last executing test programs: 8.789783748s ago: executing program 0 (id=2951): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0xfffffffe}, 0x94) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000005cc0)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0xfffffffe}, 0x94) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000005cc0)) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 8.491987552s ago: executing program 0 (id=2953): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd16", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000180)={0x5e, @private=0xa010102, 0x3, 0x0, 'fo\x00', 0x20, 0x0, 0x61}, 0x2c) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e22, @local}, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x381, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='rose0\x00', 0x100000000, 0x7fff, 0x6}) 8.336608062s ago: executing program 0 (id=2954): r0 = socket(0x10, 0x803, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x0, 0x80000, 0x20000, 0x0, 0xffdffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c2a, 0x0, 0x0, 0x4}}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000280)={'veth0_virt_wifi\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', r3, 0x2f, 0xab, 0x7f, 0x100, 0xe, @local, @mcast1, 0x20, 0x7, 0xffffffff, 0xffffffd0}}) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x6}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x0) 8.068519253s ago: executing program 0 (id=2955): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4000000000000006111920000000000851000000200a4000000950051390000000000009500"/50], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) close(r3) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f00000003c0)=""/140, &(0x7f0000000100)=0x8c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @empty}, &(0x7f0000000340)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x27, &(0x7f0000000600)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000ff7f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000001847000007000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000004b267ceff71c77d8bbd7f9bfbd95737667de6d1f0f02c00bfa200000000000007020000f8ffffffb703000008000400bde80000010000008500000082000000181100000e4132544f10262d85e3dd459a2a923bc1f937360b7996726738aeb51ce1e21646a00913fa822d9e5feae2eeb5db0633d47d6ce9b0fc9484a259a44d4001d698df59f00378982e9c8132117975f708092cee398a2cea946ccde10e2a06bd2557865b44642086b804853502858d8941e48cec7a3bc211a84e50937f8ccad1c5f2c9f22f", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000419853bd000000c018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018500000060000000000000000000000950000000000000018000000080000000000000006000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x1, &(0x7f00000002c0)=""/1, 0x40f00, 0x26, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xc, 0x349, 0xe}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x2, 0x2, 0x4, 0x5}, {0x1, 0x3, 0xb, 0x3}, {0x2, 0x1, 0x10, 0x8}], 0x10, 0x83}, 0x94) 7.832018503s ago: executing program 0 (id=2957): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x6}]}}}]}, 0x44}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x7}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x6}]}}}]}, 0x44}}, 0x0) (async) 7.597196081s ago: executing program 0 (id=2962): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@security={'security\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x398, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x450, 0x450, 0x450, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:auditd_initrc_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x178, 0x1d8, 0x0, {}, [@common=@inet=@recent1={{0x108}, {0xfffffff7, 0xfffffffe, 0x2, 0x1, 'syz0\x00', 0x7, [0xff000000, 0xff000000, 0xff000000, 0xffffffff]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x7, 0x2, 0x3, 0x0, 0x2], 0x1, 0x5}, {0x4, [0x4, 0x2, 0x2, 0x1, 0x3, 0x2], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x8001, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESDEC=r2, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r9, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x140, r9, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x110, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffb}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1e8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xcee6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf8c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffff80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa02}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xcfd}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.843307777s ago: executing program 2 (id=2996): syz_emit_ethernet(0x96, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x88, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x1b, 0x4, 0x0, 0x8, 0x2, 0x64, 0xf8c1, 0xc, 0x32, 0x6, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x6, 0xe, "e0b8747b5ef4b7600c8b37c9"}, {0x1, 0x4, "1588"}, {0x4, 0x4, '!T'}, {0x6, 0xe, "8ce82a01bc802e96175c54bb"}, {0x5, 0xf, "926ba3a62c08038c917891a7db"}, {0x7, 0x3, 'v'}, {0x2, 0x8, "75f25d15a62b"}, {0x2, 0x4, "f95c"}]}, @noop, @timestamp={0x44, 0xc, 0xa, 0x0, 0x3, [0xfff, 0xf]}]}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000ff"], 0x0, 0x2}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005"], 0xd0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000060000000000000005000000850000006f00000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000015) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r4, 0x0, 0x15, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0xa, 0x1, 0xe1, 0x5}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r5, @ANYBLOB="2d482606a2765973b2232d067e169a71c9cae66857bfd98faba614af743fa5dcee0807ef3de7601ce3c07df23248a23e454f8333ef1d75c8ae27bb2029ff308938d874e491ae6b85bf10604fcef6a5b7580dc779b46a5d8a31c7aa48ed525ddd6d4ff7d17f180b8a9628574c73eada958b7da2f5a700978a77b2404870c816f8e2b2577f"], 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) 3.587919068s ago: executing program 2 (id=2998): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee000000000000000002", 0x56}], 0x1) 3.357711345s ago: executing program 4 (id=3000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x17, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x38}, [@IFA_FLAGS={0x0, 0x8, 0x4}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r4) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x420030}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e2b, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xd68}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000400)={r9}) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000280)={r9, r7}) recvmsg$unix(r10, &(0x7f0000000300)={&(0x7f0000000380), 0x6e, &(0x7f0000000b80)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000540)=""/178, 0xb2}, {&(0x7f0000000cc0)=""/245, 0xf5}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000000700)=""/79, 0x4f}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000900)=""/224, 0xe0}, {&(0x7f0000000a00)=""/106, 0x6a}, {&(0x7f0000000a80)=""/210, 0xd2}], 0x9, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x10020) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f0000000200)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd01d8ca2fcefd9}, [@IFLA_MASTER={0x8, 0xa, r11}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 3.00301054s ago: executing program 1 (id=3003): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x26, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r2, r3, 0x14, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000007000000ffff00000600000024000200", @ANYRES32=r3, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000000000007000000000000000000000000080000"], 0x50) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) ioctl$FIBMAP(r6, 0x1, &(0x7f00000004c0)=0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="b80000002e00090027bd7000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB="9b0016"], 0xb8}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async, rerun: 64) socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) pipe(&(0x7f0000000480)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) pwritev(r4, &(0x7f0000000280)=[{&(0x7f00000006c0)="7163d5488a24d1fbbf15881508916e527d70ad29c793d79592beffd0f20be371decaf75a23478a75c0a5fc7e79bfb7a99705ade567ad3de9933e3b6b972dfe28f4fdfc34b8de45690690fc65f5ea603a8d", 0x51}], 0x1, 0x6, 0x3) (async) socket$netlink(0x10, 0x3, 0xc) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000800000001000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000203000000000000000000000080000000", @ANYRES32=r5, @ANYBLOB="0c009900e3bd000031feffff08006b007800000008006b0068010000"], 0x38}, 0x1, 0x0, 0x0, 0x8880}, 0x20040804) 2.879804571s ago: executing program 1 (id=3005): r0 = socket(0x1e, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000640), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x5, 0x30, 0x5, 0x80000000}, &(0x7f0000000100)=0x18) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000b40)={r5, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x80000000, 0x1000, 0x1, 0x0, 0x4c, 0x84, 0xe22, {r5, @in6={{0xa, 0x4e23, 0x393a, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9}}, 0x6, 0xd, 0xfffffffa, 0x5, 0xc353}}, &(0x7f0000000580)=0xb0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg$unix(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/165, 0xa5}, {0x0}], 0x2, &(0x7f0000000a80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x1, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="b5c5ba9808b8fe061d", 0x9}], 0x1}}], 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {}, {0x10, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24020000}, 0x44010) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0xb0, 0x218, 0x229, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'pim6reg1\x00', 'vlan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 2.70566083s ago: executing program 2 (id=3007): syz_emit_ethernet(0x616, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000010a0101"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180500000000000000000000000000009500000000000000bf3e322789d59f09374e2896f58e6b38e0d1b8030149a30e9c87ecc48643176d85d4c6cbd942ba9b967fbd70025155d11784962ea32e7f"], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x7, "cbfdd9", 0x2, 0x6}) 2.515038513s ago: executing program 2 (id=3008): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), 0x4) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r2, 0xfffffff8}, &(0x7f00000001c0)=0x8) syz_emit_ethernet(0x76, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x3d, 0x0, 0x0, "23f12f4860a44b0bc15ba15ff24af6985862903ebeb97f2918c713975bf95aefc56dc0c47215146671a0c2baf90fa3de0356cd9d9628d4a62674"}]}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x2, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x2, 0x0) 2.314555708s ago: executing program 4 (id=3010): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES8=r1, @ANYBLOB, @ANYBLOB="000000000000000000000000000008000120fa44f0a5065f5458f38f91b0f8fdad3136b1fc280300004d637120ecfebeca63f70525eb90c4cd94b9a8a961f8232a5f30648c661b46dadd3c955411b211f21808bcff20112aaa763ede74daaa84ced6d001fd6e17a2eafd171a96d632eb1a4cdba809d24b7cd85edb4fa4c5aee72150b12e6e221d51fa6abeeb646fa3456c7d4ceacc2adfc5c059cdec960726caff44989ee88aa3b801431b92183e569ba78d85de3e4e00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000001c0)=0xff, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000001c0)=0xff, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000001740), 0x0, 0x42080) (async) sendmmsg$inet(r1, &(0x7f0000001740), 0x0, 0x42080) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000002300000018988114", @ANYRES32=r3, @ANYBLOB="0000000000000000b7000000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000140)=""/56, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f00000005c0)="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") (async) ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f00000005c0)="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") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c0100001900010025bd7000010000000000000000000000000000000000000100000000000000000000000000000000000000000000000002000000d8000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000ed0e000000000000000000000000000000000000000000000008000000000000000000000006000000020000000000000100010000000000c4000500000000000000000000000000000000000000000033000000000000006401010000000000000000000000000000000000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe800000000000000000000000000000000000000000000000000000ffffffff0000000020010000001900000000000000000000000004d26c00000000200000ac1414bb00000000000000000000000000000000040100000c0000000700000000000000"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c0100001900010025bd7000010000000000000000000000000000000000000100000000000000000000000000000000000000000000000002000000d8000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000ed0e000000000000000000000000000000000000000000000008000000000000000000000006000000020000000000000100010000000000c4000500000000000000000000000000000000000000000033000000000000006401010000000000000000000000000000000000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe800000000000000000000000000000000000000000000000000000ffffffff0000000020010000001900000000000000000000000004d26c00000000200000ac1414bb00000000000000000000000000000000040100000c0000000700000000000000"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x3f0, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x3f0, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000448000/0x2000)=nil, 0x2000, 0x2000009, 0x22052, 0xffffffffffffffff, 0x2fdad000) mmap(&(0x7f0000496000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) (async) mmap(&(0x7f0000496000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r7, 0x913e0000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x80010, r0, 0xffffc000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r8, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.183623991s ago: executing program 3 (id=3011): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052cbd7000fdffffff02181000", @ANYRES32=r1, @ANYBLOB="08000100e33998c7461f471ae000000208000100ac14141e0800040075e0ba25280009000000010008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30c33d133}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0xffffffff) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.036546869s ago: executing program 3 (id=3012): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x58, 0x20000855, &(0x7f00000000c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x18, 0x110, 0xa, "fe"}], 0x18}, 0xfc40) r3 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}], 0x1, 0x40800) ioctl$SIOCSIFMTU(r3, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x3}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)={0x2, 'team_slave_1\x00', {0x1}, 0x9}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800e0001006970366772657461700000001c00028008000100", @ANYRES32, @ANYBLOB="297235feda382900080014000900000008000a00", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2.015628132s ago: executing program 4 (id=3013): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x4, 0x3, {0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010029bd7000fedbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="c766ac4df80fb7604c54f8"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8000000060a0b04000000000000000002000000cc00048024000180090001006d65746100000000140002800800024000000020080001400000000c940001800a00010072616e676500000084000280380004803400028008000340000000080900020073797a32000000000900020073797a300000000008000180fffffffb0800034000000007480004804400028008000180fffffffc0900020073797a300000000008000340000000040900020073797a310000000008000180ffffffff08000340000000010800018000000003100001800c000100636f756e746572000900010073797a30000000000900020073797a32"], 0x120}}, 0x0) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) (async) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000008000000000047000000270000000112000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r3, @ANYRESDEC=r3, @ANYRESOCT=r1], 0x2c}, 0x1, 0x0, 0x0, 0xa800}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000000c0)=0x84) (async) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000640)={{{@in=@dev, @in=@dev}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) 1.877199024s ago: executing program 1 (id=3014): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000540)={0x2d, 0x0, 0x8000}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000006600)=[{{&(0x7f0000001440)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f0000001980)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x2, 0x20004800) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000180)=0x80, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x1, 0x8eb4}]}) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x1, &(0x7f0000000000)=""/80, &(0x7f0000000140)=0x50) close(0x3) 1.748998521s ago: executing program 3 (id=3015): r0 = socket$inet(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0xfffffffe, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) listen(r0, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)={0x39c, 0x24, 0x4, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x206, 0x16, 0x0, 0x1, [@generic="985cfdb666b97d05d8b7f528f302067093a5d539cba2463a5b06358ba1ef0986e4fb62b58f921cc906b74a7e91a6693e7c7ac49f8bffef78acd55d2091f39b9224c1927a7d2410286c87cb93cbf137d50ccd59dde0d100580ddb829f3dfdc90656e1de7f895400c5022fa234324f3bb9a87477c48ba4cbd262b209f1052472b3d944c2be517e5d2f4b9e9385c7ccdc0c0dad04e4aa7828407b3eaa6ecd8dc610fa68c832bfbc3ca6be1065f16c758658079a3dbbb9cc44297b55e49f5604", @generic="fd5755835b2de1cde921d9498ff48b5c5477d7fe5ad18896798b386c936c7590ca82bf321e0c14a350db157e9b5627", @typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @generic="c2f3dcf22d1f2f44d9531b4db2f3e792617fcbcd24e4f0cef5f0ec6fac17cc98dfb5f4cca94432d46ac274140917745139a2f865d79a38793956efb43abb9bdd65aa507c980e0c890f0ce874d4ef00b8cf86693702a8857e15a5ce4cd82c99198d476c4225741a47689f26e015a62adfaa57f181fba00c8230f8cd537e5947ccea437469c3b88c6cdc5ebb90b26b7013c8f7072eec19c2f2700e5adc36ed4aacd25893c75e29b60f08ab2eaa7a801f810b1a354410fb125419c2", @nested={0x4, 0x77}, @generic="097e129691eed428", @typed={0x14, 0x57, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @generic="d0668387a828df5b29471c13fa66d7230985dc5ec843932bc3067d7500c7187c2c41517bb2de6b"]}, @nested={0x37, 0x17, 0x0, 0x1, [@nested={0x4, 0x131}, @typed={0x8, 0x71, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x142, 0x0, 0x0, @fd=r3}, @generic="573f7fb2652785548f0e389094efde728b87336c4bfe6e3640e73ddb607ba7"]}, @typed={0x8, 0x66, 0x0, 0x0, @fd=r3}, @nested={0x144, 0x6d, 0x0, 0x1, [@generic="01585601c29f3691fbd30b6b754363e26f8de98c6e525722d72c028e451b175758a08d853cff91b142bba489b22a941f6c0439ae46a8f7b0d062fe01956e360a132bb4884b1229eac81a16", @generic="70950ec011fb83370944c718ebec75c6c9dda9cfa8f4f2219c4331a2", @generic="e7e997f12c906a3981ede160ec50dae79c98cf062d79ebd24daa618d769b83fc5f70ec81d2599f1d1d4fce714ed30861c7f218508664c2a40870712a67c45198c9c2941a15da41f17e3ec6fa4a0aaae265c4153bb369ce1e28b98bdeef10549d0d0e3949150aa4618777320d6d271b6146bd2d68d46e43fac03d7a1afeac7d3a0464cb2da9556b937853ec8904b125472593f6b054e512471e9847db4adb2f8c9fc0a8847b91acf077daf12cd939b6bcf1dc71eef99df675e32646238ffc89f77d1ec0dcd7b6325388d8be4b5b49ebf5f54f0839b36dd9d527"]}]}, 0x39c}, {&(0x7f00000004c0)={0x38, 0x2e, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x28, 0x11, 0x0, 0x1, [@nested={0x4, 0x118}, @typed={0x14, 0xef, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x22}}, @typed={0xc, 0x52, 0x0, 0x0, @u64=0xe}]}]}, 0x38}], 0x2}, 0x0) 1.728215584s ago: executing program 4 (id=3016): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee000000000000000002", 0x56}], 0x1) 1.579223461s ago: executing program 1 (id=3017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="8d4db1e0e957134593dccd190168f40baec57f637438954c0dbb784fdcf178b4eba3c66a263f29b9fd4d0b6a5d260a8058822edfbbb8e226719453433e803e183d85c02036972b34fd1958dfcae01809ba797c50", 0x54) syz_genetlink_get_family_id$tipc(0x0, r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'veth0_macvtap\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x800000}}) close(0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="8d4db1e0e957134593dccd190168f40baec57f637438954c0dbb784fdcf178b4eba3c66a263f29b9fd4d0b6a5d260a8058822edfbbb8e226719453433e803e183d85c02036972b34fd1958dfcae01809ba797c50", 0x54) (async) syz_genetlink_get_family_id$tipc(0x0, r2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'veth0_macvtap\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x800000}}) (async) close(0xffffffffffffffff) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$packet(0x11, 0x2, 0x300) (async) 1.577684948s ago: executing program 3 (id=3018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8864}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="40010000", @ANYRES16, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x804}, 0x20000001) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd80000009602"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 1.574455788s ago: executing program 2 (id=3019): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x48, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x40080) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x35}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000000)={0x6, 'macvlan1\x00', {0x6}, 0x1}) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000050c0), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005140)={0x2c, r6, 0xde439ec6940bc971, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x8) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.240380039s ago: executing program 1 (id=3020): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x60, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}}}}}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) (async) bind$tipc(r3, 0x0, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58) (async) setsockopt(r6, 0x84, 0x82, &(0x7f00000001c0)="020900000080efff", 0x8) (async) r7 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x0, 0xffffffffffffffbc, 0x0, 0xffffffffffffff81, 0x40d], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) (async) shutdown(r7, 0x0) 1.168076362s ago: executing program 3 (id=3021): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000100000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe800000000001a8000000000000002000000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa00000000000000000000000047516806ecd33d5c0000000000008000fc020000000000000000000000000001200100000000000000000000000000003c040000"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 837.496888ms ago: executing program 3 (id=3022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffff9, @empty, 0x40}}, 0x9, 0x4000}, 0x90) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000640)=""/263, 0x107}, {&(0x7f0000000900)=""/213, 0xd5}, {&(0x7f0000000780)=""/237, 0xed}], 0x5}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f00000003c0)=[{0x40, 0xe, 0x1}, {0x6, 0x8, 0xfd, 0x4}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="63d77d3509", 0x5}], 0x1}}], 0x1, 0x10) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20000001) recvmmsg(r8, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000003c0)=""/213, 0xd5}], 0x5}, 0x3}], 0x1, 0x10100, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24}, 0x24}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c00002000002f9078ac1e907803dd00000000000086ddffff0000000000000000000000000000000063e8c99c2e6f881e10066189b27d7d0d"], 0xfdef) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c41d54976631f9e63472fcda46f35001000010700000000000000000a0000000600010035000000"], 0x1c}}, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x800) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) 652.41887ms ago: executing program 4 (id=3023): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@dontfrag={{0x10, 0x29, 0x34, 0x800}}], 0x10}, 0x40c0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r2, 0x20, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd5c926fb686e1cfe}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}]]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008202500000016fc0b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884) 330.15045ms ago: executing program 2 (id=3024): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0001009000000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000e00)={0x48, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x48}}, 0x20000040) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x8c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x15}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '[&$-+\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x54) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000300)=@ethtool_pauseparam={0x13, 0xa, 0x0, 0x6}}) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0xd}, 0x20000810) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000480)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0xa0, 0x0, [{@empty}, {}, {@multicast2}, {}, {@private}, {@broadcast}, {@empty}, {@dev}, {@dev}, {@dev}]}}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 222.550163ms ago: executing program 4 (id=3025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000e80)={0x12b4, 0x1, 0x5, 0xd01, 0x0, 0x0, {0x2, 0x0, 0x5}, [{{0x254, 0x1, {{0x1, 0xffffffff}, 0x4, 0x2, 0x2, 0x6, 0x23, 'syz0\x00', "8c380ee182abb26d5d78594cad5c3f68b584a838334d6a33ea99fc6b33c51f1b", "3c7a81e8bd7e45f2d4ee09aeaff76ca4485b6c4b33b9ea42d1ccc9d475f1b0fe", [{0x2, 0x101, {0x0, 0x7}}, {0xfc, 0x5, {0x2, 0x7f4}}, {0x81, 0x1000, {0x2, 0x2}}, {0xe094, 0xca8f, {0x3, 0x8}}, {0x3, 0x5, {0x3, 0x9}}, {0x0, 0xfffc, {0x1}}, {0x3, 0x1, {0x0, 0x10001}}, {0xf, 0x4, {0x0, 0x7443}}, {0xb, 0xf93e, {0x2, 0x1}}, {0x6, 0x5, {0x2, 0x26}}, {0x18, 0x6}, {0x3289, 0x8, {0x2, 0xffff}}, {0x8, 0x8000, {0x1, 0x8}}, {0x8001, 0xdb85, {0x1, 0x4}}, {0x3db9, 0x4, {0x2, 0x6}}, {0x40, 0x0, {0x0, 0x61}}, {0x5, 0xff, {0x3, 0x8000}}, {0xfff9, 0x800, {0x2, 0xc}}, {0xffff, 0x1fe0, {0x0, 0x2}}, {0x625b, 0x7, {0x2, 0x3}}, {0x3, 0xbd, {0x3, 0x206800}}, {0x800, 0xdfbe, {0x3, 0x2}}, {0x7, 0x2}, {0x8, 0x1000, {0x1, 0x80000000}}, {0x101, 0x1000, {0x1, 0x101}}, {0x7f, 0x3f, {0x2, 0x6}}, {0x0, 0x1000, {0x1, 0x9}}, {0x7, 0x3, {0x1, 0x7fffffff}}, {0x9, 0xb5, {0x3, 0x9}}, {0x0, 0x9, {0x0, 0x9}}, {0x3, 0xfe, {0x1, 0x1}}, {0x6, 0x4, {0x1, 0x3}}, {0x40, 0x2, {0x1, 0x648}}, {0x7, 0x1, {0x1, 0x7}}, {0x3, 0xfff5, {0x0, 0x3}}, {0xb3, 0x7, {0x0, 0x8ad}}, {0x64c, 0x40, {0x3, 0x800}}, {0x4, 0x4, {0x0, 0x2}}, {0x3, 0x1ff, {0x1, 0x5}}, {0xd, 0x9, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0xa}, 0x4, 0x5, 0x7, 0x8, 0xe, 'syz0\x00', "d9a8c6f9cd36eb2c878f6f48bf2d1794c6cd615d2d098fb0abb006c9cbe5e281", "14dd6926913e200c2a4746b05a412c3955bddd35cc4f71209f33b1fbd0e44e9c", [{0xf, 0xff, {0x1, 0x2}}, {0xff, 0x6, {0x10ac2cf9a11a64dc, 0x3}}, {0x5, 0x3, {0x0, 0x6}}, {0x1, 0xf, {0x3, 0x3}}, {0x8, 0x6, {0x0, 0x8}}, {0x3ff, 0x8001, {0x3, 0x7850}}, {0xd32, 0x0, {0x1, 0xc0b6}}, {0x8000, 0xd4, {0x3, 0xc94}}, {0xa, 0x0, {0x1, 0x80000001}}, {0xb8ad, 0x10, {0x1}}, {0x6, 0x4, {0x2}}, {0x0, 0xfffe, {0x2, 0x40}}, {0x6, 0xe, {0x1, 0x5}}, {0x9, 0x3ff, {0x0, 0xd2c4}}, {0x4, 0x57da, {0x1, 0x8}}, {0xbca, 0x8d, {0x0, 0x800}}, {0x0, 0x80, {0x2, 0x7}}, {0xfffc, 0x58, {0x0, 0x2}}, {0x7, 0x1fd, {0x2, 0x8001}}, {0x3, 0x3, {0x3, 0x7ff}}, {0x4, 0x8001, {0x0, 0x1}}, {0x1, 0x8, {0x2, 0x4}}, {0x7, 0x1ffe, {0x3, 0x8}}, {0x1, 0x9b87, {0x1, 0x6}}, {0x9, 0x1, {0x0, 0x4}}, {0x5, 0x7}, {0x2, 0x8}, {0x7ff, 0x5, {0x1, 0x96}}, {0x6, 0x0, {0x3, 0xd}}, {0x5, 0x1, {0x2, 0x9}}, {0x7fff, 0x3, {0x0, 0x2}}, {0x5, 0x5, {0x0, 0xc1b}}, {0x3, 0x5, {0x2}}, {0xa0, 0x6, {0x3, 0x3}}, {0x1, 0x2, {0x1, 0x4}}, {0x9, 0xbdf, {0x2, 0x49e82998}}, {0xc000, 0x7, {0x0, 0x6}}, {0x6, 0x9, {0x0, 0xedd}}, {0xa, 0x3, {0x0, 0x1}}, {0xe, 0x0, {0x3, 0xffff}}]}}}, {{0x254, 0x1, {{0x2, 0x75ba624}, 0xb8, 0x5, 0x1, 0x2, 0x18, 'syz1\x00', "ca99f090044660fe7e216b8719cfc7d089a9ea355a12d312f54bec47e94620e7", "1d90efec611cb25c52f7aacc1b32c4dd69d3ea6e5fbd5eba7c66d5efa46d5f7e", [{0xfff4, 0x1, {0x1, 0xaa3e}}, {0x7, 0x0, {0x1, 0x7a20}}, {0x1, 0x5}, {0x9, 0x7, {0x1, 0x2}}, {0x413, 0x2400, {0x0, 0x3}}, {0x1, 0x2, {0x2, 0xd7}}, {0x7, 0x3, {0x1, 0x5}}, {0x401, 0x8, {0x3, 0x4}}, {0xa4, 0x5, {0x2, 0x5}}, {0x8dc2, 0x4, {0x2, 0x2}}, {0x6, 0xb2ba, {0x3, 0x4}}, {0xd4, 0x6, {0x0, 0x55d}}, {0x7, 0x1, {0x0, 0x1000}}, {0x0, 0x11, {0x3}}, {0x3, 0x8, {0x1, 0x3}}, {0x2, 0xc, {0x1, 0x2}}, {0x7650, 0x4000, {0x1, 0x5}}, {0x6, 0x6, {0x0, 0x99f}}, {0x0, 0xfb74, {0x1, 0x9}}, {0x401, 0x8, {0x1, 0x9}}, {0x8, 0xfff, {0x0, 0x6}}, {0x9, 0x9, {0x3, 0x9}}, {0x2, 0x0, {0x2, 0x3c83a3ca}}, {0x2, 0x8, {0x2, 0x2}}, {0x6, 0x4, {0x1, 0xc}}, {0x1, 0x7ff, {0x0, 0x3}}, {0x3, 0x6, {0x2, 0x6}}, {0x401, 0x9, {0x2, 0x4}}, {0x2, 0xe, {0x0, 0xfffffff9}}, {0x1, 0xfff7, {0x3, 0xaa9}}, {0x2, 0x0, {0x3, 0x7}}, {0x7fff, 0xc, {0x3, 0x7}}, {0x4, 0x0, {0x3, 0x7}}, {0x5, 0x9, {0x3, 0x3}}, {0x6, 0x5, {0x1, 0x2}}, {0x4, 0x0, {0x1, 0xffffea85}}, {0xda00, 0x289, {0x0, 0x8000}}, {0x0, 0x36, {0x3, 0x9368}}, {0xdd0, 0x101, {0x3, 0x6}}, {0x200, 0x53, {0x3, 0xeb71}}]}}}, {{0x254, 0x1, {{0x3, 0x2}, 0x8a, 0x80, 0x7, 0x8, 0xa, 'syz0\x00', "fdbb9c02fd57049fba786aacb065dce4dffa07d10c1bab92a2a3cb7be7b2d21b", "23ad1cb4286fc5ba40bf87dfa89f5f22e2ef113f5d0476e22cc0fbf1e44ba95d", [{0x40, 0x3, {0x2}}, {0xffff, 0x3d, {0x2, 0xb}}, {0xe7ce, 0x2, {0x2, 0x9}}, {0x5, 0x8d96, {0x0, 0x800}}, {0xc, 0xffff, {0x0, 0xfff}}, {0x6, 0x5, {0x0, 0x401}}, {0x0, 0x5, {0x1, 0x1}}, {0x8, 0x7f}, {0x1ff, 0x0, {0x0, 0x1}}, {0x7, 0xe000, {0x1, 0x36439438}}, {0x7, 0x586, {0x2, 0x4}}, {0x6, 0xb, {0x0, 0x6}}, {0x6, 0x5d, {0x1, 0xc20}}, {0x6, 0x6df, {0x1, 0xfffffffa}}, {0x0, 0x2, {0x1, 0x4}}, {0x5, 0x0, {0x3, 0x4}}, {0xffff, 0x2, {0x2, 0xdc87}}, {0x11, 0x6, {0x0, 0x4277}}, {0x6, 0x81, {0x2, 0x3}}, {0xb12, 0x8, {0x2, 0xa9f9}}, {0xf8, 0x80, {0x3, 0x4}}, {0x9, 0x0, {0x1, 0x7}}, {0x8, 0x9, {0x0, 0xffffffff}}, {0xc, 0x5, {0x1, 0x3}}, {0x9, 0xffff, {0x3, 0xa}}, {0x1, 0x7fff, {0x0, 0x2}}, {0x2, 0x3, {0x0, 0x9}}, {0xe411, 0xf, {0x3, 0x80}}, {0x80, 0x9, {0x1, 0x80000000}}, {0xd, 0x8, {0x1, 0x3}}, {0x3, 0x6, {0x0, 0x8}}, {0x8, 0x0, {0x0, 0x83b2}}, {0x81, 0x4ef, {0x3, 0x5f7}}, {0x401, 0x7ff, {0x3, 0x9}}, {0x8000, 0x5, {0x3, 0x5}}, {0x1000, 0x3, {0x2, 0x7}}, {0x101, 0x0, {0x3, 0x9}}, {0x2, 0x3ff, {0x2, 0xfffff701}}, {0x83, 0x4, {0x0, 0x7}}, {0x4, 0x1, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x1, 0x71, 0x3, 0x9, 0x27, 'syz0\x00', "a3e248491c65e424f10a5e91d7ac36d0c5e76f1e36e1fa601cb47c0f76c45d42", "6c6fa787e5aee0bac2cc38b42890f432061ab2ce816b7b5a59b01d29ba4a2a1d", [{0x2, 0x44f, {0x2, 0x7}}, {0x9, 0x0, {0x2}}, {0xfffa, 0x9, {0x3, 0x7}}, {0x9e5a, 0xdd6f, {0x3, 0x1}}, {0x5c3, 0x1, {0x1}}, {0x4, 0x4, {0x3, 0x7c}}, {0x3, 0x3c, {0x1, 0xc}}, {0x8, 0xd34e, {0x0, 0x1}}, {0x3, 0x40}, {0x6, 0x7fff, {0x2, 0x2}}, {0x8, 0x5, {0x3, 0x68d8}}, {0x0, 0x8100, {0x1, 0x8}}, {0x6, 0x4, {0x0, 0x53b7795f}}, {0x1, 0x7, {0x0, 0x9e}}, {0x67, 0x9, {0x3, 0x260a}}, {0x3, 0x47b, {0x3, 0x1}}, {0x0, 0x4, {0x0, 0xdc59}}, {0x10, 0x7f, {0x0, 0x3d}}, {0x3, 0x5, {0x0, 0x1000000}}, {0x4, 0x1, {0x3, 0x4}}, {0x3, 0xe0, {0x0, 0x2}}, {0x9, 0x7, {0x3, 0x4}}, {0x54, 0x7, {0x1, 0x3ff}}, {0x1, 0x9, {0x3, 0x4c0}}, {0x9b14, 0x2, {0x0, 0xfffffe03}}, {0x5bc5, 0x5, {0x1, 0x7}}, {0xff, 0x2, {0x0, 0x3}}, {0x0, 0x1544, {0x2, 0xfb46}}, {0x8, 0x0, {0x2, 0xfff}}, {0x6, 0x9, {0x1, 0x1}}, {0x1, 0x6, {0x1, 0x401}}, {0x1, 0xff, {0x2, 0x1}}, {0x5, 0x9, {0x3, 0xf}}, {0x8, 0x0, {0x1, 0x3fc0}}, {0x2, 0x4, {0x1}}, {0x7, 0x3, {0x0, 0x9}}, {0x6, 0x5, {0x569ef5b23fd8bbf8, 0x6}}, {0x4, 0x8, {0x0, 0x1}}, {0xfe01, 0x5, {0x1, 0xf4}}, {0xffff, 0x9, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x9a5}, 0x0, 0xf8, 0x81, 0xd000, 0x27, 'syz1\x00', "801af7774c8cb9b44938e86487d5de1805fa0e6b3fb6057ee6887e7bde3cc056", "8f07448aed2a2b486e56e1dbc0a8216657beb7442f01983c05119882b62c2341", [{0xf, 0x5, {0x2, 0x3}}, {0x3, 0x8, {0x0, 0x5}}, {0x800, 0x4, {0x3, 0x7baa}}, {0x7fff, 0x0, {0x1, 0xb}}, {0x7d8, 0x7, {0x1, 0x1}}, {0x800, 0x98, {0x0, 0x5}}, {0xc8, 0xbf9, {0x2, 0x10}}, {0x7, 0x401, {0x1, 0x7000000}}, {0xc, 0x0, {0x3, 0x4f8}}, {0x3, 0xffff, {0x0, 0xfffff6f8}}, {0xbd, 0x18d0, {0x3, 0x8}}, {0x3, 0xfff8, {0x0, 0x9}}, {0x4, 0x0, {0x3, 0x8}}, {0x3, 0x2, {0x3, 0x5}}, {0xfffe, 0x1, {0x2, 0x7e8}}, {0x6, 0x400, {0x0, 0xfffffe0d}}, {0x4, 0x2, {0x0, 0x8}}, {0x9, 0x7, {0x2, 0x3}}, {0x7, 0x8001, {0x2, 0xd}}, {0x6, 0x4444, {0x2, 0x9}}, {0xff, 0x7f80, {0x3, 0x1}}, {0x101, 0x5, {0x2, 0x40}}, {0x4, 0x3, {0x3, 0x6}}, {0x5, 0x9, {0x0, 0x2}}, {0x1, 0x5, {0x0, 0xdaa4}}, {0x7, 0xff80, {0x3, 0x101}}, {0x5, 0x4, {0x3, 0x2e7881fe}}, {0xfffc, 0x1}, {0x5, 0x1000, {0x0, 0x6}}, {0xe, 0x35e, {0x2, 0x9}}, {0x5, 0x10, {0xaf79b1b6323ec68b, 0x4}}, {0x3, 0x7ff, {0x1, 0x8}}, {0x0, 0x0, {0x3, 0x6}}, {0xffff, 0x9, {0x0, 0x4}}, {0x8, 0x7fff, {0x2, 0x5}}, {0x8000, 0x6, {0x2, 0x9}}, {0x8, 0x3, {0x2, 0x7}}, {0x8cdd, 0x8000, {0x2}}, {0x0, 0x1, {0x3, 0x1f}}, {0x2, 0x9, {0x1, 0x846}}]}}}, {{0x254, 0x1, {{0x2, 0x800}, 0x2, 0x9, 0xff, 0xf000, 0x26, 'syz1\x00', "5359b2284afcf324d7e9e3527e51f0a4b7be097142236d17ad9e04ec00973eda", "f14e3c3a85528a05c192f129cd7805681552b4eaebc1dfc95eb512353c4af8de", [{0x7, 0x2, {0x1, 0x3}}, {0x8, 0x2, {0x0, 0x1}}, {0x1, 0x81, {0x2, 0x7c84}}, {0x0, 0x1, {0x3, 0x2}}, {0x85, 0xf, {0x3, 0x7f}}, {0x0, 0x5, {0x0, 0x1}}, {0x400, 0x5, {0x0, 0x7}}, {0x40, 0x8, {0x0, 0x83bc}}, {0xf4a, 0xff, {0x0, 0x81}}, {0x6, 0xfff, {0x3, 0x3}}, {0x2, 0x2, {0x0, 0x7}}, {0x7, 0x1, {0x3, 0x8}}, {0xaa8f, 0x600, {0x1, 0x1ff}}, {0x64a, 0x939e}, {0x7, 0x1, {0x0, 0x4ab9}}, {0x8, 0x3, {0x1, 0x5}}, {0x0, 0xe, {0x0, 0x4}}, {0x5b, 0x1, {0x2, 0x100}}, {0x8001, 0x1, {0x0, 0x80000001}}, {0x2e44, 0x8, {0x0, 0x3}}, {0x3, 0x3, {0x1, 0x115e}}, {0x9, 0x5, {0x1, 0x6}}, {0x401, 0xb181, {0x2, 0x8}}, {0x3, 0x8f, {0x3, 0xb}}, {0x95, 0x3, {0x1, 0x5}}, {0xfa68, 0xe655, {0x0, 0x2}}, {0x6, 0xc, {0x3, 0x6}}, {0xb, 0x292, {0x2, 0x400}}, {0xd, 0xff, {0x2, 0x8}}, {0x1, 0x1, {0x3, 0x4}}, {0xf43, 0x5, {0x1, 0x800}}, {0x2, 0x6, {0x0, 0x1}}, {0x8, 0x4, {0x0, 0x7ff}}, {0x200, 0x8e7, {0x0, 0x2}}, {0x8, 0xcd, {0x3, 0x5}}, {0x1, 0xc, {0x1, 0xd33}}, {0x0, 0x15, {0x2, 0x8001}}, {0x9, 0x0, {0x0, 0x1}}, {0x6, 0x6, {0x1, 0x9}}, {0x8, 0x35, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x2, 0x2ac}, 0x0, 0xc7, 0x1ff, 0x3a5, 0x1f, 'syz1\x00', "2ac97b9b51b2ded19fa5494b8f481a267d38d027fda1bfbb6491d1d4926cc2b2", "24624418435cba393b6ce04710c3932ec58be1dc5c43e33ed0854e86b19e4e22", [{0x3, 0x6, {0x1, 0x5}}, {0x1, 0x9, {0x1, 0x1ff}}, {0x8, 0xc00, {0x0, 0x411}}, {0x5, 0x4, {0x2}}, {0x8, 0x1, {0x2, 0x6f}}, {0x10, 0x94, {0x0, 0x80}}, {0x2, 0x8000, {0x1, 0x2}}, {0x1, 0x2, {0x3, 0x7}}, {0x10, 0x8, {0x1, 0xff}}, {0x6, 0x5, {0x0, 0x1}}, {0x6, 0xba1, {0x1, 0x1}}, {0x35a, 0x2, {0x0, 0xfffffffa}}, {0xb, 0x464, {0x1, 0x2}}, {0x100, 0x81, {0x0, 0xa}}, {0x6, 0x2, {0x2, 0x6}}, {0x9, 0x7f, {0x2, 0x3ff}}, {0x0, 0x100, {0x1, 0x6}}, {0x2800, 0x8, {0x2, 0x3800000}}, {0x1ff, 0x3, {0x2, 0x3}}, {0x6e02, 0x8000, {0x0, 0x80}}, {0x1, 0xfff, {0x3, 0x4}}, {0x97, 0x2, {0x1, 0x8}}, {0x5b2, 0x0, {0x2, 0x3ff}}, {0x6, 0x0, {0x3, 0x1}}, {0x401, 0x7, {0x0, 0xd}}, {0xe0, 0xfffc, {0x3, 0x5}}, {0x8, 0xe, {0x3, 0x3}}, {0x2, 0x1000, {0x3, 0x5}}, {0x6, 0xfff0, {0x2, 0x4}}, {0x3, 0x3, {0x2, 0x1}}, {0x4, 0x2, {0x1, 0x734}}, {0x7, 0x40, {0x1, 0x3}}, {0x5, 0x2, {0x0, 0x7fff}}, {0xbc42, 0x7, {0x2, 0xffff}}, {0x5, 0x5, {0x1, 0x101}}, {0x8, 0x1, {0x3, 0x401}}, {0xff, 0xe, {0x3, 0x1}}, {0x100, 0x1, {0x0, 0xfffffffe}}, {0xfff, 0x5, {0x1, 0x1}}, {0x710a, 0x8, {0x3, 0x2}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20009011}, 0x40) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e24, @local}], 0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x1c, "fdee3f565c2e4aa2dc8494ac025efce8ee42f18052b2523a09a0df29"}, &(0x7f0000000080)=0x24) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008024) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'wlan0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x30, "4372071e845c1497c855383000000002000000352a72ee4d37968b26680000000055965737ebaaec032b9753384b0e00000000ef86ed689a894b06005085f6cade73995d4ecaae01f3d807cb1f00"}}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = socket(0x8, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000000001ffedbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0a00180003030303030300004400238006001800aeff"], 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0xe, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) ioctl$SIOCAX25DELFWD(r5, 0x40106184, &(0x7f0000000580)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000042000000000000000000300018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc09000000000000450901003f2000009500000000000000b7020000000000007b9af8ff00000000b6090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40700000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000020000008500000005000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=3026): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0c00180000000000ad0ea00034200000340000000a0000"], &(0x7f0000000000)=""/28, 0x56, 0x1c, 0x1, 0x1}, 0x28) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x6d8243, 0x0) (async) ioctl(r1, 0x8, &(0x7f00000000c0)="fdc4c476e082097513b74a522401e5f88dfb9581044fd747f32e54c19b37f62736db1b2a") ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) accept4(r5, 0x0, 0x0, 0x180000) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) r6 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r6, 0x400461f1, 0x0) (async) bind$alg(r4, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, 0x0) (async) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, 0x0) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000200)=""/222, &(0x7f0000000000)=0xde) kernel console output (not intermixed with test programs): 7': attribute type 21 has an invalid length. [ 278.766969][T13738] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1947'. [ 278.778616][T13737] pimreg: entered allmulticast mode [ 278.785686][T13738] netlink: 'syz.4.1947': attribute type 4 has an invalid length. [ 278.809304][T13738] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1947'. [ 278.841335][T13744] netlink: 'syz.2.1946': attribute type 2 has an invalid length. [ 278.857733][ T3583] net_ratelimit: 139 callbacks suppressed [ 278.857756][ T3583] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 278.888381][ T3583] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 278.904854][T13738] netlink: 'syz.4.1947': attribute type 1 has an invalid length. [ 278.940203][T13738] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1947'. [ 279.018084][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 279.038124][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 279.049525][ T6335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.104914][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 279.148065][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 279.163521][T13749] 8021q: adding VLAN 0 to HW filter on device bond8 [ 279.178300][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 279.193701][T13755] C: renamed from team_slave_0 (while UP) [ 279.205563][T13755] netlink: 'syz.1.1950': attribute type 2 has an invalid length. [ 279.218153][T13755] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 279.222198][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 279.340561][T13757] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 279.351874][T13757] macvlan0: entered allmulticast mode [ 279.360950][T13757] bond8: entered allmulticast mode [ 279.375781][T13757] team0: Port device macvlan0 added [ 279.784259][T13784] bond0: entered promiscuous mode [ 279.791772][T13784] gretap0: entered promiscuous mode [ 279.799077][T13784] hsr1: entered promiscuous mode [ 279.943794][T13793] xt_CT: No such helper "pptp" [ 280.081578][T13800] tipc: Enabled bearer , priority 0 [ 280.113459][T13800] syzkaller0: entered promiscuous mode [ 280.123950][T13800] syzkaller0: entered allmulticast mode [ 280.200274][T13804] bond8: left allmulticast mode [ 280.210258][T13800] tipc: Resetting bearer [ 280.256595][T13799] tipc: Resetting bearer [ 280.299855][T13799] tipc: Disabling bearer [ 280.691794][T13838] pim6reg1: entered allmulticast mode [ 281.206650][T13859] __nla_validate_parse: 9 callbacks suppressed [ 281.206671][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1979'. [ 281.348787][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 281.413239][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 281.474586][T13880] sctp: [Deprecated]: syz.0.1987 (pid 13880) Use of int in max_burst socket option. [ 281.474586][T13880] Use struct sctp_assoc_value instead [ 281.629475][T13884] SET target dimension over the limit! [ 281.698274][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1990'. [ 281.784688][T13899] netlink: 'syz.0.1993': attribute type 2 has an invalid length. [ 281.814747][T13899] netlink: 'syz.0.1993': attribute type 9 has an invalid length. [ 281.855836][T13899] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1993'. [ 281.868178][T13904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1994'. [ 281.949265][T13910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1996'. [ 281.973223][T13910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1996'. [ 282.005517][T13910] macvtap1: entered promiscuous mode [ 282.012585][T13910] batadv0: entered promiscuous mode [ 282.020421][T13910] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 282.030908][T13910] batadv0: left promiscuous mode [ 282.068198][T13907] lo speed is unknown, defaulting to 1000 [ 282.307882][T13923] batadv_slave_0: Caught tx_queue_len zero misconfig [ 282.352239][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'. [ 282.613847][T13923] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2001'. [ 283.065037][T13950] lo speed is unknown, defaulting to 1000 [ 283.077357][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 283.085534][ C1] lec:lec_tx_timeout: lec0 [ 283.093289][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 283.210839][T13952] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 283.240062][T13952] bond0 (unregistering): Released all slaves [ 283.683638][T13979] lo speed is unknown, defaulting to 1000 [ 283.928191][ T6335] net_ratelimit: 120 callbacks suppressed [ 283.928211][ T6335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.942271][ T6335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.955499][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 283.987993][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 284.035320][ T3583] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 284.047987][ T3583] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 284.158560][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 284.188308][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 284.231062][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 284.255050][T14009] netlink: 'syz.3.2024': attribute type 1 has an invalid length. [ 284.265416][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 284.778045][T14036] sctp: [Deprecated]: syz.1.2029 (pid 14036) Use of int in max_burst socket option. [ 284.778045][T14036] Use struct sctp_assoc_value instead [ 285.336666][T14069] lo speed is unknown, defaulting to 1000 [ 285.673338][T14090] xt_hashlimit: size too large, truncated to 1048576 [ 285.956032][T14100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.040473][T14103] tipc: Enabled bearer , priority 0 [ 286.058663][T14103] syzkaller0: entered promiscuous mode [ 286.081309][T14103] syzkaller0: entered allmulticast mode [ 286.410648][T14103] tipc: Resetting bearer [ 286.639237][T14103] tipc: Disabling bearer [ 287.074742][T14142] netlink: 'syz.0.2053': attribute type 6 has an invalid length. [ 287.130605][ T25] block nbd3: Possible stuck request ffff888025040000: control (read@0,1024B). Runtime 30 seconds [ 287.144357][ T25] block nbd3: Possible stuck request ffff888025040200: control (read@1024,1024B). Runtime 30 seconds [ 287.150256][T14142] netlink: 'syz.0.2053': attribute type 7 has an invalid length. [ 287.155716][ T25] block nbd3: Possible stuck request ffff888025040400: control (read@2048,1024B). Runtime 30 seconds [ 287.174514][ T25] block nbd3: Possible stuck request ffff888025040600: control (read@3072,1024B). Runtime 30 seconds [ 287.216037][T14142] netlink: 'syz.0.2053': attribute type 8 has an invalid length. [ 287.260281][T14142] netlink: 'syz.0.2053': attribute type 13 has an invalid length. [ 287.325838][T14150] __nla_validate_parse: 13 callbacks suppressed [ 287.325858][T14150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2057'. [ 287.456625][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2056'. [ 287.835889][T14184] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2065'. [ 287.943626][T14191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.990822][T14189] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 288.107339][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 288.115743][ C1] lec:lec_tx_timeout: lec0 [ 288.120722][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 288.491597][T14214] x_tables: unsorted underflow at hook 2 [ 288.671800][T14221] lo speed is unknown, defaulting to 1000 [ 288.678189][T14215] netlink: 'syz.4.2074': attribute type 1 has an invalid length. [ 288.739619][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 288.754278][T14229] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2078'. [ 288.851436][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2078'. [ 288.942608][ T3583] net_ratelimit: 135 callbacks suppressed [ 288.942633][ T3583] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 288.960811][T14228] bond8: (slave bridge5): making interface the new active one [ 288.970665][T14228] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 289.016824][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 289.037759][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 289.068912][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 289.076839][T10559] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 289.128717][ T6356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.228608][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 289.250433][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 289.319503][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 289.339935][ T65] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 289.471357][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 289.895923][T14288] netlink: 'syz.1.2089': attribute type 10 has an invalid length. [ 289.939287][T14288] team0: Port device dummy0 added [ 289.950759][T14288] netlink: 'syz.1.2089': attribute type 10 has an invalid length. [ 289.999807][T14288] team0: Port device dummy0 removed [ 290.042399][T14288] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 290.058175][ T50] bond0: (slave dummy0): interface is now down [ 290.076617][ T50] bond0: now running without any active interface! [ 290.453880][T14308] netem: change failed [ 290.867009][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 291.205189][T14341] tipc: Enabled bearer , priority 0 [ 291.353510][T14341] syzkaller0: entered promiscuous mode [ 291.359164][T14341] syzkaller0: entered allmulticast mode [ 291.365302][T14341] tipc: Resetting bearer [ 291.375679][T14350] netlink: 'syz.2.2106': attribute type 83 has an invalid length. [ 291.400891][T14346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2105'. [ 291.438089][T14340] tipc: Resetting bearer [ 291.536207][T14357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'. [ 292.794424][T14340] tipc: Disabling bearer [ 292.846115][T14357] gretap2: entered promiscuous mode [ 292.859721][ T6335] tipc: Node number set to 11552 [ 293.006351][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 293.024339][T14373] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2113'. [ 293.048694][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2114'. [ 293.102055][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 293.112044][ T65] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.132143][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2114'. [ 293.142189][ T65] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.161599][ T65] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.191596][ T65] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.401947][T14394] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2120'. [ 293.416299][T14389] bond10: invalid ARP target 0.0.0.0 specified for addition [ 293.424743][T14389] bond10: option arp_ip_target: invalid value (0) [ 293.437856][T14389] bond10 (unregistering): Released all slaves [ 293.819806][T14422] xt_TCPMSS: Only works on TCP SYN packets [ 293.948473][T10082] net_ratelimit: 159 callbacks suppressed [ 293.948493][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 294.007530][T14435] xt_ecn: cannot match TCP bits for non-tcp packets [ 294.015182][T10082] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 294.045412][T14414] lo speed is unknown, defaulting to 1000 [ 294.109851][T14435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2129'. [ 294.142714][T14435] veth0: entered promiscuous mode [ 294.149002][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 294.167305][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6050 ms [ 294.171890][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 294.175444][ C1] lec:lec_tx_timeout: lec0 [ 294.188017][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 294.204464][T14432] veth0: left promiscuous mode [ 294.211475][T10559] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 294.252842][ T6335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.328013][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 294.337086][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.358024][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 294.407794][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 294.550691][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'. [ 294.876736][T14473] lo speed is unknown, defaulting to 1000 [ 295.152597][T14480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2139'. [ 295.414496][T14488] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 295.444356][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2142'. [ 295.457926][T14491] lo: entered allmulticast mode [ 295.552289][T14498] netlink: 'syz.0.2144': attribute type 10 has an invalid length. [ 295.565401][T14498] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.585154][T14498] bond0: (slave team0): Enslaving as an active interface with an up link [ 296.008095][T14510] ªªªªªª: renamed from wg2 (while UP) [ 296.271126][T14533] netlink: 'syz.1.2152': attribute type 30 has an invalid length. [ 296.838652][T14559] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003 [ 297.255622][ T6356] IPVS: starting estimator thread 0... [ 297.357483][T14578] IPVS: using max 26 ests per chain, 62400 per kthread [ 297.407575][T14582] netlink: 'syz.2.2162': attribute type 12 has an invalid length. [ 298.967497][T10082] net_ratelimit: 139 callbacks suppressed [ 298.967520][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 299.007479][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 299.037524][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 299.067510][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 299.087740][T10083] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 299.141778][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 299.169421][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 299.197965][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 299.223353][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 299.257778][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 299.938801][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 299.946872][ C1] lec:lec_tx_timeout: lec0 [ 299.951665][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 300.252236][T14642] __nla_validate_parse: 8 callbacks suppressed [ 300.252257][T14642] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2174'. [ 300.369889][T14593] lo speed is unknown, defaulting to 1000 [ 300.510488][T14665] ip6gretap1: entered allmulticast mode [ 300.894177][T14684] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2185'. [ 300.993702][T14687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2187'. [ 301.107864][T14684] nbd0: detected capacity change from 0 to 63 [ 301.200158][T14695] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2189'. [ 301.230432][ T5828] block nbd0: Receive control failed (result -104) [ 301.480581][ T5835] block nbd2: Receive control failed (result -32) [ 301.658677][T14714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2196'. [ 302.106032][T14749] lo speed is unknown, defaulting to 1000 [ 302.132980][T14753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2206'. [ 302.328132][ T30] audit: type=1800 audit(1770466844.128:7): pid=14764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2208" name="memory.events" dev="tmpfs" ino=2331 res=0 errno=0 [ 302.397568][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2207'. [ 302.775116][T14774] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2211'. [ 302.882411][T14781] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2213'. [ 303.140705][T14798] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2218'. [ 303.916041][T14821] FAULT_INJECTION: forcing a failure. [ 303.916041][T14821] name failslab, interval 1, probability 0, space 0, times 0 [ 303.967474][ T50] net_ratelimit: 150 callbacks suppressed [ 303.967498][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 303.999001][T14821] CPU: 0 UID: 0 PID: 14821 Comm: syz.0.2224 Not tainted syzkaller #0 PREEMPT(full) [ 303.999031][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 303.999060][T14821] Call Trace: [ 303.999068][T14821] [ 303.999078][T14821] dump_stack_lvl+0xe8/0x150 [ 303.999113][T14821] should_fail_ex+0x412/0x560 [ 303.999145][T14821] should_failslab+0xa8/0x100 [ 303.999173][T14821] __kmalloc_noprof+0xde/0x7e0 [ 303.999193][T14821] ? tomoyo_encode+0x28b/0x550 [ 303.999226][T14821] tomoyo_encode+0x28b/0x550 [ 303.999260][T14821] tomoyo_realpath_from_path+0x58d/0x5d0 [ 303.999292][T14821] ? tomoyo_domain+0xd7/0x130 [ 303.999327][T14821] ? tomoyo_path_number_perm+0x219/0x630 [ 303.999358][T14821] tomoyo_path_number_perm+0x246/0x630 [ 303.999384][T14821] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 303.999406][T14821] ? __lock_acquire+0x6b5/0x2cf0 [ 303.999452][T14821] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 303.999505][T14821] ? __fget_files+0x2a/0x420 [ 303.999532][T14821] ? __fget_files+0x2a/0x420 [ 303.999554][T14821] ? __fget_files+0x3a0/0x420 [ 303.999576][T14821] ? __fget_files+0x2a/0x420 [ 303.999604][T14821] security_file_ioctl+0xc3/0x2a0 [ 303.999629][T14821] __se_sys_ioctl+0x47/0x170 [ 303.999662][T14821] do_syscall_64+0xe2/0xf80 [ 303.999691][T14821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.999712][T14821] ? trace_irq_disable+0x37/0x100 [ 303.999732][T14821] ? clear_bhb_loop+0x60/0xb0 [ 303.999756][T14821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.999776][T14821] RIP: 0033:0x7fb204f9aeb9 [ 303.999795][T14821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.999814][T14821] RSP: 002b:00007fb205e92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.999836][T14821] RAX: ffffffffffffffda RBX: 00007fb205215fa0 RCX: 00007fb204f9aeb9 [ 303.999852][T14821] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000004 [ 303.999866][T14821] RBP: 00007fb205e92090 R08: 0000000000000000 R09: 0000000000000000 [ 303.999879][T14821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.999891][T14821] R13: 00007fb205216038 R14: 00007fb205215fa0 R15: 00007fff1f8ba4c8 [ 303.999926][T14821] [ 303.999948][T14821] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.005445][ T50] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 304.608458][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 304.652750][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 304.683054][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 304.697442][ T50] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 304.818145][ T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.838648][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 304.850660][ T50] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 304.968182][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 304.976321][ C1] lec:lec_tx_timeout: lec0 [ 304.981333][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 304.997488][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 305.444183][T14863] netlink: 'syz.3.2238': attribute type 4 has an invalid length. [ 305.726450][T14889] __nla_validate_parse: 6 callbacks suppressed [ 305.726472][T14889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2243'. [ 305.792470][T14888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2240'. [ 306.670585][T14908] 8021q: adding VLAN 0 to HW filter on device bond8 [ 307.072780][T14924] "syz.2.2253" (14924) uses obsolete ecb(arc4) skcipher [ 307.249714][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'. [ 307.279709][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'. [ 307.325972][T14941] tipc: Enabled bearer , priority 0 [ 307.462836][T14941] syzkaller0: entered promiscuous mode [ 307.476080][T14941] syzkaller0: entered allmulticast mode [ 307.488414][T14941] tipc: Resetting bearer [ 307.865043][T14961] lo speed is unknown, defaulting to 1000 [ 308.082705][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2261'. [ 308.225990][T14967] FAULT_INJECTION: forcing a failure. [ 308.225990][T14967] name failslab, interval 1, probability 0, space 0, times 0 [ 308.274743][T14967] CPU: 0 UID: 0 PID: 14967 Comm: syz.0.2263 Not tainted syzkaller #0 PREEMPT(full) [ 308.274773][T14967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 308.274786][T14967] Call Trace: [ 308.274794][T14967] [ 308.274803][T14967] dump_stack_lvl+0xe8/0x150 [ 308.274835][T14967] should_fail_ex+0x412/0x560 [ 308.274866][T14967] should_failslab+0xa8/0x100 [ 308.274892][T14967] __kmalloc_cache_noprof+0x83/0x6e0 [ 308.274915][T14967] ? alloc_pipe_info+0xe8/0x4d0 [ 308.274940][T14967] alloc_pipe_info+0xe8/0x4d0 [ 308.274962][T14967] splice_direct_to_actor+0xa08/0xc70 [ 308.274993][T14967] ? kstrtouint+0x6e/0xe0 [ 308.275020][T14967] ? __pfx_direct_splice_actor+0x10/0x10 [ 308.275045][T14967] ? __pfx_aa_file_perm+0x10/0x10 [ 308.275077][T14967] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 308.275111][T14967] do_splice_direct+0x195/0x290 [ 308.275138][T14967] ? __pfx_do_splice_direct+0x10/0x10 [ 308.275162][T14967] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 308.275190][T14967] ? bpf_lsm_file_permission+0x9/0x20 [ 308.275223][T14967] ? security_file_permission+0x75/0x260 [ 308.275247][T14967] ? rw_verify_area+0x255/0x4d0 [ 308.275281][T14967] do_sendfile+0x535/0x7d0 [ 308.275315][T14967] ? __pfx_do_sendfile+0x10/0x10 [ 308.275339][T14967] ? __fget_files+0x3a0/0x420 [ 308.275373][T14967] __se_sys_sendfile64+0x144/0x1a0 [ 308.275399][T14967] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 308.275433][T14967] do_syscall_64+0xe2/0xf80 [ 308.275462][T14967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.275482][T14967] ? trace_irq_disable+0x37/0x100 [ 308.275501][T14967] ? clear_bhb_loop+0x60/0xb0 [ 308.275526][T14967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.275547][T14967] RIP: 0033:0x7fb204f9aeb9 [ 308.275565][T14967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.275583][T14967] RSP: 002b:00007fb205e92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 308.275605][T14967] RAX: ffffffffffffffda RBX: 00007fb205215fa0 RCX: 00007fb204f9aeb9 [ 308.275619][T14967] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 308.275631][T14967] RBP: 00007fb205e92090 R08: 0000000000000000 R09: 0000000000000000 [ 308.275643][T14967] R10: 00000000f03a0001 R11: 0000000000000246 R12: 0000000000000001 [ 308.275656][T14967] R13: 00007fb205216038 R14: 00007fb205215fa0 R15: 00007fff1f8ba4c8 [ 308.275690][T14967] [ 308.570350][ T797] tipc: Node number set to 2981121755 [ 308.830615][T14979] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2268'. [ 308.978566][T14989] sctp: [Deprecated]: syz.0.2271 (pid 14989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.978566][T14989] Use struct sctp_sack_info instead [ 308.979708][T14987] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2272'. [ 309.036142][T14994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2272'. [ 309.048030][ T50] net_ratelimit: 89 callbacks suppressed [ 309.048052][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 309.084599][ T50] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 309.135356][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2273'. [ 309.162748][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2273'. [ 309.218265][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 309.229673][T10082] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 309.338488][T15008] FAULT_INJECTION: forcing a failure. [ 309.338488][T15008] name failslab, interval 1, probability 0, space 0, times 0 [ 309.372005][T15008] CPU: 1 UID: 0 PID: 15008 Comm: syz.0.2275 Not tainted syzkaller #0 PREEMPT(full) [ 309.372038][T15008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 309.372051][T15008] Call Trace: [ 309.372059][T15008] [ 309.372067][T15008] dump_stack_lvl+0xe8/0x150 [ 309.372101][T15008] should_fail_ex+0x412/0x560 [ 309.372132][T15008] should_failslab+0xa8/0x100 [ 309.372158][T15008] __kmalloc_noprof+0xde/0x7e0 [ 309.372178][T15008] ? alloc_pipe_info+0x1fc/0x4d0 [ 309.372203][T15008] alloc_pipe_info+0x1fc/0x4d0 [ 309.372225][T15008] splice_direct_to_actor+0xa08/0xc70 [ 309.372255][T15008] ? kstrtouint+0x6e/0xe0 [ 309.372282][T15008] ? __pfx_direct_splice_actor+0x10/0x10 [ 309.372308][T15008] ? __pfx_aa_file_perm+0x10/0x10 [ 309.372339][T15008] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 309.372374][T15008] do_splice_direct+0x195/0x290 [ 309.372402][T15008] ? __pfx_do_splice_direct+0x10/0x10 [ 309.372427][T15008] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 309.372455][T15008] ? bpf_lsm_file_permission+0x9/0x20 [ 309.372478][T15008] ? security_file_permission+0x75/0x260 [ 309.372501][T15008] ? rw_verify_area+0x255/0x4d0 [ 309.372534][T15008] do_sendfile+0x535/0x7d0 [ 309.372568][T15008] ? __pfx_do_sendfile+0x10/0x10 [ 309.372591][T15008] ? __fget_files+0x3a0/0x420 [ 309.372625][T15008] __se_sys_sendfile64+0x144/0x1a0 [ 309.372651][T15008] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 309.372686][T15008] do_syscall_64+0xe2/0xf80 [ 309.372715][T15008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.372735][T15008] ? trace_irq_disable+0x37/0x100 [ 309.372755][T15008] ? clear_bhb_loop+0x60/0xb0 [ 309.372779][T15008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.372807][T15008] RIP: 0033:0x7fb204f9aeb9 [ 309.372825][T15008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.372843][T15008] RSP: 002b:00007fb205e92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 309.372865][T15008] RAX: ffffffffffffffda RBX: 00007fb205215fa0 RCX: 00007fb204f9aeb9 [ 309.372880][T15008] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 309.372893][T15008] RBP: 00007fb205e92090 R08: 0000000000000000 R09: 0000000000000000 [ 309.372906][T15008] R10: 00000000f03a0001 R11: 0000000000000246 R12: 0000000000000001 [ 309.372918][T15008] R13: 00007fb205216038 R14: 00007fb205215fa0 R15: 00007fff1f8ba4c8 [ 309.372952][T15008] [ 309.619043][T10083] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 309.626861][T10083] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 309.639738][ T1210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.760343][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 309.786335][T10082] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 309.890107][T15016] lo speed is unknown, defaulting to 1000 [ 309.938835][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 309.997316][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 310.005419][ C1] lec:lec_tx_timeout: lec0 [ 310.010653][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 310.106995][T15014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.765952][T15053] FAULT_INJECTION: forcing a failure. [ 310.765952][T15053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.805806][T15054] netlink: 'syz.4.2289': attribute type 1 has an invalid length. [ 310.821149][T15053] CPU: 0 UID: 0 PID: 15053 Comm: syz.1.2288 Not tainted syzkaller #0 PREEMPT(full) [ 310.821179][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 310.821193][T15053] Call Trace: [ 310.821201][T15053] [ 310.821210][T15053] dump_stack_lvl+0xe8/0x150 [ 310.821244][T15053] should_fail_ex+0x412/0x560 [ 310.821277][T15053] _copy_to_user+0x31/0xb0 [ 310.821312][T15053] simple_read_from_buffer+0xe1/0x170 [ 310.821340][T15053] proc_fail_nth_read+0x1bb/0x230 [ 310.821375][T15053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.821409][T15053] ? rw_verify_area+0x2a6/0x4d0 [ 310.821439][T15053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.821470][T15053] vfs_read+0x20c/0xa70 [ 310.821498][T15053] ? fdget_pos+0x246/0x320 [ 310.821525][T15053] ? __pfx___mutex_lock+0x10/0x10 [ 310.821557][T15053] ? __pfx_vfs_read+0x10/0x10 [ 310.821588][T15053] ? __fget_files+0x2a/0x420 [ 310.821615][T15053] ? __fget_files+0x3a0/0x420 [ 310.821637][T15053] ? __fget_files+0x2a/0x420 [ 310.821670][T15053] ksys_read+0x150/0x270 [ 310.821704][T15053] ? __pfx_ksys_read+0x10/0x10 [ 310.821748][T15053] do_syscall_64+0xe2/0xf80 [ 310.821777][T15053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.821797][T15053] ? trace_irq_disable+0x37/0x100 [ 310.821816][T15053] ? clear_bhb_loop+0x60/0xb0 [ 310.821841][T15053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.821862][T15053] RIP: 0033:0x7ff4b3f5b78e [ 310.821880][T15053] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 310.821897][T15053] RSP: 002b:00007ff4b4dfdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.821926][T15053] RAX: ffffffffffffffda RBX: 00007ff4b4dfe6c0 RCX: 00007ff4b3f5b78e [ 310.821942][T15053] RDX: 000000000000000f RSI: 00007ff4b4dfe0a0 RDI: 0000000000000005 [ 310.821955][T15053] RBP: 00007ff4b4dfe090 R08: 0000000000000000 R09: 0000000000000000 [ 310.821967][T15053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.821979][T15053] R13: 00007ff4b4216128 R14: 00007ff4b4216090 R15: 00007fffcbf06108 [ 310.822012][T15053] [ 311.042717][T15054] __nla_validate_parse: 2 callbacks suppressed [ 311.042740][T15054] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2289'. [ 311.065337][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2290'. [ 311.329236][T15059] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2289'. [ 311.363084][T15070] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2292'. [ 311.387055][T15072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2294'. [ 311.433097][T15076] netlink: 'syz.1.2292': attribute type 4 has an invalid length. [ 314.067440][T10559] net_ratelimit: 170 callbacks suppressed [ 314.067465][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 314.097573][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 314.117756][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 314.137517][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 314.157471][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 314.168314][ T6352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.188461][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 314.196287][ T50] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 314.308656][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 314.340913][ T50] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 314.437948][T15086] syzkaller1: entered promiscuous mode [ 314.446196][T15086] syzkaller1: entered allmulticast mode [ 314.606775][T15099] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 314.826206][T15110] tipc: Enabled bearer , priority 0 [ 314.875021][T15110] syzkaller0: entered promiscuous mode [ 314.894452][T15110] syzkaller0: entered allmulticast mode [ 314.935234][T15110] tipc: Resetting bearer [ 315.017355][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 315.025703][ C1] lec:lec_tx_timeout: lec0 [ 315.030421][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 315.061981][T15128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2307'. [ 315.084800][T15110] tipc: Resetting bearer [ 315.134062][T15110] tipc: Disabling bearer [ 315.381072][T15147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2313'. [ 315.395072][T15147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2313'. [ 315.463377][T15157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2316'. [ 315.891014][T15175] lo speed is unknown, defaulting to 1000 [ 316.127054][T15199] FAULT_INJECTION: forcing a failure. [ 316.127054][T15199] name failslab, interval 1, probability 0, space 0, times 0 [ 316.142884][T15199] CPU: 0 UID: 0 PID: 15199 Comm: syz.1.2325 Not tainted syzkaller #0 PREEMPT(full) [ 316.142916][T15199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 316.142930][T15199] Call Trace: [ 316.142939][T15199] [ 316.142948][T15199] dump_stack_lvl+0xe8/0x150 [ 316.142982][T15199] should_fail_ex+0x412/0x560 [ 316.143014][T15199] should_failslab+0xa8/0x100 [ 316.143040][T15199] __kmalloc_noprof+0xde/0x7e0 [ 316.143062][T15199] ? ioctl_standard_iw_point+0x516/0xd90 [ 316.143091][T15199] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 316.143134][T15199] ioctl_standard_iw_point+0x516/0xd90 [ 316.143180][T15199] ? __pfx_cfg80211_wext_giwrange+0x10/0x10 [ 316.143205][T15199] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 316.143236][T15199] ? __pfx___mutex_lock+0x10/0x10 [ 316.143277][T15199] ? __pfx_cfg80211_wext_giwrange+0x10/0x10 [ 316.143303][T15199] ioctl_standard_call+0xaf/0x1b0 [ 316.143335][T15199] ? __pfx_cfg80211_wext_giwrange+0x10/0x10 [ 316.143357][T15199] wext_ioctl_dispatch+0xee/0x410 [ 316.143383][T15199] ? __pfx_ioctl_standard_call+0x10/0x10 [ 316.143423][T15199] wext_handle_ioctl+0x10f/0x1d0 [ 316.143455][T15199] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 316.143480][T15199] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 316.143528][T15199] sock_ioctl+0x159/0x7f0 [ 316.143552][T15199] ? __pfx_sock_ioctl+0x10/0x10 [ 316.143573][T15199] ? __fget_files+0x2a/0x420 [ 316.143595][T15199] ? __fget_files+0x3a0/0x420 [ 316.143617][T15199] ? __fget_files+0x2a/0x420 [ 316.143644][T15199] ? bpf_lsm_file_ioctl+0x9/0x20 [ 316.143669][T15199] ? __pfx_sock_ioctl+0x10/0x10 [ 316.143689][T15199] __se_sys_ioctl+0xfc/0x170 [ 316.143722][T15199] do_syscall_64+0xe2/0xf80 [ 316.143750][T15199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.143769][T15199] ? trace_irq_disable+0x37/0x100 [ 316.143789][T15199] ? clear_bhb_loop+0x60/0xb0 [ 316.143815][T15199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.143835][T15199] RIP: 0033:0x7ff4b3f9aeb9 [ 316.143860][T15199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.143878][T15199] RSP: 002b:00007ff4b4e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.143901][T15199] RAX: ffffffffffffffda RBX: 00007ff4b4215fa0 RCX: 00007ff4b3f9aeb9 [ 316.143916][T15199] RDX: 0000200000000200 RSI: 0000000000008b0b RDI: 0000000000000003 [ 316.143929][T15199] RBP: 00007ff4b4e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 316.143942][T15199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.143954][T15199] R13: 00007ff4b4216038 R14: 00007ff4b4215fa0 R15: 00007fffcbf06108 [ 316.143990][T15199] [ 316.538908][T15206] tipc: Failed to remove unknown binding: 66,0,0/0:1198686789/1198686790 [ 316.551207][T15206] tipc: Failed to remove unknown binding: 66,0,0/0:1198686789/1198686790 [ 316.648815][T15208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2328'. [ 316.658455][T15196] lo speed is unknown, defaulting to 1000 [ 316.883471][T15213] 8021q: adding VLAN 0 to HW filter on device bond9 [ 317.042732][T15225] netlink: 'syz.4.2332': attribute type 29 has an invalid length. [ 317.056250][T15225] netlink: 'syz.4.2332': attribute type 29 has an invalid length. [ 317.222134][ T25] block nbd3: Possible stuck request ffff888025040000: control (read@0,1024B). Runtime 60 seconds [ 317.237384][ T25] block nbd3: Possible stuck request ffff888025040200: control (read@1024,1024B). Runtime 60 seconds [ 317.248385][ T25] block nbd3: Possible stuck request ffff888025040400: control (read@2048,1024B). Runtime 60 seconds [ 317.259419][ T25] block nbd3: Possible stuck request ffff888025040600: control (read@3072,1024B). Runtime 60 seconds [ 317.320370][T15194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.402561][T15242] ip6t_srh: unknown srh match flags 4000 [ 317.512973][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'. [ 317.532271][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2340'. [ 317.543158][T15251] netlink: 'syz.3.2340': attribute type 13 has an invalid length. [ 317.556315][T15251] netlink: 'syz.3.2340': attribute type 12 has an invalid length. [ 317.744107][T15263] netlink: 'syz.2.2344': attribute type 10 has an invalid length. [ 317.773564][T15263] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2344'. [ 318.214585][T15280] xt_hashlimit: max too large, truncated to 1048576 [ 318.245822][T15280] xt_bpf: check failed: parse error [ 318.415205][T15287] lo speed is unknown, defaulting to 1000 [ 318.560874][T15268] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2346'. [ 318.651280][T15303] netlink: 'syz.2.2357': attribute type 41 has an invalid length. [ 318.702420][T15300] lo speed is unknown, defaulting to 1000 [ 319.082543][T10559] net_ratelimit: 116 callbacks suppressed [ 319.082566][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 319.122543][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 319.185669][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 319.248151][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 319.270187][ T50] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 319.402493][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 319.429280][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 319.471204][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 319.507527][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 319.527462][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 320.037463][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 320.045675][ C1] lec:lec_tx_timeout: lec0 [ 320.051021][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 321.604442][T15378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2377'. [ 321.725175][T15384] lo speed is unknown, defaulting to 1000 [ 321.750228][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2378'. [ 321.766251][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2378'. [ 321.795200][T15380] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 322.126972][T15402] blkio.reset_stats is deprecated [ 322.266646][T15418] netlink: 'syz.2.2383': attribute type 1 has an invalid length. [ 322.333085][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.407140][T15418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.559791][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2389'. [ 322.574380][T15434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2389'. [ 322.586217][T15424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.594311][T15424] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address [ 322.606344][T15424] bond0: (slave vxcan5): Error -95 calling set_mac_address [ 322.663580][T15432] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 322.671644][T15420] syzkaller1: entered promiscuous mode [ 322.696289][T15420] syzkaller1: entered allmulticast mode [ 322.714340][T15418] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 322.782765][T15418] bond0: (slave wlan0): Opening slave failed [ 322.877518][T15434] netlink: 'syz.3.2389': attribute type 10 has an invalid length. [ 323.171276][T15450] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2392'. [ 323.231580][T15452] lo speed is unknown, defaulting to 1000 [ 323.316969][T15459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2396'. [ 323.336762][T15459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2396'. [ 323.392589][T15456] syzkaller0: entered promiscuous mode [ 323.402800][T15456] syzkaller0: entered allmulticast mode [ 323.526652][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2397'. [ 323.565745][T15465] eql: remember to turn off Van-Jacobson compression on your slave devices [ 323.604263][T15469] lo speed is unknown, defaulting to 1000 [ 323.654704][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 323.678125][T15475] x_tables: duplicate underflow at hook 2 [ 323.749923][T15471] lo speed is unknown, defaulting to 1000 [ 323.801751][T15479] delete_channel: no stack [ 324.095946][T15494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2401'. [ 324.108307][T10083] net_ratelimit: 154 callbacks suppressed [ 324.108325][T10083] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 324.142098][T15487] vlan2: entered promiscuous mode [ 324.148037][T15487] erspan0: entered promiscuous mode [ 324.167656][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 324.201532][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 324.255496][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 324.297891][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 324.330132][T15503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.339529][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 324.367383][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 324.413254][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 324.447408][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 324.665944][T15516] lo speed is unknown, defaulting to 1000 [ 325.057459][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 325.065630][ C1] lec:lec_tx_timeout: lec0 [ 325.070483][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 325.256408][T15556] netlink: 'syz.0.2422': attribute type 1 has an invalid length. [ 325.293312][T15556] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.135062][T15556] bond8: (slave veth5): Enslaving as an active interface with a down link [ 328.170994][T15558] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 328.179045][T15558] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 328.468963][T15582] netlink: 'syz.3.2429': attribute type 3 has an invalid length. [ 328.558856][T15589] netlink: 'syz.0.2430': attribute type 1 has an invalid length. [ 328.903669][T15606] lo speed is unknown, defaulting to 1000 [ 329.128069][ T12] net_ratelimit: 198 callbacks suppressed [ 329.128092][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 329.184514][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 329.219109][T15620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.239574][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 329.267409][T10083] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 329.275511][T15620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.300140][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 329.328118][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 329.349512][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 329.378487][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 329.407910][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 329.427916][T10083] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 329.501725][T15620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.521944][T15620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.581935][T15644] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 329.756895][T15620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.796823][T15620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.983494][T15620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.002609][T15620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.024726][T15659] __nla_validate_parse: 5 callbacks suppressed [ 330.024747][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2448'. [ 330.077587][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 330.085701][ C1] lec:lec_tx_timeout: lec0 [ 330.090736][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 330.258015][T15668] veth0: entered promiscuous mode [ 330.340009][T10082] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.351270][T10082] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.373077][T15673] bridge_slave_1: invalid flags given to default FDB implementation [ 330.393478][T15668] veth0: left promiscuous mode [ 330.474302][T15684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2456'. [ 330.484134][T15684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2456'. [ 330.523525][T15673] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.2453'. [ 330.585138][ T5925] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.602708][ T5925] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.686049][T15620] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.724619][T15620] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.810240][T15691] gretap2: entered promiscuous mode [ 330.913250][T15620] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.937546][T15620] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.093273][T15703] netlink: 'syz.2.2458': attribute type 4 has an invalid length. [ 331.135525][T15703] netlink: 'syz.2.2458': attribute type 4 has an invalid length. [ 331.191174][ T1210] lo speed is unknown, defaulting to 1000 [ 331.199927][ T1210] syz2: Port: 1 Link DOWN [ 331.221537][T15712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2461'. [ 331.255802][ T1210] lo speed is unknown, defaulting to 1000 [ 331.273562][ T1210] syz2: Port: 1 Link ACTIVE [ 331.297394][ T25] block nbd0: Possible stuck request ffff88804f690000: control (read@0,1024B). Runtime 30 seconds [ 331.308147][ T25] block nbd0: Possible stuck request ffff88804f690200: control (read@1024,1024B). Runtime 30 seconds [ 331.319143][ T25] block nbd0: Possible stuck request ffff88804f690400: control (read@2048,1024B). Runtime 30 seconds [ 331.337219][ T25] block nbd0: Possible stuck request ffff88804f690600: control (read@3072,1024B). Runtime 30 seconds [ 331.674291][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2462'. [ 331.990641][T15731] tipc: Enabled bearer , priority 0 [ 332.016018][T15731] syzkaller0: entered promiscuous mode [ 332.039398][T15731] syzkaller0: entered allmulticast mode [ 332.060893][T15736] netlink: 'syz.0.2466': attribute type 1 has an invalid length. [ 332.112817][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2467'. [ 332.122803][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2467'. [ 332.292149][T15752] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2466'. [ 332.346011][T15753] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2466'. [ 332.494581][T15741] 8021q: adding VLAN 0 to HW filter on device bond10 [ 332.503428][T15741] bond9: (slave bond10): making interface the new active one [ 332.511476][T15741] bond9: (slave bond10): Enslaving as an active interface with an up link [ 332.533415][T15748] tipc: Resetting bearer [ 332.560657][T15750] bond9: (slave gretap3): Enslaving as a backup interface with an up link [ 332.574750][T15752] 8021q: adding VLAN 0 to HW filter on device bond9 [ 332.599358][T15730] tipc: Resetting bearer [ 332.639858][T15730] tipc: Disabling bearer [ 332.841821][T15770] bond0 (unregistering): Released all slaves [ 332.923066][T15774] netlink: 'syz.0.2473': attribute type 13 has an invalid length. [ 332.931751][T15774] netlink: 'syz.0.2473': attribute type 17 has an invalid length. [ 333.395235][T15793] lo speed is unknown, defaulting to 1000 [ 333.502296][T15763] tipc: Resetting bearer [ 333.574367][T15785] lo speed is unknown, defaulting to 1000 [ 334.147972][ T50] net_ratelimit: 164 callbacks suppressed [ 334.147995][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 334.173194][T15826] veth11: entered allmulticast mode [ 334.187813][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 334.205871][ T65] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 334.316170][T15829] lo speed is unknown, defaulting to 1000 [ 334.328500][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 334.348221][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 334.398212][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 334.429628][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 334.458153][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 334.487772][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 334.519947][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 335.097306][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 335.105369][ C1] lec:lec_tx_timeout: lec0 [ 335.110300][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 335.246746][T15871] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 335.259206][T15870] __nla_validate_parse: 7 callbacks suppressed [ 335.259227][T15870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2499'. [ 335.467566][T15861] lo speed is unknown, defaulting to 1000 [ 335.659844][T15884] tipc: Enabling of bearer rejected, already enabled [ 335.771658][T15884] tipc: Resetting bearer [ 335.793354][T15890] x_tables: duplicate underflow at hook 1 [ 336.123797][T15875] lo speed is unknown, defaulting to 1000 [ 337.566469][T15955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2520'. [ 338.265140][T15972] lo speed is unknown, defaulting to 1000 [ 338.318599][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 338.616824][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2529'. [ 338.735976][T15964] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2523'. [ 339.168279][T10559] net_ratelimit: 150 callbacks suppressed [ 339.168303][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 339.238734][T16007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.272048][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 339.314059][T10559] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 339.324845][T16010] FAULT_INJECTION: forcing a failure. [ 339.324845][T16010] name failslab, interval 1, probability 0, space 0, times 0 [ 339.395191][T16010] CPU: 1 UID: 0 PID: 16010 Comm: syz.2.2536 Not tainted syzkaller #0 PREEMPT(full) [ 339.395221][T16010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 339.395235][T16010] Call Trace: [ 339.395243][T16010] [ 339.395252][T16010] dump_stack_lvl+0xe8/0x150 [ 339.395286][T16010] should_fail_ex+0x412/0x560 [ 339.395318][T16010] should_failslab+0xa8/0x100 [ 339.395345][T16010] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 339.395377][T16010] ? __alloc_skb+0x186/0x7d0 [ 339.395403][T16010] ? __alloc_skb+0x1d0/0x7d0 [ 339.395425][T16010] ? __local_bh_enable_ip+0xd0/0x130 [ 339.395450][T16010] __alloc_skb+0x1d0/0x7d0 [ 339.395482][T16010] netlink_sendmsg+0x5d4/0xb40 [ 339.395517][T16010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.395546][T16010] ? aa_sock_msg_perm+0xf1/0x1b0 [ 339.395575][T16010] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.395599][T16010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.395622][T16010] ____sys_sendmsg+0xa68/0xad0 [ 339.395651][T16010] ? __might_fault+0xaf/0x130 [ 339.395689][T16010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.395728][T16010] ? import_iovec+0x73/0xa0 [ 339.395763][T16010] ___sys_sendmsg+0x2a5/0x360 [ 339.395790][T16010] ? __lock_acquire+0x6b5/0x2cf0 [ 339.395824][T16010] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.395887][T16010] ? __fget_files+0x2a/0x420 [ 339.395909][T16010] ? __fget_files+0x3a0/0x420 [ 339.395942][T16010] __x64_sys_sendmsg+0x1bd/0x2a0 [ 339.395984][T16010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.396023][T16010] ? __pfx_ksys_write+0x10/0x10 [ 339.396067][T16010] do_syscall_64+0xe2/0xf80 [ 339.396096][T16010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.396116][T16010] ? trace_irq_disable+0x37/0x100 [ 339.396137][T16010] ? clear_bhb_loop+0x60/0xb0 [ 339.396161][T16010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.396181][T16010] RIP: 0033:0x7f145819aeb9 [ 339.396200][T16010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.396221][T16010] RSP: 002b:00007f1458f89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.396244][T16010] RAX: ffffffffffffffda RBX: 00007f1458415fa0 RCX: 00007f145819aeb9 [ 339.396258][T16010] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000009 [ 339.396271][T16010] RBP: 00007f1458f89090 R08: 0000000000000000 R09: 0000000000000000 [ 339.396284][T16010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.396295][T16010] R13: 00007f1458416038 R14: 00007f1458415fa0 R15: 00007ffdf4ebc1d8 [ 339.396330][T16010] [ 339.694547][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 339.730204][T10083] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 339.778321][T10083] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 339.863670][T16021] syzkaller1: entered promiscuous mode [ 339.872256][T16021] syzkaller1: entered allmulticast mode [ 339.880439][T16021] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2538'. [ 339.889582][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 339.908485][T10083] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 339.982744][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 340.057554][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 340.360254][T16035] lo speed is unknown, defaulting to 1000 [ 340.563180][T16045] netlink: 'syz.0.2544': attribute type 83 has an invalid length. [ 340.789422][T16058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2548'. [ 340.887477][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 340.895600][ C1] lec:lec_tx_timeout: lec0 [ 340.900727][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 340.969440][T16058] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 341.022071][T16058] batman_adv: batadv0: Adding interface: ip6gretap1 [ 341.036570][T16058] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.116427][T16058] batman_adv: batadv0: Interface activated: ip6gretap1 [ 341.150718][T16066] tap0: tun_chr_ioctl cmd 1074812118 [ 341.182189][T16076] bond0: (slave dummy0): Releasing backup interface [ 341.259370][T16076] bond0: (slave bond_slave_0): Releasing backup interface [ 341.314254][T16076] bond0: (slave bond_slave_1): Releasing backup interface [ 341.359434][T16076] team0: Port device C removed [ 341.399900][T16076] team0: Port device team_slave_1 removed [ 341.413051][T16076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.420949][T16076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.513763][T16089] lo speed is unknown, defaulting to 1000 [ 341.623807][T16087] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2554'. [ 341.636401][T16091] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2555'. [ 341.903180][T16112] netlink: 'syz.4.2561': attribute type 10 has an invalid length. [ 342.068568][T16118] lo speed is unknown, defaulting to 1000 [ 342.204804][T16122] lo speed is unknown, defaulting to 1000 [ 342.258326][T16130] nbd4: detected capacity change from 0 to 127 [ 342.305090][ T5835] block nbd4: Receive control failed (result -104) [ 342.510072][T16149] FAULT_INJECTION: forcing a failure. [ 342.510072][T16149] name failslab, interval 1, probability 0, space 0, times 0 [ 342.532835][T16149] CPU: 0 UID: 0 PID: 16149 Comm: syz.0.2565 Not tainted syzkaller #0 PREEMPT(full) [ 342.532865][T16149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 342.532878][T16149] Call Trace: [ 342.532886][T16149] [ 342.532894][T16149] dump_stack_lvl+0xe8/0x150 [ 342.532925][T16149] should_fail_ex+0x412/0x560 [ 342.532956][T16149] should_failslab+0xa8/0x100 [ 342.532984][T16149] kmem_cache_alloc_noprof+0x87/0x6e0 [ 342.533013][T16149] ? __netlink_lookup+0xc6/0x8b0 [ 342.533037][T16149] ? skb_clone+0x212/0x3a0 [ 342.533071][T16149] skb_clone+0x212/0x3a0 [ 342.533105][T16149] __netlink_deliver_tap+0x404/0x850 [ 342.533144][T16149] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.533170][T16149] netlink_deliver_tap+0x19c/0x1b0 [ 342.533196][T16149] netlink_unicast+0x7e3/0x9b0 [ 342.533227][T16149] ? __pfx_netlink_unicast+0x10/0x10 [ 342.533251][T16149] ? netlink_sendmsg+0x650/0xb40 [ 342.533273][T16149] ? skb_put+0x11b/0x210 [ 342.533303][T16149] netlink_sendmsg+0x813/0xb40 [ 342.533337][T16149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.533364][T16149] ? aa_sock_msg_perm+0xf1/0x1b0 [ 342.533391][T16149] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.533416][T16149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.533439][T16149] ____sys_sendmsg+0xa68/0xad0 [ 342.533466][T16149] ? __might_fault+0xaf/0x130 [ 342.533502][T16149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.533540][T16149] ? import_iovec+0x73/0xa0 [ 342.533574][T16149] ___sys_sendmsg+0x2a5/0x360 [ 342.533597][T16149] ? __lock_acquire+0x6b5/0x2cf0 [ 342.533626][T16149] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.533694][T16149] ? __fget_files+0x2a/0x420 [ 342.533716][T16149] ? __fget_files+0x3a0/0x420 [ 342.533762][T16149] __x64_sys_sendmsg+0x1bd/0x2a0 [ 342.533794][T16149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.533835][T16149] ? __pfx_ksys_write+0x10/0x10 [ 342.533878][T16149] do_syscall_64+0xe2/0xf80 [ 342.533908][T16149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.533927][T16149] ? trace_irq_disable+0x37/0x100 [ 342.533947][T16149] ? clear_bhb_loop+0x60/0xb0 [ 342.533971][T16149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.533991][T16149] RIP: 0033:0x7fb204f9aeb9 [ 342.534010][T16149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.534027][T16149] RSP: 002b:00007fb205e50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.534049][T16149] RAX: ffffffffffffffda RBX: 00007fb205216180 RCX: 00007fb204f9aeb9 [ 342.534064][T16149] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000009 [ 342.534077][T16149] RBP: 00007fb205e50090 R08: 0000000000000000 R09: 0000000000000000 [ 342.534090][T16149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.534102][T16149] R13: 00007fb205216218 R14: 00007fb205216180 R15: 00007fff1f8ba4c8 [ 342.534137][T16149] [ 343.331272][T16173] netlink: 'syz.2.2571': attribute type 1 has an invalid length. [ 343.358066][T16173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2571'. [ 343.391217][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2571'. [ 343.444122][T16173] netlink: 'syz.2.2571': attribute type 2 has an invalid length. [ 343.479347][T16173] netlink: 'syz.2.2571': attribute type 2 has an invalid length. [ 343.496738][T16173] netlink: 'syz.2.2571': attribute type 2 has an invalid length. [ 343.650706][T16179] team_slave_1: Caught tx_queue_len zero misconfig [ 343.748350][T16193] bond10: option miimon: invalid value (18446744071562067968) [ 343.756081][T16193] bond10: option miimon: allowed values 0 - 2147483647 [ 343.801734][T16193] bond10 (unregistering): Released all slaves [ 344.023585][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2575'. [ 344.062152][T16199] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2575'. [ 344.229096][T10082] net_ratelimit: 129 callbacks suppressed [ 344.229118][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 344.273796][T10082] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 344.317063][T16226] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2581'. [ 344.406819][T16226] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2581'. [ 344.420523][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 344.445736][T10559] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 344.484345][T16226] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2581'. [ 344.575265][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 344.619442][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 344.629877][T16240] FAULT_INJECTION: forcing a failure. [ 344.629877][T16240] name failslab, interval 1, probability 0, space 0, times 0 [ 344.673083][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 344.718330][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 344.748008][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 344.782050][T16240] CPU: 0 UID: 0 PID: 16240 Comm: syz.3.2582 Not tainted syzkaller #0 PREEMPT(full) [ 344.782082][T16240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 344.782095][T16240] Call Trace: [ 344.782105][T16240] [ 344.782113][T16240] dump_stack_lvl+0xe8/0x150 [ 344.782146][T16240] should_fail_ex+0x412/0x560 [ 344.782177][T16240] should_failslab+0xa8/0x100 [ 344.782204][T16240] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 344.782236][T16240] ? __alloc_skb+0x186/0x7d0 [ 344.782260][T16240] ? __alloc_skb+0x1d0/0x7d0 [ 344.782284][T16240] ? __local_bh_enable_ip+0xd0/0x130 [ 344.782309][T16240] __alloc_skb+0x1d0/0x7d0 [ 344.782351][T16240] ? netlink_ack_tlv_len+0x6c/0x210 [ 344.782377][T16240] netlink_ack+0x146/0xa50 [ 344.782397][T16240] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 344.782440][T16240] netlink_rcv_skb+0x2b6/0x4b0 [ 344.782465][T16240] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 344.782491][T16240] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 344.782535][T16240] ? netlink_deliver_tap+0x2e/0x1b0 [ 344.782567][T16240] netlink_unicast+0x80f/0x9b0 [ 344.782601][T16240] ? __pfx_netlink_unicast+0x10/0x10 [ 344.782624][T16240] ? netlink_sendmsg+0x650/0xb40 [ 344.782646][T16240] ? skb_put+0x11b/0x210 [ 344.782675][T16240] netlink_sendmsg+0x813/0xb40 [ 344.782710][T16240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.782737][T16240] ? aa_sock_msg_perm+0xf1/0x1b0 [ 344.782765][T16240] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 344.782790][T16240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.782813][T16240] ____sys_sendmsg+0xa68/0xad0 [ 344.782841][T16240] ? __might_fault+0xaf/0x130 [ 344.782878][T16240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.782918][T16240] ? import_iovec+0x73/0xa0 [ 344.782953][T16240] ___sys_sendmsg+0x2a5/0x360 [ 344.782981][T16240] ? __lock_acquire+0x6b5/0x2cf0 [ 344.783015][T16240] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.783083][T16240] ? __fget_files+0x2a/0x420 [ 344.783104][T16240] ? __fget_files+0x3a0/0x420 [ 344.783139][T16240] __x64_sys_sendmsg+0x1bd/0x2a0 [ 344.783171][T16240] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.783210][T16240] ? __pfx_ksys_write+0x10/0x10 [ 344.783254][T16240] do_syscall_64+0xe2/0xf80 [ 344.783283][T16240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.783303][T16240] ? trace_irq_disable+0x37/0x100 [ 344.783322][T16240] ? clear_bhb_loop+0x60/0xb0 [ 344.783348][T16240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.783368][T16240] RIP: 0033:0x7efcb6b9aeb9 [ 344.783387][T16240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.783404][T16240] RSP: 002b:00007efcb7a1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.783426][T16240] RAX: ffffffffffffffda RBX: 00007efcb6e16180 RCX: 00007efcb6b9aeb9 [ 344.783441][T16240] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000009 [ 344.783455][T16240] RBP: 00007efcb7a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 344.783468][T16240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.783481][T16240] R13: 00007efcb6e16218 R14: 00007efcb6e16180 R15: 00007ffd03dee758 [ 344.783521][T16240] [ 345.158257][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 345.608610][ T95] block nbd4: Connection timed out, retrying (0/1 alive) [ 345.616629][ T95] block nbd4: Connection timed out, retrying (0/1 alive) [ 345.625215][ T95] block nbd4: Connection timed out, retrying (0/1 alive) [ 345.634105][ T11] block nbd4: Dead connection, failed to find a fallback [ 345.644198][ T11] block nbd4: shutting down sockets [ 345.652656][ T95] block nbd4: Connection timed out, retrying (0/1 alive) [ 345.660918][ T11] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 345.673284][ T11] Buffer I/O error on dev nbd4, logical block 1, async page read [ 345.682168][ T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 345.692500][ T11] Buffer I/O error on dev nbd4, logical block 0, async page read [ 345.701026][ T11] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 345.711681][ T11] Buffer I/O error on dev nbd4, logical block 3, async page read [ 345.720191][ T11] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 345.730762][ T11] Buffer I/O error on dev nbd4, logical block 2, async page read [ 345.740676][T10504] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 345.743973][T16276] netlink: 'syz.2.2591': attribute type 7 has an invalid length. [ 345.755612][T10504] Buffer I/O error on dev nbd4, logical block 0, async page read [ 345.769572][T10504] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 345.780016][T10504] Buffer I/O error on dev nbd4, logical block 1, async page read [ 345.790147][T10504] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 345.804479][T10504] Buffer I/O error on dev nbd4, logical block 2, async page read [ 345.812979][T10504] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 345.822791][T10504] Buffer I/O error on dev nbd4, logical block 3, async page read [ 345.831472][T10504] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 345.842079][T10504] Buffer I/O error on dev nbd4, logical block 0, async page read [ 345.851219][T10504] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 345.862198][T10504] Buffer I/O error on dev nbd4, logical block 1, async page read [ 345.871647][T10504] ldm_validate_partition_table(): Disk read failed. [ 345.880003][T10504] Dev nbd4: unable to read RDB block 0 [ 345.886161][T10504] nbd4: unable to read partition table [ 345.926710][T10504] ldm_validate_partition_table(): Disk read failed. [ 345.937477][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 345.945591][ C1] lec:lec_tx_timeout: lec0 [ 345.950723][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 345.978769][T10504] Dev nbd4: unable to read RDB block 0 [ 345.989781][T10504] nbd4: unable to read partition table [ 346.179608][T16294] __nla_validate_parse: 16 callbacks suppressed [ 346.179628][T16294] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2596'. [ 346.460919][T16312] FAULT_INJECTION: forcing a failure. [ 346.460919][T16312] name failslab, interval 1, probability 0, space 0, times 0 [ 346.512791][T16312] CPU: 1 UID: 0 PID: 16312 Comm: syz.0.2598 Not tainted syzkaller #0 PREEMPT(full) [ 346.512820][T16312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 346.512833][T16312] Call Trace: [ 346.512842][T16312] [ 346.512851][T16312] dump_stack_lvl+0xe8/0x150 [ 346.512885][T16312] should_fail_ex+0x412/0x560 [ 346.512916][T16312] should_failslab+0xa8/0x100 [ 346.512942][T16312] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 346.512974][T16312] ? __alloc_skb+0x186/0x7d0 [ 346.512999][T16312] ? __alloc_skb+0x1d0/0x7d0 [ 346.513021][T16312] ? __local_bh_enable_ip+0xd0/0x130 [ 346.513046][T16312] __alloc_skb+0x1d0/0x7d0 [ 346.513071][T16312] ? netlink_ack_tlv_len+0x6c/0x210 [ 346.513107][T16312] netlink_ack+0x146/0xa50 [ 346.513127][T16312] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.513150][T16312] ? ref_tracker_free+0x693/0x840 [ 346.513175][T16312] ? __copy_skb_header+0xa3/0x4a0 [ 346.513206][T16312] ? __pfx_ref_tracker_free+0x10/0x10 [ 346.513244][T16312] netlink_rcv_skb+0x2b6/0x4b0 [ 346.513269][T16312] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 346.513296][T16312] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.513331][T16312] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.513364][T16312] netlink_unicast+0x80f/0x9b0 [ 346.513394][T16312] ? __pfx_netlink_unicast+0x10/0x10 [ 346.513417][T16312] ? netlink_sendmsg+0x650/0xb40 [ 346.513440][T16312] ? skb_put+0x11b/0x210 [ 346.513470][T16312] netlink_sendmsg+0x813/0xb40 [ 346.513504][T16312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.513531][T16312] ? aa_sock_msg_perm+0xf1/0x1b0 [ 346.513559][T16312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.513583][T16312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.513606][T16312] ____sys_sendmsg+0xa68/0xad0 [ 346.513634][T16312] ? __might_fault+0xaf/0x130 [ 346.513672][T16312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.513710][T16312] ? import_iovec+0x73/0xa0 [ 346.513745][T16312] ___sys_sendmsg+0x2a5/0x360 [ 346.513773][T16312] ? __lock_acquire+0x6b5/0x2cf0 [ 346.513807][T16312] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.513879][T16312] ? __fget_files+0x2a/0x420 [ 346.513901][T16312] ? __fget_files+0x3a0/0x420 [ 346.513936][T16312] __x64_sys_sendmsg+0x1bd/0x2a0 [ 346.513969][T16312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.514010][T16312] ? __pfx_ksys_write+0x10/0x10 [ 346.514054][T16312] do_syscall_64+0xe2/0xf80 [ 346.514091][T16312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.514112][T16312] ? trace_irq_disable+0x37/0x100 [ 346.514133][T16312] ? clear_bhb_loop+0x60/0xb0 [ 346.514158][T16312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.514178][T16312] RIP: 0033:0x7fb204f9aeb9 [ 346.514197][T16312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.514216][T16312] RSP: 002b:00007fb205e50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.514238][T16312] RAX: ffffffffffffffda RBX: 00007fb205216180 RCX: 00007fb204f9aeb9 [ 346.514254][T16312] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000009 [ 346.514267][T16312] RBP: 00007fb205e50090 R08: 0000000000000000 R09: 0000000000000000 [ 346.514281][T16312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.514293][T16312] R13: 00007fb205216218 R14: 00007fb205216180 R15: 00007fff1f8ba4c8 [ 346.514328][T16312] [ 346.533501][T16316] netlink: 'syz.2.2600': attribute type 1 has an invalid length. [ 346.655701][T16319] netlink: 'syz.3.2601': attribute type 21 has an invalid length. [ 346.782999][T16320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2599'. [ 346.815602][T16322] netlink: 'syz.3.2601': attribute type 21 has an invalid length. [ 346.828246][T16316] netlink: 'syz.2.2600': attribute type 3 has an invalid length. [ 346.938859][T16326] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2600'. [ 346.955335][T16317] lo speed is unknown, defaulting to 1000 [ 347.000485][T16322] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2601'. [ 347.001685][T16316] netlink: 'syz.2.2600': attribute type 1 has an invalid length. [ 347.052553][T16316] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2600'. [ 347.235488][T16336] SET target dimension over the limit! [ 347.288285][ T25] block nbd3: Possible stuck request ffff888025040000: control (read@0,1024B). Runtime 90 seconds [ 347.299226][ T25] block nbd3: Possible stuck request ffff888025040200: control (read@1024,1024B). Runtime 90 seconds [ 347.310536][ T25] block nbd3: Possible stuck request ffff888025040400: control (read@2048,1024B). Runtime 90 seconds [ 347.321741][ T25] block nbd3: Possible stuck request ffff888025040600: control (read@3072,1024B). Runtime 90 seconds [ 347.384403][T16340] netlink: 320 bytes leftover after parsing attributes in process `syz.2.2605'. [ 347.396719][T16340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2605'. [ 347.432398][T16351] netlink: 'syz.3.2609': attribute type 3 has an invalid length. [ 347.441762][T16340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2605'. [ 347.452643][T16340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2605'. [ 347.618325][T16359] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2610'. [ 347.750220][T16352] syzkaller0: entered promiscuous mode [ 347.755920][T16352] syzkaller0: entered allmulticast mode [ 348.129915][T16388] FAULT_INJECTION: forcing a failure. [ 348.129915][T16388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.145620][T16388] CPU: 1 UID: 0 PID: 16388 Comm: syz.3.2616 Not tainted syzkaller #0 PREEMPT(full) [ 348.145649][T16388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 348.145662][T16388] Call Trace: [ 348.145670][T16388] [ 348.145678][T16388] dump_stack_lvl+0xe8/0x150 [ 348.145711][T16388] should_fail_ex+0x412/0x560 [ 348.145741][T16388] _copy_to_user+0x31/0xb0 [ 348.145776][T16388] simple_read_from_buffer+0xe1/0x170 [ 348.145804][T16388] proc_fail_nth_read+0x1bb/0x230 [ 348.145838][T16388] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.145871][T16388] ? rw_verify_area+0x2a6/0x4d0 [ 348.145900][T16388] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.145932][T16388] vfs_read+0x20c/0xa70 [ 348.145960][T16388] ? fdget_pos+0x246/0x320 [ 348.145989][T16388] ? __pfx___mutex_lock+0x10/0x10 [ 348.146019][T16388] ? __pfx_vfs_read+0x10/0x10 [ 348.146051][T16388] ? __fget_files+0x2a/0x420 [ 348.146079][T16388] ? __fget_files+0x3a0/0x420 [ 348.146100][T16388] ? __fget_files+0x2a/0x420 [ 348.146132][T16388] ksys_read+0x150/0x270 [ 348.146165][T16388] ? __pfx_ksys_read+0x10/0x10 [ 348.146216][T16388] do_syscall_64+0xe2/0xf80 [ 348.146245][T16388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.146265][T16388] ? trace_irq_disable+0x37/0x100 [ 348.146284][T16388] ? clear_bhb_loop+0x60/0xb0 [ 348.146309][T16388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.146330][T16388] RIP: 0033:0x7efcb6b5b78e [ 348.146348][T16388] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.146365][T16388] RSP: 002b:00007efcb7a19fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.146393][T16388] RAX: ffffffffffffffda RBX: 00007efcb7a1a6c0 RCX: 00007efcb6b5b78e [ 348.146409][T16388] RDX: 000000000000000f RSI: 00007efcb7a1a0a0 RDI: 000000000000000b [ 348.146422][T16388] RBP: 00007efcb7a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 348.146435][T16388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.146447][T16388] R13: 00007efcb6e16218 R14: 00007efcb6e16180 R15: 00007ffd03dee758 [ 348.146482][T16388] [ 349.248538][T10082] net_ratelimit: 129 callbacks suppressed [ 349.248561][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 349.278186][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 349.301928][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 349.331393][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 349.360276][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 349.388074][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 349.408269][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 349.432327][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 349.458290][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 349.479102][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 350.056535][T16406] netlink: 'syz.2.2623': attribute type 29 has an invalid length. [ 350.066192][T16406] netlink: 'syz.2.2623': attribute type 29 has an invalid length. [ 350.563982][T16420] syzkaller0: entered promiscuous mode [ 350.574703][T16420] syzkaller0: entered allmulticast mode [ 350.921868][T16440] ip6t_srh: unknown srh invflags 4000 [ 350.967286][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 350.975411][ C1] lec:lec_tx_timeout: lec0 [ 350.980458][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 351.233367][T16457] __nla_validate_parse: 3 callbacks suppressed [ 351.233389][T16457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2632'. [ 352.743169][T16467] netlink: 'syz.1.2634': attribute type 21 has an invalid length. [ 352.754684][T16468] Unsupported ieee802154 address type: 0 [ 352.800645][T16467] bond0: entered promiscuous mode [ 352.873380][T16473] syzkaller0: entered promiscuous mode [ 352.897454][T16473] syzkaller0: entered allmulticast mode [ 352.933279][T16473] netlink: 'syz.4.2637': attribute type 1 has an invalid length. [ 353.415238][T16505] bridge3: entered allmulticast mode [ 353.541574][T16515] netlink: 'syz.3.2645': attribute type 1 has an invalid length. [ 353.675485][T16521] netlink: 'syz.1.2647': attribute type 23 has an invalid length. [ 353.693592][T16515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.860485][T16526] syzkaller0: entered promiscuous mode [ 353.866795][T16526] syzkaller0: entered allmulticast mode [ 353.875526][T16523] tipc: Enabling of bearer rejected, already enabled [ 353.888187][T16535] netlink: 'syz.3.2651': attribute type 1 has an invalid length. [ 353.896555][T16532] tipc: Resetting bearer [ 353.925897][T16523] tipc: Resetting bearer [ 354.020553][T16535] 8021q: adding VLAN 0 to HW filter on device bond10 [ 354.032165][T16526] tipc: Enabled bearer , priority 0 [ 354.180392][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2651'. [ 354.202401][T16554] netlink: 'syz.4.2654': attribute type 3 has an invalid length. [ 354.268016][T16524] tipc: Resetting bearer [ 354.278283][ T50] net_ratelimit: 175 callbacks suppressed [ 354.278305][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 354.307445][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 354.328616][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 354.357472][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 354.386809][ T3583] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 354.422720][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 354.448277][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 354.477458][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 354.501609][ T3583] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 354.511897][T16565] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2656'. [ 354.521835][T16565] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 355.924360][T16524] tipc: Disabling bearer [ 355.987334][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 355.995440][ C1] lec:lec_tx_timeout: lec0 [ 356.000059][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 356.026837][ T5821] tipc: Node number set to 3308613530 [ 356.080455][T16561] lo speed is unknown, defaulting to 1000 [ 356.235108][T16593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2662'. [ 356.503242][T16605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2663'. [ 356.626028][T16612] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2667'. [ 356.638064][T16611] xt_bpf: check failed: parse error [ 356.699953][T16617] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2668'. [ 356.946698][T16627] netlink: 'syz.4.2672': attribute type 13 has an invalid length. [ 356.954731][T16627] netlink: 'syz.4.2672': attribute type 17 has an invalid length. [ 357.063423][T16633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2675'. [ 357.114478][T16636] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2673'. [ 357.170900][T16641] syzkaller0: entered promiscuous mode [ 357.176626][T16641] syzkaller0: entered allmulticast mode [ 357.204179][T16641] netlink: 'syz.4.2676': attribute type 1 has an invalid length. [ 357.540251][T16651] xt_ecn: cannot match TCP bits for non-tcp packets [ 357.575322][T16651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2679'. [ 357.650173][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2681'. [ 357.670646][T16658] lo speed is unknown, defaulting to 1000 [ 357.716061][T16659] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2682'. [ 357.725557][T16659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2682'. [ 357.767981][T16653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2680'. [ 357.905811][ T3583] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.916480][ T3583] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.049012][ T65] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.081629][ T65] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.102118][ T65] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.110851][ T65] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.133714][ T65] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.190481][ T65] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.598682][T16688] syzkaller0: entered promiscuous mode [ 358.609199][T16688] syzkaller0: entered allmulticast mode [ 358.628474][T16688] netlink: 'syz.4.2691': attribute type 1 has an invalid length. [ 358.971352][T16701] syzkaller0: entered promiscuous mode [ 359.007391][T16701] syzkaller0: entered allmulticast mode [ 359.300647][ T65] net_ratelimit: 170 callbacks suppressed [ 359.300671][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 359.338805][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 359.358542][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 359.385932][T16718] netlink: 'syz.4.2698': attribute type 1 has an invalid length. [ 359.398926][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 359.412752][T16718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.428064][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 359.457539][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 359.489590][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 359.528126][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 359.530270][T16722] netlink: 'syz.3.2699': attribute type 10 has an invalid length. [ 359.548140][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 360.736595][T16712] hsr0: left allmulticast mode [ 360.745758][T16712] hsr_slave_0: left allmulticast mode [ 360.758769][T16712] hsr_slave_1: left allmulticast mode [ 360.875369][T16712] tipc: Resetting bearer [ 360.899453][T16712] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 360.913968][ T5955] lo speed is unknown, defaulting to 1000 [ 360.914787][T16718] netlink: 'syz.4.2698': attribute type 19 has an invalid length. [ 360.919986][ T5955] syz2: Port: 1 Link DOWN [ 361.007379][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 361.015514][ C1] lec:lec_tx_timeout: lec0 [ 361.020909][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 361.218925][T16722] geneve0: entered allmulticast mode [ 361.225140][T16722] team0: Port device geneve0 added [ 361.232037][T16724] netlink: 'syz.0.2700': attribute type 3 has an invalid length. [ 361.249856][ T3583] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.272965][ T3583] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.293234][ T3583] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 361.337444][ T3583] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.360659][ T3583] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.374581][ T25] block nbd0: Possible stuck request ffff88804f690000: control (read@0,1024B). Runtime 60 seconds [ 361.385692][ T25] block nbd0: Possible stuck request ffff88804f690200: control (read@1024,1024B). Runtime 60 seconds [ 361.397370][ T25] block nbd0: Possible stuck request ffff88804f690400: control (read@2048,1024B). Runtime 60 seconds [ 361.410733][ T25] block nbd0: Possible stuck request ffff88804f690600: control (read@3072,1024B). Runtime 60 seconds [ 361.421896][ T3583] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 361.432200][ T3583] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.441351][ T3583] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.450546][ T3583] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 361.459798][ T3583] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.468899][ T3583] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.477857][ T3583] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 361.487072][ T3583] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.495656][ T3583] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.504058][ T3583] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.512970][ T3583] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.576453][T16741] syzkaller0: entered promiscuous mode [ 361.608230][T16741] syzkaller0: entered allmulticast mode [ 361.638469][T16741] netlink: 'syz.0.2706': attribute type 1 has an invalid length. [ 361.866195][T16757] __nla_validate_parse: 6 callbacks suppressed [ 361.866215][T16757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2709'. [ 361.973700][T16758] netlink: 'syz.4.2711': attribute type 3 has an invalid length. [ 362.356332][T16771] lo speed is unknown, defaulting to 1000 [ 363.106148][T16810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2723'. [ 363.279211][T16814] 8021q: VLANs not supported on ip6_vti0 [ 363.695668][T16837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2728'. [ 364.084964][T16853] : entered promiscuous mode [ 364.398004][ T65] net_ratelimit: 161 callbacks suppressed [ 364.398037][ T65] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 364.417409][ T65] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 364.549928][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 364.578072][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 364.588926][T10559] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 364.602976][T16872] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2738'. [ 364.625547][T16872] netlink: del zone limit has 8 unknown bytes [ 364.697788][T16877] netlink: 'syz.4.2740': attribute type 1 has an invalid length. [ 364.737989][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 364.746004][T10559] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 364.801953][T16880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2741'. [ 364.824909][T16880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2741'. [ 364.878953][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 364.887033][T10082] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 364.906005][T16877] netlink: 'syz.4.2740': attribute type 6 has an invalid length. [ 364.923411][T16877] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2740'. [ 364.950333][T16881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2741'. [ 365.180477][T16892] vlan3: entered promiscuous mode [ 365.188165][T16892] vlan3: entered allmulticast mode [ 365.194508][T16892] hsr_slave_1: entered allmulticast mode [ 365.250216][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 365.259462][T16897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2747'. [ 365.268953][T16897] netlink: 'syz.2.2747': attribute type 5 has an invalid length. [ 365.282236][T16899] netlink: 'syz.2.2747': attribute type 5 has an invalid length. [ 365.343126][T16901] ipt_REJECT: TCP_RESET invalid for non-tcp [ 365.495043][T16910] xt_limit: Overflow, try lower: 271964/0 [ 365.502552][T16911] netlink: 'syz.2.2751': attribute type 13 has an invalid length. [ 365.512974][T16910] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.533008][T16911] tipc: Resetting bearer [ 365.551889][T16911] tipc: Enabling of bearer rejected, already enabled [ 365.852537][T16924] bond9: entered promiscuous mode [ 365.860599][T16924] bond9: entered allmulticast mode [ 365.869078][T16924] 8021q: adding VLAN 0 to HW filter on device bond9 [ 365.936261][T16927] pimreg: entered allmulticast mode [ 366.037286][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 366.045611][ C1] lec:lec_tx_timeout: lec0 [ 366.050771][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 366.134642][T16945] netlink: 'syz.1.2762': attribute type 1 has an invalid length. [ 366.386338][T16952] netlink: 'syz.3.2765': attribute type 2 has an invalid length. [ 366.437852][T16952] netlink: 'syz.3.2765': attribute type 66 has an invalid length. [ 366.873696][T16984] __nla_validate_parse: 11 callbacks suppressed [ 366.873720][T16984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2774'. [ 366.934343][T16977] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 366.970889][T16977] bond12 (unregistering): Released all slaves [ 366.979646][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2772'. [ 367.081735][T16979] bond0: Caught tx_queue_len zero misconfig [ 367.116958][T16983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2773'. [ 367.128426][T16983] tipc: Enabling of bearer rejected, failed to enable media [ 367.145121][T16973] lo speed is unknown, defaulting to 1000 [ 367.265221][T16997] netlink: 'syz.4.2779': attribute type 1 has an invalid length. [ 367.294574][T16996] netlink: 'syz.3.2777': attribute type 3 has an invalid length. [ 367.898035][T17020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2782'. [ 367.936875][T17030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2789'. [ 368.337462][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2791'. [ 368.380134][T17045] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2793'. [ 368.403481][T17052] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2793'. [ 368.420474][T17042] syzkaller0: entered promiscuous mode [ 368.426545][T17042] syzkaller0: entered allmulticast mode [ 369.417428][ T50] net_ratelimit: 149 callbacks suppressed [ 369.417453][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 369.448061][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 369.468049][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 369.488143][ T3583] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 369.507516][ T3583] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 369.538116][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 369.557766][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 369.578706][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 369.599645][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 369.628077][T10559] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 370.122505][T17045] lo speed is unknown, defaulting to 1000 [ 370.135482][T17060] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 370.137010][T17061] lo: Caught tx_queue_len zero misconfig [ 370.251259][T17055] lo speed is unknown, defaulting to 1000 [ 370.672652][T17100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2803'. [ 370.772218][T17104] ieee802154 phy0 wpan0: encryption failed: -90 [ 370.952087][T17115] validate_nla: 5 callbacks suppressed [ 370.952110][T17115] netlink: 'syz.2.2809': attribute type 61 has an invalid length. [ 370.990747][T17115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2809'. [ 371.057913][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 371.066014][ C1] lec:lec_tx_timeout: lec0 [ 371.070639][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 371.386823][T17129] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 372.114047][T17175] __nla_validate_parse: 3 callbacks suppressed [ 372.114066][T17175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2827'. [ 372.132466][T17174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2827'. [ 372.313694][T17183] bond14: option miimon: invalid value (18446744073709551607) [ 372.352347][T17183] bond14: option miimon: allowed values 0 - 2147483647 [ 372.422125][T17183] bond14 (unregistering): Released all slaves [ 372.505186][T17189] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2828'. [ 372.575579][T17189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2828'. [ 372.610281][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2830'. [ 372.823265][T17217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2832'. [ 373.121019][T17224] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2834'. [ 373.138794][T17222] tap0: tun_chr_ioctl cmd 2147767521 [ 373.148446][T17230] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2834'. [ 373.243021][T17239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2837'. [ 373.508122][T17251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2842'. [ 373.553337][T17246] bond3: entered promiscuous mode [ 373.580583][T17246] bond3: entered allmulticast mode [ 373.601957][T17246] 8021q: adding VLAN 0 to HW filter on device bond3 [ 373.899295][T17268] bond4: left promiscuous mode [ 374.229378][T17293] sctp: [Deprecated]: syz.3.2851 (pid 17293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.229378][T17293] Use struct sctp_sack_info instead [ 374.342901][T17296] lo speed is unknown, defaulting to 1000 [ 374.459840][T17307] xt_ecn: cannot match TCP bits for non-tcp packets [ 374.462153][ T5925] net_ratelimit: 135 callbacks suppressed [ 374.462206][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 374.497944][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 374.517897][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 374.538103][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 374.557957][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 374.577938][ T3583] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 374.598451][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 374.638639][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 374.698909][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 374.729229][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 375.469018][T17346] netlink: 'syz.1.2865': attribute type 2 has an invalid length. [ 375.505948][T17346] !: entered promiscuous mode [ 376.077304][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 376.085409][ C1] lec:lec_tx_timeout: lec0 [ 376.090120][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 376.578046][T17361] block nbd6: server does not support multiple connections per device. [ 376.620804][T17361] block nbd6: shutting down sockets [ 376.891757][T17365] veth1_macvtap: left promiscuous mode [ 376.905836][T17365] macsec0: left allmulticast mode [ 376.911672][T17365] bond1: left promiscuous mode [ 376.916499][T17365] ip6gretap1: left promiscuous mode [ 376.923220][T17365] bond1: left allmulticast mode [ 376.937465][T17365] ip6gretap1: left allmulticast mode [ 376.949329][T17365] bond2: left promiscuous mode [ 376.958653][T17365] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 376.973627][T17365] veth3: left promiscuous mode [ 376.983214][T17365] bond3: left promiscuous mode [ 376.989530][T17365] bridge1: left promiscuous mode [ 377.004183][T17365] vlan2: left allmulticast mode [ 377.009264][T17365] bridge_slave_0: left allmulticast mode [ 377.023783][T17365] ip6gretap3: left promiscuous mode [ 377.036777][T17365] bond7: left promiscuous mode [ 377.042022][T17365] hsr1: left promiscuous mode [ 377.077059][T17365] vlan3: left promiscuous mode [ 377.082541][T17365] vlan3: left allmulticast mode [ 377.087572][T17365] hsr_slave_1: left allmulticast mode [ 377.276441][T17403] __nla_validate_parse: 13 callbacks suppressed [ 377.276459][T17403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2880'. [ 377.368130][ T25] block nbd3: Possible stuck request ffff888025040000: control (read@0,1024B). Runtime 120 seconds [ 377.379371][ T25] block nbd3: Possible stuck request ffff888025040200: control (read@1024,1024B). Runtime 120 seconds [ 377.391895][ T25] block nbd3: Possible stuck request ffff888025040400: control (read@2048,1024B). Runtime 120 seconds [ 377.403618][ T25] block nbd3: Possible stuck request ffff888025040600: control (read@3072,1024B). Runtime 120 seconds [ 377.546702][T17415] netlink: 'syz.4.2886': attribute type 1 has an invalid length. [ 377.555176][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2886'. [ 377.565542][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2886'. [ 377.574777][T17415] netlink: 'syz.4.2886': attribute type 2 has an invalid length. [ 377.583007][T17415] netlink: 'syz.4.2886': attribute type 2 has an invalid length. [ 377.591108][T17415] netlink: 'syz.4.2886': attribute type 2 has an invalid length. [ 377.601749][T17418] netlink: 'syz.4.2886': attribute type 1 has an invalid length. [ 377.611133][T17418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2886'. [ 377.622510][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2886'. [ 377.632337][T17419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2885'. [ 377.642010][T17420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2885'. [ 377.653285][T17418] netlink: 'syz.4.2886': attribute type 2 has an invalid length. [ 377.661382][T17418] netlink: 'syz.4.2886': attribute type 2 has an invalid length. [ 377.670539][T17418] netlink: 'syz.4.2886': attribute type 2 has an invalid length. [ 377.678973][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2885'. [ 377.734704][T17422] bond12: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 377.821217][T17426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2883'. [ 378.082798][T17439] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 378.104271][T17439] : renamed from bond_slave_0 [ 378.195722][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2890'. [ 378.792562][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.811841][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.821243][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.830847][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.839419][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.881084][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.894392][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.902715][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.912785][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.921574][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 379.285676][T17472] xt_hashlimit: max too large, truncated to 1048576 [ 379.303703][T17472] xt_hashlimit: overflow, try lower: 13/0 [ 379.424978][T17463] lo speed is unknown, defaulting to 1000 [ 379.517968][T10083] net_ratelimit: 149 callbacks suppressed [ 379.517989][T10083] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 379.577962][T10083] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 379.620391][T10083] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 379.667406][T10083] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 379.698134][T10083] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 379.859398][T17492] netlink: zone id is out of range [ 379.865907][T17492] netlink: zone id is out of range [ 379.875634][T17492] netlink: zone id is out of range [ 379.882131][ T50] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 379.893139][T17492] netlink: zone id is out of range [ 380.113623][T17500] tipc: Enabling of bearer rejected, failed to enable media [ 380.163670][T17508] ip6gretap0: entered promiscuous mode [ 380.171741][T17508] ip6gretap0: left promiscuous mode [ 380.185862][T17463] chnl_net:caif_netlink_parms(): no params data found [ 380.208455][T17503] IPVS: Scheduler module ip_vs_sip not found [ 380.217981][ T6338] IPVS: starting estimator thread 0... [ 380.319503][T17511] IPVS: using max 25 ests per chain, 60000 per kthread [ 380.830084][T17463] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.839848][T17463] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.847153][T17463] bridge_slave_0: entered allmulticast mode [ 380.855402][T17463] bridge_slave_0: entered promiscuous mode [ 380.864892][T17463] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.872213][T17463] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.879685][T17463] bridge_slave_1: entered allmulticast mode [ 380.889056][T17463] bridge_slave_1: entered promiscuous mode [ 380.968719][ T5828] Bluetooth: hci5: command tx timeout [ 381.046459][T17463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.097383][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 381.105482][ C1] lec:lec_tx_timeout: lec0 [ 381.110994][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 381.130239][T17549] bond14: ARP target 9.0.0.0 is already present [ 381.136563][T17549] bond14: option arp_ip_target: invalid value (9) [ 381.159756][T17549] bond14 (unregistering): Released all slaves [ 381.191879][T17463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.260449][T17559] netlink: 'syz.0.2922': attribute type 15 has an invalid length. [ 381.302030][T17554] lo speed is unknown, defaulting to 1000 [ 381.311378][T17463] team0: Port device team_slave_0 added [ 381.340116][T17463] team0: Port device team_slave_1 added [ 381.446980][T17463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.454264][T17463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.588097][T17463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.610122][T17463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.618056][T17463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.645949][T17463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.891928][T17463] hsr_slave_0: entered promiscuous mode [ 381.898952][T17463] hsr_slave_1: entered promiscuous mode [ 381.905491][T17463] debugfs: 'hsr0' already exists in 'hsr' [ 381.911405][T17463] Cannot create hsr debugfs directory [ 382.006144][T17590] IPVS: set_ctl: invalid protocol: 58 172.20.20.56:20002 [ 382.111608][T17596] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20003 [ 382.230014][T17463] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.265675][T17598] ip6gre0: entered promiscuous mode [ 382.271621][T17598] ip6gre0: entered allmulticast mode [ 382.306422][T17463] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.324009][T17604] __nla_validate_parse: 7 callbacks suppressed [ 382.324031][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2936'. [ 382.364365][T17604] netlink: 'syz.0.2936': attribute type 39 has an invalid length. [ 382.446306][T17463] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.516816][T17609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2938'. [ 382.559341][T17463] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.838415][T17617] syzkaller1: entered promiscuous mode [ 382.843996][T17617] syzkaller1: entered allmulticast mode [ 382.920725][T17617] syzkaller1: left promiscuous mode [ 382.932558][T17617] syzkaller1: left allmulticast mode [ 382.956330][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2942'. [ 383.033285][T17624] pimreg: left allmulticast mode [ 383.048186][ T5828] Bluetooth: hci5: command tx timeout [ 383.214510][T17463] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.232815][T17629] netlink: 'syz.4.2945': attribute type 12 has an invalid length. [ 383.244896][T17629] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2945'. [ 383.255058][T17463] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 383.270347][T17463] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 383.353560][T17463] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 383.403316][T17637] bond0: entered promiscuous mode [ 383.415014][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2943'. [ 383.429632][T17637] batadv0: entered promiscuous mode [ 383.438660][T17637] debugfs: 'hsr1' already exists in 'hsr' [ 383.444514][T17637] Cannot create hsr debugfs directory [ 383.476846][T17635] lo speed is unknown, defaulting to 1000 [ 383.596767][T17652] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2948'. [ 383.785713][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.856882][T17463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.965828][T17665] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 384.027079][T17463] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.055905][T10082] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.064653][T10082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.105617][T10082] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.113396][T10082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.498770][T17678] IPVS: Scheduler module ip_vs_sip not found [ 384.506412][T17681] IPVS: length: 140 != 8 [ 384.577922][ T3583] net_ratelimit: 207 callbacks suppressed [ 384.577944][ T3583] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 384.592229][ T3583] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 384.725498][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 384.758750][ T3583] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 384.767113][ T3583] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 384.830634][T17463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.895341][T17699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2961'. [ 384.912865][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 384.948688][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 384.969247][ T12] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 385.021874][T17463] veth0_vlan: entered promiscuous mode [ 385.073060][T17463] veth1_vlan: entered promiscuous mode [ 385.098054][ T3583] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 385.128350][ T5828] Bluetooth: hci5: command tx timeout [ 385.147715][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 385.191854][T17463] veth0_macvtap: entered promiscuous mode [ 385.216820][T17714] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2962'. [ 385.254597][T17463] veth1_macvtap: entered promiscuous mode [ 385.388766][T17717] bridge4: entered promiscuous mode [ 385.394213][T17717] bridge4: entered allmulticast mode [ 385.412688][T17463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.431502][T17463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.483291][T17720] bridge5: entered promiscuous mode [ 385.505812][T17720] bridge5: entered allmulticast mode [ 385.522802][ T3583] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.561643][ T3583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.583285][ T3583] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.616586][ T3583] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.694071][T10559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.706603][T10559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.723879][T10559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.732708][T10559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.818066][T17727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.869587][ T30] audit: type=1800 audit(1770466927.678:8): pid=17715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2963" name="memory.events" dev="tmpfs" ino=2991 res=0 errno=0 [ 385.914329][T10559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.930391][T10559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.968390][T17731] lo: Caught tx_queue_len zero misconfig [ 386.144141][T17729] erspan0: entered promiscuous mode [ 386.167791][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2968'. [ 386.241903][T17739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2970'. [ 386.625054][T17749] ip6tnl0: Caught tx_queue_len zero misconfig [ 386.651104][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.671735][T17755] netlink: 'syz.4.2976': attribute type 2 has an invalid length. [ 386.680251][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.689040][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.699118][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.707086][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.868737][T17751] lo speed is unknown, defaulting to 1000 [ 386.887265][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 386.895422][ C1] lec:lec_tx_timeout: lec0 [ 386.900467][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 387.207529][ T5835] Bluetooth: hci5: command tx timeout [ 387.379209][T17772] netlink: 'syz.2.2981': attribute type 21 has an invalid length. [ 387.389229][T17772] __nla_validate_parse: 7 callbacks suppressed [ 387.389247][T17772] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2981'. [ 387.435584][T17772] netlink: 'syz.2.2981': attribute type 4 has an invalid length. [ 387.449898][T17772] netlink: 'syz.2.2981': attribute type 3 has an invalid length. [ 387.458669][T17772] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2981'. [ 387.469427][T17751] chnl_net:caif_netlink_parms(): no params data found [ 388.012739][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2988'. [ 388.025529][T17751] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.033856][T17751] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.041741][T17751] bridge_slave_0: entered allmulticast mode [ 388.051010][T17751] bridge_slave_0: entered promiscuous mode [ 388.066395][T17751] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.074648][T17751] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.082958][T17751] bridge_slave_1: entered allmulticast mode [ 388.084636][T17806] Bluetooth: MGMT ver 1.23 [ 388.113022][T17751] bridge_slave_1: entered promiscuous mode [ 388.237056][T17803] sch_tbf: burst 0 is lower than device lo mtu (1031) ! [ 388.290766][T17751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.324206][T17751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.411083][T17751] team0: Port device team_slave_0 added [ 388.425151][T17751] team0: Port device team_slave_1 added [ 388.520598][T17751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.523203][T17821] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2996'. [ 388.529441][T17751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.570149][T17819] netlink: 'syz.3.2995': attribute type 2 has an invalid length. [ 388.578869][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'. [ 388.580265][T17751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.603686][T17819] netlink: 'syz.3.2995': attribute type 2 has an invalid length. [ 388.629876][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'. [ 388.660421][T17751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.672903][T17751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.699532][T17751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.715339][T17824] netlink: 'syz.3.2995': attribute type 13 has an invalid length. [ 388.729500][ T5835] Bluetooth: hci2: command tx timeout [ 388.804331][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'. [ 388.949635][T17751] hsr_slave_0: entered promiscuous mode [ 388.966410][T17751] hsr_slave_1: entered promiscuous mode [ 388.995415][T17751] debugfs: 'hsr0' already exists in 'hsr' [ 389.006330][T17751] Cannot create hsr debugfs directory [ 389.189750][T17838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3000'. [ 389.222373][T17840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3001'. [ 389.273725][T17841] batman_adv: batadv0: Adding interface: macvlan1 [ 389.280419][T17841] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.307916][T17841] batman_adv: batadv0: Not using interface macvlan1 (retrying later): interface not active [ 389.415565][T17751] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.416966][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 389.496856][T17751] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.589934][T17751] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.679669][T10082] net_ratelimit: 157 callbacks suppressed [ 389.679686][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 389.717977][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 389.739249][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 389.770735][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 389.799262][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 389.838315][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 389.858155][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 389.866877][T17751] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.888114][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 389.918177][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 389.978088][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 390.008856][T17867] x_tables: duplicate entry at hook 2 [ 390.251084][T17751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 390.282783][T17751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 390.320834][T17751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 390.365288][T17751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 390.533178][T17891] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 390.560478][T17891] batman_adv: batadv0: Adding interface: ip6gretap1 [ 390.567498][T17891] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.593837][T17891] batman_adv: batadv0: Interface activated: ip6gretap1 [ 390.680647][T17751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.747180][T17751] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.769036][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.776202][ T5925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.804065][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.811392][ T5925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.832348][ T5835] Bluetooth: hci2: command tx timeout [ 390.946067][T17911] syzkaller0: entered promiscuous mode [ 390.952786][T17911] syzkaller0: entered allmulticast mode [ 390.975598][T17910] netlink: 'syz.3.3018': attribute type 1 has an invalid length. [ 390.994073][T17910] netlink: 'syz.3.3018': attribute type 2 has an invalid length. [ 391.006082][T17910] netlink: 'syz.3.3018': attribute type 2 has an invalid length. [ 391.015910][T17910] netlink: 'syz.3.3018': attribute type 2 has an invalid length. [ 391.336950][T17924] lo speed is unknown, defaulting to 1000 [ 391.500578][ T25] block nbd0: Possible stuck request ffff88804f690000: control (read@0,1024B). Runtime 90 seconds [ 391.511317][ T25] block nbd0: Possible stuck request ffff88804f690200: control (read@1024,1024B). Runtime 90 seconds [ 391.522319][ T25] block nbd0: Possible stuck request ffff88804f690400: control (read@2048,1024B). Runtime 90 seconds [ 391.534072][ T25] block nbd0: Possible stuck request ffff88804f690600: control (read@3072,1024B). Runtime 90 seconds [ 391.593076][T17751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.652170][T17751] veth0_vlan: entered promiscuous mode [ 391.666728][T17751] veth1_vlan: entered promiscuous mode [ 391.697807][T17751] veth0_macvtap: entered promiscuous mode [ 391.711420][T17751] veth1_macvtap: entered promiscuous mode [ 391.756781][T17751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.776177][T17751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.808905][ T5925] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.828498][ T5925] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.882629][ T5925] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.907979][ T5925] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.927478][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 391.936074][ C1] lec:lec_tx_timeout: lec0 [ 391.941291][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 392.111138][T17936] bond14: entered promiscuous mode [ 392.236636][T10083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.246954][T10083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.532140][T17953] lo speed is unknown, defaulting to 1000 [ 392.560122][T17943] [ 392.562524][T17943] ====================================================== [ 392.569571][T17943] WARNING: possible circular locking dependency detected [ 392.576631][T17943] syzkaller #0 Not tainted [ 392.581087][T17943] ------------------------------------------------------ [ 392.588225][T17943] syz.2.3024/17943 is trying to acquire lock: [ 392.594596][T17943] ffff8880249aee78 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 392.604056][T17943] [ 392.604056][T17943] but task is already holding lock: [ 392.611451][T17943] ffff8880249ae938 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 392.621823][T17943] [ 392.621823][T17943] which lock already depends on the new lock. [ 392.621823][T17943] [ 392.632258][T17943] [ 392.632258][T17943] the existing dependency chain (in reverse order) is: [ 392.641301][T17943] [ 392.641301][T17943] -> #6 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 392.649965][T17943] blk_alloc_queue+0x52f/0x610 [ 392.655294][T17943] __blk_mq_alloc_disk+0x197/0x390 [ 392.660975][T17943] nbd_dev_add+0x499/0xb50 [ 392.665969][T17943] nbd_init+0x168/0x1f0 [ 392.670699][T17943] do_one_initcall+0x250/0x840 [ 392.676034][T17943] do_initcall_level+0x104/0x190 [ 392.681542][T17943] do_initcalls+0x59/0xa0 [ 392.686439][T17943] kernel_init_freeable+0x2a6/0x3d0 [ 392.692323][T17943] kernel_init+0x1d/0x1d0 [ 392.697205][T17943] ret_from_fork+0x51b/0xa40 [ 392.702364][T17943] ret_from_fork_asm+0x1a/0x30 [ 392.707701][T17943] [ 392.707701][T17943] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 392.714964][T17943] fs_reclaim_acquire+0x71/0x100 [ 392.720635][T17943] kmem_cache_alloc_node_noprof+0x48/0x6f0 [ 392.727185][T17943] __alloc_skb+0x1d0/0x7d0 [ 392.732174][T17943] __ip6_append_data+0x2a44/0x3c50 [ 392.737863][T17943] ip6_append_data+0x10f/0x280 [ 392.743181][T17943] rawv6_sendmsg+0x12d3/0x18e0 [ 392.748492][T17943] ____sys_sendmsg+0x894/0xad0 [ 392.753812][T17943] ___sys_sendmsg+0x2a5/0x360 [ 392.759046][T17943] __x64_sys_sendmsg+0x1bd/0x2a0 [ 392.764537][T17943] do_syscall_64+0xe2/0xf80 [ 392.769760][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.776198][T17943] [ 392.776198][T17943] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 392.783958][T17943] lock_sock_nested+0x48/0x100 [ 392.789484][T17943] inet_shutdown+0x6a/0x390 [ 392.794558][T17943] nbd_mark_nsock_dead+0x2e9/0x560 [ 392.800225][T17943] recv_work+0x1bf4/0x1d00 [ 392.805180][T17943] process_scheduled_works+0xaec/0x17a0 [ 392.811295][T17943] worker_thread+0xda6/0x1360 [ 392.816525][T17943] kthread+0x726/0x8b0 [ 392.821138][T17943] ret_from_fork+0x51b/0xa40 [ 392.826439][T17943] ret_from_fork_asm+0x1a/0x30 [ 392.831753][T17943] [ 392.831753][T17943] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 392.839433][T17943] __mutex_lock+0x19f/0x1300 [ 392.844579][T17943] nbd_queue_rq+0x37b/0x1100 [ 392.849712][T17943] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 392.855799][T17943] __blk_mq_sched_dispatch_requests+0xdce/0x15d0 [ 392.862707][T17943] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 392.869245][T17943] blk_mq_run_hw_queue+0x348/0x4f0 [ 392.874906][T17943] blk_mq_dispatch_list+0xd16/0xe10 [ 392.880643][T17943] blk_mq_flush_plug_list+0x48d/0x570 [ 392.886549][T17943] __blk_flush_plug+0x3ed/0x4d0 [ 392.891941][T17943] __submit_bio+0x4c6/0x5d0 [ 392.896983][T17943] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 392.903150][T17943] block_read_full_folio+0x599/0x830 [ 392.909079][T17943] filemap_read_folio+0x137/0x3b0 [ 392.914648][T17943] do_read_cache_folio+0x358/0x590 [ 392.920482][T17943] read_part_sector+0xb6/0x2b0 [ 392.925810][T17943] adfspart_check_ICS+0xa5/0xa40 [ 392.931285][T17943] bdev_disk_changed+0x765/0x14c0 [ 392.936846][T17943] blkdev_get_whole+0x380/0x510 [ 392.942233][T17943] bdev_open+0x31e/0xd30 [ 392.947025][T17943] blkdev_open+0x470/0x610 [ 392.951981][T17943] do_dentry_open+0x7ce/0x1420 [ 392.957287][T17943] vfs_open+0x3b/0x340 [ 392.961895][T17943] path_openat+0x3486/0x3e20 [ 392.967128][T17943] do_filp_open+0x22d/0x490 [ 392.972174][T17943] do_sys_openat2+0x12f/0x220 [ 392.977394][T17943] __x64_sys_openat+0x138/0x170 [ 392.982791][T17943] do_syscall_64+0xe2/0xf80 [ 392.987940][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.994396][T17943] [ 392.994396][T17943] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 393.001650][T17943] __mutex_lock+0x19f/0x1300 [ 393.006904][T17943] nbd_queue_rq+0xc6/0x1100 [ 393.011966][T17943] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 393.018157][T17943] __blk_mq_sched_dispatch_requests+0xdce/0x15d0 [ 393.025039][T17943] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 393.031565][T17943] blk_mq_run_hw_queue+0x348/0x4f0 [ 393.037329][T17943] blk_mq_dispatch_list+0xd16/0xe10 [ 393.043193][T17943] blk_mq_flush_plug_list+0x48d/0x570 [ 393.049100][T17943] __blk_flush_plug+0x3ed/0x4d0 [ 393.054497][T17943] __submit_bio+0x4c6/0x5d0 [ 393.059565][T17943] submit_bio_noacct_nocheck+0x2f4/0xa20 [ 393.065758][T17943] block_read_full_folio+0x599/0x830 [ 393.071607][T17943] filemap_read_folio+0x137/0x3b0 [ 393.077193][T17943] do_read_cache_folio+0x358/0x590 [ 393.082857][T17943] read_part_sector+0xb6/0x2b0 [ 393.088161][T17943] adfspart_check_ICS+0xa5/0xa40 [ 393.093645][T17943] bdev_disk_changed+0x765/0x14c0 [ 393.099219][T17943] blkdev_get_whole+0x380/0x510 [ 393.104617][T17943] bdev_open+0x31e/0xd30 [ 393.109402][T17943] blkdev_open+0x470/0x610 [ 393.114358][T17943] do_dentry_open+0x7ce/0x1420 [ 393.119677][T17943] vfs_open+0x3b/0x340 [ 393.124307][T17943] path_openat+0x3486/0x3e20 [ 393.129455][T17943] do_filp_open+0x22d/0x490 [ 393.134512][T17943] do_sys_openat2+0x12f/0x220 [ 393.139738][T17943] __x64_sys_openat+0x138/0x170 [ 393.145219][T17943] do_syscall_64+0xe2/0xf80 [ 393.150270][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.156732][T17943] [ 393.156732][T17943] -> #1 (set->srcu){.+.+}-{0:0}: [ 393.163909][T17943] __synchronize_srcu+0xca/0x3e0 [ 393.169395][T17943] elevator_switch+0x1e8/0x750 [ 393.174699][T17943] elevator_change+0x2cc/0x450 [ 393.180001][T17943] elevator_set_default+0x36c/0x430 [ 393.185745][T17943] blk_register_queue+0x34e/0x3f0 [ 393.191324][T17943] __add_disk+0x677/0xd50 [ 393.196199][T17943] add_disk_fwnode+0xfb/0x480 [ 393.201426][T17943] nbd_dev_add+0x72c/0xb50 [ 393.206392][T17943] nbd_init+0x168/0x1f0 [ 393.211099][T17943] do_one_initcall+0x250/0x840 [ 393.216418][T17943] do_initcall_level+0x104/0x190 [ 393.221911][T17943] do_initcalls+0x59/0xa0 [ 393.226794][T17943] kernel_init_freeable+0x2a6/0x3d0 [ 393.232543][T17943] kernel_init+0x1d/0x1d0 [ 393.237468][T17943] ret_from_fork+0x51b/0xa40 [ 393.242689][T17943] ret_from_fork_asm+0x1a/0x30 [ 393.247998][T17943] [ 393.247998][T17943] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 393.255836][T17943] __lock_acquire+0x15a5/0x2cf0 [ 393.261233][T17943] lock_acquire+0x106/0x330 [ 393.266369][T17943] __mutex_lock+0x19f/0x1300 [ 393.271867][T17943] elevator_change+0x1b3/0x450 [ 393.277173][T17943] elevator_set_none+0xb5/0x140 [ 393.282561][T17943] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 393.288911][T17943] nbd_start_device+0x17f/0xb10 [ 393.294393][T17943] nbd_genl_connect+0x165b/0x1cf0 [ 393.299963][T17943] genl_family_rcv_msg_doit+0x22a/0x330 [ 393.306058][T17943] genl_rcv_msg+0x61c/0x7a0 [ 393.311109][T17943] netlink_rcv_skb+0x232/0x4b0 [ 393.316425][T17943] genl_rcv+0x28/0x40 [ 393.320958][T17943] netlink_unicast+0x80f/0x9b0 [ 393.326265][T17943] netlink_sendmsg+0x813/0xb40 [ 393.331743][T17943] ____sys_sendmsg+0xa68/0xad0 [ 393.337062][T17943] ___sys_sendmsg+0x2a5/0x360 [ 393.342286][T17943] __x64_sys_sendmsg+0x1bd/0x2a0 [ 393.347767][T17943] do_syscall_64+0xe2/0xf80 [ 393.352827][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.359971][T17943] [ 393.359971][T17943] other info that might help us debug this: [ 393.359971][T17943] [ 393.370317][T17943] Chain exists of: [ 393.370317][T17943] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 393.370317][T17943] [ 393.384101][T17943] Possible unsafe locking scenario: [ 393.384101][T17943] [ 393.391573][T17943] CPU0 CPU1 [ 393.396955][T17943] ---- ---- [ 393.402333][T17943] lock(&q->q_usage_counter(io)#55); [ 393.407735][T17943] lock(fs_reclaim); [ 393.414252][T17943] lock(&q->q_usage_counter(io)#55); [ 393.422171][T17943] lock(&q->elevator_lock); [ 393.426794][T17943] [ 393.426794][T17943] *** DEADLOCK *** [ 393.426794][T17943] [ 393.434947][T17943] 6 locks held by syz.2.3024/17943: [ 393.440239][T17943] #0: ffffffff8fa19bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 393.448632][T17943] #1: ffffffff8fa19a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 393.457977][T17943] #2: ffff88802511a9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0 [ 393.469595][T17943] #3: ffff88802511a8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0 [ 393.480597][T17943] #4: ffff8880249ae938 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 393.491255][T17943] #5: ffff8880249ae970 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 393.502437][T17943] [ 393.502437][T17943] stack backtrace: [ 393.508357][T17943] CPU: 0 UID: 0 PID: 17943 Comm: syz.2.3024 Not tainted syzkaller #0 PREEMPT(full) [ 393.508389][T17943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 393.508405][T17943] Call Trace: [ 393.508413][T17943] [ 393.508421][T17943] dump_stack_lvl+0xe8/0x150 [ 393.508445][T17943] print_circular_bug+0x2e1/0x300 [ 393.508466][T17943] check_noncircular+0x12e/0x150 [ 393.508485][T17943] __lock_acquire+0x15a5/0x2cf0 [ 393.508520][T17943] ? elevator_change+0x1b3/0x450 [ 393.508535][T17943] lock_acquire+0x106/0x330 [ 393.508558][T17943] ? elevator_change+0x1b3/0x450 [ 393.508580][T17943] __mutex_lock+0x19f/0x1300 [ 393.508605][T17943] ? elevator_change+0x1b3/0x450 [ 393.508625][T17943] ? rcu_is_watching+0x15/0xb0 [ 393.508643][T17943] ? elevator_change+0x1b3/0x450 [ 393.508661][T17943] ? __pfx___mutex_lock+0x10/0x10 [ 393.508684][T17943] ? enable_work+0x17f/0x230 [ 393.508702][T17943] ? lockdep_hardirqs_on+0x7a/0x110 [ 393.508728][T17943] ? __cancel_work_sync+0xf7/0x110 [ 393.508746][T17943] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 393.508767][T17943] elevator_change+0x1b3/0x450 [ 393.508787][T17943] elevator_set_none+0xb5/0x140 [ 393.508803][T17943] ? __pfx_elevator_set_none+0x10/0x10 [ 393.508823][T17943] ? xa_load+0x1db/0x210 [ 393.508849][T17943] blk_mq_update_nr_hw_queues+0x5e7/0x1ae0 [ 393.508876][T17943] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 393.508899][T17943] ? kernfs_add_one+0x46f/0x5c0 [ 393.508925][T17943] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 393.508950][T17943] ? sysfs_add_file_mode_ns+0x259/0x300 [ 393.508975][T17943] nbd_start_device+0x17f/0xb10 [ 393.509003][T17943] ? device_create_file+0xf4/0x1b0 [ 393.509030][T17943] nbd_genl_connect+0x165b/0x1cf0 [ 393.509058][T17943] ? __pfx_nbd_genl_connect+0x10/0x10 [ 393.509087][T17943] ? rcu_is_watching+0x15/0xb0 [ 393.509103][T17943] ? __nla_parse+0x40/0x60 [ 393.509128][T17943] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 393.509157][T17943] genl_family_rcv_msg_doit+0x22a/0x330 [ 393.509185][T17943] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 393.509214][T17943] ? __lock_acquire+0x6b5/0x2cf0 [ 393.509241][T17943] genl_rcv_msg+0x61c/0x7a0 [ 393.509268][T17943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.509291][T17943] ? __pfx_nbd_genl_connect+0x10/0x10 [ 393.509319][T17943] netlink_rcv_skb+0x232/0x4b0 [ 393.509338][T17943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.509362][T17943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.509379][T17943] ? genl_rcv+0x19/0x40 [ 393.509414][T17943] ? down_read+0x272/0x2e0 [ 393.509428][T17943] ? genl_rcv+0xd/0x40 [ 393.509450][T17943] genl_rcv+0x28/0x40 [ 393.509472][T17943] netlink_unicast+0x80f/0x9b0 [ 393.509491][T17943] ? __pfx_netlink_unicast+0x10/0x10 [ 393.509508][T17943] ? netlink_sendmsg+0x650/0xb40 [ 393.509526][T17943] ? skb_put+0x11b/0x210 [ 393.509548][T17943] netlink_sendmsg+0x813/0xb40 [ 393.509571][T17943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.509592][T17943] ? aa_sock_msg_perm+0xf1/0x1b0 [ 393.509613][T17943] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.509633][T17943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.509652][T17943] ____sys_sendmsg+0xa68/0xad0 [ 393.509676][T17943] ? __might_fault+0xaf/0x130 [ 393.509704][T17943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.509731][T17943] ? import_iovec+0x73/0xa0 [ 393.509757][T17943] ___sys_sendmsg+0x2a5/0x360 [ 393.509780][T17943] ? __lock_acquire+0x6b5/0x2cf0 [ 393.509805][T17943] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.509831][T17943] ? futex_wait+0x29a/0x380 [ 393.509859][T17943] ? __fget_files+0x2a/0x420 [ 393.509877][T17943] ? __fget_files+0x3a0/0x420 [ 393.509900][T17943] __x64_sys_sendmsg+0x1bd/0x2a0 [ 393.509925][T17943] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.509953][T17943] ? rcu_is_watching+0x15/0xb0 [ 393.509974][T17943] do_syscall_64+0xe2/0xf80 [ 393.509997][T17943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.510014][T17943] ? trace_irq_disable+0x37/0x100 [ 393.510029][T17943] ? clear_bhb_loop+0x60/0xb0 [ 393.510048][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.510070][T17943] RIP: 0033:0x7f145819aeb9 [ 393.510086][T17943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.510101][T17943] RSP: 002b:00007f1458f89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.510119][T17943] RAX: ffffffffffffffda RBX: 00007f1458415fa0 RCX: 00007f145819aeb9 [ 393.510132][T17943] RDX: 0000000020000040 RSI: 0000200000001ac0 RDI: 0000000000000008 [ 393.510143][T17943] RBP: 00007f1458208c1f R08: 0000000000000000 R09: 0000000000000000 [ 393.510154][T17943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.510164][T17943] R13: 00007f1458416038 R14: 00007f1458415fa0 R15: 00007ffdf4ebc1d8 [ 393.510184][T17943] [ 393.574445][ T5835] Bluetooth: hci2: command tx timeout [ 394.142333][ T5835] block nbd6: Receive control failed (result -32) [ 394.143116][ T5828] block nbd6: Receive control failed (result -32) [ 394.162594][T17973] __nla_validate_parse: 6 callbacks suppressed [ 394.162611][T17973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 394.180891][T17751] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 394.238805][T10082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.246708][T10082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.787455][T10082] net_ratelimit: 92 callbacks suppressed [ 394.787481][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 394.801416][T10082] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 394.917750][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 394.925550][ T12] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 395.037800][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 395.045687][ T12] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 395.157446][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 395.165253][ T5925] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 395.277432][ T3583] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 395.285229][ T3583] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 395.607492][ T5828] Bluetooth: hci2: command tx timeout [ 396.957305][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 396.965377][ C1] lec:lec_tx_timeout: lec0 [ 396.969976][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 397.537116][ T5189] udevd[5189]: worker [5873] /devices/virtual/block/nbd3 is taking a long time [ 397.546364][ T5189] udevd[5189]: worker [10493] /devices/virtual/block/nbd0 is taking a long time [ 399.817821][T10082] net_ratelimit: 80 callbacks suppressed [ 399.817839][T10082] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 399.832582][T10082] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 399.947903][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 399.955682][ T5925] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 400.067398][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 400.075230][ T5925] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 400.198400][ T12] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 400.206200][ T12] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 400.317860][ T5925] bond3: (slave ip6gretap2): link status up, enabling it in 0 ms [ 400.325685][ T5925] bond3: (slave ip6gretap2): failed to get link speed/duplex [ 401.977322][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 401.985521][ C1] lec:lec_tx_timeout: lec0 [ 401.990264][ C1] lec:lec_start_xmit: lec0:No lecd attached