r5, r11, r5], 0x0, 0x10, 0x7}, 0x94) write$tun(r8, &(0x7f0000001d40)={@val={0x0, 0x88e5}, @val={0x3, 0x4, 0x40, 0x7, 0xa, 0x27}, @llc={@snap={0x1, 0xff, "c6", "c844d3", 0x86dd, "b952748ed437bd4722ed57cd57719031f969e8e781f00b84ad71195169813fce652a2a1b55f76c1758eb1a2abebefdd345f8960f9214034e26770de9e1f45744a54d05bc6ff0902abc3b868119f4ae80e6ba87ead1f4a30fc1c9a4b4fe5ec6202c8e61bd"}}}, 0x7a) bind(r0, &(0x7f0000001dc0)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000001e40), &(0x7f0000001e80)=0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x10, 0x1403, 0x2, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000001fc0), 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000002000)={0x2f, 0x0, '\x00', [@ra, @enc_lim={0x4, 0x1, 0x4}]}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x80}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x81}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2fbf}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x24}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x81) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$rxrpc(r13, &(0x7f0000002180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x317, @mcast1, 0x4}}, 0x24) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x40, r14, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040890}, 0x4008000) syz_genetlink_get_family_id$ethtool(&(0x7f0000002340), r0) r16 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002400)=@o_path={&(0x7f00000023c0)='./file0\x00', 0x0, 0x4008, r12}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002480)={{r12}, &(0x7f0000002380), &(0x7f0000002440)=r16}, 0x20) 1.236572607s ago: executing program 1 (id=12403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)={'ip6gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x24040840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRESDEC, @ANYRES64], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001400)=""/226, 0xe2}], 0x1}, 0x5}], 0x1, 0x202, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.235894428s ago: executing program 5 (id=12404): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000200)=ANY=[], 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x7b0, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x38}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "a4e305b68237f63a0621d61f84"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x10}, @NL80211_ATTR_FILS_ERP_RRK={0xd6, 0xfc, "c2c6eeec8520bfe119e68f8aeb79c69a486d744c1b771720e79d95c6f1c6b06d2bfe5aee9c3594f916c40580f8665d322bb55faadc173812112d8ecceb43c71e879b1e93caf64696551d9a2569918bf7b1696375147920f7aef9011b4400b86900b56e899a043e98a0a9efc93ef606e760e91882a48634a3fe53945630a07924438e7f5eb1e8c3e88af5f9c2586eada762071ddff78119e77c7940e6ffcc72d3b12a04e0c1615d8296608e8c5ba93651ee681b31faee1cefec95b376d01f0605c1d50abe7d73092f9f82d8c3d7fe06dea1dc"}], @NL80211_ATTR_IE={0x42, 0x2a, [@mic={0x8c, 0x18, {0x45e, "6daae5d6cb2c", @long="e31b6ddfa8b8ef77ccebc290be073c25"}}, @prep={0x83, 0x1f, {{}, 0x1, 0xa9, @device_a, 0x8, @void, 0x5, 0x5, @device_b, 0x4843}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_IE={0x24e, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mic={0x8c, 0x18, {0xbf6, "ba54621057f5", @long="10dd37072f0e3a61bd0d4ceed8973f99"}}, @supported_rates={0x1, 0x2, [{0x4}, {0x20}]}, @perr={0x84, 0x11c, {0x0, 0x12, [{{0x0, 0x1}, @broadcast, 0xa7, @value, 0x3a}, {{}, @device_b, 0x5, @void, 0x22}, {{0x0, 0x1}, @broadcast, 0xc258, @value=@broadcast, 0x29}, {{0x0, 0x1}, @device_a, 0x800, @value=@broadcast, 0x9}, {{}, @device_b, 0x3075, @void, 0xe}, {{}, @broadcast, 0x7fffffff, @void, 0x30}, {{0x0, 0x1}, @broadcast, 0x7fff, @value=@broadcast, 0x25}, {{}, @device_a, 0x3, @void, 0xe}, {{0x0, 0x1}, @device_b, 0xbe, @value, 0x6}, {{}, @device_a, 0xb, @void, 0x13}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x2e}, {{}, @device_a, 0xf, @void, 0x23}, {{}, @device_b, 0x9, @void, 0x23}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x10}, {{}, @device_b, 0x2, @void, 0x13}, {{}, @broadcast, 0xd3c3, @void, 0x41}, {{0x0, 0x1}, @device_b, 0x9, @value, 0x17}, {{}, @device_a, 0x5, @void, 0x33}]}}, @perr={0x84, 0x109, {0x9, 0x11, [{{}, @broadcast}, {{}, @broadcast, 0x3ff, @void, 0x20}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x40}, {{}, @device_a, 0x8, @void, 0xe}, {{}, @broadcast, 0x4, @void, 0x39}, {{}, @device_b, 0xff23, @void, 0xf}, {{}, @device_b, 0x1000, @void, 0x1}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x24}, {{}, @broadcast, 0x80000001, @void, 0x34}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0xf}, {{0x0, 0x1}, @device_b, 0x2, @value=@device_b, 0x37}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x80}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x8}, {{}, @broadcast, 0x7, @void, 0x20}, {{}, @device_a, 0x5b0, @void, 0x35}, {{}, @device_b, 0x9, @void, 0x26}, {{0x0, 0x1}, @broadcast, 0xfffffffe, @value=@broadcast, 0x34}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xe40e}, @NL80211_ATTR_FILS_ERP_REALM={0x97, 0xfa, "f351c56d5efb41d7c10fd19f20aa466b1ec7703e181815396643678c4f27558e02f605f408221f20612ad078b9909940a8bbf67e26bc3b134fe00c1ae900d8fd13e820750dc259f9e028d6894ec637c56039e04d928641eb6f7a844e470edfab54c720a42488ed343ecaab4f019e817ba24567f6426987eb2f526fabc0327da52abfe0a4df0c0cc1f46fce718ab4224a0fb678"}], @NL80211_ATTR_IE={0x202, 0x2a, [@measure_req={0x26, 0xe2, {0x2, 0xf9, 0x6, "a33bdcf32631828a280853747a3fc7cb742ade019c418a9daec5e7b7a00b2e4c505d66c727b43390d9a177eccec4582bddb7868fb452019997bbfdc9ec2cc8305bb961deb5b535b93717bf96bbae9ddc335c974931de63ef64fdcb2149e14fe487ae35fc0f2d24c546f754e8b95d140eaeb8a8f423d9927ec3466faf8e53d180c4e496d873c82f48a07a47a3f983790ff10829a71c67ddc2a22b25fb1df0b872b130cc9d0bf97924b1575d00a7778cdb7c251d8a071c46ea34c20b349d74a9a26b6511f62b88be8b95faec47e4881df3fdcb4c9e1c712c662d76f481b69dd9"}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0xf7, 0xd9, @device_a, 0xffffffff}}, @supported_rates={0x1, 0x7, [{0x5, 0x1}, {0x1b, 0x1}, {0x16}, {0x24, 0x1}, {0x12}, {0x2}, {0x60}]}, @mesh_chsw={0x76, 0x6, {0x8, 0x6e, 0x9, 0x8}}, @fast_bss_trans={0x37, 0xf0, {0x3, 0x6, "999cb1be1b5f372df23fa7aa1825e593", "d49ad5ef5d0755a9a790bce1c445be9ac5b269f4febe7bec1a641f574be08284", "16e5d9b5fd203ef5705150fc518a8d30fe4a3e920f529ed769865d7b9dcf64f5", [{0x4, 0x11, "bb8c66852e7fc37f9e1d0b6746b2ed6bb6"}, {0x1, 0x24, "2f95067de674496ffabebb8fdfcd6a59fc18d10fff14ad0554cf443a6256dad9522937ed"}, {0x2, 0xc, "c2c5b5e481f0bc552634db1b"}, {0x4, 0x1f, "3909a3a4f21193c4b31f09deca7b3a3146091583488fa3b66c3470b4d8a672"}, {0x1, 0x14, "f124e7694edb751ed0c854bf69465953f5964704"}, {0x3, 0x1e, "17b349bcd3a76354c45bf70279e5cf93c80793b69478dc7e1171cb242089"}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xf38}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "d63b82d513bc337f3c1ace620d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_RRK={0x52, 0xfc, "99bb54c49035e7f80bfbec7734152392f33d88a3a7fd97fb69743f847cf4c494002fb4771f3dc741178ee156a3f5955e784dbc87cf4e0a4f50204e782f1641e67bf437e041372a6a0073a4ad8b24"}, @NL80211_ATTR_FILS_ERP_REALM={0x32, 0xfa, "6f25610f77c7d2d9597a9136bbafe25acb06ae0d9a6c9ee4ba2073d3f78d3b9f88266b8f8a2b97936913c6b3b93a"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "2159d168539f52"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "e53537043c220f4c368ff088"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_REALM={0x93, 0xfa, "da1e609d180dc7d9e37ad768f29871e0c00223772c2541a9678237776ed563c696e1cbe6631391b12e9db34aed4caf383a89a395ba1bd3ea128aec40344f44352da1c66ca1a65196e5288db190c9dc1365db65ddd846e12bdff18abd4cadd1e8470338e0ff1ef08fff16c5eabe67e39a90f951a528b84a39844216ba77fdf52d73f30c582b616edac2d92826c4dc8e"}]]}, 0x7b0}, 0x1, 0x0, 0x0, 0x20000001}, 0x844) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 1.235099735s ago: executing program 5 (id=12405): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4358fb731be81e1b}]}, 0x1c}}, 0x40081) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c, 0x80800) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @empty, 0x7}, 0x1c) (async, rerun: 32) socketpair(0x1, 0x5, 0xa4ff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}}, 0xffffffff, 0x0, 0x72400000, 0x6, 0xa, 0x6, 0x7}, 0x9c) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r3) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000500)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x128, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x128}}, 0x800) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x81, 0x12}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, '6'}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e65beee0d4"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c0aada193f809dde899954263f"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4a054}, 0x8001) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001700)={'vxcan0\x00', 0x0}) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0xf}]}, {0x0, [0x5f, 0x61, 0x5f, 0xec, 0x30, 0x0, 0x0]}}, &(0x7f0000001780)=""/47, 0x2d, 0x2f, 0x0, 0x4}, 0x28) (async, rerun: 64) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a00)={0x6, 0x5, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}]}, &(0x7f00000006c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000700)=""/4096, 0x40f00, 0xca, '\x00', r6, 0x25, r7, 0x8, &(0x7f0000001800)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001840)={0x1, 0x9, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001940)=[0x1, r8, r9], &(0x7f0000001980)=[{0x2, 0x4, 0x8}, {0x0, 0x1, 0x9, 0xb}, {0x1, 0x2, 0x8, 0x5}, {0x5, 0x4, 0xd, 0x2}, {0x2, 0x3, 0x0, 0x7}, {0x5, 0x3, 0xf, 0xa}], 0x10, 0xa67}, 0x94) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002000)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001b40)={0x458, r10, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x248, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x76, 0x5, "663add0bd4ba6dfab2f1f40a3717b9b0184d3e874e95a04529fc722ed1cb5a9f1d3645506800f848d45eccab9827fa8b798a36225a66593af523a289f6c28ba4e07f30fa40c18048963eb1a89e0227ab9acd0879c31f1f71fb352b32432bab052f7189f2911b0fdc376abf1b366099edddac"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x1b8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffbff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}]}, {0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%(%@.*&{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa5b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[^.\x06\xe3\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x68e1b6c7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x165}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '#[,,-<*-+\xb6\'(%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xe3\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x188, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa2, 0x5, "ceaddbc19668c729bd52f214556952cb707b5a1585b3c1f8f1d9e3d72e2eb6e1dd26ba24556dcc388f70a5438b99b5baf9fb9263aa5ac240750975187eec9c11a7816ef16ba5e3bd08c85e4dff44c2d5a41162e4308b749c6f65bcb7066cb6bd4ba0813308b88ecd9c09e49b100f750c430bceb1a3bf5374bff0c28ac7c991c78d5aaeafe4ca703545d2d251bf5371043826d06b3e24a82e6269ff20fd5c"}, @ETHTOOL_A_BITSET_MASK={0x63, 0x5, "9a2c90760823e8ec82c9789d481f3f669d10997192faa04de218444c92f3a947c3d2efd3a2984d1c16dff9168b9ae9d134de885f83ba17e4a7de8c2a1a17ce145dd011f96ff25feea203a401ce48311caceb240726769e6e99b17bc903efa3"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x28, 0x5, "eeda4666916a557d01915a7b4c3e3871c3b6d97de42686bb1a6037c5ef761e3500cc5eb8"}]}, @ETHTOOL_A_FEATURES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5988e61e7a62355c}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x808}, 0x800) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000020c0)={{r8}, &(0x7f0000002040), &(0x7f0000002080)='%+9llu \x00'}, 0x20) (async, rerun: 32) getsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000002100), &(0x7f0000002140)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000021c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x30, r1, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x40000c0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000022c0), r4) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002340), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x24, r12, 0x47cc7794148f276f, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) r14 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 32) getsockopt$WPAN_WANTLQI(r14, 0x0, 0x3, &(0x7f0000002480), &(0x7f00000024c0)=0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000002500)={'vlan0\x00', {0x2, 0x4e23, @remote}}) 1.233273362s ago: executing program 3 (id=12406): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003640)=ANY=[@ANYBLOB="3000000019df2c4553e82a6e3865414b3fa93503f6e470668160aa42688f60aab5515bd69f29b16805c3d0e0262d950dac14b2a9b17a0e9c00cd4e5d295d6d617711108f99f2", @ANYRES16=r4, @ANYBLOB="01000000000000000000140000001c0007800c00030005000000000000000c0004000000000000000000"], 0x30}}, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0xf0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x7800, 0x40, 0xffffffff, 0x90d, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x64, 0x0, 0x1, 0x4, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x8, [{@remote, 0x7ff}]}, @generic={0x83, 0x9, "790e8aa8815b67"}, @timestamp={0x44, 0x8, 0x30, 0x0, 0xd, [0x8]}, @end, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x6, 0x2}, {0x5, 0x9, "702786da1eba1f"}]}, @generic={0x82, 0x2}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x7, 0x44, [@multicast2]}, @noop]}}}}}) sendmsg$kcm(r2, &(0x7f0000003780)={&(0x7f0000000100)=@xdp={0x2c, 0xc, r5, 0x12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)="6377a017f3b6392846b5179482a3f2642858bd277a84197b4c4c5701aee39d1177beb5074dc7ab44565896f97a52eda676e230188aa1ebfa624f197cdf2a7ee211ee3ae05b9c9c04185b76f4867cdbd4709bb7cea428d2f34cdecbf42b85831271890d920464f9a5cd8ad026d1941686d8a5bcd4747c3c8e04853a593b22309327686c0cdb580fa3e0e9d5e87afc1a5d3088bcb722b23823f486cc", 0x9b}, {&(0x7f0000000240)="5f5a200c7f1cafacd0b26c6a02838cb7ba3170e277a2ea0d697b619e3d899decaf76cb", 0x23}, {&(0x7f0000000280)="708cd419713746f5c688bb192134", 0xe}, {0x0}, {&(0x7f0000000440)="5ca6b2ea8c355d86a9e2b1a29add55f2ecce1bf89811fcbc06285d935b03b7b9701549b13e4790d38d52d321a7a88d1b97a8df7d56aa4f4761d522a052e3ab87cb772e46ceb8763fcd9c89e46cea0bc979c48b37a477687dcfb5e5c1020da4fae288f5f29a187b487ae63311cf221a2e1225", 0x72}], 0x5, &(0x7f0000000540)=[{0xf90, 0x10a, 0x8, "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"}, {0xfe0, 0x10f, 0x100, "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"}, {0x1010, 0x0, 0x4, "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"}, {0xd0, 0x1, 0x1, "5c8bf6375546804700e2df847392a5a9e18cf5df3cd8e9d4cf60d4d7ba37d369c2dfe5959d3249bae3988800b1f88d28c5d87faf4794217bf340c441a29863eb882d38c37ed9ec53cf784a1cf932f6d7d86c6283374c24e0e6aecd6950b5a3c24611179d145b6cc574188e3bd01fdd29be837dfcfacedf63df202c0f08a6ada1cd7746ee3fb30a72581c3536e004b268af8b1b4de14482994b0503d0e242e557a27d98513c970fd6749f77bbd6b68034af39c7afa8307a8c80"}, {0xa8, 0x11, 0x8, "068977c47c8c24bb6fe35b123187928d986033fc68bd72463fb1d8af2967dbf23f38a84d62025917d221db9801cbd2ff036cb8f8fa343b44ce4d6029af21a146a63f2b3cf7a3145dce831a5392a2688d1c53e675b03fef82c08805a04218f8f76ec9ed2fe3786548317d9adfdc464deebef2da1a16b6236258bf165bc95d6c54b6a5a3379d850990266c98f9ed48635389aef2"}], 0x30f8}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000001900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r6, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000001, 0x0) setsockopt$sock_int(r6, 0x1, 0x2a, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) sendto$inet6(r6, 0x0, 0x0, 0x2000, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.109743826s ago: executing program 5 (id=12407): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c, 0x0, 0x0, @binary}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.027037685s ago: executing program 5 (id=12408): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x6, 0x5b, 0x21, 0x1a1, 0x101}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x3, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x20}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x10, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x180}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 121.408795ms ago: executing program 5 (id=12409): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfece, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027bd700000000000040000001000180008ac0f0002ac0f0001ac0f"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 20.888196ms ago: executing program 6 (id=12410): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="4ad9906ddb7620a5d6bf775ff3fa6ba92d5aad6579cd1332235bbe268e53489457a12ee66e8aec6d0ed5c59815f608e2dab829485a5de94b3d494e95abd198bad92f5158716c18422ae78536d309b4788f1415fd2923e94abba8d1f5fb9ef00fbc4550baa88196f80d394c68bef111b1862c40a7d54dbedf977302fcc11eeea704ef37c1e88f27d6a0cad080c33f0f1b40fb0c33e6eed5fc7d9d534c19e4c038fa8de856247ebb2d023145417ee6319545108019e85972bee263e13b2cedd5ebd7120664827002572bc710d07a11a5eee7ed0b4cdcb1ea83951bc9c3f7fb220816ba1cf7dc3292f9778ff90531", 0xed}, {&(0x7f0000000140)="8f10d8add309649f88b0c7e375d18e055d8329912e1e77c6b3e7f764414de910e7f8f2f7d8071bcc2cdc5f9923b26bcdd08588ebebff22b2a8cde45a99e716c330fd81b37c26ccd83935a429f4c1901cebb6bfbe249259aad7e2720fa6e4de1b4460bdc13fb176e9b28d73caea9b19195af01f513a0bee9e6409245e13dd45e68484b9db1594db971533cfac81a938102550813cbb0d77d9abeaf01fc84377", 0x9f}, {&(0x7f0000000200)="b318debd33705af7b63f6aff76daec1595a772ef8bff5d2f19bc2ea65a7a557d5dabcdb4f5b3c4691c509d7cb76467ef4401bde1f2c3483800c61492d3506f25aeea5ef8178d0f09776b3c8f2592f0ad45d8180b711ca1cc1859fd6bbb9487aa509a4ad67d50dd08463f254eee27e92a6e8355e0ef9144c9edb5aea0e6922366703d6e8173343863b30b6cf8f10bd9d549eacd34cb9d753a3c6a63f36f8f479a481bd3f2c8a3da0decdf79844b336555e63266e794f8b0d7f35b3f2bbbf5a33597b6b0e55f98656ace1a92dbd129f5d4ce98375f574da929ed67c55644", 0xdd}, {&(0x7f0000000300)="55981f4e3e11f922", 0x8}, {&(0x7f0000000400)="5c719c87b26b27660202e96cdbcce5a3898c13c84e98dc99a459b422fa7f9cf061fe50bef7362485f7005e57e02e89491e7805ef0112beca5c3a47a82f25155a1eb617bfa537062c63ad03ed11d1da41ae2e3e91a8971a4f7cc18a364a34c2e4023ad740a6e7967a85ceb857df8a3bab4caa668dfde02cc6ee08efbaf418323dbda4b6226f007518050380822349c42557e33438694356ddc89ed1f525051aa3848cbea529caf3ae71d89ffb48342d1c11e7", 0xb2}, {&(0x7f00000004c0)="22269cb8b760b93efd346686fc864a6392254d65ec3f33d4131d6f5e24da433d03ba3cca871da877ba682dce311978cdc6c6d527ab127f5dce10677becb822e7cca6a0532c842908c2111a302415cbfcf340984101e7dfdd7dca9ac920a2990965e74e32da3b1e1105c0a633a677ca880dbc6ef34f319694092680cf7d42b17cb875d6fbe1b2eccbab18256237d2f50e524ccab8fa9e51cd8e38f29f053b9c79804d9a08fac336bdbd53847abf538e13e45228c6556c742669fd065c91e0b4f3bfc654adf529b00e1ff43a2126967b23a4521c52ee651ed3b147d89837f934801ace2a0eb9", 0xe5}, {&(0x7f00000005c0)="73e641ddbb4a247c6b0138cf8be60af5eb1aad76d4fbe4531429ebc5fee8a873b470bc42a3d7853fbd3a320dd4592dd197fb9f221b83309bfddcfbcab6ca487913396c5e860d04b2c0599b2b5ccbe7952d690913605480e80b3547495ce37633683b095986c68e6cd29ada6bf1a1be6673260589bf6bb01417c63361e5dbf4cbbdf64ee5fc85f8803ccccee22a8b12126c45ec622849ac623fbda2ce8bb4", 0x9e}], 0x7, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000680)=ANY=[@ANYBLOB="880000002100010026bd7000fbdbdf250a802075052861c816f96231ce1e000005090014000200fc02000000000000000000000000000114000100fe88000000000000000000000000010114000100fe8000000000000000000000000000251400010000000000000000000000ffff7f000001080017004e244e2314000200fc01000000000026d872fa80012c1a45d5035e9128"], 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25070000000c000600030000000000000008000300", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) openat$tun(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xc}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040044}, 0x20004000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r8, 0x29, 0x17, 0x0, 0x4a) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8300, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000ac0)={'pim6reg\x00', 0x1}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000040)={'wlan0\x00', 0xa00}) sendmsg$qrtr(r7, &(0x7f00000008c0)={&(0x7f0000000780)={0x2a, 0xffffffff, 0x8000}, 0xc, &(0x7f0000000880)=[{&(0x7f00000007c0)="b979c7de9a3d3d8a96b3029a485e23513984a36c4fc341de186f8ef1bc126c2977924cae3926342e8a78a713cd786624e1eea5e8673d9daa9c794f6ff6b7fd39bcc5d908099cd81c268db38ffb51ebc43128628f30b57de2", 0x58}, {&(0x7f0000000840)="9e34d36ecaf9aa72d8536659846cb20e62242df0", 0x14}], 0x2, 0x0, 0x0, 0x1}, 0x38) pwritev(r7, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) 7.953754ms ago: executing program 3 (id=12411): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000100900010073797a31"], 0x9c}}, 0x0) syz_emit_ethernet(0x97, &(0x7f0000000080)={@local, @random="7a877d3d6474", @void, {@llc={0x4, {@llc={0xdc, 0x8e, 'L', "74ecca539ef49554c527b56f82b75e6adef1e3fb4858c3bc9fe2f619bc25f1775484f9a09874d862f1a3d05cafbb240081979362e5ffbe24e028132d60a1bc762e99b40f6d865b10e2ad8b0599a68911c4155fee6746a8d62de9266f25712b5d82b29f1105afa7623ea35e8b54717929a2f55f5198f36962184c49ada99098fbf5bd29476d9a"}}}}}, 0x0) 0s ago: executing program 4 (id=12412): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="1844ab68257d2068f56d57a02a7eae952da77917f3d3bcfd17fa697866339abc453b61dec0b0cc634d93cda9ed0568f89163a15513547104661234827edb11431d00de617faf10b5325091e6ea70bd944773d08f73c872eace457ba5f58ada6d8990441f2d87f6c1bae3f521039cb80523708fe6b91397d87277dd924be366aa9c7651e9c398a161f7d1a747d585013de417ce572a38b47e7a73da49f859b81397bf6664db41e97563541e39d05c03e9304513a9d7da57dcbfafc8315adb5695c8d37428c186f136f81f76cebb70b48a4970b0c55921f6ba846526e173bf568fc59fac1f823a562bb4", 0xe9}], 0x1, 0x0, 0x0, 0x5000000}}, {{0x0, 0x0, &(0x7f00000010c0)=[{0x0, 0x12}, {&(0x7f0000001040)="7824a0dc9ad7f268aac63ae0191537bc82ee3d56e4fb23064596", 0x1a}], 0x2}}], 0x2, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000100), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): eprecated]: syz.6.11380 (pid 20091) Use of int in max_burst socket option. [ 1746.258323][T20091] Use struct sctp_assoc_value instead [ 1746.490892][ T5937] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1746.833869][T16473] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1746.876617][T10463] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1746.901206][T10463] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1746.920580][T10463] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1746.948865][T10463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1746.963296][T10463] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1747.119069][T17733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1747.138928][T17733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1747.148208][T17733] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1747.157707][T17733] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1747.172428][T17733] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1747.299045][T20112] wg1 speed is unknown, defaulting to 1000 [ 1747.390243][T20112] lo speed is unknown, defaulting to 1000 [ 1747.746149][ T6666] bond0: (slave syz_tun): Releasing backup interface [ 1747.844254][T16470] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1747.853284][T16470] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1748.117011][T20112] chnl_net:caif_netlink_parms(): no params data found [ 1748.230439][T20112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.237733][T20112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.245512][T20112] bridge_slave_0: entered allmulticast mode [ 1748.254211][T20112] bridge_slave_0: entered promiscuous mode [ 1748.264092][T20112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.271838][T20112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.279248][T20112] bridge_slave_1: entered allmulticast mode [ 1748.291840][T20112] bridge_slave_1: entered promiscuous mode [ 1748.349074][T20112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1748.374038][T20112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.422936][T20112] team0: Port device team_slave_0 added [ 1748.431501][T20112] team0: Port device team_slave_1 added [ 1748.457747][T20112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1748.464982][T20112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1748.492247][T20112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.504816][T20112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.511963][T20112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1748.538187][T20112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1748.584804][T20112] hsr_slave_0: entered promiscuous mode [ 1748.591972][T20112] hsr_slave_1: entered promiscuous mode [ 1748.598186][T20112] debugfs: 'hsr0' already exists in 'hsr' [ 1748.604333][T20112] Cannot create hsr debugfs directory [ 1748.717813][T20112] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1748.779810][T20112] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1748.801076][T17217] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1748.826043][T20112] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1748.865585][T20112] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1749.280830][T10463] Bluetooth: hci3: command tx timeout [ 1750.094611][T20122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1750.155749][T20112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1750.225105][T20112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1750.282167][T20112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1750.296503][T20167] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1750.305890][T20169] __nla_validate_parse: 7 callbacks suppressed [ 1750.305911][T20169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11401'. [ 1750.337800][T20112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1750.684965][T20112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.820475][T20112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1750.846120][T16471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.853441][T16471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1750.873480][T16471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.880737][T16471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1751.362652][T10463] Bluetooth: hci3: command tx timeout [ 1751.457964][T20237] netlink: 'syz.5.11419': attribute type 29 has an invalid length. [ 1751.520762][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1751.636312][T20112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1752.088350][T20252] netlink: 'syz.4.11422': attribute type 11 has an invalid length. [ 1752.107727][T20252] netlink: 228 bytes leftover after parsing attributes in process `syz.4.11422'. [ 1752.143290][T20256] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20002 [ 1752.238285][T20247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.272656][T20247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.303137][T20251] netlink: 'syz.4.11422': attribute type 16 has an invalid length. [ 1752.331744][T20251] netlink: 'syz.4.11422': attribute type 17 has an invalid length. [ 1752.359799][T20252] IPVS: set_ctl: invalid protocol: 47 172.30.1.5:20001 [ 1752.709001][T20251] 8021q: adding VLAN 0 to HW filter on device team0 [ 1752.743852][T20251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1752.800905][T20266] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11426'. [ 1752.834121][T20266] netlink: 3 bytes leftover after parsing attributes in process `syz.1.11426'. [ 1753.077256][T20112] veth0_vlan: entered promiscuous mode [ 1753.146378][T20112] veth1_vlan: entered promiscuous mode [ 1753.180787][T20269] wg1 speed is unknown, defaulting to 1000 [ 1753.206802][T20269] lo speed is unknown, defaulting to 1000 [ 1753.306489][T20283] IPVS: length: 132 != 8 [ 1753.392963][T20112] veth0_macvtap: entered promiscuous mode [ 1753.440815][T20112] veth1_macvtap: entered promiscuous mode [ 1753.442097][T10463] Bluetooth: hci3: command tx timeout [ 1753.538797][T20112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1753.576829][T20286] netlink: 'syz.5.11432': attribute type 11 has an invalid length. [ 1753.631854][T20112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1753.715862][T16472] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.740554][T16472] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.766408][T16472] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.893380][T16472] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.232962][T16471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1754.258330][T16471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1754.414507][T16463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1754.441189][T16463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1754.708394][T20322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11443'. [ 1754.740823][T20316] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11441'. [ 1754.760171][T20320] netlink: 'syz.4.11442': attribute type 7 has an invalid length. [ 1754.774419][T20320] netlink: 'syz.4.11442': attribute type 8 has an invalid length. [ 1754.919034][T20333] netlink: 'syz.1.11445': attribute type 5 has an invalid length. [ 1754.949141][T20333] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.11445'. [ 1754.982963][T20333] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11445'. [ 1755.015903][T20333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11445'. [ 1755.047194][T20333] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11445'. [ 1755.286765][T20345] FAULT_INJECTION: forcing a failure. [ 1755.286765][T20345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1755.376433][T20345] CPU: 0 UID: 0 PID: 20345 Comm: syz.6.11448 Not tainted syzkaller #0 PREEMPT(full) [ 1755.376463][T20345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1755.376476][T20345] Call Trace: [ 1755.376485][T20345] [ 1755.376494][T20345] dump_stack_lvl+0xe8/0x150 [ 1755.376528][T20345] should_fail_ex+0x412/0x560 [ 1755.376559][T20345] _copy_from_iter+0x1d3/0x1670 [ 1755.376603][T20345] ? __lock_acquire+0x6b5/0x2cf0 [ 1755.376635][T20345] ? __pfx__copy_from_iter+0x10/0x10 [ 1755.376669][T20345] ? __lock_acquire+0x6b5/0x2cf0 [ 1755.376703][T20345] tun_get_user+0x275/0x3dd0 [ 1755.376739][T20345] ? aa_file_perm+0x12d/0x1630 [ 1755.376767][T20345] ? aa_file_perm+0x12d/0x1630 [ 1755.376791][T20345] ? aa_file_perm+0x440/0x1630 [ 1755.376815][T20345] ? __pfx_tun_get_user+0x10/0x10 [ 1755.376840][T20345] ? __lock_acquire+0x6b5/0x2cf0 [ 1755.376868][T20345] ? kstrtoull+0x12f/0x1d0 [ 1755.376899][T20345] ? ref_tracker_alloc+0x363/0x4d0 [ 1755.376928][T20345] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1755.376954][T20345] ? tun_get+0x1c/0x2f0 [ 1755.376976][T20345] ? tun_get+0x1c/0x2f0 [ 1755.377003][T20345] ? tun_get+0x1c/0x2f0 [ 1755.377024][T20345] ? tun_get+0x1c/0x2f0 [ 1755.377050][T20345] tun_chr_write_iter+0x113/0x200 [ 1755.377075][T20345] vfs_write+0x61d/0xb90 [ 1755.377112][T20345] ? __pfx_vfs_write+0x10/0x10 [ 1755.377152][T20345] ? __fget_files+0x2a/0x420 [ 1755.377184][T20345] ksys_write+0x150/0x270 [ 1755.377221][T20345] ? __pfx_ksys_write+0x10/0x10 [ 1755.377262][T20345] do_syscall_64+0xe2/0xf80 [ 1755.377288][T20345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.377307][T20345] ? trace_irq_disable+0x37/0x100 [ 1755.377326][T20345] ? clear_bhb_loop+0x60/0xb0 [ 1755.377350][T20345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.377370][T20345] RIP: 0033:0x7f79c699aeb9 [ 1755.377389][T20345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1755.377407][T20345] RSP: 002b:00007f79c78c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1755.377430][T20345] RAX: ffffffffffffffda RBX: 00007f79c6c15fa0 RCX: 00007f79c699aeb9 [ 1755.377444][T20345] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000005 [ 1755.377457][T20345] RBP: 00007f79c78c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1755.377470][T20345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1755.377483][T20345] R13: 00007f79c6c16038 R14: 00007f79c6c15fa0 R15: 00007fffc9608b48 [ 1755.377517][T20345] [ 1755.626287][T10463] Bluetooth: hci3: command tx timeout [ 1756.379040][T20385] netlink: 64 bytes leftover after parsing attributes in process `syz.6.11458'. [ 1756.395830][T20385] netlink: 64 bytes leftover after parsing attributes in process `syz.6.11458'. [ 1756.722792][T20392] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1756.761132][T20392] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.844769][T20392] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1756.860471][T20392] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.117599][T20403] bond3: option min_links: invalid value (18446744073709551612) [ 1757.126404][T20403] bond3: option min_links: allowed values 0 - 2147483647 [ 1757.148039][T20403] bond3 (unregistering): Released all slaves [ 1757.214803][T20392] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.229310][T20392] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.337849][T20392] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.351374][T20392] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.364621][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11467'. [ 1757.375133][T20414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11467'. [ 1757.398028][T20414] geneve2: entered promiscuous mode [ 1757.405290][T20414] geneve2: entered allmulticast mode [ 1757.413086][T16471] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.421781][T16471] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.441929][T16471] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.463231][T16471] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.519884][T20419] wg1 speed is unknown, defaulting to 1000 [ 1757.528578][T20419] lo speed is unknown, defaulting to 1000 [ 1757.565723][T16471] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1757.591062][T16471] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.645832][T16472] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1757.658293][T16472] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.693860][T16472] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1757.702987][T16472] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.730311][T16472] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1757.743222][T16472] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.865394][T20430] netlink: 7 bytes leftover after parsing attributes in process `syz.5.11472'. [ 1757.935381][T20432] x_tables: duplicate underflow at hook 2 [ 1757.941859][T20430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11472'. [ 1758.278203][T20447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11478'. [ 1758.454425][T20447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11478'. [ 1758.490850][T20447] vlan4: entered promiscuous mode [ 1758.500225][T20447] bond0: entered promiscuous mode [ 1758.524737][T20447] bond_slave_0: entered promiscuous mode [ 1758.554099][T20447] bond_slave_1: entered promiscuous mode [ 1758.560253][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1758.593520][T20459] netlink: 'syz.5.11480': attribute type 6 has an invalid length. [ 1758.616367][T20461] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11479'. [ 1758.766807][T20459] wg1 speed is unknown, defaulting to 1000 [ 1758.811856][T20459] lo speed is unknown, defaulting to 1000 [ 1758.892530][T20471] netlink: 'syz.3.11483': attribute type 21 has an invalid length. [ 1758.900894][T20471] netlink: 'syz.3.11483': attribute type 11 has an invalid length. [ 1758.985868][T20464] smc: net device hsr0 applied user defined pnetid SYZ2 [ 1759.041294][T20473] smc: net device hsr0 erased user defined pnetid SYZ2 [ 1759.142210][T20477] ip6gre2: entered promiscuous mode [ 1759.147993][T20477] ip6gre2: entered allmulticast mode [ 1759.450946][T20491] netlink: 'syz.4.11487': attribute type 9 has an invalid length. [ 1760.337270][T20526] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11497'. [ 1762.107722][T20532] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11498'. [ 1762.228024][T20480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1762.602581][T20538] netlink: 840 bytes leftover after parsing attributes in process `syz.1.11500'. [ 1762.861860][T20540] sctp: [Deprecated]: syz.3.11501 (pid 20540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1762.861860][T20540] Use struct sctp_sack_info instead [ 1764.051143][ T5937] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1764.176723][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11518'. [ 1764.192233][T16467] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1764.205686][T16467] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1764.282123][T20588] dummy0: entered promiscuous mode [ 1764.287412][T20588] vlan3: entered promiscuous mode [ 1764.315398][T20595] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1764.394096][T20598] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11521'. [ 1764.429465][T20588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11519'. [ 1764.438936][T20588] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 1764.464029][T20588] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1764.664944][T20615] netlink: 'syz.6.11527': attribute type 1 has an invalid length. [ 1764.677898][T20615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11527'. [ 1764.691080][T20615] netlink: 658 bytes leftover after parsing attributes in process `syz.6.11527'. [ 1764.701345][T20615] netlink: 'syz.6.11527': attribute type 1 has an invalid length. [ 1764.719003][T20615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11527'. [ 1764.745022][T20617] syzkaller0: entered promiscuous mode [ 1764.750999][T20617] syzkaller0: entered allmulticast mode [ 1764.945527][T20630] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1764.972657][ T798] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1765.126745][ T798] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1765.213985][T20652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11538'. [ 1765.231526][T20649] FAULT_INJECTION: forcing a failure. [ 1765.231526][T20649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1765.285555][T20649] CPU: 0 UID: 0 PID: 20649 Comm: syz.5.11535 Not tainted syzkaller #0 PREEMPT(full) [ 1765.285584][T20649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1765.285597][T20649] Call Trace: [ 1765.285606][T20649] [ 1765.285616][T20649] dump_stack_lvl+0xe8/0x150 [ 1765.285649][T20649] should_fail_ex+0x412/0x560 [ 1765.285679][T20649] _copy_from_iter+0x1d3/0x1670 [ 1765.285721][T20649] ? __pfx__copy_from_iter+0x10/0x10 [ 1765.285745][T20649] ? sock_alloc_send_pskb+0x896/0x990 [ 1765.285782][T20649] ? __pfx__copy_from_iter+0x10/0x10 [ 1765.285811][T20649] ? page_copy_sane+0x16a/0x270 [ 1765.285849][T20649] copy_page_from_iter+0xdd/0x170 [ 1765.285881][T20649] skb_copy_datagram_from_iter+0x306/0x710 [ 1765.285925][T20649] tun_get_user+0xc38/0x3dd0 [ 1765.285962][T20649] ? aa_file_perm+0x12d/0x1630 [ 1765.285993][T20649] ? aa_file_perm+0x440/0x1630 [ 1765.286018][T20649] ? __pfx_tun_get_user+0x10/0x10 [ 1765.286044][T20649] ? __lock_acquire+0x6b5/0x2cf0 [ 1765.286074][T20649] ? kstrtoull+0x12f/0x1d0 [ 1765.286107][T20649] ? ref_tracker_alloc+0x363/0x4d0 [ 1765.286136][T20649] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1765.286163][T20649] ? tun_get+0x1c/0x2f0 [ 1765.286185][T20649] ? tun_get+0x1c/0x2f0 [ 1765.286219][T20649] ? tun_get+0x1c/0x2f0 [ 1765.286239][T20649] ? tun_get+0x1c/0x2f0 [ 1765.286266][T20649] tun_chr_write_iter+0x113/0x200 [ 1765.286292][T20649] vfs_write+0x61d/0xb90 [ 1765.286331][T20649] ? __pfx_vfs_write+0x10/0x10 [ 1765.286371][T20649] ? __fget_files+0x2a/0x420 [ 1765.286404][T20649] ksys_write+0x150/0x270 [ 1765.286436][T20649] ? __pfx_ksys_write+0x10/0x10 [ 1765.286478][T20649] do_syscall_64+0xe2/0xf80 [ 1765.286504][T20649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1765.286523][T20649] ? trace_irq_disable+0x37/0x100 [ 1765.286543][T20649] ? clear_bhb_loop+0x60/0xb0 [ 1765.286568][T20649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1765.286594][T20649] RIP: 0033:0x7f1caef9aeb9 [ 1765.286613][T20649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.286630][T20649] RSP: 002b:00007f1cafdec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1765.286652][T20649] RAX: ffffffffffffffda RBX: 00007f1caf215fa0 RCX: 00007f1caef9aeb9 [ 1765.286667][T20649] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000005 [ 1765.286680][T20649] RBP: 00007f1cafdec090 R08: 0000000000000000 R09: 0000000000000000 [ 1765.286693][T20649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.286705][T20649] R13: 00007f1caf216038 R14: 00007f1caf215fa0 R15: 00007ffcc0d019c8 [ 1765.286740][T20649] [ 1765.953028][T20685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11546'. [ 1766.013955][T20682] wg1 speed is unknown, defaulting to 1000 [ 1766.022358][T20682] lo speed is unknown, defaulting to 1000 [ 1766.223510][T20695] wg1 speed is unknown, defaulting to 1000 [ 1766.240714][T20695] lo speed is unknown, defaulting to 1000 [ 1766.433818][T20703] netlink: 'syz.3.11554': attribute type 2 has an invalid length. [ 1766.605867][T20708] FAULT_INJECTION: forcing a failure. [ 1766.605867][T20708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1766.619629][T20708] CPU: 1 UID: 0 PID: 20708 Comm: syz.1.11556 Not tainted syzkaller #0 PREEMPT(full) [ 1766.619657][T20708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1766.619670][T20708] Call Trace: [ 1766.619678][T20708] [ 1766.619687][T20708] dump_stack_lvl+0xe8/0x150 [ 1766.619720][T20708] should_fail_ex+0x412/0x560 [ 1766.619750][T20708] _copy_from_iter+0x1d3/0x1670 [ 1766.619800][T20708] ? __pfx__copy_from_iter+0x10/0x10 [ 1766.619823][T20708] ? sock_alloc_send_pskb+0x896/0x990 [ 1766.619860][T20708] ? __pfx__copy_from_iter+0x10/0x10 [ 1766.619889][T20708] ? page_copy_sane+0x16a/0x270 [ 1766.619917][T20708] copy_page_from_iter+0xdd/0x170 [ 1766.619949][T20708] skb_copy_datagram_from_iter+0x306/0x710 [ 1766.619997][T20708] tun_get_user+0xc38/0x3dd0 [ 1766.620032][T20708] ? aa_file_perm+0x12d/0x1630 [ 1766.620061][T20708] ? aa_file_perm+0x440/0x1630 [ 1766.620085][T20708] ? __pfx_tun_get_user+0x10/0x10 [ 1766.620110][T20708] ? __lock_acquire+0x6b5/0x2cf0 [ 1766.620140][T20708] ? kstrtoull+0x12f/0x1d0 [ 1766.620171][T20708] ? ref_tracker_alloc+0x363/0x4d0 [ 1766.620199][T20708] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1766.620226][T20708] ? tun_get+0x1c/0x2f0 [ 1766.620248][T20708] ? tun_get+0x1c/0x2f0 [ 1766.620275][T20708] ? tun_get+0x1c/0x2f0 [ 1766.620295][T20708] ? tun_get+0x1c/0x2f0 [ 1766.620321][T20708] tun_chr_write_iter+0x113/0x200 [ 1766.620346][T20708] vfs_write+0x61d/0xb90 [ 1766.620384][T20708] ? __pfx_vfs_write+0x10/0x10 [ 1766.620422][T20708] ? __fget_files+0x2a/0x420 [ 1766.620454][T20708] ksys_write+0x150/0x270 [ 1766.620486][T20708] ? __pfx_ksys_write+0x10/0x10 [ 1766.620527][T20708] do_syscall_64+0xe2/0xf80 [ 1766.620551][T20708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.620570][T20708] ? trace_irq_disable+0x37/0x100 [ 1766.620590][T20708] ? clear_bhb_loop+0x60/0xb0 [ 1766.620633][T20708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1766.620653][T20708] RIP: 0033:0x7ff1e0d9aeb9 [ 1766.620672][T20708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1766.620690][T20708] RSP: 002b:00007ff1e1c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1766.620712][T20708] RAX: ffffffffffffffda RBX: 00007ff1e1015fa0 RCX: 00007ff1e0d9aeb9 [ 1766.620726][T20708] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000005 [ 1766.620739][T20708] RBP: 00007ff1e1c25090 R08: 0000000000000000 R09: 0000000000000000 [ 1766.620750][T20708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1766.620762][T20708] R13: 00007ff1e1016038 R14: 00007ff1e1015fa0 R15: 00007ffe8319f3f8 [ 1766.620804][T20708] [ 1767.272817][T20713] __nla_validate_parse: 2 callbacks suppressed [ 1767.272838][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11558'. [ 1767.290902][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11558'. [ 1767.718981][T20734] team0: No ports can be present during mode change [ 1767.920470][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1768.171080][ T97] block nbd0: Possible stuck request ffff8880b1460000: control (read@0,1024B). Runtime 60 seconds [ 1768.182369][ T97] block nbd0: Possible stuck request ffff8880b1460200: control (read@1024,1024B). Runtime 60 seconds [ 1768.194050][ T97] block nbd0: Possible stuck request ffff8880b1460400: control (read@2048,1024B). Runtime 60 seconds [ 1768.206870][ T97] block nbd0: Possible stuck request ffff8880b1460600: control (read@3072,1024B). Runtime 60 seconds [ 1768.271642][T20758] FAULT_INJECTION: forcing a failure. [ 1768.271642][T20758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1768.288537][T20756] tipc: Enabled bearer , priority 0 [ 1768.316385][T20759] wg1 speed is unknown, defaulting to 1000 [ 1768.354275][T20758] CPU: 0 UID: 0 PID: 20758 Comm: syz.4.11569 Not tainted syzkaller #0 PREEMPT(full) [ 1768.354307][T20758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1768.354319][T20758] Call Trace: [ 1768.354327][T20758] [ 1768.354336][T20758] dump_stack_lvl+0xe8/0x150 [ 1768.354368][T20758] should_fail_ex+0x412/0x560 [ 1768.354397][T20758] _copy_from_iter+0x1d3/0x1670 [ 1768.354438][T20758] ? __pfx__copy_from_iter+0x10/0x10 [ 1768.354471][T20758] ? sock_alloc_send_pskb+0x896/0x990 [ 1768.354508][T20758] ? __pfx__copy_from_iter+0x10/0x10 [ 1768.354537][T20758] ? page_copy_sane+0x16a/0x270 [ 1768.354565][T20758] copy_page_from_iter+0xdd/0x170 [ 1768.354595][T20758] skb_copy_datagram_from_iter+0x306/0x710 [ 1768.354636][T20758] tun_get_user+0xc38/0x3dd0 [ 1768.354670][T20758] ? aa_file_perm+0x12d/0x1630 [ 1768.354701][T20758] ? aa_file_perm+0x440/0x1630 [ 1768.354724][T20758] ? __pfx_tun_get_user+0x10/0x10 [ 1768.354748][T20758] ? __lock_acquire+0x6b5/0x2cf0 [ 1768.354778][T20758] ? kstrtoull+0x12f/0x1d0 [ 1768.354809][T20758] ? ref_tracker_alloc+0x363/0x4d0 [ 1768.354836][T20758] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1768.354863][T20758] ? tun_get+0x1c/0x2f0 [ 1768.354883][T20758] ? tun_get+0x1c/0x2f0 [ 1768.354919][T20758] ? tun_get+0x1c/0x2f0 [ 1768.354938][T20758] ? tun_get+0x1c/0x2f0 [ 1768.354964][T20758] tun_chr_write_iter+0x113/0x200 [ 1768.354988][T20758] vfs_write+0x61d/0xb90 [ 1768.355033][T20758] ? __pfx_vfs_write+0x10/0x10 [ 1768.355108][T20758] ? __fget_files+0x2a/0x420 [ 1768.355144][T20758] ksys_write+0x150/0x270 [ 1768.355175][T20758] ? __pfx_ksys_write+0x10/0x10 [ 1768.355213][T20758] do_syscall_64+0xe2/0xf80 [ 1768.355239][T20758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.355257][T20758] ? trace_irq_disable+0x37/0x100 [ 1768.355275][T20758] ? clear_bhb_loop+0x60/0xb0 [ 1768.355299][T20758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.355317][T20758] RIP: 0033:0x7f7e8999aeb9 [ 1768.355336][T20758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1768.355352][T20758] RSP: 002b:00007f7e8a877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1768.355374][T20758] RAX: ffffffffffffffda RBX: 00007f7e89c15fa0 RCX: 00007f7e8999aeb9 [ 1768.355387][T20758] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000005 [ 1768.355400][T20758] RBP: 00007f7e8a877090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.355412][T20758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1768.355424][T20758] R13: 00007f7e89c16038 R14: 00007f7e89c15fa0 R15: 00007ffda057d9e8 [ 1768.355466][T20758] [ 1768.646267][T20756] syzkaller0: entered promiscuous mode [ 1768.652886][T20756] syzkaller0: entered allmulticast mode [ 1768.659006][T20756] tipc: Resetting bearer [ 1768.705914][T20759] lo speed is unknown, defaulting to 1000 [ 1768.711569][T20756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11567'. [ 1769.072344][T20779] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11574'. [ 1769.087604][T20778] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11574'. [ 1769.113915][T20777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11574'. [ 1771.306666][ T5191] udevd[5191]: worker [18019] /devices/virtual/block/nbd0 is taking a long time [ 1771.479809][T16461] tipc: Resetting bearer [ 1771.551118][T20779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11574'. [ 1771.565676][ T798] tipc: Node number set to 1148967424 [ 1771.578390][T20753] tipc: Resetting bearer [ 1771.627019][T20753] tipc: Disabling bearer [ 1771.657692][T20789] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11576'. [ 1771.952750][T20805] netlink: 'syz.5.11580': attribute type 2 has an invalid length. [ 1772.037766][T20805] hmac(sha224): entered promiscuous mode [ 1772.092113][T20797] wg1 speed is unknown, defaulting to 1000 [ 1772.122562][T20797] lo speed is unknown, defaulting to 1000 [ 1772.236938][T20812] FAULT_INJECTION: forcing a failure. [ 1772.236938][T20812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1772.269001][T20812] CPU: 0 UID: 0 PID: 20812 Comm: syz.1.11583 Not tainted syzkaller #0 PREEMPT(full) [ 1772.269033][T20812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1772.269045][T20812] Call Trace: [ 1772.269055][T20812] [ 1772.269064][T20812] dump_stack_lvl+0xe8/0x150 [ 1772.269097][T20812] should_fail_ex+0x412/0x560 [ 1772.269127][T20812] _copy_from_iter+0x1d3/0x1670 [ 1772.269168][T20812] ? __pfx__copy_from_iter+0x10/0x10 [ 1772.269192][T20812] ? sock_alloc_send_pskb+0x896/0x990 [ 1772.269229][T20812] ? __pfx__copy_from_iter+0x10/0x10 [ 1772.269258][T20812] ? page_copy_sane+0x16a/0x270 [ 1772.269287][T20812] copy_page_from_iter+0xdd/0x170 [ 1772.269319][T20812] skb_copy_datagram_from_iter+0x306/0x710 [ 1772.269362][T20812] tun_get_user+0xc38/0x3dd0 [ 1772.269410][T20812] ? aa_file_perm+0x12d/0x1630 [ 1772.269441][T20812] ? aa_file_perm+0x440/0x1630 [ 1772.269465][T20812] ? __pfx_tun_get_user+0x10/0x10 [ 1772.269490][T20812] ? __lock_acquire+0x6b5/0x2cf0 [ 1772.269521][T20812] ? kstrtoull+0x12f/0x1d0 [ 1772.269554][T20812] ? ref_tracker_alloc+0x363/0x4d0 [ 1772.269582][T20812] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1772.269608][T20812] ? tun_get+0x1c/0x2f0 [ 1772.269630][T20812] ? tun_get+0x1c/0x2f0 [ 1772.269656][T20812] ? tun_get+0x1c/0x2f0 [ 1772.269676][T20812] ? tun_get+0x1c/0x2f0 [ 1772.269702][T20812] tun_chr_write_iter+0x113/0x200 [ 1772.269727][T20812] vfs_write+0x61d/0xb90 [ 1772.269764][T20812] ? __pfx_vfs_write+0x10/0x10 [ 1772.269804][T20812] ? __fget_files+0x2a/0x420 [ 1772.269835][T20812] ksys_write+0x150/0x270 [ 1772.269866][T20812] ? __pfx_ksys_write+0x10/0x10 [ 1772.269907][T20812] do_syscall_64+0xe2/0xf80 [ 1772.269934][T20812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.269957][T20812] ? trace_irq_disable+0x37/0x100 [ 1772.269977][T20812] ? clear_bhb_loop+0x60/0xb0 [ 1772.269999][T20812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.270018][T20812] RIP: 0033:0x7ff1e0d9aeb9 [ 1772.270036][T20812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1772.270052][T20812] RSP: 002b:00007ff1e1c25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1772.270075][T20812] RAX: ffffffffffffffda RBX: 00007ff1e1015fa0 RCX: 00007ff1e0d9aeb9 [ 1772.270088][T20812] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000005 [ 1772.270101][T20812] RBP: 00007ff1e1c25090 R08: 0000000000000000 R09: 0000000000000000 [ 1772.270113][T20812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1772.270125][T20812] R13: 00007ff1e1016038 R14: 00007ff1e1015fa0 R15: 00007ffe8319f3f8 [ 1772.270157][T20812] [ 1772.702529][T20817] vlan3: entered allmulticast mode [ 1772.707858][T20817] macvtap0: entered allmulticast mode [ 1772.724967][T20817] veth0_macvtap: entered allmulticast mode [ 1773.644410][T20851] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 1773.919591][T20862] FAULT_INJECTION: forcing a failure. [ 1773.919591][T20862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1774.007426][T20862] CPU: 0 UID: 0 PID: 20862 Comm: syz.3.11597 Not tainted syzkaller #0 PREEMPT(full) [ 1774.007458][T20862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1774.007471][T20862] Call Trace: [ 1774.007480][T20862] [ 1774.007490][T20862] dump_stack_lvl+0xe8/0x150 [ 1774.007522][T20862] should_fail_ex+0x412/0x560 [ 1774.007551][T20862] _copy_from_iter+0x1d3/0x1670 [ 1774.007592][T20862] ? __pfx__copy_from_iter+0x10/0x10 [ 1774.007620][T20862] ? sock_alloc_send_pskb+0x896/0x990 [ 1774.007655][T20862] ? __pfx__copy_from_iter+0x10/0x10 [ 1774.007684][T20862] ? page_copy_sane+0x16a/0x270 [ 1774.007711][T20862] copy_page_from_iter+0xdd/0x170 [ 1774.007743][T20862] skb_copy_datagram_from_iter+0x306/0x710 [ 1774.007786][T20862] tun_get_user+0xc38/0x3dd0 [ 1774.007822][T20862] ? aa_file_perm+0x12d/0x1630 [ 1774.007852][T20862] ? aa_file_perm+0x440/0x1630 [ 1774.007877][T20862] ? __pfx_tun_get_user+0x10/0x10 [ 1774.007902][T20862] ? __lock_acquire+0x6b5/0x2cf0 [ 1774.007932][T20862] ? kstrtoull+0x12f/0x1d0 [ 1774.007963][T20862] ? ref_tracker_alloc+0x363/0x4d0 [ 1774.007991][T20862] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1774.008017][T20862] ? tun_get+0x1c/0x2f0 [ 1774.008038][T20862] ? tun_get+0x1c/0x2f0 [ 1774.008065][T20862] ? tun_get+0x1c/0x2f0 [ 1774.008084][T20862] ? tun_get+0x1c/0x2f0 [ 1774.008110][T20862] tun_chr_write_iter+0x113/0x200 [ 1774.008135][T20862] vfs_write+0x61d/0xb90 [ 1774.008172][T20862] ? __pfx_vfs_write+0x10/0x10 [ 1774.008211][T20862] ? __fget_files+0x2a/0x420 [ 1774.008243][T20862] ksys_write+0x150/0x270 [ 1774.008274][T20862] ? __pfx_ksys_write+0x10/0x10 [ 1774.008315][T20862] do_syscall_64+0xe2/0xf80 [ 1774.008339][T20862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.008358][T20862] ? trace_irq_disable+0x37/0x100 [ 1774.008376][T20862] ? clear_bhb_loop+0x60/0xb0 [ 1774.008409][T20862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.008427][T20862] RIP: 0033:0x7f4b1939aeb9 [ 1774.008446][T20862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1774.008462][T20862] RSP: 002b:00007f4b1a1fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1774.008485][T20862] RAX: ffffffffffffffda RBX: 00007f4b19615fa0 RCX: 00007f4b1939aeb9 [ 1774.008500][T20862] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000005 [ 1774.008513][T20862] RBP: 00007f4b1a1fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1774.008525][T20862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1774.008537][T20862] R13: 00007f4b19616038 R14: 00007f4b19615fa0 R15: 00007ffe171ea0c8 [ 1774.008577][T20862] [ 1774.358296][T20878] xt_hashlimit: max too large, truncated to 1048576 [ 1774.595310][T20889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11602'. [ 1774.655407][ T30] audit: type=1800 audit(1770200166.084:32): pid=20875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.11598" name="memory.events" dev="tmpfs" ino=162 res=0 errno=0 [ 1774.808539][T20896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11602'. [ 1774.944396][T20889] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1775.082261][T20912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11606'. [ 1775.200231][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1775.211466][T20896] macsec1: entered promiscuous mode [ 1775.218713][T20896] bond6: entered promiscuous mode [ 1775.225331][T20896] macsec1: entered allmulticast mode [ 1775.231732][T20896] bond6: entered allmulticast mode [ 1775.261188][T20896] bond6: left allmulticast mode [ 1775.266347][T20896] bond6: left promiscuous mode [ 1775.315000][T20915] wg1 speed is unknown, defaulting to 1000 [ 1775.353346][T20915] lo speed is unknown, defaulting to 1000 [ 1775.439227][T20921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11610'. [ 1775.474185][T20924] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11611'. [ 1775.486536][T20921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11610'. [ 1775.636275][T20928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1775.649741][T20928] Cannot find set identified by id 65534 to match [ 1775.891408][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11615'. [ 1775.907151][T20940] netlink: 'syz.1.11615': attribute type 21 has an invalid length. [ 1775.939353][T20942] FAULT_INJECTION: forcing a failure. [ 1775.939353][T20942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1775.955184][T20942] CPU: 0 UID: 0 PID: 20942 Comm: syz.5.11616 Not tainted syzkaller #0 PREEMPT(full) [ 1775.955214][T20942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1775.955226][T20942] Call Trace: [ 1775.955235][T20942] [ 1775.955244][T20942] dump_stack_lvl+0xe8/0x150 [ 1775.955276][T20942] should_fail_ex+0x412/0x560 [ 1775.955307][T20942] _copy_from_iter+0x1d3/0x1670 [ 1775.955348][T20942] ? __pfx__copy_from_iter+0x10/0x10 [ 1775.955372][T20942] ? sock_alloc_send_pskb+0x896/0x990 [ 1775.955417][T20942] ? __pfx__copy_from_iter+0x10/0x10 [ 1775.955447][T20942] ? page_copy_sane+0x16a/0x270 [ 1775.955476][T20942] copy_page_from_iter+0xdd/0x170 [ 1775.955507][T20942] skb_copy_datagram_from_iter+0x306/0x710 [ 1775.955550][T20942] tun_get_user+0xc38/0x3dd0 [ 1775.955587][T20942] ? aa_file_perm+0x12d/0x1630 [ 1775.955618][T20942] ? aa_file_perm+0x440/0x1630 [ 1775.955641][T20942] ? __pfx_tun_get_user+0x10/0x10 [ 1775.955666][T20942] ? __lock_acquire+0x6b5/0x2cf0 [ 1775.955697][T20942] ? kstrtoull+0x12f/0x1d0 [ 1775.955730][T20942] ? ref_tracker_alloc+0x363/0x4d0 [ 1775.955759][T20942] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1775.955786][T20942] ? tun_get+0x1c/0x2f0 [ 1775.955808][T20942] ? tun_get+0x1c/0x2f0 [ 1775.955835][T20942] ? tun_get+0x1c/0x2f0 [ 1775.955856][T20942] ? tun_get+0x1c/0x2f0 [ 1775.955881][T20942] tun_chr_write_iter+0x113/0x200 [ 1775.955907][T20942] vfs_write+0x61d/0xb90 [ 1775.955945][T20942] ? __pfx_vfs_write+0x10/0x10 [ 1775.955985][T20942] ? __fget_files+0x2a/0x420 [ 1775.956019][T20942] ksys_write+0x150/0x270 [ 1775.956049][T20942] ? __pfx_ksys_write+0x10/0x10 [ 1775.956095][T20942] do_syscall_64+0xe2/0xf80 [ 1775.956123][T20942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.956142][T20942] ? trace_irq_disable+0x37/0x100 [ 1775.956162][T20942] ? clear_bhb_loop+0x60/0xb0 [ 1775.956187][T20942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.956212][T20942] RIP: 0033:0x7f1caef9aeb9 [ 1775.956232][T20942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.956249][T20942] RSP: 002b:00007f1cafdec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1775.956272][T20942] RAX: ffffffffffffffda RBX: 00007f1caf215fa0 RCX: 00007f1caef9aeb9 [ 1775.956286][T20942] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000005 [ 1775.956300][T20942] RBP: 00007f1cafdec090 R08: 0000000000000000 R09: 0000000000000000 [ 1775.956312][T20942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1775.956325][T20942] R13: 00007f1caf216038 R14: 00007f1caf215fa0 R15: 00007ffcc0d019c8 [ 1775.956360][T20942] [ 1776.514595][T20957] netlink: 'syz.3.11621': attribute type 3 has an invalid length. [ 1776.540455][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11621'. [ 1776.549917][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11621'. [ 1776.565435][T20957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11621'. [ 1776.634298][T20949] bond3: option tlb_dynamic_lb: invalid value (5) [ 1776.643204][T20949] bond3 (unregistering): Released all slaves [ 1776.698165][T20957] tipc: Enabled bearer , priority 10 [ 1776.846202][T20963] netlink: 'syz.6.11622': attribute type 1 has an invalid length. [ 1777.179247][T20983] pimreg: entered allmulticast mode [ 1777.205091][T20986] netlink: 'syz.5.11625': attribute type 7 has an invalid length. [ 1777.220812][T20986] netlink: 'syz.5.11625': attribute type 8 has an invalid length. [ 1777.323503][T20990] wg1 speed is unknown, defaulting to 1000 [ 1777.332887][T20990] lo speed is unknown, defaulting to 1000 [ 1777.339884][T20991] FAULT_INJECTION: forcing a failure. [ 1777.339884][T20991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1777.374038][T20991] CPU: 1 UID: 0 PID: 20991 Comm: syz.6.11630 Not tainted syzkaller #0 PREEMPT(full) [ 1777.374070][T20991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1777.374082][T20991] Call Trace: [ 1777.374091][T20991] [ 1777.374100][T20991] dump_stack_lvl+0xe8/0x150 [ 1777.374132][T20991] should_fail_ex+0x412/0x560 [ 1777.374162][T20991] _copy_from_iter+0x1d3/0x1670 [ 1777.374202][T20991] ? __pfx__copy_from_iter+0x10/0x10 [ 1777.374224][T20991] ? sock_alloc_send_pskb+0x896/0x990 [ 1777.374260][T20991] ? __pfx__copy_from_iter+0x10/0x10 [ 1777.374288][T20991] ? page_copy_sane+0x16a/0x270 [ 1777.374315][T20991] copy_page_from_iter+0xdd/0x170 [ 1777.374354][T20991] skb_copy_datagram_from_iter+0x306/0x710 [ 1777.374394][T20991] tun_get_user+0xc38/0x3dd0 [ 1777.374430][T20991] ? aa_file_perm+0x12d/0x1630 [ 1777.374461][T20991] ? aa_file_perm+0x440/0x1630 [ 1777.374486][T20991] ? __pfx_tun_get_user+0x10/0x10 [ 1777.374510][T20991] ? __lock_acquire+0x6b5/0x2cf0 [ 1777.374540][T20991] ? kstrtoull+0x12f/0x1d0 [ 1777.374572][T20991] ? ref_tracker_alloc+0x363/0x4d0 [ 1777.374599][T20991] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1777.374625][T20991] ? tun_get+0x1c/0x2f0 [ 1777.374647][T20991] ? tun_get+0x1c/0x2f0 [ 1777.374673][T20991] ? tun_get+0x1c/0x2f0 [ 1777.374693][T20991] ? tun_get+0x1c/0x2f0 [ 1777.374761][T20991] tun_chr_write_iter+0x113/0x200 [ 1777.374787][T20991] vfs_write+0x61d/0xb90 [ 1777.374826][T20991] ? __pfx_vfs_write+0x10/0x10 [ 1777.374865][T20991] ? __fget_files+0x2a/0x420 [ 1777.374898][T20991] ksys_write+0x150/0x270 [ 1777.374927][T20991] ? __pfx_ksys_write+0x10/0x10 [ 1777.374968][T20991] do_syscall_64+0xe2/0xf80 [ 1777.374994][T20991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.375013][T20991] ? trace_irq_disable+0x37/0x100 [ 1777.375031][T20991] ? clear_bhb_loop+0x60/0xb0 [ 1777.375061][T20991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.375081][T20991] RIP: 0033:0x7f79c699aeb9 [ 1777.375100][T20991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1777.375117][T20991] RSP: 002b:00007f79c78c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1777.375140][T20991] RAX: ffffffffffffffda RBX: 00007f79c6c15fa0 RCX: 00007f79c699aeb9 [ 1777.375155][T20991] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000005 [ 1777.375168][T20991] RBP: 00007f79c78c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1777.375180][T20991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1777.375193][T20991] R13: 00007f79c6c16038 R14: 00007f79c6c15fa0 R15: 00007fffc9608b48 [ 1777.375226][T20991] [ 1777.769599][ T5937] tipc: Node number set to 33554432 [ 1777.839492][T20999] netlink: 'syz.5.11632': attribute type 7 has an invalid length. [ 1777.851283][T20999] netlink: 'syz.5.11632': attribute type 8 has an invalid length. [ 1778.269232][T21019] pim6reg: entered allmulticast mode [ 1778.288948][T21018] pim6reg: left allmulticast mode [ 1778.501919][T21020] wg1 speed is unknown, defaulting to 1000 [ 1778.523114][T21020] lo speed is unknown, defaulting to 1000 [ 1778.638859][T21034] FAULT_INJECTION: forcing a failure. [ 1778.638859][T21034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1778.669935][T21034] CPU: 0 UID: 0 PID: 21034 Comm: syz.1.11643 Not tainted syzkaller #0 PREEMPT(full) [ 1778.669966][T21034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1778.669978][T21034] Call Trace: [ 1778.669993][T21034] [ 1778.670002][T21034] dump_stack_lvl+0xe8/0x150 [ 1778.670036][T21034] should_fail_ex+0x412/0x560 [ 1778.670065][T21034] _copy_from_iter+0x1d3/0x1670 [ 1778.670104][T21034] ? __pfx__copy_from_iter+0x10/0x10 [ 1778.670126][T21034] ? sock_alloc_send_pskb+0x896/0x990 [ 1778.670162][T21034] ? __pfx__copy_from_iter+0x10/0x10 [ 1778.670190][T21034] ? page_copy_sane+0x16a/0x270 [ 1778.670217][T21034] copy_page_from_iter+0xdd/0x170 [ 1778.670247][T21034] skb_copy_datagram_from_iter+0x306/0x710 [ 1778.670289][T21034] tun_get_user+0xc38/0x3dd0 [ 1778.670324][T21034] ? aa_file_perm+0x12d/0x1630 [ 1778.670354][T21034] ? aa_file_perm+0x440/0x1630 [ 1778.670387][T21034] ? __pfx_tun_get_user+0x10/0x10 [ 1778.670411][T21034] ? __lock_acquire+0x6b5/0x2cf0 [ 1778.670438][T21034] ? kstrtoull+0x12f/0x1d0 [ 1778.670470][T21034] ? ref_tracker_alloc+0x363/0x4d0 [ 1778.670497][T21034] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1778.670523][T21034] ? tun_get+0x1c/0x2f0 [ 1778.670543][T21034] ? tun_get+0x1c/0x2f0 [ 1778.670569][T21034] ? tun_get+0x1c/0x2f0 [ 1778.670589][T21034] ? tun_get+0x1c/0x2f0 [ 1778.670613][T21034] tun_chr_write_iter+0x113/0x200 [ 1778.670636][T21034] vfs_write+0x61d/0xb90 [ 1778.670673][T21034] ? __pfx_vfs_write+0x10/0x10 [ 1778.670712][T21034] ? __fget_files+0x2a/0x420 [ 1778.670743][T21034] ksys_write+0x150/0x270 [ 1778.670773][T21034] ? __pfx_ksys_write+0x10/0x10 [ 1778.670812][T21034] do_syscall_64+0xe2/0xf80 [ 1778.670838][T21034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.670856][T21034] ? trace_irq_disable+0x37/0x100 [ 1778.670874][T21034] ? clear_bhb_loop+0x60/0xb0 [ 1778.670898][T21034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1778.670916][T21034] RIP: 0033:0x7ff1e0d9aeb9 [ 1778.670934][T21034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1778.670952][T21034] RSP: 002b:00007ff1e1c04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1778.670973][T21034] RAX: ffffffffffffffda RBX: 00007ff1e1016090 RCX: 00007ff1e0d9aeb9 [ 1778.670988][T21034] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000005 [ 1778.671001][T21034] RBP: 00007ff1e1c04090 R08: 0000000000000000 R09: 0000000000000000 [ 1778.671013][T21034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1778.671024][T21034] R13: 00007ff1e1016128 R14: 00007ff1e1016090 R15: 00007ffe8319f3f8 [ 1778.671058][T21034] [ 1782.717910][T21052] __nla_validate_parse: 7 callbacks suppressed [ 1782.717931][T21052] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11646'. [ 1782.737956][T21050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11647'. [ 1782.807882][T21052] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1782.831185][T21057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11648'. [ 1782.875176][T21057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11648'. [ 1782.898418][T21056] bond7: entered allmulticast mode [ 1782.933298][T21060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11648'. [ 1782.965877][T21064] bond0: (slave sit0): Error: Device type is different from other slaves [ 1782.997522][T21063] atomic_op ffff888057215198 conn xmit_atomic 0000000000000000 [ 1783.143730][T21063] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11650'. [ 1783.722081][T21093] Bluetooth: MGMT ver 1.23 [ 1783.732888][T21093] x_tables: duplicate entry at hook 3 [ 1783.998575][T21113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11663'. [ 1784.014748][T21114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1784.142722][T21118] netlink: 'syz.5.11664': attribute type 3 has an invalid length. [ 1784.151373][T21118] netlink: 'syz.5.11664': attribute type 1 has an invalid length. [ 1784.177684][T21118] netlink: 232 bytes leftover after parsing attributes in process `syz.5.11664'. [ 1784.381707][T21125] wg1 speed is unknown, defaulting to 1000 [ 1784.388560][T21132] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.11669'. [ 1784.406024][T21125] lo speed is unknown, defaulting to 1000 [ 1784.503214][T21142] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11671'. [ 1784.523601][T21132] block nbd14: server does not support multiple connections per device. [ 1784.525092][T21143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1784.534951][T21132] block nbd14: shutting down sockets [ 1784.585065][T21143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1784.908833][T21155] x_tables: duplicate entry at hook 3 [ 1785.347654][T21169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1785.391909][T21174] block nbd14: shutting down sockets [ 1785.448224][T21187] netlink: 'syz.1.11683': attribute type 11 has an invalid length. [ 1785.618328][T21169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1785.738284][T21176] wg1 speed is unknown, defaulting to 1000 [ 1785.773354][T21176] lo speed is unknown, defaulting to 1000 [ 1785.941353][T21195] wg1 speed is unknown, defaulting to 1000 [ 1785.968835][T21200] FAULT_INJECTION: forcing a failure. [ 1785.968835][T21200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1785.987949][T21200] CPU: 0 UID: 0 PID: 21200 Comm: syz.3.11685 Not tainted syzkaller #0 PREEMPT(full) [ 1785.987976][T21200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1785.987988][T21200] Call Trace: [ 1785.987996][T21200] [ 1785.988005][T21200] dump_stack_lvl+0xe8/0x150 [ 1785.988037][T21200] should_fail_ex+0x412/0x560 [ 1785.988065][T21200] _copy_from_user+0x2d/0xb0 [ 1785.988096][T21200] bpf_test_init+0xd8/0x150 [ 1785.988124][T21200] bpf_prog_test_run_skb+0x36f/0x1c90 [ 1785.988161][T21200] ? __fget_files+0x2a/0x420 [ 1785.988182][T21200] ? __fget_files+0x3a0/0x420 [ 1785.988202][T21200] ? __fget_files+0x2a/0x420 [ 1785.988229][T21200] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1785.988252][T21200] bpf_prog_test_run+0x2c7/0x340 [ 1785.988279][T21200] __sys_bpf+0x5cb/0x920 [ 1785.988300][T21200] ? __pfx___sys_bpf+0x10/0x10 [ 1785.988338][T21200] ? ksys_write+0x242/0x270 [ 1785.988368][T21200] ? __pfx_ksys_write+0x10/0x10 [ 1785.988403][T21200] __x64_sys_bpf+0x7c/0x90 [ 1785.988432][T21200] do_syscall_64+0xe2/0xf80 [ 1785.988469][T21200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.988488][T21200] ? trace_irq_disable+0x37/0x100 [ 1785.988506][T21200] ? clear_bhb_loop+0x60/0xb0 [ 1785.988531][T21200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.988569][T21200] RIP: 0033:0x7f4b1939aeb9 [ 1785.988589][T21200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1785.988606][T21200] RSP: 002b:00007f4b1a1fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1785.988629][T21200] RAX: ffffffffffffffda RBX: 00007f4b19615fa0 RCX: 00007f4b1939aeb9 [ 1785.988653][T21200] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1785.988667][T21200] RBP: 00007f4b1a1fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.988679][T21200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.988691][T21200] R13: 00007f4b19616038 R14: 00007f4b19615fa0 R15: 00007ffe171ea0c8 [ 1785.988726][T21200] [ 1786.339131][T21195] lo speed is unknown, defaulting to 1000 [ 1787.795680][T21267] __nla_validate_parse: 8 callbacks suppressed [ 1787.795700][T21267] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11703'. [ 1787.983454][T21281] netlink: 240 bytes leftover after parsing attributes in process `syz.1.11701'. [ 1788.331684][T21298] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11708'. [ 1788.375671][T21299] netlink: 44 bytes leftover after parsing attributes in process `syz.5.11709'. [ 1788.464191][T21296] wg1 speed is unknown, defaulting to 1000 [ 1788.492644][ T6874] lec:lec_start_xmit: lec0:No lecd attached [ 1788.504076][T21296] lo speed is unknown, defaulting to 1000 [ 1788.511765][T21303] wg1 speed is unknown, defaulting to 1000 [ 1788.550268][T21303] lo speed is unknown, defaulting to 1000 [ 1788.679868][T21310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1788.687248][T21310] IPv6: NLM_F_CREATE should be set when creating new route [ 1788.979762][T21325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11715'. [ 1789.009664][T21325] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11715'. [ 1789.266904][T21333] netlink: 'syz.5.11718': attribute type 1 has an invalid length. [ 1789.359941][T21334] netlink: 'syz.6.11719': attribute type 13 has an invalid length. [ 1789.392795][T21340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11720'. [ 1789.505156][T21344] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11720'. [ 1789.515053][T21344] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11720'. [ 1789.920554][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1789.989893][T21342] wg1 speed is unknown, defaulting to 1000 [ 1789.999834][T21342] lo speed is unknown, defaulting to 1000 [ 1790.888342][T21364] bond7 (unregistering): Released all slaves [ 1790.906625][T21371] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11728'. [ 1790.952560][T21372] xt_l2tp: v2 doesn't support IP mode [ 1791.398178][T21386] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1791.428283][T21396] x_tables: unsorted underflow at hook 3 [ 1791.797881][T21411] netlink: 'syz.5.11740': attribute type 11 has an invalid length. [ 1791.855117][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1792.247901][T21435] wg1 speed is unknown, defaulting to 1000 [ 1792.275665][T21435] lo speed is unknown, defaulting to 1000 [ 1793.083396][T21470] __nla_validate_parse: 3 callbacks suppressed [ 1793.083429][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11751'. [ 1793.150915][T21470] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11751'. [ 1793.193678][T21476] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.11753'. [ 1793.254941][T21476] netlink: Unknown conntrack attr (0) [ 1793.938024][T21502] netlink: 'syz.3.11758': attribute type 13 has an invalid length. [ 1794.000360][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1794.008441][ C1] lec:lec_tx_timeout: lec0 [ 1794.014984][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1794.577236][T21531] netlink: 'syz.3.11758': attribute type 1 has an invalid length. [ 1794.597867][T21531] netlink: 244 bytes leftover after parsing attributes in process `syz.3.11758'. [ 1794.648106][T21502] veth1_vlan: left allmulticast mode [ 1794.669613][T21502] veth0_macvtap: left allmulticast mode [ 1794.923779][T16471] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1794.940930][T16471] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1794.967250][T16471] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1794.999314][T16471] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.045653][T16471] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1795.069027][T16471] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.109435][T16471] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1795.121738][T21547] netlink: 156 bytes leftover after parsing attributes in process `syz.5.11764'. [ 1795.133703][T21547] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1795.146593][T16471] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.198084][T21552] wg1 speed is unknown, defaulting to 1000 [ 1795.235824][T21552] lo speed is unknown, defaulting to 1000 [ 1795.498263][T21565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11770'. [ 1795.535332][T21568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11769'. [ 1795.615058][T21572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1796.133244][T21590] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11772'. [ 1796.146774][T21590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11772'. [ 1796.222820][T21600] xt_CT: No such helper "syz0" [ 1796.374511][T21614] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.11777'. [ 1796.649664][T21622] pim6reg: entered allmulticast mode [ 1796.794595][T21633] netlink: 'syz.3.11783': attribute type 12 has an invalid length. [ 1796.812884][T21633] netlink: 'syz.3.11783': attribute type 29 has an invalid length. [ 1796.983386][T21640] netlink: 'syz.4.11784': attribute type 16 has an invalid length. [ 1796.998360][T21640] netlink: 'syz.4.11784': attribute type 17 has an invalid length. [ 1797.015451][T21640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1797.104267][T21622] pim6reg: left allmulticast mode [ 1797.834898][T21673] ip6tnl0: Caught tx_queue_len zero misconfig [ 1798.241234][ T97] block nbd0: Possible stuck request ffff8880b1460000: control (read@0,1024B). Runtime 90 seconds [ 1798.253507][ T97] block nbd0: Possible stuck request ffff8880b1460200: control (read@1024,1024B). Runtime 90 seconds [ 1798.265205][ T97] block nbd0: Possible stuck request ffff8880b1460400: control (read@2048,1024B). Runtime 90 seconds [ 1798.280529][ T97] block nbd0: Possible stuck request ffff8880b1460600: control (read@3072,1024B). Runtime 90 seconds [ 1798.323236][T21693] __nla_validate_parse: 7 callbacks suppressed [ 1798.323259][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11799'. [ 1798.349196][T21693] netlink: 'syz.5.11799': attribute type 10 has an invalid length. [ 1798.394111][T21687] netlink: 112 bytes leftover after parsing attributes in process `syz.1.11796'. [ 1798.659856][T21701] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 1798.962119][T21710] netlink: 224 bytes leftover after parsing attributes in process `syz.6.11804'. [ 1799.031040][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1799.039154][ C1] lec:lec_tx_timeout: lec0 [ 1799.094394][T21712] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11805'. [ 1799.215765][T21721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11808'. [ 1799.226061][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11808'. [ 1799.252804][T21721] netlink: 'syz.4.11808': attribute type 1 has an invalid length. [ 1799.593267][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11814'. [ 1799.615379][T21739] netlink: 104 bytes leftover after parsing attributes in process `syz.6.11815'. [ 1799.725513][T21739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11815'. [ 1799.732590][T21740] wg1 speed is unknown, defaulting to 1000 [ 1799.817510][T21740] lo speed is unknown, defaulting to 1000 [ 1799.891193][T21745] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 1800.120551][T21749] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11817'. [ 1800.534559][T21757] syzkaller0: entered promiscuous mode [ 1800.540239][T21757] syzkaller0: entered allmulticast mode [ 1801.286474][T21780] batadv_slave_1: entered promiscuous mode [ 1801.364938][T21782] netlink: 'syz.5.11832': attribute type 1 has an invalid length. [ 1801.374694][T21782] netlink: 'syz.5.11832': attribute type 1 has an invalid length. [ 1801.522586][T21777] batadv_slave_1: left promiscuous mode [ 1801.586566][T21791] vlan2: entered promiscuous mode [ 1801.593357][T21791] geneve1: entered promiscuous mode [ 1801.612349][T21791] vlan2: entered allmulticast mode [ 1801.617697][T21791] geneve1: entered allmulticast mode [ 1802.189265][T21819] netlink: 'syz.5.11843': attribute type 13 has an invalid length. [ 1802.456260][T21831] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1802.483614][T21826] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1802.509378][T21819] batman_adv: batadv0: Interface deactivated: dummy0 [ 1802.719147][T16478] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.738546][T16478] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.781766][T16478] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.800737][ T6758] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.397347][T21869] syzkaller1: entered promiscuous mode [ 1803.416675][T21869] syzkaller1: entered allmulticast mode [ 1803.733850][T21880] netlink: 'syz.4.11862': attribute type 1 has an invalid length. [ 1803.791388][T21880] netlink: 'syz.4.11862': attribute type 3 has an invalid length. [ 1803.799446][T21880] __nla_validate_parse: 8 callbacks suppressed [ 1803.799464][T21880] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11862'. [ 1803.881401][T21887] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.11865'. [ 1803.914094][T21887] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11865'. [ 1804.192756][T21898] netlink: 'syz.5.11868': attribute type 83 has an invalid length. [ 1804.616290][T21915] wg1 speed is unknown, defaulting to 1000 [ 1804.664365][T21915] lo speed is unknown, defaulting to 1000 [ 1805.588951][T21933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11877'. [ 1805.648958][T21935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11878'. [ 1805.674527][T21935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11878'. [ 1805.926246][T21934] wg1 speed is unknown, defaulting to 1000 [ 1806.022358][T21934] lo speed is unknown, defaulting to 1000 [ 1806.111278][T21957] netlink: 'syz.1.11882': attribute type 1 has an invalid length. [ 1806.146323][T21957] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11882'. [ 1806.220304][T21956] netlink: 'syz.1.11882': attribute type 1 has an invalid length. [ 1806.228294][T21956] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11882'. [ 1806.281458][T21956] workqueue: Failed to create a rescuer kthread for wq "phy6": -EINTR [ 1806.554752][T21974] netlink: 'syz.1.11886': attribute type 28 has an invalid length. [ 1806.671839][T21979] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11888'. [ 1806.733115][T21982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11889'. [ 1806.845752][T21984] IPVS: set_ctl: invalid protocol: 49 10.1.1.2:0 [ 1807.150630][T21988] bridge0: entered allmulticast mode [ 1808.740800][T22017] netlink: 'syz.1.11897': attribute type 8 has an invalid length. [ 1810.595149][T22024] netlink: 'syz.3.11900': attribute type 1 has an invalid length. [ 1810.606464][T22024] netlink: 'syz.3.11900': attribute type 2 has an invalid length. [ 1810.793746][T22027] wg1 speed is unknown, defaulting to 1000 [ 1810.866171][T22027] lo speed is unknown, defaulting to 1000 [ 1811.075989][T22047] __nla_validate_parse: 3 callbacks suppressed [ 1811.076011][T22047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11906'. [ 1811.517807][T22061] vlan3: entered promiscuous mode [ 1811.537546][T22061] geneve1: entered promiscuous mode [ 1811.560694][T22061] vlan3: entered allmulticast mode [ 1811.589139][T22061] geneve1: entered allmulticast mode [ 1811.605628][T22062] bridge0: entered allmulticast mode [ 1811.815752][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11914'. [ 1811.825837][T22082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11914'. [ 1811.878981][T16482] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1811.879084][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11914'. [ 1811.887831][T16482] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1811.921458][T22082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11914'. [ 1811.951435][T16482] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1811.959751][T16482] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1812.019142][T22090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1812.026483][T22090] IPv6: NLM_F_CREATE should be set when creating new route [ 1812.027560][T22089] ip6_vti0: Caught tx_queue_len zero misconfig [ 1812.033794][T22090] IPv6: NLM_F_CREATE should be set when creating new route [ 1812.142911][T22090] ip6erspan1: entered allmulticast mode [ 1812.261773][T22104] netlink: 'syz.1.11919': attribute type 1 has an invalid length. [ 1812.264906][T22103] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 1812.313150][T22103] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 1812.359730][T22104] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1812.398106][T22112] netlink: 176 bytes leftover after parsing attributes in process `syz.5.11923'. [ 1812.415821][T22104] veth15: entered promiscuous mode [ 1812.426317][T22104] bond8: (slave veth15): Enslaving as an active interface with a down link [ 1812.442767][T22104] erspan0: entered allmulticast mode [ 1812.519915][T22119] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11925'. [ 1812.595831][T22104] bond8: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1812.837142][T22127] syzkaller1: entered promiscuous mode [ 1812.845177][T22127] syzkaller1: entered allmulticast mode [ 1812.943826][T22131] wg1 speed is unknown, defaulting to 1000 [ 1812.978379][T22131] lo speed is unknown, defaulting to 1000 [ 1813.017992][T22134] netlink: 'syz.5.11929': attribute type 1 has an invalid length. [ 1813.071841][T22134] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11929'. [ 1813.083420][T22127] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11927'. [ 1813.098895][T22127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11927'. [ 1813.774684][T22175] netlink: 'syz.5.11939': attribute type 83 has an invalid length. [ 1813.791748][T22166] "syz.1.11940" (22166) uses obsolete ecb(arc4) skcipher [ 1814.257343][T22186] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1814.320067][T22186] bond9 (unregistering): Released all slaves [ 1814.446229][T22195] syzkaller0: entered promiscuous mode [ 1814.457628][T22195] syzkaller0: entered allmulticast mode [ 1814.532995][T22202] bridge0: entered allmulticast mode [ 1814.915940][T22216] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1815.067972][T22224] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1815.068302][T22223] netlink: 'syz.5.11952': attribute type 7 has an invalid length. [ 1815.295477][T22232] netlink: 'syz.5.11955': attribute type 5 has an invalid length. [ 1815.867517][T22258] syzkaller0: entered promiscuous mode [ 1815.874996][T22258] syzkaller0: entered allmulticast mode [ 1816.082883][T22278] __nla_validate_parse: 12 callbacks suppressed [ 1816.082905][T22278] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.11964'. [ 1816.185805][T22289] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11968'. [ 1816.327096][T22301] netlink: 'syz.3.11971': attribute type 2 has an invalid length. [ 1816.346353][T22302] netlink: 'syz.3.11971': attribute type 2 has an invalid length. [ 1816.368218][T22301] !©9: entered promiscuous mode [ 1816.374308][T22302] !©9: left promiscuous mode [ 1816.447735][T22308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11972'. [ 1816.675743][T22318] block nbd14: Unsupported socket: should be TCP or UNIX. [ 1816.903187][T22327] syzkaller0: entered promiscuous mode [ 1816.908748][T22327] syzkaller0: entered allmulticast mode [ 1816.985578][T22330] netlink: 'syz.3.11979': attribute type 1 has an invalid length. [ 1817.004852][T22330] netlink: 244 bytes leftover after parsing attributes in process `syz.3.11979'. [ 1817.307256][T22310] IPVS: set_ctl: invalid protocol: 8 100.1.1.0:21 [ 1817.364937][T22310] mpoa:mpoad_close: () going down [ 1817.395661][T22310] wg1 speed is unknown, defaulting to 1000 [ 1817.453387][T22337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11980'. [ 1817.489660][T22310] lo speed is unknown, defaulting to 1000 [ 1817.502874][T22347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11982'. [ 1817.908605][T22365] 8021q: VLANs not supported on ip6gre0 [ 1818.093247][T22378] batadv0: mtu less than device minimum [ 1818.099051][T22378] batadv0: mtu less than device minimum [ 1818.139934][T22372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11988'. [ 1818.324932][T22388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11991'. [ 1818.393160][T22388] team1: entered promiscuous mode [ 1818.398353][T22388] team1: entered allmulticast mode [ 1818.405129][T22388] 8021q: adding VLAN 0 to HW filter on device team1 [ 1818.412749][T22393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11991'. [ 1818.551452][T22393] team2: entered promiscuous mode [ 1818.560962][T22393] team2: entered allmulticast mode [ 1818.566909][T22393] 8021q: adding VLAN 0 to HW filter on device team2 [ 1818.782329][T17733] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1818.812273][T17733] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1818.818893][T22406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11996'. [ 1818.858040][T17733] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1818.869268][T22396] syzkaller0: entered promiscuous mode [ 1818.875578][T22396] syzkaller0: entered allmulticast mode [ 1818.886473][T17733] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1818.905825][T17733] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1818.978073][T22405] batadv0: entered promiscuous mode [ 1818.987093][T22405] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1819.191764][T22402] wg1 speed is unknown, defaulting to 1000 [ 1819.332588][T22411] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 1820.976893][T10463] Bluetooth: hci2: command tx timeout [ 1821.868656][T10461] bond11: (slave syz_tun): Releasing active interface [ 1821.882097][T22402] lo speed is unknown, defaulting to 1000 [ 1821.920457][T22411] netdevsim netdevsim6: Firmware load for './file0/../file0' refused, path contains '..' component [ 1822.006790][T22423] __nla_validate_parse: 64 callbacks suppressed [ 1822.006816][T22423] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.12000'. [ 1822.801997][T22471] --map-set only usable from mangle table [ 1822.896684][T22402] chnl_net:caif_netlink_parms(): no params data found [ 1822.998657][T22402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.006102][T22402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.014469][T22402] bridge_slave_0: entered allmulticast mode [ 1823.023868][T22402] bridge_slave_0: entered promiscuous mode [ 1823.033655][T22402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.041704][T22402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.049060][T22402] bridge_slave_1: entered allmulticast mode [ 1823.050538][T10463] Bluetooth: hci2: command tx timeout [ 1823.058126][T22402] bridge_slave_1: entered promiscuous mode [ 1823.095412][T22402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1823.107969][T22402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1823.143155][T22402] team0: Port device team_slave_0 added [ 1823.152616][T22402] team0: Port device team_slave_1 added [ 1823.182364][T22402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1823.189350][T22402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.221970][T22402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1823.235205][T22402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1823.242792][T22402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1823.269058][T22402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1823.319319][T22402] hsr_slave_0: entered promiscuous mode [ 1823.326531][T22402] hsr_slave_1: entered promiscuous mode [ 1823.333590][T22402] debugfs: 'hsr0' already exists in 'hsr' [ 1823.339348][T22402] Cannot create hsr debugfs directory [ 1823.685174][T22486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12015'. [ 1823.745990][T22488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12016'. [ 1823.759164][T22488] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 1823.769904][T22488] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1825.120271][T10463] Bluetooth: hci2: command tx timeout [ 1825.511054][T22456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1825.545524][T22402] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1825.685699][T22402] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1825.753428][T22402] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1825.788172][T22402] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1825.926121][T22513] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1825.962635][T22513] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.027175][T22513] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1826.044246][T22513] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.115044][T22513] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1826.126887][T22513] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.187374][T22402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1826.213711][T22513] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1826.225107][T22513] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.259239][T22528] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1826.306130][T22402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1826.342733][T16471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1826.350126][T16471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1826.396546][T16471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1826.403817][T16471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1826.473557][T28601] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1826.483337][T28601] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.492950][T28601] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1826.503318][T28601] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.537919][T28601] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1826.549354][T28601] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.562586][T22540] netlink: 104 bytes leftover after parsing attributes in process `syz.6.12030'. [ 1826.597247][ T6535] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1826.609092][T22541] netlink: 104 bytes leftover after parsing attributes in process `syz.6.12030'. [ 1826.609126][ T6535] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.970918][T22555] netlink: 'syz.4.12033': attribute type 49 has an invalid length. [ 1827.170681][T22566] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12031'. [ 1827.203611][T10463] Bluetooth: hci2: command tx timeout [ 1827.402306][T22580] netlink: 260 bytes leftover after parsing attributes in process `syz.6.12038'. [ 1827.436629][T22582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12039'. [ 1827.519927][T22402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1827.652399][T22402] veth0_vlan: entered promiscuous mode [ 1827.708683][T22402] veth1_vlan: entered promiscuous mode [ 1827.806737][T22595] tipc: Started in network mode [ 1827.814308][T22595] tipc: Node identity 1e767b2ce6d3, cluster identity 4711 [ 1827.843289][T22595] tipc: Enabled bearer , priority 0 [ 1827.882758][T22600] syzkaller0: entered promiscuous mode [ 1827.890195][T22600] syzkaller0: entered allmulticast mode [ 1827.924452][T22402] veth0_macvtap: entered promiscuous mode [ 1827.975508][T22595] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1828.055449][T22402] veth1_macvtap: entered promiscuous mode [ 1828.086381][T22613] tipc: Resetting bearer [ 1828.123374][T22594] tipc: Resetting bearer [ 1828.150218][T22617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12050'. [ 1828.159314][T22617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12050'. [ 1828.187320][T22594] tipc: Disabling bearer [ 1828.197596][T22618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12049'. [ 1828.227924][T22617] team0: entered promiscuous mode [ 1828.234580][T22617] team_slave_0: entered promiscuous mode [ 1828.250380][T22617] team_slave_1: entered promiscuous mode [ 1828.262371][T22617] team0: left promiscuous mode [ 1828.272518][T22615] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12049'. [ 1828.281071][T22617] team_slave_0: left promiscuous mode [ 1828.287670][T22617] team_slave_1: left promiscuous mode [ 1828.324633][ T97] block nbd0: Possible stuck request ffff8880b1460000: control (read@0,1024B). Runtime 120 seconds [ 1828.336410][ T97] block nbd0: Possible stuck request ffff8880b1460200: control (read@1024,1024B). Runtime 120 seconds [ 1828.351242][ T97] block nbd0: Possible stuck request ffff8880b1460400: control (read@2048,1024B). Runtime 120 seconds [ 1828.363626][ T97] block nbd0: Possible stuck request ffff8880b1460600: control (read@3072,1024B). Runtime 120 seconds [ 1828.382860][T22402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1828.408022][T22402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1828.435183][T28601] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.486498][T28601] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.505761][T28601] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.603030][T28601] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.758590][T16471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1828.792912][T16471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1828.869270][T28601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1828.892154][T28601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1829.026730][T22642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12057'. [ 1829.259936][T22653] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12062'. [ 1829.463632][T17733] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1829.475526][T17733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1829.485547][T17733] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1829.495297][T17733] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1829.503943][T17733] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1829.561164][T22666] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1829.717610][T22673] netlink: 'syz.4.12066': attribute type 1 has an invalid length. [ 1829.754425][T22671] netlink: 'syz.3.12065': attribute type 11 has an invalid length. [ 1829.780283][T22671] netlink: 'syz.3.12065': attribute type 23 has an invalid length. [ 1829.788242][T22671] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12065'. [ 1829.793550][T22659] wg1 speed is unknown, defaulting to 1000 [ 1829.895449][T22673] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1829.975922][T22674] macvlan0: entered promiscuous mode [ 1829.990620][T22674] macvlan0: entered allmulticast mode [ 1829.996786][T22674] bond4: entered allmulticast mode [ 1830.003931][T22674] bond4: entered promiscuous mode [ 1830.020543][T22674] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1830.047391][T22674] team0: Port device macvlan0 added [ 1830.063120][T22659] lo speed is unknown, defaulting to 1000 [ 1830.108135][T22676] bond4: (slave ip6gretap2): making interface the new active one [ 1830.130386][T22676] ip6gretap2: entered promiscuous mode [ 1830.136138][T22676] ip6gretap2: entered allmulticast mode [ 1830.154090][T22676] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1830.207723][T22666] pim6reg1: entered promiscuous mode [ 1830.234230][T22666] pim6reg1: entered allmulticast mode [ 1830.261348][T22667] wg1 speed is unknown, defaulting to 1000 [ 1830.269087][T22667] lo speed is unknown, defaulting to 1000 [ 1830.669787][T22694] netlink: 'syz.6.12071': attribute type 9 has an invalid length. [ 1830.690513][T22694] netlink: 'syz.6.12071': attribute type 6 has an invalid length. [ 1830.698386][T22694] netlink: 'syz.6.12071': attribute type 7 has an invalid length. [ 1830.727210][T22694] netlink: 'syz.6.12071': attribute type 8 has an invalid length. [ 1831.356996][T22659] chnl_net:caif_netlink_parms(): no params data found [ 1831.600421][T17733] Bluetooth: hci4: command tx timeout [ 1831.974272][T22659] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.010318][T22659] bridge0: port 1(bridge_slave_0) entered disabled state [ 1832.040368][T22659] bridge_slave_0: entered allmulticast mode [ 1832.048613][T22659] bridge_slave_0: entered promiscuous mode [ 1832.082927][T22659] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.130296][T22659] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.137704][T22659] bridge_slave_1: entered allmulticast mode [ 1832.182596][T22659] bridge_slave_1: entered promiscuous mode [ 1832.561283][T22659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1833.171664][T22659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1833.689462][T17733] Bluetooth: hci4: command tx timeout [ 1833.896219][T22786] nbd: couldn't find a device at index 6 [ 1833.932648][T16482] bridge_slave_0: left allmulticast mode [ 1833.938359][T16482] bridge_slave_0: left promiscuous mode [ 1833.950911][T16482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.124180][T16482] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1834.141105][T16482] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1834.149925][T16482] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ce:ac:b1:ab:dc:db - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1834.222944][T22793] netlink: 'syz.6.12088': attribute type 8 has an invalid length. [ 1834.240086][T22793] __nla_validate_parse: 5 callbacks suppressed [ 1834.240106][T22793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12088'. [ 1834.468880][T16482] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1835.056028][T16482] bond10 (unregistering): (slave bridge5): Releasing active interface [ 1835.105428][T16482] bond10 (unregistering): (slave bridge6): Releasing active interface [ 1835.177100][T16482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1835.187785][T16482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1835.198133][T16482] bond0 (unregistering): Released all slaves [ 1835.355773][T16482] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1835.365086][T16482] bond1 (unregistering): Released all slaves [ 1835.529049][T16482] bond2 (unregistering): Released all slaves [ 1835.707247][T16482] bond3 (unregistering): Released all slaves [ 1835.770368][T17733] Bluetooth: hci4: command tx timeout [ 1835.886191][T16482] bond4 (unregistering): Released all slaves [ 1836.056651][T16482] bond5 (unregistering): Released all slaves [ 1836.070345][T16482] bond6 (unregistering): Released all slaves [ 1836.086234][T16482] bond7 (unregistering): Released all slaves [ 1836.255364][T16482] bond8 (unregistering): Released all slaves [ 1836.430395][T16482] bond9 (unregistering): Released all slaves [ 1836.443900][T16482] bond10 (unregistering): Released all slaves [ 1836.608865][T16482] bond11 (unregistering): Released all slaves [ 1836.625829][T22763] syzkaller0: entered promiscuous mode [ 1836.632006][T22763] syzkaller0: entered allmulticast mode [ 1836.667537][T22659] team0: Port device team_slave_0 added [ 1836.691075][T22793] bond0: entered promiscuous mode [ 1836.696168][T22793] bond_slave_0: entered promiscuous mode [ 1836.719390][T22793] bond_slave_1: entered promiscuous mode [ 1836.743079][T22793] gretap0: entered promiscuous mode [ 1836.753484][T22793] ip6gretap0: entered promiscuous mode [ 1836.778284][T22793] debugfs: 'hsr1' already exists in 'hsr' [ 1836.795871][T22793] Cannot create hsr debugfs directory [ 1836.804681][T22793] hsr1: entered promiscuous mode [ 1836.833380][T22659] team0: Port device team_slave_1 added [ 1836.894856][T16482] : left promiscuous mode [ 1837.004440][T16482] mÿ5nè‹Ò: left promiscuous mode [ 1837.026326][T22805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12090'. [ 1837.104416][T22659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1837.150694][T22659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1837.175205][T22802] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1837.220671][T22659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1837.240798][T22659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1837.258016][T22659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1837.289476][T22659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1837.315931][T16482] tipc: Disabling bearer [ 1837.332586][T16482] tipc: Left network mode [ 1837.372680][T22807] wg1 speed is unknown, defaulting to 1000 [ 1837.395772][T22807] lo speed is unknown, defaulting to 1000 [ 1837.483721][T16482] IPVS: stopping master sync thread 11115 ... [ 1837.808727][T22659] hsr_slave_0: entered promiscuous mode [ 1837.826301][T22659] hsr_slave_1: entered promiscuous mode [ 1837.835573][T22659] debugfs: 'hsr0' already exists in 'hsr' [ 1837.842052][T22659] Cannot create hsr debugfs directory [ 1837.852419][T17733] Bluetooth: hci4: command tx timeout [ 1838.371279][T22830] netlink: 56 bytes leftover after parsing attributes in process `syz.5.12097'. [ 1839.302602][T22884] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.12107'. [ 1839.377180][T22884] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12107'. [ 1839.402485][T22884] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12107'. [ 1839.432011][T22884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12107'. [ 1839.502630][T22659] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1839.745022][T22659] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1839.887621][T22659] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1840.039537][T22891] netlink: set zone limit has 4 unknown bytes [ 1840.087830][T22659] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1840.184533][T22896] wg1 speed is unknown, defaulting to 1000 [ 1840.197888][T22902] netlink: 'syz.4.12113': attribute type 1 has an invalid length. [ 1840.285542][T22896] lo speed is unknown, defaulting to 1000 [ 1840.345492][T22909] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1840.372938][T22909] bond5: (slave bond6): making interface the new active one [ 1840.400784][T22915] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12113'. [ 1840.422721][T22909] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1840.547374][T22902] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 1840.583274][T22915] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1840.635306][T22909] vlan5: entered promiscuous mode [ 1840.640766][T22909] bond5: entered promiscuous mode [ 1840.655219][T22909] bond6: entered promiscuous mode [ 1840.864515][T22921] netlink: 212916 bytes leftover after parsing attributes in process `syz.6.12115'. [ 1840.894752][ T5936] IPVS: starting estimator thread 0... [ 1840.985796][T22929] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12116'. [ 1841.010589][T22925] IPVS: using max 24 ests per chain, 57600 per kthread [ 1841.339366][T22659] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1841.807316][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12119'. [ 1841.858625][T22941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12119'. [ 1842.122649][T22949] netlink: 284 bytes leftover after parsing attributes in process `syz.4.12122'. [ 1842.164984][T16482] team0 (unregistering): Port device team_slave_1 removed [ 1842.248567][T16482] team0 (unregistering): Port device team_slave_0 removed [ 1842.718271][T22659] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1842.732875][T22659] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1842.831195][T22659] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1842.964068][T22955] lo: entered allmulticast mode [ 1843.011650][T22965] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 2, id = 0 [ 1843.279010][T22659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1843.345558][T22659] 8021q: adding VLAN 0 to HW filter on device team0 [ 1843.465384][T22971] team_slave_0: entered promiscuous mode [ 1843.471713][T22971] team_slave_1: entered promiscuous mode [ 1843.502277][T22971] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1843.534383][T22971] team0: Device macvlan3 is already an upper device of the team interface [ 1843.546248][T22971] team_slave_0: left promiscuous mode [ 1843.551731][T22971] team_slave_1: left promiscuous mode [ 1843.592949][T16482] IPVS: stop unused estimator thread 0... [ 1843.604879][T16473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1843.612309][T16473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1843.676786][T16473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1843.684025][T16473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1844.478115][T22659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1844.554184][T23014] wg1 speed is unknown, defaulting to 1000 [ 1844.569684][T23016] __nla_validate_parse: 3 callbacks suppressed [ 1844.569705][T23016] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12138'. [ 1844.571780][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12137'. [ 1844.642147][T22659] veth0_vlan: entered promiscuous mode [ 1844.703462][T23018] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12138'. [ 1844.817097][T23016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1844.848928][T22659] veth1_vlan: entered promiscuous mode [ 1845.297826][T22659] veth0_macvtap: entered promiscuous mode [ 1845.553877][T22659] veth1_macvtap: entered promiscuous mode [ 1845.620734][T23047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12141'. [ 1845.629831][T23047] bridge_slave_1: left allmulticast mode [ 1845.646632][T23047] bridge_slave_1: left promiscuous mode [ 1845.653646][T23047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.689388][T23047] bridge_slave_0: left allmulticast mode [ 1845.698426][T23048] netlink: 11 bytes leftover after parsing attributes in process `syz.5.12141'. [ 1845.730281][T23047] bridge_slave_0: left promiscuous mode [ 1845.736232][T23047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.745837][T23050] netlink: 'syz.4.12142': attribute type 10 has an invalid length. [ 1845.801311][T23052] netlink: 'syz.4.12142': attribute type 10 has an invalid length. [ 1845.868568][T23050] team0: Failed to send options change via netlink (err -105) [ 1845.877636][T23050] team0: Port device dummy0 added [ 1845.908068][T23052] team0: Failed to send options change via netlink (err -105) [ 1845.944495][T23052] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1845.974917][T23052] team0: Port device dummy0 removed [ 1846.007223][T23052] dummy0: entered promiscuous mode [ 1846.047418][T23052] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1846.138292][T22659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1846.185843][T22659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1846.269742][T16451] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.299463][T16482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.312909][T16482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.339256][T16482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.646934][T23066] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1846.694450][T23072] netlink: 'syz.4.12147': attribute type 10 has an invalid length. [ 1846.721776][T23072] bond0: (slave dummy0): Releasing backup interface [ 1846.729543][T23072] dummy0: left promiscuous mode [ 1846.746492][T23072] team0: Port device dummy0 added [ 1846.859153][T23072] wg1 speed is unknown, defaulting to 1000 [ 1847.499928][T23016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1847.877871][T16478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.898512][T16478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.995402][T23092] netlink: 'syz.4.12152': attribute type 6 has an invalid length. [ 1848.043038][T23092] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12152'. [ 1848.054756][T16461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1848.085818][T16461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.326540][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12154'. [ 1848.915241][T10463] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1848.936395][T10463] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1848.945962][T10463] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1848.956575][T10463] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1848.975009][T10463] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1849.050820][T23115] netlink: 10 bytes leftover after parsing attributes in process `syz.3.12156'. [ 1849.141372][T23111] wg1 speed is unknown, defaulting to 1000 [ 1849.759752][T23129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12159'. [ 1850.187827][T23139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.225996][T23139] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1850.407348][T23156] netlink: 128 bytes leftover after parsing attributes in process `syz.5.12164'. [ 1850.537285][T23159] netlink: 128 bytes leftover after parsing attributes in process `syz.5.12164'. [ 1850.602272][T23159] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12164'. [ 1850.756966][T23175] sctp: [Deprecated]: syz.6.12166 (pid 23175) Use of int in maxseg socket option. [ 1850.756966][T23175] Use struct sctp_assoc_value instead [ 1850.833848][T23179] netlink: 'syz.5.12169': attribute type 5 has an invalid length. [ 1850.850720][T23179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12169'. [ 1850.921621][T23111] chnl_net:caif_netlink_parms(): no params data found [ 1851.044816][T17733] Bluetooth: hci5: command tx timeout [ 1851.276464][T23111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.284218][T23111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.292065][T23111] bridge_slave_0: entered allmulticast mode [ 1851.301127][T23111] bridge_slave_0: entered promiscuous mode [ 1851.313898][T23111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.322172][T23111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.329508][T23111] bridge_slave_1: entered allmulticast mode [ 1851.338591][T23111] bridge_slave_1: entered promiscuous mode [ 1851.402378][T23111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1851.434221][T23111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1851.611464][T23203] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.651466][T23111] team0: Port device team_slave_0 added [ 1851.674430][T23111] team0: Port device team_slave_1 added [ 1851.827425][T23203] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1851.902633][T23111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1851.909637][T23111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1851.945982][T23111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1851.957161][T23226] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12179'. [ 1851.978618][T23111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1851.983957][T23223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12178'. [ 1851.986988][T23111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1852.002258][T23223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12178'. [ 1852.028462][T23111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1852.212705][T23203] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.373145][T23237] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12178'. [ 1852.486155][T23203] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.655303][T23111] hsr_slave_0: entered promiscuous mode [ 1852.672150][T23111] hsr_slave_1: entered promiscuous mode [ 1852.686622][T23111] debugfs: 'hsr0' already exists in 'hsr' [ 1852.712757][T23111] Cannot create hsr debugfs directory [ 1852.737422][T23253] wg1 speed is unknown, defaulting to 1000 [ 1852.909055][T16461] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.047399][ T6535] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.123612][T17733] Bluetooth: hci5: command tx timeout [ 1853.145834][ T6535] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.167155][ T6874] lec:lec_start_xmit: lec0:No lecd attached [ 1853.229672][ T6535] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.291793][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1853.799907][T23280] netlink: 104 bytes leftover after parsing attributes in process `syz.5.12190'. [ 1853.887266][T23276] bond0: entered promiscuous mode [ 1853.892904][T23276] bond_slave_0: entered promiscuous mode [ 1853.926910][T23276] bond_slave_1: entered promiscuous mode [ 1853.938020][T23276] batadv0: entered promiscuous mode [ 1853.947047][T23276] debugfs: 'hsr1' already exists in 'hsr' [ 1853.967402][T23276] Cannot create hsr debugfs directory [ 1853.987320][T23276] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1854.040617][T23276] bond0: left promiscuous mode [ 1854.046284][T23276] bond_slave_0: left promiscuous mode [ 1854.060361][T23276] bond_slave_1: left promiscuous mode [ 1854.068849][T23288] xt_nat: multiple ranges no longer supported [ 1854.131169][T23276] batadv0: left promiscuous mode [ 1854.241465][T23111] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1854.280173][T23111] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.384608][T23111] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1854.405973][T23111] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.464089][T23299] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1854.516586][T23111] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1854.535099][T23111] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.539673][T23297] netlink: 'syz.5.12196': attribute type 1 has an invalid length. [ 1854.635321][T23111] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1854.671368][T23111] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.802986][T23311] __nla_validate_parse: 1 callbacks suppressed [ 1854.803010][T23311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12202'. [ 1854.878224][T23311] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.12202'. [ 1855.201556][T17733] Bluetooth: hci5: command tx timeout [ 1855.594417][T23111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1855.619870][T23111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1855.905602][T23111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1856.049037][T23337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.108437][T23111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1856.234269][T23337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.459520][T23337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.615726][T23337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1856.857681][T16473] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x1f [ 1856.870853][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12211'. [ 1856.917550][T16461] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.971728][T16461] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.989068][T23111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1857.043352][T16473] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.064399][T23371] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1857.098382][T23371] Bluetooth: MGMT ver 1.23 [ 1857.114876][T16482] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.155628][T23371] netlink: 'syz.3.12212': attribute type 1 has an invalid length. [ 1857.167028][T23111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1857.174493][T23371] netlink: 1 bytes leftover after parsing attributes in process `syz.3.12212'. [ 1857.195511][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.202836][ T6535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.227761][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.235159][ T6535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1857.244117][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12212'. [ 1857.281982][T10463] Bluetooth: hci5: command tx timeout [ 1857.301187][T23371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12212'. [ 1857.443059][T23383] mac80211_hwsim hwsim146 syzkaller0: entered allmulticast mode [ 1857.508136][T23379] wg1 speed is unknown, defaulting to 1000 [ 1857.536570][T23382] mac80211_hwsim hwsim146 syzkaller0: left allmulticast mode [ 1857.747952][T23390] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1857.917375][T23390] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.005444][T23390] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.085045][T23111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1858.119434][T23390] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.180361][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1858.188422][ C1] lec:lec_tx_timeout: lec0 [ 1858.193973][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1858.359086][T16473] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.416182][ T97] block nbd0: Possible stuck request ffff8880b1460000: control (read@0,1024B). Runtime 150 seconds [ 1858.431074][ T97] block nbd0: Possible stuck request ffff8880b1460200: control (read@1024,1024B). Runtime 150 seconds [ 1858.442617][ T97] block nbd0: Possible stuck request ffff8880b1460400: control (read@2048,1024B). Runtime 150 seconds [ 1858.454018][ T97] block nbd0: Possible stuck request ffff8880b1460600: control (read@3072,1024B). Runtime 150 seconds [ 1858.486983][T16451] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.501925][T16451] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.691167][T16461] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.862229][T23416] nbd: couldn't find a device at index 6 [ 1859.064330][T23111] veth0_vlan: entered promiscuous mode [ 1859.115360][T23111] veth1_vlan: entered promiscuous mode [ 1859.187200][T23111] veth0_macvtap: entered promiscuous mode [ 1859.207439][T10463] Bluetooth: hci2: command 0x0401 tx timeout [ 1859.217815][T17733] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1859.249690][T23111] veth1_macvtap: entered promiscuous mode [ 1859.358677][T23429] team_slave_0: entered promiscuous mode [ 1859.364502][T23429] team_slave_1: entered promiscuous mode [ 1859.381878][T23429] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1859.471684][T23111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1859.487132][T23111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1859.516235][T16461] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.526226][T16461] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.536759][T16461] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.569275][T16461] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.631271][T23440] dummy0: entered allmulticast mode [ 1859.777818][T23447] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12231'. [ 1859.867543][T16461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.880721][T16461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.996332][T23455] x_tables: duplicate underflow at hook 1 [ 1860.008825][T16461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1860.026440][T16461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1860.597696][T23485] netlink: 'syz.6.12236': attribute type 12 has an invalid length. [ 1860.627239][T23485] netlink: 'syz.6.12236': attribute type 29 has an invalid length. [ 1860.672254][T23485] netlink: 148 bytes leftover after parsing attributes in process `syz.6.12236'. [ 1860.711506][T23485] netlink: 'syz.6.12236': attribute type 2 has an invalid length. [ 1860.735968][T23485] netlink: 43 bytes leftover after parsing attributes in process `syz.6.12236'. [ 1860.743183][T23496] netlink: 156 bytes leftover after parsing attributes in process `syz.5.12239'. [ 1860.926188][T23487] syzkaller0: entered promiscuous mode [ 1860.933035][T23487] syzkaller0: entered allmulticast mode [ 1860.994796][T23504] tipc: Enabled bearer , priority 0 [ 1864.113090][T23504] tipc: Disabling bearer [ 1864.160008][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5960 ms [ 1864.168157][ C1] lec:lec_tx_timeout: lec0 [ 1864.308098][T23534] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.337146][T23538] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 1864.347112][T23543] netlink: 'syz.3.12250': attribute type 1 has an invalid length. [ 1864.394357][T23543] netlink: 'syz.3.12250': attribute type 1 has an invalid length. [ 1864.585826][T23547] bridge0: entered promiscuous mode [ 1864.596794][T23547] bridge0: entered allmulticast mode [ 1864.619551][T23547] team0: Port device bridge0 added [ 1864.647011][T23534] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.672562][T23557] bridge0: port 1(team0) entered blocking state [ 1864.689542][T23557] bridge0: port 1(team0) entered disabled state [ 1864.704374][T23557] team0: entered allmulticast mode [ 1864.729748][T23557] team_slave_0: entered allmulticast mode [ 1864.735980][T23557] team_slave_1: entered allmulticast mode [ 1864.745949][T23557] team0: left allmulticast mode [ 1864.753818][T23557] team_slave_0: left allmulticast mode [ 1864.759408][T23557] team_slave_1: left allmulticast mode [ 1864.835776][T23564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.903575][T23576] tipc: Enabled bearer , priority 0 [ 1864.919730][T23534] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1864.998538][T23564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.048497][T23576] tipc: Disabling bearer [ 1865.099630][T23534] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.109433][T23587] netlink: 'syz.4.12262': attribute type 1 has an invalid length. [ 1865.118003][T23587] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12262'. [ 1865.147014][T23587] netlink: 1 bytes leftover after parsing attributes in process `syz.4.12262'. [ 1865.203737][T23589] x_tables: duplicate entry at hook 3 [ 1865.215989][T23564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.260686][T23591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12264'. [ 1865.392777][T23564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.463460][T16478] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.541677][T16478] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.584757][ T6758] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.614522][T28609] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.748978][ T6758] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.807152][ T6758] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.867357][T16478] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.945726][ T4876] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1866.060643][T23623] netlink: 320 bytes leftover after parsing attributes in process `syz.4.12275'. [ 1866.079746][T23623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12275'. [ 1866.098303][T23623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12275'. [ 1866.116146][T23627] netlink: 'syz.1.12278': attribute type 1 has an invalid length. [ 1866.125722][T23623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12275'. [ 1866.141270][T23625] x_tables: duplicate entry at hook 3 [ 1866.269397][T23627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1866.384766][T23640] vlan2: entered allmulticast mode [ 1866.395880][T23640] veth0_to_bond: entered allmulticast mode [ 1866.422596][T23646] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.12282'. [ 1866.873044][T23667] netlink: 'syz.4.12287': attribute type 30 has an invalid length. [ 1866.896666][T23665] x_tables: duplicate entry at hook 3 [ 1866.918704][T23667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12287'. [ 1867.000887][T23673] sctp: [Deprecated]: syz.5.12292 (pid 23673) Use of int in max_burst socket option deprecated. [ 1867.000887][T23673] Use struct sctp_assoc_value instead [ 1867.021837][T23675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12294'. [ 1867.053810][T23667] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1867.067349][T23667] bond1 (unregistering): Released all slaves [ 1867.499936][T23690] syzkaller0: entered promiscuous mode [ 1867.516781][T23690] syzkaller0: entered allmulticast mode [ 1867.854814][T23706] netlink: 'syz.1.12300': attribute type 11 has an invalid length. [ 1867.918781][T23712] x_tables: duplicate entry at hook 3 [ 1867.992013][T23713] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.12302'. [ 1868.221497][T23728] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1868.236330][T23728] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1868.267626][T23729] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12306'. [ 1868.286070][T23729] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1868.355585][T23731] wg1 speed is unknown, defaulting to 1000 [ 1868.509910][T23739] wg1 speed is unknown, defaulting to 1000 [ 1868.521843][T23745] netlink: 220 bytes leftover after parsing attributes in process `syz.4.12310'. [ 1868.871964][T23755] x_tables: duplicate entry at hook 3 [ 1869.002614][T23760] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1869.110961][T23761] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1869.632997][T23784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1869.640317][T23784] IPv6: NLM_F_CREATE should be set when creating new route [ 1869.662667][T23784] sctp: [Deprecated]: syz.1.12321 (pid 23784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1869.662667][T23784] Use struct sctp_sack_info instead [ 1869.914946][T23802] x_tables: duplicate entry at hook 3 [ 1870.043027][T23796] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1872.968539][T23813] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.107097][T23813] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.303260][T23813] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.358305][T23833] __nla_validate_parse: 6 callbacks suppressed [ 1873.358325][T23833] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12333'. [ 1873.488270][T23813] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.553718][T23833] batman_adv: batadv0: Removing interface: dummy0 [ 1873.579161][T23833] bond0: (slave bond_slave_0): Releasing backup interface [ 1873.621819][T23833] bond0: (slave bond_slave_1): Releasing backup interface [ 1873.646659][T23833] team0: Port device team_slave_0 removed [ 1873.669561][T23833] team0: Port device team_slave_1 removed [ 1873.688769][T23833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1873.698833][T23833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1873.709793][T23833] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1873.847047][T16478] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.918173][T16478] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.969738][T23848] x_tables: duplicate entry at hook 3 [ 1874.005389][T28601] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.071167][T16478] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.153238][T23854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12340'. [ 1874.314764][T23866] sock: sock_timestamping_bind_phc: sock not bind to device [ 1874.608869][T23885] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 1874.658409][T23885] vlan3: entered promiscuous mode [ 1874.682679][T23886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12347'. [ 1874.684046][T23885] geneve1: entered promiscuous mode [ 1874.711328][T23885] vlan3: entered allmulticast mode [ 1874.734080][T23885] geneve1: entered allmulticast mode [ 1875.075822][T23906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12355'. [ 1875.204728][T23910] wg1 speed is unknown, defaulting to 1000 [ 1875.716967][T23925] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1875.934016][T23939] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12363'. [ 1876.284525][T23955] xt_hashlimit: size too large, truncated to 1048576 [ 1876.681050][T23963] syzkaller0: entered promiscuous mode [ 1876.686673][T23963] syzkaller0: entered allmulticast mode [ 1877.055348][T23978] syzkaller0: entered promiscuous mode [ 1877.080824][T23978] syzkaller0: entered allmulticast mode [ 1877.430586][T23993] erspan0: entered promiscuous mode [ 1877.451614][T23997] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12376'. [ 1877.652745][T24003] netlink: 'syz.1.12380': attribute type 1 has an invalid length. [ 1877.662176][T24003] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12380'. [ 1877.746477][T24006] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1877.934916][T24016] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12385'. [ 1878.042458][T24013] syzkaller0: entered promiscuous mode [ 1878.048042][T24013] syzkaller0: entered allmulticast mode [ 1878.064919][T24013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12386'. [ 1878.370690][T24030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12390'. [ 1878.566268][T24033] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12391'. [ 1878.576352][T24033] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12391'. [ 1878.711069][T24042] netlink: 'syz.1.12395': attribute type 3 has an invalid length. [ 1878.833725][T24051] netlink: 'syz.6.12396': attribute type 1 has an invalid length. [ 1878.859717][T24051] netlink: 'syz.6.12396': attribute type 2 has an invalid length. [ 1879.517290][T24078] tap0: tun_chr_ioctl cmd 35111 [ 1880.868434][T24111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12409'. [ 1880.998493][T24119] netlink: 27 bytes leftover after parsing attributes in process `syz.6.12410'. [ 1881.236790][T24125] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1881.369456][T24132] wg1 speed is unknown, defaulting to 1000 [ 1881.469239][T24142] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.12416'. [ 1881.502828][T24123] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12413'. [ 1881.545342][T24142] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1881.570748][T24139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12413'. [ 1881.702179][T24137] tipc: Failed to remove unknown binding: 66,1,1/0:1933077480/1933077482 [ 1881.746112][T24137] tipc: Failed to remove unknown binding: 66,1,1/0:1933077480/1933077482 [ 1881.890640][T24161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12420'. [ 1881.920434][T24161] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12420'. [ 1888.485249][ T97] block nbd0: Possible stuck request ffff8880b1460000: control (read@0,1024B). Runtime 180 seconds [ 1888.496252][ T97] block nbd0: Possible stuck request ffff8880b1460200: control (read@1024,1024B). Runtime 180 seconds [ 1888.507575][ T97] block nbd0: Possible stuck request ffff8880b1460400: control (read@2048,1024B). Runtime 180 seconds [ 1888.521463][ T97] block nbd0: Possible stuck request ffff8880b1460600: control (read@3072,1024B). Runtime 180 seconds [ 1888.710445][ T5191] udevd[5191]: worker [18019] /devices/virtual/block/nbd0 timeout; kill it [ 1888.719212][ T5191] udevd[5191]: seq 69820 '/devices/virtual/block/nbd0' killed [ 1914.725943][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1914.733881][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1916.800660][T17733] Bluetooth: hci3: command 0x0406 tx timeout [ 1918.568207][ T97] block nbd0: Possible stuck request ffff8880b1460000: control (read@0,1024B). Runtime 210 seconds [ 1918.579474][ T97] block nbd0: Possible stuck request ffff8880b1460200: control (read@1024,1024B). Runtime 210 seconds [ 1918.591720][ T97] block nbd0: Possible stuck request ffff8880b1460400: control (read@2048,1024B). Runtime 210 seconds [ 1918.603115][ T97] block nbd0: Possible stuck request ffff8880b1460600: control (read@3072,1024B). Runtime 210 seconds [ 1920.000273][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 1920.008349][ C1] lec:lec_tx_timeout: lec0 [ 1920.014090][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1925.030334][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1925.038406][ C1] lec:lec_tx_timeout: lec0 [ 1942.400573][T17733] Bluetooth: hci2: command 0x0401 tx timeout [ 1948.651395][ T97] block nbd0: Possible stuck request ffff8880b1460000: control (read@0,1024B). Runtime 240 seconds [ 1948.662860][ T97] block nbd0: Possible stuck request ffff8880b1460200: control (read@1024,1024B). Runtime 240 seconds [ 1948.674708][ T97] block nbd0: Possible stuck request ffff8880b1460400: control (read@2048,1024B). Runtime 240 seconds [ 1948.686409][ T97] block nbd0: Possible stuck request ffff8880b1460600: control (read@3072,1024B). Runtime 240 seconds [ 1952.641189][T17733] Bluetooth: hci4: command 0x0406 tx timeout [ 1973.120264][T17733] Bluetooth: hci5: command 0x0406 tx timeout [ 1976.168300][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1976.177226][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1978.721666][ T97] block nbd0: Possible stuck request ffff8880b1460000: control (read@0,1024B). Runtime 270 seconds [ 1978.733343][ T97] block nbd0: Possible stuck request ffff8880b1460200: control (read@1024,1024B). Runtime 270 seconds [ 1978.745155][ T97] block nbd0: Possible stuck request ffff8880b1460400: control (read@2048,1024B). Runtime 270 seconds [ 1978.756640][ T97] block nbd0: Possible stuck request ffff8880b1460600: control (read@3072,1024B). Runtime 270 seconds [ 1981.180543][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1981.188670][ C1] lec:lec_tx_timeout: lec0 [ 1981.612778][ T6874] lec:lec_start_xmit: lec0:No lecd attached [ 1987.039974][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1987.048121][ C1] lec:lec_tx_timeout: lec0 [ 2008.812945][ T97] block nbd0: Possible stuck request ffff8880b1460000: control (read@0,1024B). Runtime 300 seconds [ 2008.824397][ T97] block nbd0: Possible stuck request ffff8880b1460200: control (read@1024,1024B). Runtime 300 seconds [ 2008.835803][ T97] block nbd0: Possible stuck request ffff8880b1460400: control (read@2048,1024B). Runtime 300 seconds [ 2008.847225][ T97] block nbd0: Possible stuck request ffff8880b1460600: control (read@3072,1024B). Runtime 300 seconds [ 2037.607174][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 2037.614562][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 2038.885141][ T97] block nbd0: Possible stuck request ffff8880b1460000: control (read@0,1024B). Runtime 330 seconds [ 2038.896198][ T97] block nbd0: Possible stuck request ffff8880b1460200: control (read@1024,1024B). Runtime 330 seconds [ 2038.908371][ T97] block nbd0: Possible stuck request ffff8880b1460400: control (read@2048,1024B). Runtime 330 seconds [ 2038.920553][ T97] block nbd0: Possible stuck request ffff8880b1460600: control (read@3072,1024B). Runtime 330 seconds [ 2042.959936][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 2042.968013][ C1] lec:lec_tx_timeout: lec0 [ 2045.129227][ T6874] lec:lec_start_xmit: lec0:No lecd attached [ 2046.561276][ T31] INFO: task udevd:18019 blocked for more than 143 seconds. [ 2046.568674][ T31] Not tainted syzkaller #0 [ 2046.573933][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2046.583073][ T31] task:udevd state:D stack:22488 pid:18019 tgid:18019 ppid:5191 task_flags:0x400140 flags:0x00080002 [ 2046.595299][ T31] Call Trace: [ 2046.598696][ T31] [ 2046.601797][ T31] __schedule+0x14ea/0x5050 [ 2046.606425][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 2046.611844][ T31] ? __pfx___schedule+0x10/0x10 [ 2046.616713][ T31] ? schedule+0x90/0x360 [ 2046.621126][ T31] schedule+0x164/0x360 [ 2046.625434][ T31] io_schedule+0x7f/0xd0 [ 2046.629769][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 2046.635480][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 2046.641693][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 2046.647283][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 2046.653285][ T31] do_read_cache_folio+0x1ad/0x590 [ 2046.658425][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 2046.664349][ T31] read_part_sector+0xb6/0x2b0 [ 2046.669149][ T31] adfspart_check_POWERTEC+0x92/0xef0 [ 2046.675124][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 2046.680887][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 2046.686916][ T31] bdev_disk_changed+0x765/0x14c0 [ 2046.692060][ T31] ? bdev_open+0xe0/0xd30 [ 2046.696408][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 2046.702213][ T31] blkdev_get_whole+0x380/0x510 [ 2046.707067][ T31] bdev_open+0x31e/0xd30 [ 2046.711580][ T31] blkdev_open+0x470/0x610 [ 2046.716025][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 2046.721192][ T31] do_dentry_open+0x7ce/0x1420 [ 2046.725992][ T31] vfs_open+0x3b/0x340 [ 2046.730359][ T31] ? path_openat+0x346e/0x3e20 [ 2046.735253][ T31] path_openat+0x3486/0x3e20 [ 2046.739856][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 2046.745721][ T31] ? getname_flags+0xb7/0x540 [ 2046.750658][ T31] ? __pfx_path_openat+0x10/0x10 [ 2046.755695][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 2046.761156][ T31] do_filp_open+0x22d/0x490 [ 2046.765693][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 2046.770894][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2046.775766][ T31] ? alloc_fd+0x64b/0x6c0 [ 2046.780356][ T31] do_sys_openat2+0x12f/0x220 [ 2046.785058][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 2046.790967][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2046.796178][ T31] ? rcu_is_watching+0x15/0xb0 [ 2046.801647][ T31] __x64_sys_openat+0x138/0x170 [ 2046.806546][ T31] do_syscall_64+0xe2/0xf80 [ 2046.811216][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.817316][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2046.822404][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2046.828416][ T31] RIP: 0033:0x7f976f4a7407 [ 2046.833037][ T31] RSP: 002b:00007fff50792cb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2046.841582][ T31] RAX: ffffffffffffffda RBX: 00007f976fba1880 RCX: 00007f976f4a7407 [ 2046.849662][ T31] RDX: 00000000000a0800 RSI: 0000556b9f3af280 RDI: ffffffffffffff9c [ 2046.857943][ T31] RBP: 0000556b9f3ae910 R08: 0000000000000000 R09: 0000000000000000 [ 2046.866199][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000556b9f3cbf10 [ 2046.875821][ T31] R13: 0000556b9f3bc190 R14: 0000000000000000 R15: 0000556b9f3cbf10 [ 2046.887872][ T31] [ 2046.894291][ T31] [ 2046.894291][ T31] Showing all locks held in the system: [ 2046.903045][ T31] 3 locks held by rcu_exp_gp_kthr/18: [ 2046.908463][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 2046.919308][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2046.928657][ T31] #2: ffff88802a5265e8 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x66/0x1380 [ 2046.938757][ T31] 1 lock held by khungtaskd/31: [ 2046.944226][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2046.954882][ T31] 2 locks held by getty/5579: [ 2046.959669][ T31] #0: ffff8880307770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2046.970552][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 2046.980838][ T31] 1 lock held by udevd/18019: [ 2046.985521][ T31] #0: ffff888093310358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 2046.995430][ T31] [ 2046.997801][ T31] ============================================= [ 2046.997801][ T31] [ 2047.007717][ T31] NMI backtrace for cpu 1 [ 2047.007739][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2047.007761][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2047.007772][ T31] Call Trace: [ 2047.007781][ T31] [ 2047.007790][ T31] dump_stack_lvl+0xe8/0x150 [ 2047.007823][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2047.007845][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2047.007878][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2047.007902][ T31] sys_info+0x135/0x170 [ 2047.007928][ T31] watchdog+0xf90/0xfe0 [ 2047.007954][ T31] ? watchdog+0x209/0xfe0 [ 2047.007983][ T31] kthread+0x726/0x8b0 [ 2047.008009][ T31] ? __pfx_watchdog+0x10/0x10 [ 2047.008030][ T31] ? __pfx_kthread+0x10/0x10 [ 2047.008056][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2047.008079][ T31] ? __pfx_kthread+0x10/0x10 [ 2047.008102][ T31] ret_from_fork+0x51b/0xa40 [ 2047.008135][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2047.008162][ T31] ? __switch_to+0xc82/0x1410 [ 2047.008192][ T31] ? __pfx_kthread+0x10/0x10 [ 2047.008215][ T31] ret_from_fork_asm+0x1a/0x30 [ 2047.008257][ T31] [ 2047.008265][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2047.134588][ C0] NMI backtrace for cpu 0 [ 2047.134607][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2047.134625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2047.134635][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2047.134661][ C0] Code: 18 5f 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 77 10 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2047.134674][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000242 [ 2047.134691][ C0] RAX: 0000000000692a9d RBX: ffffffff8199370d RCX: 0000000080000001 [ 2047.134703][ C0] RDX: 0000000000000001 RSI: ffffffff8dccd28e RDI: ffffffff8c073980 [ 2047.134715][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 2047.134726][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef4270 [ 2047.134738][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 2047.134749][ C0] FS: 0000000000000000(0000) GS:ffff8881256eb000(0000) knlGS:0000000000000000 [ 2047.134783][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2047.134795][ C0] CR2: 000055d7e280c168 CR3: 000000000e346000 CR4: 00000000003526f0 [ 2047.134812][ C0] Call Trace: [ 2047.134820][ C0] [ 2047.134826][ C0] default_idle+0x9/0x20 [ 2047.134847][ C0] default_idle_call+0x72/0xb0 [ 2047.134862][ C0] do_idle+0x1bd/0x500 [ 2047.134877][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 2047.134898][ C0] ? __pfx_do_idle+0x10/0x10 [ 2047.134924][ C0] cpu_startup_entry+0x43/0x60 [ 2047.134939][ C0] rest_init+0x2de/0x300 [ 2047.134955][ C0] start_kernel+0x380/0x3d0 [ 2047.134977][ C0] x86_64_start_reservations+0x24/0x30 [ 2047.134996][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2047.135014][ C0] common_startup_64+0x13e/0x147 [ 2047.135041][ C0] [ 2047.325665][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2047.332554][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2047.342114][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2047.352199][ T31] Call Trace: [ 2047.355683][ T31] [ 2047.358717][ T31] vpanic+0x1e0/0x670 [ 2047.362720][ T31] panic+0xc5/0xd0 [ 2047.366464][ T31] ? __pfx_panic+0x10/0x10 [ 2047.370903][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2047.376554][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2047.382722][ T31] watchdog+0xfda/0xfe0 [ 2047.386887][ T31] ? watchdog+0x209/0xfe0 [ 2047.391226][ T31] kthread+0x726/0x8b0 [ 2047.395306][ T31] ? __pfx_watchdog+0x10/0x10 [ 2047.399989][ T31] ? __pfx_kthread+0x10/0x10 [ 2047.404591][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2047.409802][ T31] ? __pfx_kthread+0x10/0x10 [ 2047.414400][ T31] ret_from_fork+0x51b/0xa40 [ 2047.419017][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2047.424264][ T31] ? __switch_to+0xc82/0x1410 [ 2047.428953][ T31] ? __pfx_kthread+0x10/0x10 [ 2047.433549][ T31] ret_from_fork_asm+0x1a/0x30 [ 2047.438335][ T31] [ 2047.441918][ T31] Kernel Offset: disabled [ 2047.446423][ T31] Rebooting in 86400 seconds..