last executing test programs: 3.358552575s ago: executing program 3 (id=10993): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) read(r2, &(0x7f00000006c0)=""/222, 0xde) (async) read(r2, &(0x7f00000006c0)=""/222, 0xde) listen(r3, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) socket$igmp6(0xa, 0x3, 0x2) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r7 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @random="6a00084fa53b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00k', 0x18, 0x3a, 0xff, @private2, @local, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @mcast1}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x1d, 0x0, 0xfffffffe, 0x5, 0x6, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "ac0fdb17d3087a1ee9fef5c85c51c9b1f404d0757614d84fe1be4ada33972392a274b0207832727b740f65a3d34e991dd7674563515557d19c0b47e35708b8d40a60dafe425b60369cce1202c32b489a6ccc9f9ab1af86ca2643430361570e9f0ab9bccb21af14108dc891aed64cf53805a8d0369eb54b4ef594dbb0eefdf65395328f5380aedfdd34863e858d045f0d441259c4902f639f3ca8ac6451ee576ecd452227b9636b4e9e8b5bed059a77d518245d1841c5fb2eedb29f1a156ecd5689250e6fb8249fd19bfe63fd4258a8a40bf9b751a3a5e02b537b4950967753b73c24384d35a816226a0aa9ee8edbf5c0c5d0654bc747308b1f299fff23f3351a"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x1d, 0x0, 0xfffffffe, 0x5, 0x6, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "ac0fdb17d3087a1ee9fef5c85c51c9b1f404d0757614d84fe1be4ada33972392a274b0207832727b740f65a3d34e991dd7674563515557d19c0b47e35708b8d40a60dafe425b60369cce1202c32b489a6ccc9f9ab1af86ca2643430361570e9f0ab9bccb21af14108dc891aed64cf53805a8d0369eb54b4ef594dbb0eefdf65395328f5380aedfdd34863e858d045f0d441259c4902f639f3ca8ac6451ee576ecd452227b9636b4e9e8b5bed059a77d518245d1841c5fb2eedb29f1a156ecd5689250e6fb8249fd19bfe63fd4258a8a40bf9b751a3a5e02b537b4950967753b73c24384d35a816226a0aa9ee8edbf5c0c5d0654bc747308b1f299fff23f3351a"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x8010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r4, 0x7, 0x20, 0xffffffffffffffb5, 0x5}, &(0x7f00000000c0)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r4, 0x7, 0x20, 0xffffffffffffffb5, 0x5}, &(0x7f00000000c0)=0x18) 3.146568765s ago: executing program 3 (id=10997): accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x800) (async) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x800) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x87, @local, 0x4e20, 0x1, 'lblc\x00', 0x20, 0x1f4, 0x59}, {@broadcast, 0x4e20, 0x4, 0x1, 0xffffbdf0, 0x9bfe}}, 0x44) sendto$inet(r0, &(0x7f0000000100)="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", 0x1000, 0x4, &(0x7f0000001100)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001140), &(0x7f0000001180)=0xc) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000011c0), &(0x7f0000001200)=0x4) (async) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000011c0), &(0x7f0000001200)=0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001240), 0x200000, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000001280)=0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x608, 0x460, 0x460, 0xf0, 0x1d8, 0xf0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, &(0x7f00000012c0), {[{{@ip={@empty, @multicast2, 0xff, 0x0, 'macvlan1\x00', 'ipvlan0\x00', {}, {0x30a1e07167a1fefe}, 0x0, 0x0, 0x31}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x516e, 0x8, @multicast1, 0x4e24}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x20}, 0xffffffff, 0xffffffff, 'ipvlan0\x00', 'caif0\x00', {0xff}, {}, 0x62, 0x5, 0x40}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2, 0x3}}}, {{@ip={@multicast2, @local, 0xffffffff, 0xffffffff, 'pimreg0\x00', 'wg2\x00', {}, {0xff}, 0x5e, 0x2, 0x66}, 0x0, 0x160, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@private0, [0xff, 0xffffff00, 0xff], @ipv4=@broadcast, [0xff000000, 0xffff80, 0xffffffff], @ipv6=@private2, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@loopback, [0xff, 0xff, 0x0, 0xff000000], 0x7ff, 0x3, 0x0, 0x4e24, 0x4e20, 0x4e22, 0x4e24, 0x1, 0xd}, 0x1, 0x9953ec89aed98ae2, 0x4e23, 0x4e24, 0x4e24, 0x4e23}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0xf, 0x1, 0x0, 0x3], 0x2, 0x1}, {0x4, [0x4, 0x2, 0x6, 0x5, 0x2, 0x5], 0x3}}}}, {{@ip={@remote, @multicast1, 0xffffff00, 0x609590a4172601cf, 'veth0_to_hsr\x00', 'veth0_to_team\x00', {0xff}, {0x1fe}, 0x1, 0x1, 0x10}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4000000, 0x9, @multicast2, 0x4e24}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0xe, 0x1, 0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x1, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x668) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f00000019c0)) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000001a00)=""/243, &(0x7f0000001b00)=0xf3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@bloom_filter={0x1e, 0x4, 0x6, 0x0, 0x20208, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001bc0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001bc0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d40)={&(0x7f0000001c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0xc, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x80000001}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x6}}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x79, 0x0, 0x75}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xb, 0x80000000}, {0x10, 0xec}, {0x7, 0x6}, {0x2}, {0x10, 0x80}, {0x4, 0x80000000}]}]}, {0x0, [0x0, 0x30, 0x61, 0x61, 0x61, 0x61, 0x61, 0x0, 0x0, 0x5f]}}, &(0x7f0000001cc0)=""/119, 0xac, 0x77, 0x1, 0x8001, 0x3872367adab564f1}, 0x28) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d40)={&(0x7f0000001c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0xc, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x80000001}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x6}}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x79, 0x0, 0x75}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xb, 0x80000000}, {0x10, 0xec}, {0x7, 0x6}, {0x2}, {0x10, 0x80}, {0x4, 0x80000000}]}]}, {0x0, [0x0, 0x30, 0x61, 0x61, 0x61, 0x61, 0x61, 0x0, 0x0, 0x5f]}}, &(0x7f0000001cc0)=""/119, 0xac, 0x77, 0x1, 0x8001, 0x3872367adab564f1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@bloom_filter={0x1e, 0x2, 0x40, 0x7, 0x10, r4, 0x0, '\x00', r5, r6, 0x1, 0x0, 0x0, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@bloom_filter={0x1e, 0x2, 0x40, 0x7, 0x10, r4, 0x0, '\x00', r5, r6, 0x1, 0x0, 0x0, 0x4}, 0x50) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e00)='cgroup.events\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), 0xffffffffffffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r11 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) gettid() (async) r12 = gettid() r13 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x80, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xe, 0x1e}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x25}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x55}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x76}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x1c}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_PID={0x8, 0x52, r12}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2f}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r13}]}, 0x80}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000080) ioctl$BTRFS_IOC_QGROUP_LIMIT(r8, 0x8030942b, &(0x7f0000001fc0)={0x2, {0x6, 0x7, 0x9, 0xfffffffffffff9e4, 0x1}}) close(r6) shutdown(r7, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000002000)=0x3) (async) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000002000)=0x3) sendmsg$inet6(r1, &(0x7f0000002840)={&(0x7f0000002040)={0xa, 0x4e22, 0xe2d, @mcast2, 0x8}, 0x1c, &(0x7f00000025c0)=[{&(0x7f0000002080)="69d8508dd93db2e77be00cacf0b72bc7dd10f4f20b0fa67bcb7de2f53a4c2e9c0de0e599dc13e5339344fa777c0293ebbe43b24f9d7e93cd92e5bf3fc4a33c3e9ce8fb14ac5eb742a84122a431e539b8bfec8074bbbd3b7540957bcf5aebcc6d737d8618249207e463ab6fb017f835355d0e233878920062abf9bacbed3ef64f1b79eefb31fb029805a402ca79c77d67f098f8031d2b63", 0x97}, {&(0x7f0000002140)="2fcf8096e7dbb147d7f0c41484491f0cf84506047e99bb3177269e57b3fdb0810a84e80a8baab4fdab99ba518fa1f8ac5c408827219b87f2527a8dadf7eaa458c796d21ababac4ffa358b28ef45c5fa57885aba9c736b43a0b26105cb45e35038e67bad18174a78af768a18991b08fc3a45e8a5745e4ad077a25c584458a439dc38ce918ce3ef86ef2b98016603ad21548f68342ef08e733c9a6984b7f4594", 0x9f}, {&(0x7f0000002200)="b19a0609298525a23cdd42b4eeb21d8867d75f29b8e4acd45ece5cc0f45f0c67616d3d801dc56ffd9242cdad10aaec6948b5dcaccf28dddb529ee98973455544428c0274d2e8e983e05f5ff33a1019d2baa6c81aef5e3377ba0638f629e18dd44cf8120f9dd4f467444b9ada1aacb91c4dee1108ea6017e598729078", 0x7c}, {&(0x7f0000002280)="5cc87ee8e36e988a362ed6c655a32010f6c5686c430654aaf6cd03545ceebebe18d94534a82429b28eb7de2dd198a7f34d0cb76de5415349de553742bccc30d1d14b3780c6193fa602db51210e821beddc59c530fba1a92701007485a1bbeb4a3f91e5e0742e313d1c3f409353aefa260fa28ba83ff9175e1062aa58c40bc0d43f9a1164a1ce757a39511b8ed71c1841806fb67359c113abd56f2141ea3fc504d385536ec9010871861110b6d7a0010cfc1e8c351b9011b87a0c39be982af29f26b57651e98cb5c2ba", 0xc9}, {&(0x7f0000002380)="7dcd6dbcd147d577c0b785388701732df2d9fa4fde76f6e56403ea73dfd67148e0374c86beba85b0d1fb1e49b0247fc1db6f967c13081a5b858671793b77a056f32417b9e155feb346f291d103c82e38714f5debfe34bcb887bcf44fdbf2cf9c5a00f08937e056ad24401c2ccfba1a011070c87673e3f3931f2d18430ef3d98062c8c475d7d6cad03bf79165455a8f4fd1908c9fd6e7e570e4f94d42e1528f167d4e182cd267b281686681abcbc9362b38ab7590f8295c466c3f9c6f119e5707b86a84467fe9624819dcda9b8b95057ac3da", 0xd2}, {&(0x7f0000002480)="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", 0xfb}, {&(0x7f0000002580)="5591b66928625883dc77dcb613fcdfc887dac182ecccc40abb7bc1e5a28dbcf723b5740b3f674d0e986d779eaa49f49b733081bd2cc444e8932de3e9", 0x3c}], 0x7, &(0x7f0000002640)=[@hopopts={{0x120, 0x29, 0x36, {0x3a, 0x21, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x20, {0x2, 0x6, 0x40, 0x9, [0x0, 0x9, 0x0]}}, @generic={0x8, 0xd2, "3d4b40d273611396df50e42815b08b57c42482b53b1bce52e0701e3b03acdef637f54aa3d0e5182a0a66631624901afc6ed147a79c8a61da9259cf427b2a0bfd12c14c7f5be0c4616942e5a8f0dc3064b2393eedddbd7a82eef880757cd77776412373763c0a04a0d0a68490c254923350dda0b721f7dbe56a897f36df8002ecf5c644115bc4c09cc2bee8c97dab07798c5512a79043b6709f03976f9ec843dc985e142b5c87a41ff3bdc936062c88a4897f9f6fc03166e51906eb0d0bd762f0a6e9ca8b68f573a6e8f9da62a4a3d656bf85"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x3c, 0x3, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x10, {0x2, 0x2, 0x81, 0x8, [0x8]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x81}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x21, 0x4, 0x0, 0xd, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x1d8}, 0x20000000) (async) sendmsg$inet6(r1, &(0x7f0000002840)={&(0x7f0000002040)={0xa, 0x4e22, 0xe2d, @mcast2, 0x8}, 0x1c, &(0x7f00000025c0)=[{&(0x7f0000002080)="69d8508dd93db2e77be00cacf0b72bc7dd10f4f20b0fa67bcb7de2f53a4c2e9c0de0e599dc13e5339344fa777c0293ebbe43b24f9d7e93cd92e5bf3fc4a33c3e9ce8fb14ac5eb742a84122a431e539b8bfec8074bbbd3b7540957bcf5aebcc6d737d8618249207e463ab6fb017f835355d0e233878920062abf9bacbed3ef64f1b79eefb31fb029805a402ca79c77d67f098f8031d2b63", 0x97}, {&(0x7f0000002140)="2fcf8096e7dbb147d7f0c41484491f0cf84506047e99bb3177269e57b3fdb0810a84e80a8baab4fdab99ba518fa1f8ac5c408827219b87f2527a8dadf7eaa458c796d21ababac4ffa358b28ef45c5fa57885aba9c736b43a0b26105cb45e35038e67bad18174a78af768a18991b08fc3a45e8a5745e4ad077a25c584458a439dc38ce918ce3ef86ef2b98016603ad21548f68342ef08e733c9a6984b7f4594", 0x9f}, {&(0x7f0000002200)="b19a0609298525a23cdd42b4eeb21d8867d75f29b8e4acd45ece5cc0f45f0c67616d3d801dc56ffd9242cdad10aaec6948b5dcaccf28dddb529ee98973455544428c0274d2e8e983e05f5ff33a1019d2baa6c81aef5e3377ba0638f629e18dd44cf8120f9dd4f467444b9ada1aacb91c4dee1108ea6017e598729078", 0x7c}, {&(0x7f0000002280)="5cc87ee8e36e988a362ed6c655a32010f6c5686c430654aaf6cd03545ceebebe18d94534a82429b28eb7de2dd198a7f34d0cb76de5415349de553742bccc30d1d14b3780c6193fa602db51210e821beddc59c530fba1a92701007485a1bbeb4a3f91e5e0742e313d1c3f409353aefa260fa28ba83ff9175e1062aa58c40bc0d43f9a1164a1ce757a39511b8ed71c1841806fb67359c113abd56f2141ea3fc504d385536ec9010871861110b6d7a0010cfc1e8c351b9011b87a0c39be982af29f26b57651e98cb5c2ba", 0xc9}, {&(0x7f0000002380)="7dcd6dbcd147d577c0b785388701732df2d9fa4fde76f6e56403ea73dfd67148e0374c86beba85b0d1fb1e49b0247fc1db6f967c13081a5b858671793b77a056f32417b9e155feb346f291d103c82e38714f5debfe34bcb887bcf44fdbf2cf9c5a00f08937e056ad24401c2ccfba1a011070c87673e3f3931f2d18430ef3d98062c8c475d7d6cad03bf79165455a8f4fd1908c9fd6e7e570e4f94d42e1528f167d4e182cd267b281686681abcbc9362b38ab7590f8295c466c3f9c6f119e5707b86a84467fe9624819dcda9b8b95057ac3da", 0xd2}, {&(0x7f0000002480)="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", 0xfb}, {&(0x7f0000002580)="5591b66928625883dc77dcb613fcdfc887dac182ecccc40abb7bc1e5a28dbcf723b5740b3f674d0e986d779eaa49f49b733081bd2cc444e8932de3e9", 0x3c}], 0x7, &(0x7f0000002640)=[@hopopts={{0x120, 0x29, 0x36, {0x3a, 0x21, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x20, {0x2, 0x6, 0x40, 0x9, [0x0, 0x9, 0x0]}}, @generic={0x8, 0xd2, "3d4b40d273611396df50e42815b08b57c42482b53b1bce52e0701e3b03acdef637f54aa3d0e5182a0a66631624901afc6ed147a79c8a61da9259cf427b2a0bfd12c14c7f5be0c4616942e5a8f0dc3064b2393eedddbd7a82eef880757cd77776412373763c0a04a0d0a68490c254923350dda0b721f7dbe56a897f36df8002ecf5c644115bc4c09cc2bee8c97dab07798c5512a79043b6709f03976f9ec843dc985e142b5c87a41ff3bdc936062c88a4897f9f6fc03166e51906eb0d0bd762f0a6e9ca8b68f573a6e8f9da62a4a3d656bf85"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x3c, 0x3, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x10, {0x2, 0x2, 0x81, 0x8, [0x8]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x81}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x21, 0x4, 0x0, 0xd, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0x1d8}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x80, 0x1405, 0x400, 0x70bd27, 0x25dfdbfd, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) 2.937764187s ago: executing program 3 (id=10999): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x80, 0x80, 0x5, 0x3, {{0x2d, 0x4, 0x1, 0x14, 0xb4, 0x64, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x27, 0xed, [@private=0xa010102, @rand_addr=0x64010101, @multicast2, @loopback, @empty, @multicast1, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x1b, 0xf7, [@multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @loopback]}, @timestamp={0x44, 0x8, 0x9, 0x0, 0x0, [0xc0]}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0x3, [{@remote, 0x900000}, {@private=0xa010102, 0x2}, {@multicast1, 0x80000001}, {@private=0xa010100, 0x101}, {@rand_addr=0x64010101, 0x57df}, {@loopback, 0x44}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@private=0xa010100, 0xffffffff}, {@rand_addr=0x64010102, 0xfca5}]}, @generic={0x44, 0x7, "62625f00e0"}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@dev, @remote, 0x0}, &(0x7f0000000280)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xff}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7fffffff}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x4010000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x724, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x20}}}}, [@NL80211_ATTR_TX_RATES={0x318, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x60, 0x5, 0x9, 0x9, 0x1, 0x48, 0x48, 0xb, 0x9, 0x24, 0x3, 0x48, 0x24, 0x9728cc47ee34e488, 0x48, 0x12, 0xb, 0x36, 0xb, 0x24, 0x13, 0x18, 0x4, 0x24, 0x9, 0x0, 0x6, 0xb]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x8, 0x12, 0xb, 0xb, 0x65, 0x4, 0x24, 0x3, 0x36, 0x18, 0x16, 0x2, 0x18, 0x0, 0x5, 0x12, 0x18, 0xb]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x9, 0x0, 0x12, 0x3, 0x3, 0x30, 0x1, 0x2, 0x16, 0x550c763245444e64, 0x6c, 0x12, 0x6c, 0x60, 0xb, 0x5, 0x2, 0xc, 0x1b, 0x30, 0x16, 0x0, 0x0, 0x60, 0x30, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x3}, {0x3, 0x4}, {0x6, 0xa}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x6, 0x6}, {0x7, 0x2}, {0x6, 0xa}, {0x2}, {0x0, 0x5}, {0x2, 0x7}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x9}, {0x5, 0x1}]}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x4}, {0x6, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x7, 0x7}, {0x3, 0x6}, {0x1, 0x5}, {0x7, 0xa}, {0x3, 0x1}, {0x4, 0x5}, {0x0, 0x5}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x7}, {0x6, 0x1d}, {0x7, 0x5}, {0x0, 0x1}, {0x6, 0xa}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x2}, {0x0, 0x5}, {0x6, 0x5}, {0x4, 0x3}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x7}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x1}, {0x2, 0x8}, {0x2}, {0x5, 0x9}, {0x2, 0xa}, {0x6}, {0x1, 0x6}, {0x1, 0x6}, {0x6, 0x2}, {0x2, 0x6}, {0x4}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0xb}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x1, 0x0, 0xe70, 0x4, 0x4, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{}, {0x1, 0x4}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0x3}, {0x4}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x3}, {0x2, 0xa}, {0x1, 0x4}, {0x2, 0x2}, {0x5, 0x1}, {0x3, 0x5}, {0x6, 0x4}, {0x1, 0x9}, {0x5, 0x1}, {0x0, 0xd}, {0x6, 0x9}, {0x6, 0xa}, {0x4, 0x3}, {}, {0x6}, {0x1, 0x8}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x1, 0xa, 0x1, 0x81, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x12, 0x36, 0x30, 0x1b, 0x5, 0x6, 0x16, 0xc, 0x36, 0x1b, 0x6, 0x1, 0x9, 0x36, 0x16, 0x30, 0x9, 0x1, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x3}, {0x5, 0x9}, {0x7, 0x2}, {}, {0x7, 0x3}, {0x0, 0x1}, {0x5, 0x7}, {0x3}, {0x5, 0x9}, {0x6, 0x9}, {0x0, 0x9}, {0x4, 0x2}, {0x0, 0x2}, {0x3, 0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x6c, 0x16, 0x18, 0x2, 0xb, 0x5, 0x0, 0x3, 0x48, 0x30, 0x16, 0x30, 0x30, 0x4, 0x2, 0x16, 0x5, 0x1, 0x6c, 0xc, 0x24, 0x30, 0x1b, 0x4, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf0, 0x4, 0x800, 0x800, 0x4, 0x4, 0x90, 0xb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x12, 0x9, 0x72, 0x5, 0x4, 0x9, 0x2, 0x9, 0x60, 0x0, 0x60, 0x2, 0x9, 0x3, 0x1a, 0x36, 0x24, 0xc, 0x6c, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x7f}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x8, 0x0, 0x2, 0x1, 0x20, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x100, 0x19c2, 0xc3, 0x9, 0x7, 0xe874, 0x7]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x5, 0x4}, {0x3, 0x8}, {0x3, 0x2}, {0x4, 0x8}, {0x6, 0x2}, {0x0, 0x8}, {0x3, 0x1}, {0x0, 0x8}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0xa}, {0x3}, {0x0, 0x4}, {0x7, 0x7}, {0x3}, {0x4, 0xa}, {0x1, 0x3}, {0x0, 0x1}, {0x5}, {0x1, 0x9}, {}, {0x7, 0x6}, {0x4, 0xa}, {0x1, 0x8}, {0x4}, {0x1, 0x8}, {0x7}, {0x3, 0x9}, {0x4, 0x6}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0xa}, {0x4, 0x9}, {0x4, 0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x4, 0x1}, {0x1}]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x6, 0x5, 0x10, 0x231d, 0xe, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x54, 0xfffb, 0x6, 0x0, 0x4, 0x1, 0x3dc]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xff, 0x6, 0x5, 0x3, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x7}, {0x5, 0x7}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x9}, {0x6, 0x6}, {0x0, 0x4}, {0x0, 0x9}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0x5}, {0x4, 0xa}, {0x5, 0x4}, {0x1}, {0x5, 0xa}, {0x0, 0x8}, {0x7, 0xa}, {0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x3, 0x8}, {0x3, 0x5}, {0x2, 0x2}, {0x1}, {0x3, 0x6}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x7b, 0x7, 0x6, 0x10, 0x9e3d, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x5ea0, 0xff01, 0x6, 0x5, 0xff, 0x5, 0xffba]}}]}]}, @NL80211_ATTR_TX_RATES={0x364, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x6, 0x48, 0xc, 0x3, 0x18, 0x30, 0x16, 0x36, 0x48, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x10, 0x12, 0x12, 0x2, 0x9, 0x14, 0x48, 0x1b, 0x24, 0xc, 0xb, 0x4, 0x6c, 0x1, 0x4, 0x9, 0x1, 0x4, 0x4, 0x2, 0x25, 0x6]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x1, 0x3, 0x4, 0xc, 0x1, 0xc, 0x3, 0x36, 0xb, 0x24, 0x6, 0x36, 0x48, 0x24, 0x1, 0x2, 0x6, 0x12, 0x16, 0x6, 0xc, 0x3, 0x48, 0x48, 0x12, 0x5, 0x6c, 0x6, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7d93, 0x9, 0x7, 0xd2c, 0x0, 0xfffc, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x7, 0x4}, {0x0, 0x2}, {0x0, 0x4}, {0x1, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x1, 0x1}, {0x0, 0x2}, {0x5, 0x6}, {0x0, 0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x3, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x89d, 0x8, 0x9, 0x6, 0x8, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8e4, 0x9, 0x5, 0x4, 0x7, 0x3, 0x77b8]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x2, 0x7}, {0x5, 0x7}, {0x0, 0xa}, {0x3, 0x5}, {0x5, 0x4}, {0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x3}, {0x7, 0x2}, {0x5, 0x8}, {0x3, 0x9}, {0x2, 0x3}, {0x1, 0x4}, {0x2, 0x5}, {}, {0x1, 0xa}, {0x2, 0x6}, {0x3, 0x9}, {0x1, 0x1}, {0x4, 0xa}, {0x6, 0x7}, {0x6, 0xa}, {0x0, 0x3}, {0x6, 0xb}, {0x2, 0x6}, {0x2, 0x4}, {0x6, 0x4}, {0x4, 0x1}, {0x6, 0x6}, {0x4, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {0x4, 0xa}, {0x4, 0x7}, {0x3, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x1, 0xb7e, 0x8000, 0x7, 0x81, 0x1, 0x1]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0x6, 0x1, 0x2, 0x7, 0x200, 0x8000]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x2}, {0x6, 0x8}, {0x6, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0x5}, {0x6, 0x4}]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x200, 0x5, 0xffff, 0x8, 0x8, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0xae2, 0x5, 0x3ff, 0x1, 0xaeaf, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0x4}, {0x4, 0x5}, {0x6, 0x1}, {0x3, 0x7}, {0x1}, {0x2, 0x5}, {0x7, 0x3}, {0x2, 0x8}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x9}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x2, 0x6}, {0x6, 0x8}, {0x5, 0x3}, {0x2, 0x1}, {0x0, 0x8}, {0x6, 0xa}, {0x7, 0x2}, {0x1, 0x4}, {}, {0x3, 0x2}, {0x4, 0x5}, {0x3, 0x9}, {0x7, 0x6}, {0x7, 0xa}, {0x0, 0x7}, {0x7, 0x4}, {0x3, 0x7}, {0x3, 0x6}, {0x5, 0x2}, {0x4, 0xa}, {0x0, 0x5}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6c74, 0x1ff, 0x5, 0xc3, 0x100, 0x9, 0x2, 0x7]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x6d, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x5, 0x3, 0x2, 0x5, 0xb, 0x22, 0x18, 0x1b, 0x18, 0x16, 0x18, 0x30, 0x6, 0x12, 0xc, 0x18, 0x0, 0xc, 0x6, 0x0, 0x18, 0x4, 0x3, 0x24, 0x1a, 0x18, 0x9, 0x6c]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x8, 0x293, 0x605, 0x9, 0x220f, 0x7]}}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0x9, 0xc, 0x6, 0x18, 0x18, 0x12, 0x5, 0x36, 0x5c, 0x2, 0x18, 0x9, 0xc, 0x5, 0x1b, 0x1, 0x1b, 0x1b, 0x16, 0x30, 0x1, 0x60, 0x12, 0x48, 0xb, 0x24, 0xb, 0x9, 0x16]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x8}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x2, 0x6}, {0x6, 0x9}, {0x5, 0x1}, {0x3, 0x5}, {0x1, 0x2}, {0x6, 0x6}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x2, 0x7}, {0x3, 0x5}, {0x4, 0xa}, {0x4, 0x8}, {0x6}, {0x3, 0x4}, {}, {0x0, 0xa}, {0x6, 0x6}, {0x7, 0x5}, {0x1}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x101, 0x819, 0xfffe, 0x8000, 0x4, 0x25c, 0x3]}}]}, @NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x5, 0x4}, {0x7, 0x3}, {0x4, 0x4}, {0x6, 0x7}, {}, {0x2, 0x2}, {0x2, 0x1}, {0x0, 0x5}, {0x6, 0x5}, {0x3}, {0x4, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x5, 0x7}, {0x4, 0x4}, {0x0, 0xa}, {0x7, 0x9}, {0x0, 0x1}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x6}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x9}, {0x0, 0x1}, {0x4, 0x6}, {0x0, 0x6}, {0x7, 0x3}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x7}, {0x2, 0x5}, {0x5, 0x3}, {0x7, 0x1}, {0x7}, {0x4, 0x4}, {0x4, 0x4}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x5}, {0x4, 0x4}, {0x5, 0x2}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x7, 0x7}, {0x3, 0x5}, {0x6}, {0x2, 0x3}, {0x4, 0x2}, {0x6, 0x9}, {0x2, 0xa}, {0x5}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x3}, {0x4, 0x4}, {0x3, 0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x6, 0x4}, {0x4, 0x1}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x1}, {0x3, 0x3}, {0x5, 0x6}, {0x0, 0x9}, {0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb, 0x3561, 0x39, 0x4, 0x401, 0x1ff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x10, 0x2, 0xe82, 0x5345, 0x0, 0x8, 0x8a24]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x4, 0x24, 0x6c, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x101, 0x3ff, 0x1, 0x6, 0xf38b, 0xf]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x73, 0x1, 0xb, 0x6c, 0x24, 0x60, 0x2, 0x4, 0x5, 0x9, 0x1b, 0x36, 0xb, 0x1b, 0x30, 0x4, 0x1, 0x30]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0xb, 0x1b, 0x6, 0x30, 0x1, 0x1, 0xb, 0x60, 0x2, 0x18, 0x30, 0x16, 0x12, 0x60, 0x48, 0x6c, 0x60, 0x4, 0x1b, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x83, 0x8000, 0x78c4, 0xb8f, 0xb, 0xfffa, 0x3, 0xe20]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x2, 0x8}, {0x1, 0xa}, {0x6, 0x3}, {0x2, 0x1}, {0x5, 0x8}, {0x0, 0xa}, {0x3, 0x9}, {0x6, 0x8}, {0x7, 0x6}, {0x1, 0x6}, {0x2}, {0x1, 0x1}, {0x6, 0xa}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x6}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x5}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x0, 0x1b, 0x4, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x18, 0xb, 0x18, 0x24, 0x6, 0xccc0dad64e053df5, 0x2, 0x3, 0x6c, 0xb, 0x12, 0x2, 0x2f, 0x0, 0x6, 0xc, 0x6c, 0x4, 0x5, 0x12, 0x1b, 0x6, 0x60, 0x0, 0xb, 0x1b, 0x60, 0x1, 0xb, 0x6c]}]}]}]}, 0x724}}, 0x20000000) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000c40)={0x0, @in6={{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb0a}}, 0x10, 0x7, 0x9, 0x6, 0x9}, &(0x7f0000000d00)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000d40)={r6, 0x8}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)}, 0x20) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001000)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000010c0)=[0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000001140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x7, 0x10, &(0x7f0000001380)=@raw=[@map_fd={0x18, 0x6}, @jmp={0x5, 0x0, 0x2, 0x2, 0x5, 0x8, 0x10}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x7f, 0x9, 0x9, 0x9, 0x1}, @alu={0x5, 0x0, 0x4, 0x4, 0xb, 0x1, 0x4}], &(0x7f0000001400)='GPL\x00', 0x7c9e, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001480)={0x2, 0xc, 0x8, 0xfffffffb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{0x1, 0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x1, 0xd, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffd2b1, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @func]}, &(0x7f0000000ec0)='syzkaller\x00', 0x4d2, 0xca, &(0x7f0000000f00)=""/202, 0x41000, 0x8, '\x00', r3, @fallback=0x1, r8, 0x8, &(0x7f0000001040)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, r10, r11, 0x0, &(0x7f00000016c0)=[r12, r13], 0x0, 0x10, 0x10}, 0x94) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000017c0)=@sack_info={r6, 0x0, 0x5}, &(0x7f0000001800)=0xc) r15 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r15, 0x84, 0x18, &(0x7f0000001840)={r14, 0x6b3c}, 0x8) r16 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f00000018c0)={@private2, 0x0}, &(0x7f0000001900)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r16, &(0x7f0000001a80)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xec, r0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) connect$inet6(r16, &(0x7f0000001ac0)={0xa, 0x4e22, 0x3, @empty, 0x3ff}, 0x1c) r18 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b40), r16) sendmsg$IPVS_CMD_ZERO(r16, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b80)={0xc8, r18, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffe00}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x40804) r19 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r19, &(0x7f0000001d00)={0x1d, r9, 0x2, {0x0, 0x1, 0x3}, 0x2}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d80)=@generic={&(0x7f0000001d40)='./file0\x00', 0x0, 0x18}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001dc0)={0x1f, 0x4}, 0x6) 2.622564622s ago: executing program 3 (id=11003): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x36, 0xfffffffffffffffe, &(0x7f00000001c0)=0x31) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r10, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}]}, 0x38}, 0x1, 0x0, 0x0, 0xc40}, 0x10) 2.482214719s ago: executing program 3 (id=11005): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000680)=r2, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r3, 0x10e, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x80000}}, @TCA_SKBEDIT_PTYPE={0x2, 0x4}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0x9, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0xea37}]}, {0x10}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 2.382828358s ago: executing program 3 (id=11006): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) (async) sendmsg$nl_route_sched(r3, 0x0, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) sendmmsg$inet(r2, &(0x7f0000004580)=[{{&(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0x20}}], 0x1, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 1.378604522s ago: executing program 0 (id=11018): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x1, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xd1}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0xeb) 1.371094004s ago: executing program 2 (id=11019): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001900)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040003}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/97, 0x61}], 0x1}, 0x7e1a}], 0x1, 0x142, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x102, &(0x7f0000000280)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xcc, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0, {[], @dest_unreach={0x1, 0x4, 0x0, 0x31, '\x00', {0x8, 0x6, "6e2fca", 0x1, 0x33, 0x1, @remote, @private1, [], "167f8a8f9ce1c1e342d35acc529499dfa85db84775bd347820ba900fe7407e333c7ca6f62101c5ad4e85c92b464c062a2df2537bb67790ce3f185693db5193fd87304b0c6e50972d85e6d51d0ccece4e8648128fc0986a4dcade491ad2525f945de5c30138fc7cf376b33e4db940c21026184d73a47cfe44e0ed815f759cbd12abda96af953ca18dea99b74ce92aa04433e43894dd733f21d8bcd102"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x102, &(0x7f0000000280)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xcc, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0, {[], @dest_unreach={0x1, 0x4, 0x0, 0x31, '\x00', {0x8, 0x6, "6e2fca", 0x1, 0x33, 0x1, @remote, @private1, [], "167f8a8f9ce1c1e342d35acc529499dfa85db84775bd347820ba900fe7407e333c7ca6f62101c5ad4e85c92b464c062a2df2537bb67790ce3f185693db5193fd87304b0c6e50972d85e6d51d0ccece4e8648128fc0986a4dcade491ad2525f945de5c30138fc7cf376b33e4db940c21026184d73a47cfe44e0ed815f759cbd12abda96af953ca18dea99b74ce92aa04433e43894dd733f21d8bcd102"}}}}}}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x2, 0x5, 0x2, 0x5}, {0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x2, 0x5, 0x2, 0x5}, {0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x100}, 0x1c) 1.33216944s ago: executing program 0 (id=11020): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000002c9bc953220ec59e49cf5117deb56cfdb0ca50dcad63c5cd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="2600000000000000000000004baa7d5cc0a6c1c7b6845ae66c32c0b72d327a5f6165f2042ece7635e8d512e0aea18c854f64c371e551836405d0bb4f1263350fe1986ad5ceb5fdbe8d", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r6, 0x713, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1e9a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x40020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000080)={r12, 0x3}, &(0x7f00000000c0)=0x8) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r13) getsockname$packet(r13, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000001000370400"/20, @ANYRES32=r14, @ANYBLOB="830405000000000054001280080001006774700048000280050005000100000008000200", @ANYRES32=r8, @ANYBLOB="08000400010000"], 0x74}}, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) close(r7) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) 1.272409187s ago: executing program 4 (id=11021): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b3000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40000022) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={r6, 0x8ec6, 0x10}, 0xc) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x3) socket$alg(0x26, 0x5, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r12 = socket$unix(0x1, 0x1, 0x0) connect$unix(r12, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r12, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r12, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r12, &(0x7f0000000040)=@ax25={{}, [@default, @remote, @netrom, @null, @rose, @null, @bcast, @rose]}, &(0x7f00000000c0)=0x80, 0x80000) 1.227701323s ago: executing program 2 (id=11023): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) r1 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x3a0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x0, [], 0x0, 0x7, 0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x9c1, 0x7, 0x2, 0xb, 0x2, 0x786b, 0xfffffff8, 0x58}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000002c0)={'dummy0\x00', @random="0100"}) 1.134681062s ago: executing program 0 (id=11024): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000001c0)=r2) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x40) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000180)={@none, 0x6}) socket$kcm(0x2, 0xa, 0x2) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r6, 0x800442d2, &(0x7f0000001d40)={0x1, &(0x7f0000001d00)=[{0x0, 0x0, 0x0, @link_local}]}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000001000100026bd7000c000000000000000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 1.125246814s ago: executing program 1 (id=11025): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000090601020000000000000000020000000900020073797a31000000000500010007000000440007801800018014000240ff0100000000000000c70000000000010500070084000000060004404e2000001800028014000240ff0100000000000000000000000000010368dd3228479df9ca3f333efce33e0f279a44867565ad66472518e85eff744be938462aae77b60b0ed3bea934e06219ff4bdd59f1893c0f"], 0x6c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) ioctl(r3, 0x4, &(0x7f0000000140)="aa2374ca75cf84") getsockopt$IPT_SO_GET_INFO(r5, 0x29, 0x40, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xffffe000) 1.040568762s ago: executing program 2 (id=11026): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)={0x108, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_CLASS={0xffffffffffffff1c, 0x9, 0x1, 0x0, 0x7ff}, @CTA_EXPECT_MASK={0xcc, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x9}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_MASK={0x0, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x88}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x40011}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r7, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$sock(r7, &(0x7f0000000880)={&(0x7f00000006c0)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000780)="f6974214b1f322a9ab8cec52c114516905ae63ee42d995176ab3ee13cb5d0571144fb82793cc37d6eee997cf9de7f1b2072877752a7213bd7ac6fcc41301c5a38d544c908c2a8a64c6dad1a2f7d5167263ae06f2c111ac4f1ca6f9b804c6e8bb0d2753733254e0b9690fa7bafce17374e8a3d943395194588f56efff39a90bbce4ddc7f73e1a76e7f014399d2595b4ef92e707f155a263e8b25959c340ffc28873ff6a062dce872e4da3fdd09bc336374f83add38c0d27e9516e5f98f8636bf28e638b3f2a0a7e3a7ed2c9182462283e42a8f6ecac9686094e99c1b7a1b6beb0b20b0496", 0xe4}, {&(0x7f0000000b40)="8bf9f4899f1d8d79f74071895f39d25a99dc87a9e762ca513929d9387e28e73f62f3d140fda2289f7a1f1d703a62ec97c1bad7959238c43a0996651ce73980a76527b72476a060211e4a777099ea2fa1693a6623282a00dbf37d6c5b1302b08c9a9222a13f4aa292b2ced876c88ff4ce63e610155acd737e1d65fdb7ef2788cf93cd01f6de6a4e0c00284e189a634e6725892539c561a79c29e4af9be1603a40b87797cb4605929078e7ae3b28044fbfe61ad42a74b85acbc1a149ac0fdab671e29d685aab90f2bd9e0db512d3e08171a5ba51b2c3efbc32f9356d8bf4b91ea46383053315ad330fd9b76c33d0fdb8b772bd56", 0xf3}, {&(0x7f0000000340)="7d278404da195b397aa6e0aab5b6cc8aa30cfe41869409e2645d1b49280723d2c58e911a129a6c8433ed6d266820c730534b300ffb88655c", 0x38}], 0x3}, 0x4000010) write$cgroup_subtree(r6, &(0x7f0000000540)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r6, 0x0) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f00000022c0), 0x58, 0x8) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 985.651479ms ago: executing program 4 (id=11027): r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)={0x10, 0x21, 0x104, 0x70bd25, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000000540)=[@rights={{0x10}}], 0x10, 0x801}, 0x20000084) socket$isdn(0x22, 0x3, 0x22) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r2, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x5d}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x40041}, 0x4000004) 871.04596ms ago: executing program 1 (id=11028): syz_emit_ethernet(0x2a, &(0x7f0000000880)={@link_local, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x2, 0x0, @opaque="fddc606e6597bced93fa56f4865efb45a2e3a231b7e0565cf59718074c479f86eb89c02913feb3360f30ab79286dbd80d65c736315f3154426ed17adc0f1754bebac9f4248a4df5ad7aee3c0368f8bcfdb7f824c4fec2454e7699dcf6ec0fe5ecbb2b25cf3746f5977f86d6e09768e64762226417b61c8679b6a02e027e66273b3ebb36533acbb9bbbcb836c179a6989849bcb1c0747218fac98bcf1579b0429e25a82"}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="925a95e24550ec24e8e1a95586dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x8, 0x10, 0x200, 0xa43, {{0x18, 0x4, 0x3, 0x7, 0x60, 0x66, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x2c}, {[@lsrr={0x83, 0x13, 0xd4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @local]}, @timestamp_prespec={0x44, 0xc, 0x7b, 0x3, 0x6, [{@empty}]}, @timestamp_addr={0x44, 0x2c, 0x9, 0x1, 0xb, [{@rand_addr=0x64010102, 0x8ca}, {@dev={0xac, 0x14, 0x14, 0x20}}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x8}, {@multicast2, 0x7}]}]}}}}}) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000000)={0xa, 0x4e24, 0xfff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000040)="71fccc89a115c535f275bba94bae7228e5644c5b7b53127a8185bc2b9bd63d7231ef49216ffe05902e3fd798dc52d0c339fd40fec5b03d8f21bef2a71b8b116ee084181f", 0x44}, {&(0x7f00000000c0)="a122b1bb4ce38d1810ae28f30725b0f1557e992b1bffd65ba72df2528f9a805289c3ce8f3bb67a2fb95f8f608f998f2edef62bf17bdeeb19cc211b17e9d673b44b43018ff37088f30a8c4d7de1d40161f659f24cdab87baa70f427e21a9c2fc44d8dd95af7785939f0ddf8e5583af7ff3e3ffb5783f5599a437bf578f41c552c14fdd6263ee6966816241ef672e3f9bf7ab5ecea7902a86175fa87fa455889a3b83420e44b96d1c8a48f8f1484557f0b2d5e6a8c1e7219185e3318997d591a70647f5b46e8da2a22f4b2d1bd624c6744", 0xd0}, {&(0x7f00000001c0)="0c12b2bc1cf7ed8669361eb38dcf5944fa4817ba483f30fe57948cb69a7c0efa63a1502308b2a509a2f0781b0da1419aafc0f41f554fbe492994e69930ed2290cd4c3febbe5b1bb920a515c82ed5a9ace2d3a9cc1c8c864d9401355a367305096978c2bbf2873339a79f8fb4be32d703a029169f83ad561bd8dc04418f4f006970b475fc5dec47323477e7b41c64ea735ec57b34948395face075c54025cb9e809b915f4ab92d1d2d8c18394e45aac28098236ffc2e5a0f6d1612cfdbd9cfcc4c4", 0xc1}], 0x4, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x15}, r2}}}], 0x40}, 0x80) 807.006766ms ago: executing program 4 (id=11029): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@loopback, 0x0}, &(0x7f0000000180)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x7, 0x700, 0xcce, 0x5, {{0x1f, 0x4, 0x2, 0x31, 0x7c, 0x65, 0x0, 0x1, 0x29, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0xb, 0x13, [@dev={0xac, 0x14, 0x14, 0x40}, @multicast1]}, @ra={0x94, 0x4}, @cipso={0x86, 0x57, 0x0, [{0x5, 0x9, "82d072fb5ebd67"}, {0x6, 0x5, "0a1755"}, {0x2, 0x9, "806611e0ada260"}, {0x2, 0x8, "77eda65e192c"}, {0x0, 0x11, "7e96bb45b82de2f480cd81f42d97b3"}, {0x5, 0x9, "4d07b9e1be1545"}, {0x7, 0x7, "a50fe3329f"}, {0x6, 0x4, "ff7a"}, {0x2, 0xd, "d030aa58ab33420b2b2482"}]}, @end]}}}}}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f00000010c0), &(0x7f0000001100)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48001}, 0x0) (async) r11 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x0, 0x2}, {0x5, 0x7}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x6004) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={@private0, 0x0}, &(0x7f00000004c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) (async) r16 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r18 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r17, @ANYBLOB="00000000000000001c001a8008000280fe0f0500080000003e"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'tunl0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x1, 0xfde, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x68, 0x0, 0x7, 0x29, 0x0, @remote, @remote, {[@end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0xff, 0x1, {{0x12, 0x4, 0x1, 0x5, 0x48, 0x64, 0x0, 0x43, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@end, @end, @timestamp_prespec={0x44, 0xc, 0x19, 0x3, 0xf, [{@empty, 0x6}]}, @timestamp_addr={0x44, 0x24, 0x99, 0x1, 0x3, [{@rand_addr=0x64010100, 0x8}, {@multicast1, 0x11aa}, {@local}, {@rand_addr=0x64010101, 0xb28}]}]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0x1, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x80, 0x1, 0x21, @remote, @private0, 0x1, 0x8, 0x955f, 0x3}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000000940)=ANY=[@ANYBLOB="d4060000", @ANYRES16=r1, @ANYBLOB="000129bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="880002804c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c0004000500060e0200000000909908fbffffff08000502e70e000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000001000008000100", @ANYRES32=r3, @ANYBLOB="4c02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400d7000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400c40900003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400feffffff40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="e8010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000000803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r14, @ANYBLOB="b40002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r15, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r17, @ANYBLOB="280102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r19, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r20, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000100080004000200000040000100240001007072696f7269747900000000000000000000000000000000000000000000000005f2080004000600000008000600000000000000", @ANYRES32=r22, @ANYBLOB], 0x6d4}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$packet(0x11, 0x3, 0x300) 803.36175ms ago: executing program 1 (id=11030): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000040)) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="24010010", @ANYRES16=r2, @ANYBLOB="00022cbd7000fedbdf252500000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x2001000}, 0x20000000) 800.320805ms ago: executing program 0 (id=11031): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r3, &(0x7f0000000380)={0xfff, 0x20, 0x6, 0x20, 0xb2}, 0x48) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f", 0x70, 0x840, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) write$tcp_mem(r3, &(0x7f0000000380)={0xfff, 0x20, 0x6, 0x20, 0xb2}, 0x48) (async) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f", 0x70, 0x840, 0x0, 0x0) (async) 660.191316ms ago: executing program 1 (id=11032): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$inet6(0xa, 0x1, 0x100) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x18, r9, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40050}, 0x4841) 651.908215ms ago: executing program 2 (id=11033): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000006201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="d8a2ffff7000fedbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x24008894) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 542.343936ms ago: executing program 0 (id=11034): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000040)="440910bc996c301c8107", 0xa) socket$inet6(0xa, 0x3, 0x4) (async) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 534.202478ms ago: executing program 1 (id=11035): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 484.61752ms ago: executing program 4 (id=11036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) (async) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x6, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0e8}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 404.529511ms ago: executing program 0 (id=11037): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@deltaction={0x118, 0x31, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0xffeffffe}, {0x16, 0x0, 0x0, 0x40000000}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8, 0x4}]}, 0xa0}, 0x1, 0xfffff000}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'veth1_to_batadv\x00', &(0x7f00000004c0)=@ethtool_wolinfo={0x5, 0x3, 0x5, "e0ccf0def8ff"}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000070bd172407fe8676409294009c79e6e2850000002e000000850000000f0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x408d6, 0x0, 0x0) unshare(0x20000400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000012f28b9cd1df621e4e2e6839de283d4164e4062f0a626c7c7090d1ea11f0bb0f177cc9dbf3dd2d8cc668d1e63f8223d2f1222dc3abc0e675d49587440c993d8eec7dae59d61fcb6952535f60aa1a145bac1d0b6b31c2f4cce5dcc83c804c999bcb763b953dd479b1e505a774a980b64183bdd2d2163cabc49f97c819e4fd9b5502f26e2c09e363c9ce01a2e8c6b9c3344b49", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100020000001c0004800500030002000000050003000000000005000300060000000800020002000000"], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x200000c4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000000c0)=0x1d, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x18) write$tun(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffb0e3ffffaaaaaaaaaabb08004500002c00002000002f9078ac1e0001e00000010000655600189078040000000000000086ddffff00000000"], 0x3e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 365.666675ms ago: executing program 1 (id=11038): r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) unshare(0x20000400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) unshare(0x2a020400) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1}, 0xc) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) close(0x3) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0xb, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x8}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r5, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r3, 0x4) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f00000001c0)) close(0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 323.632502ms ago: executing program 2 (id=11039): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x60}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1fb, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x6, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r5, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r10, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x2, &(0x7f0000000140)={@dev, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000800)=@newtaction={0x390, 0x30, 0x53b, 0x0, 0x0, {}, [{0x37c, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0x1e0, 0x12, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0xe2b, 0x5, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0xd8a, 0x20000000, 0x7, 0x1ff}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x6, 0x1, 0xfffffff8, 0x1}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xfffffffe, 0x8, 0x9, 0x4}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x5bc4, 0x20000000, 0x9, 0x2b44}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x5, 0xffffffffffffffff, 0xfffffffc}, 0x2, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x2, 0x4, 0xff, 0xc9}, 0x1, r13}}]}, {0xd4, 0x6, "b1aa476afb65e0d431a7971a4989ecd7f11e0d58c8a0ff0ee3e899a6ef492247b25b69c4c2cdb2b5c7188790a128262f6300d9a8290cfb496d144c19eb6e6410c37fdb391c11d839eb6645a1f7316b62848d903f36d6b577f4c792949f509dfa6bdf9a8557a68af56f81a246dd8412fbfd63fceb8b958abf1b00f35d9a2af8d949d12a528911923d8ec460906116d9921137d42d0bddab6cbc1fffc57870a18ead44285d8bc5eea5e72f2c5ab36a05296dc4670ade35cfdeeeaaf550068aaf1772c13a3cf3e03673169db98ee3285fb3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x90, 0x7, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x1b}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10, 0xa8a, 0xffffffffffffffff, 0xff, 0x3ff}, 0x4}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xaccc5}]}, {0x25, 0x6, "dde24f62760b8c4428d43b9b773f3bf8fba59e98ea94415b21b706f8bd3870b912"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xb4, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0x88, 0x6, "0dabb84c56bbcc0e6c12a10b1d79089b413b634f18ac30f15654f96d3d126560db16135a2dfdd3f6d9fab4c1c94a5fe850be72fc009bfa3465a4d10184765e2ac901ef721a2c1206ca8e62af78015fb29fcad3baee2e1893e9d19ea21550ad93f9a9e006f224fd06e2339189c5e4d396bda5425ce15b309aef926328b9dc5a67f139d7a3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 120.176338ms ago: executing program 4 (id=11040): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={0x58, 0x12, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2, [0x0, 0x0, 0x6], [0x0, 0x4], 0x0, [0xfffffffd]}, 0x400}, [@INET_DIAG_REQ_BYTECODE={0x9, 0x1, "1aa2d6e9a9"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100000ebfa30000000000000703000004feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030200030000001d440000000000006b0a00fe000000007303feff00000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f0000000040)='GPL\x00', 0xb2, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r3}, 0x94) 482.524µs ago: executing program 4 (id=11041): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1ab8ff00000000bfa100000000000007010000f0ffffffb702000002000000b70300000000000085000000c700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="000000000000000000000000e8ffffffffffffff0000000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0xc, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x70bd28}, 0x14}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x1500) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000000), &(0x7f0000000040)=""/98, &(0x7f0000000240)="6bd3be1f2ba368f90d0da431b93237b3c21e5db8ea75e9feb135e7c941aa56f425d6847693bdd167ccd2fef736232a1a1e92e82a9379121934d016825e6c70d4c8ba5a3d7d42b09bf03f3e95efe5e4277af63217482091150dd6c5627ef2c64497d2164af4bf4e07941e6af3d3360649155f3b0abf63dc156b417fb1b23e21ee9633189716d9d8dc719423bdc56862b32c6b22891afc802ad4ee2b68cc2c", &(0x7f0000000180)="56d0539f369b74f86909be762dec35e37af8486c03d2d69fc1964dc2c8db34c02068bea9b0addf2844a0da659adaafede96bf6c3102cc71c31342bd7", 0xc02f, r1}, 0x38) 0s ago: executing program 2 (id=11042): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async, rerun: 32) r1 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) unshare(0x22020400) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) writev(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000040)={0x6, 'xfrm0\x00', {0x1}, 0xff7f}) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'bridge_slave_0\x00', {0x1}, 0xfff7}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYRES32=r6, @ANYBLOB="fe0000ffff0000001c0012000c000100626f6e64000000000c1602000800010004"], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000095) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000001000030400000000fcffffff00000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r9, @ANYBLOB="b60263d6ea2c60715e"], 0x3c}}, 0x0) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r10, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00003123fc4ef1ce2b5c992ef7ba006a0085002abd7000fcdbdf250200000000000000040009106f6a11e4bee3c06aa146fc677fe5366e2e0b00000000000011511edaaa794ef686afd6bbe5cbe24054b2561eb580f933b70a120c0ef64e0ac4f826250de56ac8d10685394e01fa0702672ad8286c19f79a76fa885af94fec0995da02aee977ae90311b62c5ea00000000006f739b5cd77bd04f8a6933e85882a7ca485c9da33797f9fc87a5dd2df27cd9"], 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4040010) r11 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22040000) (async) sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9f202004}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf251a00000007002100616100000400cc00080001007a000000500022804c0000800800060008000000080002000500000008000200010400000800060005000000b04a01000200000008000500070000000800020005000000080006000800000008000200070000000700210062620000"], 0x80}, 0x1, 0x0, 0x0, 0x805}, 0x800) kernel console output (not intermixed with test programs): 245/0x430 [ 1137.013414][ T9164] start_dirop+0x5c/0x90 [ 1137.013435][ T9164] simple_start_creating+0xcc/0x110 [ 1137.013456][ T9164] ? __pfx_simple_start_creating+0x10/0x10 [ 1137.013477][ T9164] ? do_raw_spin_unlock+0xf5/0x210 [ 1137.013496][ T9164] ? mntput+0x65/0xc0 [ 1137.013524][ T9164] debugfs_start_creating+0xdb/0x1a0 [ 1137.013547][ T9164] __debugfs_create_file+0x6f/0x400 [ 1137.013572][ T9164] debugfs_create_file_full+0x3f/0x60 [ 1137.013597][ T9164] ref_tracker_dir_debugfs+0x197/0x360 [ 1137.013619][ T9164] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1137.013669][ T9164] ? trace_kmalloc+0x1f/0xb0 [ 1137.013683][ T9164] ? __kvmalloc_node_noprof+0x5ba/0x8d0 [ 1137.013706][ T9164] ? __raw_spin_lock_init+0x45/0x100 [ 1137.013728][ T9164] alloc_netdev_mqs+0x272/0x11b0 [ 1137.013745][ T9164] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 1137.013783][ T9164] rtnl_create_link+0x31f/0xd70 [ 1137.013807][ T9164] rtnl_newlink_create+0x277/0xb70 [ 1137.013830][ T9164] ? __pfx___nla_validate_parse+0x10/0x10 [ 1137.013862][ T9164] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1137.013888][ T9164] ? __pfx___mutex_lock+0x10/0x10 [ 1137.013923][ T9164] ? ns_capable+0x89/0xe0 [ 1137.013943][ T9164] rtnl_newlink+0x1666/0x1be0 [ 1137.013981][ T9164] ? __pfx_rtnl_newlink+0x10/0x10 [ 1137.013998][ T9164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.014055][ T9164] ? kasan_quarantine_put+0xbb/0x1f0 [ 1137.014079][ T9164] ? lockdep_hardirqs_on+0x7a/0x110 [ 1137.014106][ T9164] ? kmem_cache_free+0x195/0x610 [ 1137.014122][ T9164] ? nlmon_xmit+0xb0/0x100 [ 1137.014153][ T9164] ? __lock_acquire+0x6b5/0x2cf0 [ 1137.014185][ T9164] ? __local_bh_enable_ip+0xd0/0x130 [ 1137.014202][ T9164] ? lockdep_hardirqs_on+0x7a/0x110 [ 1137.014223][ T9164] ? __dev_queue_xmit+0x274/0x3850 [ 1137.014244][ T9164] ? __local_bh_enable_ip+0xd0/0x130 [ 1137.014259][ T9164] ? __dev_queue_xmit+0x274/0x3850 [ 1137.014289][ T9164] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1137.014325][ T9164] ? __pfx_rtnl_newlink+0x10/0x10 [ 1137.014344][ T9164] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1137.014369][ T9164] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1137.014388][ T9164] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1137.014406][ T9164] ? ref_tracker_free+0x693/0x840 [ 1137.014425][ T9164] ? __copy_skb_header+0xa3/0x4a0 [ 1137.014449][ T9164] ? __pfx_ref_tracker_free+0x10/0x10 [ 1137.014482][ T9164] netlink_rcv_skb+0x232/0x4b0 [ 1137.014503][ T9164] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1137.014525][ T9164] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1137.014554][ T9164] ? netlink_deliver_tap+0x2e/0x1b0 [ 1137.014577][ T9164] netlink_unicast+0x80f/0x9b0 [ 1137.014600][ T9164] ? __pfx_netlink_unicast+0x10/0x10 [ 1137.014619][ T9164] ? netlink_sendmsg+0x650/0xb40 [ 1137.014634][ T9164] ? skb_put+0x11b/0x210 [ 1137.014656][ T9164] netlink_sendmsg+0x813/0xb40 [ 1137.014682][ T9164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1137.014700][ T9164] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1137.014720][ T9164] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1137.014741][ T9164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1137.014765][ T9164] ____sys_sendmsg+0xa68/0xad0 [ 1137.014786][ T9164] ? __might_fault+0xaf/0x130 [ 1137.014814][ T9164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1137.014846][ T9164] ? import_iovec+0x73/0xa0 [ 1137.014872][ T9164] ___sys_sendmsg+0x2a5/0x360 [ 1137.014892][ T9164] ? __lock_acquire+0x6b5/0x2cf0 [ 1137.014918][ T9164] ? __pfx____sys_sendmsg+0x10/0x10 [ 1137.014974][ T9164] ? __fget_files+0x2a/0x420 [ 1137.014991][ T9164] ? __fget_files+0x3a0/0x420 [ 1137.015017][ T9164] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1137.015041][ T9164] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1137.015074][ T9164] ? __pfx_ksys_write+0x10/0x10 [ 1137.015110][ T9164] do_syscall_64+0xe2/0xf80 [ 1137.015132][ T9164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.015149][ T9164] ? trace_irq_disable+0x37/0x100 [ 1137.015165][ T9164] ? clear_bhb_loop+0x60/0xb0 [ 1137.015187][ T9164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.015204][ T9164] RIP: 0033:0x7f05c8d9af79 [ 1137.015222][ T9164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.015238][ T9164] RSP: 002b:00007f05c9cc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1137.015258][ T9164] RAX: ffffffffffffffda RBX: 00007f05c9015fa0 RCX: 00007f05c8d9af79 [ 1137.015272][ T9164] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1137.015283][ T9164] RBP: 00007f05c9cc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.015295][ T9164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.015306][ T9164] R13: 00007f05c9016038 R14: 00007f05c9015fa0 R15: 00007ffc5b933188 [ 1137.015337][ T9164] [ 1137.675407][ T9166] lo speed is unknown, defaulting to 1000 [ 1137.971399][ T9187] netlink: 'syz.2.9667': attribute type 21 has an invalid length. [ 1137.986971][ T9184] lo speed is unknown, defaulting to 1000 [ 1138.047175][ T9190] syzkaller1: entered promiscuous mode [ 1138.080258][ T9190] syzkaller1: entered allmulticast mode [ 1138.159498][ T9166] lo speed is unknown, defaulting to 1000 [ 1138.426237][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9674'. [ 1138.491532][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9674'. [ 1138.687706][ T9166] lo speed is unknown, defaulting to 1000 [ 1138.717179][ T9184] lo speed is unknown, defaulting to 1000 [ 1138.729035][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9675'. [ 1138.770338][ T9208] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9678'. [ 1138.778292][ T9206] syzkaller0: entered promiscuous mode [ 1138.786028][ T9206] syzkaller0: entered allmulticast mode [ 1138.793701][ T9202] netlink: 'syz.0.9675': attribute type 4 has an invalid length. [ 1138.800375][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9677'. [ 1138.818627][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9678'. [ 1139.036988][ T9212] tipc: Enabled bearer , priority 0 [ 1139.058501][ T9212] syzkaller0: entered promiscuous mode [ 1139.064014][ T9212] syzkaller0: entered allmulticast mode [ 1139.090596][ T9184] lo speed is unknown, defaulting to 1000 [ 1139.110824][ T9215] vlan2: entered allmulticast mode [ 1139.969562][ T9212] tipc: Resetting bearer [ 1140.023899][ T9212] tipc: Disabling bearer [ 1140.542616][ T9251] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9691'. [ 1140.797666][ T9266] Unsupported ieee802154 address type: 0 [ 1141.017042][ T9271] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1141.049094][ T9282] netlink: 'syz.4.9699': attribute type 15 has an invalid length. [ 1141.311121][ T9300] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9706'. [ 1141.420289][ T9306] netlink: 'syz.0.9704': attribute type 10 has an invalid length. [ 1141.478357][ T9296] netlink: 'syz.0.9704': attribute type 6 has an invalid length. [ 1141.533052][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9704'. [ 1141.636921][ T9306] team0: Port device netdevsim0 added [ 1142.086225][ T9332] tipc: Enabled bearer , priority 0 [ 1142.099281][ T9332] syzkaller0: entered promiscuous mode [ 1142.146882][ T9332] syzkaller0: entered allmulticast mode [ 1142.209364][ T9332] tipc: Resetting bearer [ 1142.231844][ T9344] netlink: 296 bytes leftover after parsing attributes in process `syz.0.9718'. [ 1142.271073][ T9332] tipc: Disabling bearer [ 1142.313443][ T9344] lo speed is unknown, defaulting to 1000 [ 1142.326644][ T9345] lo speed is unknown, defaulting to 1000 [ 1142.609182][ T9344] lo speed is unknown, defaulting to 1000 [ 1142.766207][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9721'. [ 1142.813611][ T9357] ip6gre1: entered promiscuous mode [ 1142.829927][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9721'. [ 1143.122798][ T9364] netlink: 'syz.1.9724': attribute type 1 has an invalid length. [ 1143.131604][ T9364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1143.163250][ T9345] lo speed is unknown, defaulting to 1000 [ 1143.170621][ T9344] lo speed is unknown, defaulting to 1000 [ 1143.275951][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1143.287816][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1143.297368][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1143.307516][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1143.319071][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1143.603191][ T9345] lo speed is unknown, defaulting to 1000 [ 1143.610552][ T9350] siw: device registration error -23 [ 1143.613573][ T9366] lo speed is unknown, defaulting to 1000 [ 1143.972118][ T9366] lo speed is unknown, defaulting to 1000 [ 1144.219653][ T9366] lo speed is unknown, defaulting to 1000 [ 1144.267881][ T9391] ipvlan2: entered promiscuous mode [ 1144.274568][ T9391] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1144.909865][ T9404] netlink: 'syz.1.9736': attribute type 11 has an invalid length. [ 1144.942057][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9736'. [ 1145.142246][ T9366] chnl_net:caif_netlink_parms(): no params data found [ 1145.395487][T19915] Bluetooth: hci3: command tx timeout [ 1145.484066][ T9417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.488998][ T9416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9739'. [ 1145.493621][ T9417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.532122][ T9417] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1145.604527][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9742'. [ 1145.691850][ T9424] bridge_slave_0: left promiscuous mode [ 1145.699176][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.789790][ T9366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.805684][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.812967][ T9366] bridge_slave_0: entered allmulticast mode [ 1145.837318][ T9366] bridge_slave_0: entered promiscuous mode [ 1145.876137][ T9366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.883334][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.906259][ T9366] bridge_slave_1: entered allmulticast mode [ 1145.919939][ T9366] bridge_slave_1: entered promiscuous mode [ 1145.935935][ T56] block nbd5: Possible stuck request ffff888025690000: control (read@17181900800,65536B). Runtime 120 seconds [ 1146.007237][ T9366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.037361][ T9366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.115935][ T9445] netlink: 'syz.0.9748': attribute type 1 has an invalid length. [ 1146.315990][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9747'. [ 1146.388566][ T9366] team0: Port device team_slave_0 added [ 1146.416763][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9747'. [ 1146.446496][ T9366] team0: Port device team_slave_1 added [ 1146.528017][ T9446] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9747'. [ 1146.589242][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.602144][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.630474][ T9366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.643934][ T9366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.651558][ T9366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.679046][ T9366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.773702][ T9366] hsr_slave_0: entered promiscuous mode [ 1146.797982][ T9366] hsr_slave_1: entered promiscuous mode [ 1146.817204][ T9366] debugfs: 'hsr0' already exists in 'hsr' [ 1146.823079][ T9366] Cannot create hsr debugfs directory [ 1147.143830][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9755'. [ 1147.260228][ T9486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9755'. [ 1147.456003][T19915] Bluetooth: hci3: command tx timeout [ 1147.733198][ T9366] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.837315][ T9366] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.933918][ T9366] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.057225][ T9366] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.077923][ T9502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9764'. [ 1148.378290][ T9366] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1148.411500][ T9366] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1148.413031][ T9522] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1148.468893][ T9514] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1148.478997][ T9366] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1148.532475][ T9366] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1148.826026][ T9366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.869363][ T9366] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.894170][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.901453][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.961981][T32643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.969185][T32643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.082474][ T9366] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1149.110392][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9780'. [ 1149.120129][ T9366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1149.537850][T19915] Bluetooth: hci3: command tx timeout [ 1149.641823][ T9582] syzkaller1: entered promiscuous mode [ 1149.663700][ T9582] syzkaller1: entered allmulticast mode [ 1149.714496][ T9594] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1149.840612][ T9366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.997720][ T9605] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9795'. [ 1150.069713][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9795'. [ 1150.081423][ T9612] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1150.093999][ T9366] veth0_vlan: entered promiscuous mode [ 1150.133935][ T9366] veth1_vlan: entered promiscuous mode [ 1150.199193][ T9366] veth0_macvtap: entered promiscuous mode [ 1150.212082][ T9366] veth1_macvtap: entered promiscuous mode [ 1150.242795][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.270238][ T9366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.288392][T32643] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.307426][T32643] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.332811][T32643] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.396746][T32643] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.473466][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.485651][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.551416][T32643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.570210][T32643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.750865][ T9631] vlan2: entered promiscuous mode [ 1150.763826][ T9631] vlan2: entered allmulticast mode [ 1150.781175][ T9631] hsr_slave_1: entered allmulticast mode [ 1150.800206][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9723'. [ 1150.808854][ T9628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.818636][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.893929][ T9628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.931932][ T9650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.932329][ T9632] lo speed is unknown, defaulting to 1000 [ 1150.966168][ T9650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.982284][ T9628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.008935][ T9650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.308488][ T9632] lo speed is unknown, defaulting to 1000 [ 1151.469456][ T9671] xt_hashlimit: size too large, truncated to 1048576 [ 1151.570343][ T9675] bond2: option lacp_rate: invalid value (192) [ 1151.607541][ T9675] bond2 (unregistering): Released all slaves [ 1151.618013][T19915] Bluetooth: hci3: command tx timeout [ 1151.687314][ T9632] lo speed is unknown, defaulting to 1000 [ 1152.143707][ T9696] bridge0: entered promiscuous mode [ 1152.149725][ T9696] bridge0: entered allmulticast mode [ 1152.158842][ T9696] team0: Port device bridge0 added [ 1152.166883][ T9698] bridge0: port 1(team0) entered blocking state [ 1152.173223][ T9698] bridge0: port 1(team0) entered disabled state [ 1152.205646][ T9698] team0: entered allmulticast mode [ 1152.215411][ T9698] team_slave_0: entered allmulticast mode [ 1152.221185][ T9698] team_slave_1: entered allmulticast mode [ 1152.262040][ T9698] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1152.339233][ T9698] team0: left allmulticast mode [ 1152.344153][ T9698] team_slave_0: left allmulticast mode [ 1152.362651][ T9698] team_slave_1: left allmulticast mode [ 1152.375561][ T9698] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1152.429828][ T9713] __nla_validate_parse: 2 callbacks suppressed [ 1152.429853][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9819'. [ 1152.438620][ T9701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9819'. [ 1152.485633][ T9708] netlink: 'syz.2.9819': attribute type 11 has an invalid length. [ 1152.494799][ T9708] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9819'. [ 1152.807558][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9821'. [ 1152.863552][ T9721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9821'. [ 1153.000962][ T9733] vlan0: entered allmulticast mode [ 1153.006349][ T9733] team0: entered allmulticast mode [ 1153.021341][ T9733] team_slave_0: entered allmulticast mode [ 1153.038492][ T9733] team_slave_1: entered allmulticast mode [ 1153.053581][ T9733] mac80211_hwsim hwsim100 wlan0: entered allmulticast mode [ 1153.425629][ T9743] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9829'. [ 1153.488854][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9831'. [ 1154.049985][ T9780] netlink: 'syz.1.9840': attribute type 1 has an invalid length. [ 1154.145947][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9841'. [ 1154.181012][ T9785] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9840'. [ 1154.226954][ T9784] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1154.237625][ T9784] bond2: (slave bond3): making interface the new active one [ 1154.246592][ T9784] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1154.303991][ T9791] bridge1: port 1(veth0_to_bond) entered blocking state [ 1154.321150][ T9791] bridge1: port 1(veth0_to_bond) entered disabled state [ 1154.331358][ T9791] veth0_to_bond: entered allmulticast mode [ 1154.342297][ T9791] veth0_to_bond: entered promiscuous mode [ 1154.358353][ T9780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9840'. [ 1154.410907][ T9793] syz_tun: entered promiscuous mode [ 1154.462019][ T9793] vlan3: entered promiscuous mode [ 1154.518732][ T9780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1154.737245][ T9813] netlink: 'syz.4.9850': attribute type 1 has an invalid length. [ 1154.949604][ T9826] tipc: New replicast peer: 0.0.0.0 [ 1154.968425][ T9826] tipc: Enabled bearer , priority 10 [ 1155.142971][ T9833] sctp: [Deprecated]: syz.4.9856 (pid 9833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1155.142971][ T9833] Use struct sctp_sack_info instead [ 1156.095790][ T9] tipc: Node number set to 953928670 [ 1156.346027][ T9866] net_ratelimit: 14 callbacks suppressed [ 1156.346046][ T9866] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1156.691676][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.700523][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.769850][ T9882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.777189][ T9882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.784712][ T9882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.791925][ T9882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.803515][ T9882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.810809][ T9882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.835513][ T9892] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1157.594509][ T9921] syzkaller0: entered promiscuous mode [ 1157.601621][ T9921] syzkaller0: entered allmulticast mode [ 1157.610988][ T9925] xt_hashlimit: size too large, truncated to 1048576 [ 1157.823264][ T9932] __nla_validate_parse: 9 callbacks suppressed [ 1157.823283][ T9932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9886'. [ 1157.855997][ T9932] netlink: 213 bytes leftover after parsing attributes in process `syz.0.9886'. [ 1157.963450][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9886'. [ 1158.003857][ T9939] lo speed is unknown, defaulting to 1000 [ 1158.406402][ T9962] xt_hashlimit: size too large, truncated to 1048576 [ 1158.469267][ T9960] batadv0: entered promiscuous mode [ 1158.501696][ T9960] vlan3: entered promiscuous mode [ 1158.637900][ T9939] lo speed is unknown, defaulting to 1000 [ 1158.919240][ T9939] lo speed is unknown, defaulting to 1000 [ 1159.037851][ T9981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9897'. [ 1159.341329][ T9990] policy can only be matched on NF_INET_PRE_ROUTING [ 1159.341350][ T9990] unable to load match [ 1160.186951][T10013] netlink: 'syz.4.9908': attribute type 4 has an invalid length. [ 1160.421849][T10021] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9912'. [ 1160.450831][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9912'. [ 1160.651678][T10036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.692733][T32638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.725502][T32638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.780699][T10035] lo speed is unknown, defaulting to 1000 [ 1161.062856][T10035] lo speed is unknown, defaulting to 1000 [ 1161.204548][T10049] lo speed is unknown, defaulting to 1000 [ 1161.360275][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9920'. [ 1161.407142][T10069] sctp: [Deprecated]: syz.4.9920 (pid 10069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1161.407142][T10069] Use struct sctp_sack_info instead [ 1161.466736][T10035] lo speed is unknown, defaulting to 1000 [ 1161.693079][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9924'. [ 1161.935683][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1161.990861][T10049] lo speed is unknown, defaulting to 1000 [ 1162.253666][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9927'. [ 1162.292755][T10091] nbd: illegal input index -1113835520 [ 1162.321982][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9928'. [ 1162.340701][T10091] ipvlan2: entered promiscuous mode [ 1162.353980][T10091] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1162.366500][T10091] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1162.432547][T10049] lo speed is unknown, defaulting to 1000 [ 1162.861535][T10104] syzkaller0: entered promiscuous mode [ 1162.867831][T10104] syzkaller0: entered allmulticast mode [ 1163.004436][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9935'. [ 1163.017975][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9936'. [ 1163.101423][T10122] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9935'. [ 1163.558217][T10139] syzkaller0: entered promiscuous mode [ 1163.563748][T10139] syzkaller0: entered allmulticast mode [ 1163.699884][T10144] ipvlan3: entered promiscuous mode [ 1163.725986][T10144] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1163.740148][T10144] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1163.803618][T10147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9943'. [ 1163.834244][T10151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1163.841588][T10151] IPv6: NLM_F_CREATE should be set when creating new route [ 1164.022571][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 1164.031439][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9945'. [ 1164.205117][T10166] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9949'. [ 1164.262008][T10161] syzkaller0: entered promiscuous mode [ 1164.302084][T10161] syzkaller0: entered allmulticast mode [ 1164.348710][T10171] syzkaller0: entered promiscuous mode [ 1164.354680][T10171] syzkaller0: entered allmulticast mode [ 1164.541787][T10180] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9953'. [ 1164.577692][T10186] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1164.632809][T10186] netlink: 'syz.2.9954': attribute type 10 has an invalid length. [ 1164.675550][ T9] IPVS: starting estimator thread 0... [ 1164.785521][T10190] IPVS: using max 33 ests per chain, 79200 per kthread [ 1166.658287][T10186] team0: Port device dummy0 added [ 1166.669531][T10194] ipvlan3: entered promiscuous mode [ 1166.676607][T10194] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1166.686676][T10194] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1166.871641][T10203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9958'. [ 1166.900317][T10203] team_slave_0: entered promiscuous mode [ 1166.906712][T10203] team_slave_1: entered promiscuous mode [ 1166.912533][T10203] dummy0: entered promiscuous mode [ 1167.101278][T10215] netlink: 'syz.2.9963': attribute type 1 has an invalid length. [ 1167.137941][T10215] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9963'. [ 1167.169935][T10222] netlink: 'syz.1.9962': attribute type 9 has an invalid length. [ 1167.180278][T10219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9964'. [ 1167.521013][T10231] syzkaller0: entered promiscuous mode [ 1167.537132][T10231] syzkaller0: entered allmulticast mode [ 1167.547255][T10234] syzkaller0: tun_net_xmit 1 [ 1168.022179][T10245] __nla_validate_parse: 3 callbacks suppressed [ 1168.022201][T10245] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9971'. [ 1168.039609][T10245] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9971'. [ 1168.090470][T10245] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9971'. [ 1168.105699][T10245] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9971'. [ 1168.203652][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9974'. [ 1168.212773][T10249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9974'. [ 1168.767774][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9978'. [ 1169.142848][ T5828] Bluetooth: hci0: command 0x0419 tx timeout [ 1170.489668][T10279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9979'. [ 1170.585576][T10261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.894766][T10297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9982'. [ 1170.975830][T10261] bridge_slave_1: left promiscuous mode [ 1170.991326][T10261] bridge_slave_1: left allmulticast mode [ 1171.135579][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.154085][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.240560][T10302] netlink: 'syz.4.9983': attribute type 10 has an invalid length. [ 1171.511158][T10261] vlan4: left promiscuous mode [ 1171.521223][T10261] bridge0: left promiscuous mode [ 1171.527869][T10261] geneve0: left promiscuous mode [ 1171.532820][T10261] geneve0: left allmulticast mode [ 1171.580463][T10286] lo speed is unknown, defaulting to 1000 [ 1171.595725][T10291] tipc: Enabling of bearer rejected, failed to enable media [ 1171.649779][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1171.666321][T10066] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1171.687097][T10066] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1171.715863][T10066] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1171.802704][T10066] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1171.819754][T10066] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1171.830372][T10066] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1171.847333][T10312] ipvlan2: entered promiscuous mode [ 1171.853420][T10312] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1171.887391][T10312] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1171.931016][T10066] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1171.952072][T10066] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1171.961831][T10286] lo speed is unknown, defaulting to 1000 [ 1171.961908][T10314] netlink: 1100 bytes leftover after parsing attributes in process `syz.3.9987'. [ 1172.101768][T10323] lo speed is unknown, defaulting to 1000 [ 1172.139835][T10327] netlink: 'syz.4.9990': attribute type 10 has an invalid length. [ 1172.451056][T10345] netlink: 'syz.2.9995': attribute type 13 has an invalid length. [ 1172.814360][T10345] team_slave_0: left promiscuous mode [ 1172.830783][T10345] team_slave_1: left promiscuous mode [ 1172.837065][T10345] dummy0: left promiscuous mode [ 1172.931077][T10345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1172.948420][T10345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1173.165405][T10286] lo speed is unknown, defaulting to 1000 [ 1173.192467][T10323] lo speed is unknown, defaulting to 1000 [ 1173.258558][T10066] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.286402][T10066] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.312082][T10066] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.335679][T10066] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.441757][T10361] ipvlan2: entered promiscuous mode [ 1173.449419][T10361] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1173.460668][T10361] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1173.650867][T10323] lo speed is unknown, defaulting to 1000 [ 1175.723696][T10374] vlan3: entered promiscuous mode [ 1175.828080][T10379] __nla_validate_parse: 6 callbacks suppressed [ 1175.828101][T10379] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10005'. [ 1175.907346][T10382] netlink: 'syz.0.10005': attribute type 10 has an invalid length. [ 1175.986383][T10383] xt_hashlimit: size too large, truncated to 1048576 [ 1176.017809][ T56] block nbd5: Possible stuck request ffff888025690000: control (read@17181900800,65536B). Runtime 150 seconds [ 1176.147816][T10381] --map-set only usable from mangle table [ 1176.182749][T10382] veth0_vlan: left promiscuous mode [ 1176.215132][T10382] veth0_vlan: entered promiscuous mode [ 1176.226397][T10382] team0: Device veth0_vlan failed to register rx_handler [ 1176.410060][T10387] lo speed is unknown, defaulting to 1000 [ 1176.468327][T10395] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10009'. [ 1176.784439][T10399] lo speed is unknown, defaulting to 1000 [ 1176.816954][T10387] lo speed is unknown, defaulting to 1000 [ 1176.878212][T10412] lo: entered allmulticast mode [ 1176.894599][T10412] lo: left allmulticast mode [ 1177.250189][T10387] lo speed is unknown, defaulting to 1000 [ 1177.257406][T10399] lo speed is unknown, defaulting to 1000 [ 1177.301553][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.318711][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1177.436061][T10435] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10020'. [ 1177.446059][T10435] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10020'. [ 1177.801894][T10444] vlan6: entered allmulticast mode [ 1177.815545][T10444] veth0_to_bond: entered allmulticast mode [ 1177.836253][T10444] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.10023'. [ 1177.921114][T10399] lo speed is unknown, defaulting to 1000 [ 1178.332732][T10447] lo speed is unknown, defaulting to 1000 [ 1178.428172][T10454] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1178.686161][T10462] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10026'. [ 1178.885954][T10468] IPv6: sit1: Disabled Multicast RS [ 1179.126306][T10447] lo speed is unknown, defaulting to 1000 [ 1179.379101][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 1180.162131][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10039'. [ 1180.207142][T32646] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1180.216034][T32646] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1180.224469][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10039'. [ 1180.244543][T32646] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1180.316293][T10447] lo speed is unknown, defaulting to 1000 [ 1180.325076][T32646] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1180.670528][T10520] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.10040'. [ 1180.682047][T10520] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1180.990025][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1181.008590][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10044'. [ 1181.395717][T10557] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10047'. [ 1181.449166][T10553] lo speed is unknown, defaulting to 1000 [ 1182.142505][T10553] lo speed is unknown, defaulting to 1000 [ 1182.706937][T10620] bridge0: Device is already in use. [ 1182.733901][T10619] syzkaller0: entered promiscuous mode [ 1182.745728][T10619] syzkaller0: entered allmulticast mode [ 1182.894736][T10553] lo speed is unknown, defaulting to 1000 [ 1183.034618][T10635] netlink: 'syz.4.10063': attribute type 13 has an invalid length. [ 1183.271498][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10065'. [ 1183.463169][T10654] dummy0: entered allmulticast mode [ 1183.528853][T10650] dummy0: left allmulticast mode [ 1183.726145][T10665] ipvlan2: entered promiscuous mode [ 1183.748870][T10665] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1183.776296][T10665] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1184.062357][T10673] lo speed is unknown, defaulting to 1000 [ 1184.145527][T10678] syzkaller0: entered promiscuous mode [ 1184.151053][T10678] syzkaller0: entered allmulticast mode [ 1184.628936][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10080'. [ 1184.675792][T10713] netlink: 'syz.2.10081': attribute type 2 has an invalid length. [ 1184.699660][T10713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10081'. [ 1184.961937][T10750] netlink: 'syz.3.10084': attribute type 6 has an invalid length. [ 1185.003699][T10673] lo speed is unknown, defaulting to 1000 [ 1185.324764][T10779] netlink: 'syz.3.10087': attribute type 13 has an invalid length. [ 1185.669124][T10819] lo speed is unknown, defaulting to 1000 [ 1185.760492][T10673] lo speed is unknown, defaulting to 1000 [ 1185.862690][T10858] lo: Caught tx_queue_len zero misconfig [ 1186.233926][T10871] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10098'. [ 1186.308837][T10819] lo speed is unknown, defaulting to 1000 [ 1186.740209][T10882] syzkaller1: entered promiscuous mode [ 1186.782615][T10882] syzkaller1: entered allmulticast mode [ 1187.192112][T10908] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.10106'. [ 1187.260206][T10898] tipc: Enabling of bearer rejected, failed to enable media [ 1187.311043][T10819] lo speed is unknown, defaulting to 1000 [ 1187.986889][T10937] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 1188.029934][T10939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10115'. [ 1188.062016][T10932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.244043][T10942] syz_tun: entered promiscuous mode [ 1188.264959][T10942] vlan4: entered promiscuous mode [ 1188.324666][T10944] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1188.336341][T10944] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 1188.670852][T10954] netlink: 'syz.0.10120': attribute type 10 has an invalid length. [ 1188.690698][T10954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10120'. [ 1188.720989][T10952] pim6reg: entered allmulticast mode [ 1188.748819][T10952] pim6reg: left allmulticast mode [ 1188.895216][T10954] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 1188.907959][T10954] team0: Failed to send options change via netlink (err -105) [ 1188.919818][T10954] team0: Port device geneve0 added [ 1188.948662][T32646] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.959010][T32646] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1188.987771][T32646] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1189.026402][T32646] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1189.433214][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10130'. [ 1189.444587][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10130'. [ 1189.455491][T10988] netlink: 58 bytes leftover after parsing attributes in process `syz.1.10130'. [ 1189.479720][T10994] ipvlan2: entered promiscuous mode [ 1189.490379][T10994] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1189.500742][T10994] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1189.748020][T11002] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10137'. [ 1189.829770][T11006] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1190.131004][ T1090] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1190.243395][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10144'. [ 1190.382316][T11037] ipvlan2: entered promiscuous mode [ 1190.420528][T11037] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1190.449763][T11037] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1190.733020][T11051] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10151'. [ 1190.885845][T11015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.979246][T11061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1191.183201][T11072] 6eth1_to_bond: renamed from ip_vti0 [ 1191.198396][T11072] A link change request failed with some changes committed already. Interface 6eth1_to_bond may have been left with an inconsistent configuration, please check. [ 1191.279469][T11073] lo speed is unknown, defaulting to 1000 [ 1191.446467][T11073] lo speed is unknown, defaulting to 1000 [ 1191.562140][T11073] lo speed is unknown, defaulting to 1000 [ 1193.055880][T11016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1193.067584][T11046] netlink: 'syz.3.10150': attribute type 1 has an invalid length. [ 1193.085511][T11046] __nla_validate_parse: 4 callbacks suppressed [ 1193.085532][T11046] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10150'. [ 1193.116596][T11078] netlink: 504 bytes leftover after parsing attributes in process `syz.1.10160'. [ 1193.262837][T11084] ipvlan2: entered promiscuous mode [ 1193.287215][T11084] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1193.317684][T11084] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1193.371776][T11089] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10163'. [ 1193.393830][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10163'. [ 1193.407141][T11086] vlan7: entered promiscuous mode [ 1193.415998][T11086] vlan7: entered allmulticast mode [ 1193.421311][T11086] hsr_slave_1: entered allmulticast mode [ 1193.600126][T11102] lo speed is unknown, defaulting to 1000 [ 1193.739761][T11118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1193.808968][T11121] FAULT_INJECTION: forcing a failure. [ 1193.808968][T11121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1193.842883][T11121] CPU: 1 UID: 0 PID: 11121 Comm: syz.1.10174 Not tainted syzkaller #0 PREEMPT(full) [ 1193.842930][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1193.842952][T11121] Call Trace: [ 1193.842960][T11121] [ 1193.842969][T11121] dump_stack_lvl+0xe8/0x150 [ 1193.842997][T11121] should_fail_ex+0x412/0x560 [ 1193.843023][T11121] _copy_from_user+0x2d/0xb0 [ 1193.843048][T11121] sctp_setsockopt+0x1c4/0x12c0 [ 1193.843070][T11121] ? sock_common_setsockopt+0x36/0xc0 [ 1193.843090][T11121] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1193.843122][T11121] do_sock_setsockopt+0x17c/0x1b0 [ 1193.843149][T11121] __x64_sys_setsockopt+0x13d/0x1b0 [ 1193.843174][T11121] do_syscall_64+0xe2/0xf80 [ 1193.843196][T11121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.843212][T11121] ? trace_irq_disable+0x37/0x100 [ 1193.843229][T11121] ? clear_bhb_loop+0x60/0xb0 [ 1193.843250][T11121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.843275][T11121] RIP: 0033:0x7f629f19af79 [ 1193.843292][T11121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.843307][T11121] RSP: 002b:00007f62a0094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1193.843326][T11121] RAX: ffffffffffffffda RBX: 00007f629f415fa0 RCX: 00007f629f19af79 [ 1193.843339][T11121] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 1193.843350][T11121] RBP: 00007f62a0094090 R08: 000000000000009c R09: 0000000000000000 [ 1193.843361][T11121] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 1193.843373][T11121] R13: 00007f629f416038 R14: 00007f629f415fa0 R15: 00007ffdef892ff8 [ 1193.843402][T11121] [ 1193.873438][T11124] netlink: 'syz.0.10175': attribute type 1 has an invalid length. [ 1194.022612][T11102] lo speed is unknown, defaulting to 1000 [ 1194.068891][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10171'. [ 1194.185659][T11124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1194.322291][T11126] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1194.395697][T11129] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1194.410164][T11129] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1194.484043][T11133] ipvlan0: entered promiscuous mode [ 1194.491367][T11133] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1194.501263][T11133] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1194.576654][T11102] lo speed is unknown, defaulting to 1000 [ 1194.668480][T11139] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10180'. [ 1194.804712][T11146] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10181'. [ 1194.968696][T11153] netlink: 'syz.1.10183': attribute type 1 has an invalid length. [ 1195.097592][T11158] bond4: (slave bridge3): making interface the new active one [ 1195.139424][T11158] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1196.218310][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10194'. [ 1196.578461][T11219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10198'. [ 1196.588505][T11219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10198'. [ 1196.771813][T11228] batadv_slave_1: entered promiscuous mode [ 1196.792110][T11227] batadv_slave_1: left promiscuous mode [ 1196.998272][T11244] ipvlan3: entered promiscuous mode [ 1197.008068][T11244] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1197.263257][T11263] tunl0: Caught tx_queue_len zero misconfig [ 1197.330434][T11268] netlink: 'syz.2.10215': attribute type 3 has an invalid length. [ 1197.671559][T11285] ipvlan2: entered promiscuous mode [ 1197.678943][T11285] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1198.058242][T11319] tipc: Enabled bearer , priority 0 [ 1198.077472][T11319] syzkaller0: entered promiscuous mode [ 1198.082988][T11319] syzkaller0: entered allmulticast mode [ 1198.158826][T11319] tipc: Resetting bearer [ 1198.189795][T11318] tipc: Resetting bearer [ 1198.226024][T11318] tipc: Disabling bearer [ 1198.236755][T11327] sctp: [Deprecated]: syz.3.10231 (pid 11327) Use of int in max_burst socket option deprecated. [ 1198.236755][T11327] Use struct sctp_assoc_value instead [ 1198.432525][T11340] __nla_validate_parse: 4 callbacks suppressed [ 1198.432544][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10236'. [ 1198.636280][T11352] lo speed is unknown, defaulting to 1000 [ 1198.740243][T11363] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10243'. [ 1198.751946][T11364] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10243'. [ 1198.905436][T11352] lo speed is unknown, defaulting to 1000 [ 1199.097127][T11374] lo speed is unknown, defaulting to 1000 [ 1199.235928][T11352] lo speed is unknown, defaulting to 1000 [ 1199.265729][T11379] mac80211_hwsim hwsim98 ªªªªª;: renamed from wlan0 (while UP) [ 1199.486542][T11374] lo speed is unknown, defaulting to 1000 [ 1199.513924][T11388] vlan1: entered promiscuous mode [ 1199.534341][T11388] syz_tun: entered promiscuous mode [ 1199.749289][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10253'. [ 1199.762496][T11374] lo speed is unknown, defaulting to 1000 [ 1199.847209][T11400] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1199.854750][T11400] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1200.094033][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10254'. [ 1200.131908][T11416] set match dimension is over the limit! [ 1200.510330][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10258'. [ 1200.534139][T11429] netlink: 'syz.4.10258': attribute type 1 has an invalid length. [ 1200.914298][T19915] block nbd8: Receive control failed (result -32) [ 1202.895105][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1203.151789][T11456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10265'. [ 1203.161557][T11454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10265'. [ 1203.182629][T11455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10264'. [ 1203.239770][T11460] ipvlan3: entered promiscuous mode [ 1203.259098][T11460] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1203.293761][T11464] netlink: 'syz.2.10267': attribute type 1 has an invalid length. [ 1203.297708][T11460] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1203.337199][T11460] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 1203.426257][T11468] x_tables: duplicate underflow at hook 3 [ 1203.467072][T11475] FAULT_INJECTION: forcing a failure. [ 1203.467072][T11475] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.484384][T11468] netlink: 7 bytes leftover after parsing attributes in process `syz.0.10268'. [ 1203.527334][T11478] netlink: 'syz.3.10273': attribute type 10 has an invalid length. [ 1203.536273][T11478] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10273'. [ 1203.546715][T11475] CPU: 1 UID: 0 PID: 11475 Comm: syz.4.10271 Not tainted syzkaller #0 PREEMPT(full) [ 1203.546737][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1203.546748][T11475] Call Trace: [ 1203.546755][T11475] [ 1203.546762][T11475] dump_stack_lvl+0xe8/0x150 [ 1203.546797][T11475] should_fail_ex+0x412/0x560 [ 1203.546822][T11475] should_failslab+0xa8/0x100 [ 1203.546843][T11475] __kmalloc_cache_noprof+0x83/0x6e0 [ 1203.546859][T11475] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 1203.546881][T11475] alloc_netdev_mqs+0xbf8/0x11b0 [ 1203.546904][T11475] rtnl_create_link+0x31f/0xd70 [ 1203.546928][T11475] rtnl_newlink_create+0x277/0xb70 [ 1203.546950][T11475] ? __pfx___nla_validate_parse+0x10/0x10 [ 1203.546983][T11475] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1203.547008][T11475] ? __pfx___mutex_lock+0x10/0x10 [ 1203.547042][T11475] ? ns_capable+0x89/0xe0 [ 1203.547063][T11475] rtnl_newlink+0x1666/0x1be0 [ 1203.547099][T11475] ? __pfx_rtnl_newlink+0x10/0x10 [ 1203.547120][T11475] ? is_bpf_text_address+0x26/0x2b0 [ 1203.547146][T11475] ? __lock_acquire+0x6b5/0x2cf0 [ 1203.547176][T11475] ? __lock_acquire+0x6b5/0x2cf0 [ 1203.547199][T11475] ? __lock_acquire+0x6b5/0x2cf0 [ 1203.547230][T11475] ? unwind_next_frame+0xa5/0x23c0 [ 1203.547258][T11475] ? unwind_next_frame+0xa5/0x23c0 [ 1203.547279][T11475] ? is_bpf_text_address+0x26/0x2b0 [ 1203.547305][T11475] ? __lock_acquire+0x6b5/0x2cf0 [ 1203.547334][T11475] ? is_bpf_text_address+0x292/0x2b0 [ 1203.547353][T11475] ? is_bpf_text_address+0x26/0x2b0 [ 1203.547382][T11475] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1203.547417][T11475] ? __pfx_rtnl_newlink+0x10/0x10 [ 1203.547437][T11475] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1203.547461][T11475] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1203.547481][T11475] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1203.547501][T11475] ? __lock_acquire+0x6b5/0x2cf0 [ 1203.547535][T11475] netlink_rcv_skb+0x232/0x4b0 [ 1203.547557][T11475] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1203.547579][T11475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1203.547611][T11475] ? netlink_deliver_tap+0x2e/0x1b0 [ 1203.547639][T11475] netlink_unicast+0x80f/0x9b0 [ 1203.547666][T11475] ? __pfx_netlink_unicast+0x10/0x10 [ 1203.547687][T11475] ? netlink_sendmsg+0x650/0xb40 [ 1203.547704][T11475] ? skb_put+0x11b/0x210 [ 1203.547729][T11475] netlink_sendmsg+0x813/0xb40 [ 1203.547758][T11475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1203.547788][T11475] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1203.547810][T11475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1203.547832][T11475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1203.547850][T11475] ____sys_sendmsg+0xa68/0xad0 [ 1203.547873][T11475] ? __might_fault+0xaf/0x130 [ 1203.547903][T11475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1203.547935][T11475] ? import_iovec+0x73/0xa0 [ 1203.547962][T11475] ___sys_sendmsg+0x2a5/0x360 [ 1203.547983][T11475] ? __lock_acquire+0x6b5/0x2cf0 [ 1203.548009][T11475] ? __pfx____sys_sendmsg+0x10/0x10 [ 1203.548068][T11475] ? __fget_files+0x2a/0x420 [ 1203.548087][T11475] ? __fget_files+0x3a0/0x420 [ 1203.548116][T11475] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1203.548142][T11475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1203.548174][T11475] ? __pfx_ksys_write+0x10/0x10 [ 1203.548210][T11475] do_syscall_64+0xe2/0xf80 [ 1203.548232][T11475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.548249][T11475] ? trace_irq_disable+0x37/0x100 [ 1203.548265][T11475] ? clear_bhb_loop+0x60/0xb0 [ 1203.548286][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.548303][T11475] RIP: 0033:0x7f05c8d9af79 [ 1203.548321][T11475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.548336][T11475] RSP: 002b:00007f05c9cc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1203.548355][T11475] RAX: ffffffffffffffda RBX: 00007f05c9015fa0 RCX: 00007f05c8d9af79 [ 1203.548368][T11475] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1203.548380][T11475] RBP: 00007f05c9cc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.548391][T11475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1203.548402][T11475] R13: 00007f05c9016038 R14: 00007f05c9015fa0 R15: 00007ffc5b933188 [ 1203.548433][T11475] [ 1204.178100][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10281'. [ 1204.400884][T11505] tipc: Enabled bearer , priority 0 [ 1204.514033][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10289'. [ 1204.613140][T11503] tipc: Disabling bearer [ 1204.673857][T11514] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1204.708898][T11514] bond3 (unregistering): Released all slaves [ 1205.027285][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10299'. [ 1205.158705][T11555] ipvlan4: entered promiscuous mode [ 1205.167165][T11555] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1205.181357][T11555] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 1205.193594][T11555] bond0: (slave ipvlan4): Error -95 calling set_mac_address [ 1205.249537][T11557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10305'. [ 1205.283876][T11553] tipc: Enabled bearer , priority 0 [ 1205.303051][T11553] syzkaller0: entered promiscuous mode [ 1205.326474][T11553] syzkaller0: entered allmulticast mode [ 1205.373446][T11553] tipc: Resetting bearer [ 1205.382223][T11550] tipc: Resetting bearer [ 1205.504343][T11562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.523818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.554725][T11562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.563942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.586798][T11562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.603979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.624506][T11550] tipc: Disabling bearer [ 1205.636409][T11562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.659778][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.671468][T11562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1205.680507][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.099872][ T56] block nbd5: Possible stuck request ffff888025690000: control (read@17181900800,65536B). Runtime 180 seconds [ 1206.302328][T11566] lo speed is unknown, defaulting to 1000 [ 1206.500522][T11585] syzkaller1: entered promiscuous mode [ 1206.506715][T11585] syzkaller1: entered allmulticast mode [ 1206.718279][T11603] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1206.734029][T11603] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 1206.747446][T11603] bond0: (slave ipvlan4): Error -95 calling set_mac_address [ 1206.772919][T11566] lo speed is unknown, defaulting to 1000 [ 1206.786754][T11611] syzkaller0: entered promiscuous mode [ 1206.794008][T11611] syzkaller0: entered allmulticast mode [ 1206.827731][T11605] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10318'. [ 1206.957373][T11618] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.10322'. [ 1206.986566][T11618] netlink: 'syz.4.10322': attribute type 1 has an invalid length. [ 1207.004653][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10322'. [ 1207.103359][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10325'. [ 1207.124351][T11627] FAULT_INJECTION: forcing a failure. [ 1207.124351][T11627] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.185112][T11627] CPU: 0 UID: 0 PID: 11627 Comm: syz.3.10324 Not tainted syzkaller #0 PREEMPT(full) [ 1207.185140][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1207.185151][T11627] Call Trace: [ 1207.185159][T11627] [ 1207.185168][T11627] dump_stack_lvl+0xe8/0x150 [ 1207.185197][T11627] should_fail_ex+0x412/0x560 [ 1207.185224][T11627] should_failslab+0xa8/0x100 [ 1207.185246][T11627] __kmalloc_cache_noprof+0x83/0x6e0 [ 1207.185266][T11627] ? register_netdevice+0x582/0x1cf0 [ 1207.185306][T11627] register_netdevice+0x582/0x1cf0 [ 1207.185327][T11627] ? rtnl_create_link+0x31f/0xd70 [ 1207.185341][T11627] ? rtnl_newlink_create+0x277/0xb70 [ 1207.185359][T11627] ? rtnl_newlink+0x1666/0x1be0 [ 1207.185376][T11627] ? netlink_unicast+0x80f/0x9b0 [ 1207.185391][T11627] ? ____sys_sendmsg+0xa68/0xad0 [ 1207.185421][T11627] ? __pfx_register_netdevice+0x10/0x10 [ 1207.185442][T11627] ? ip_tunnel_find+0x441/0x520 [ 1207.185467][T11627] ? __pfx_ip_tunnel_find+0x10/0x10 [ 1207.185490][T11627] ? net_generic+0x1e/0x240 [ 1207.185510][T11627] ? ip_tunnel_newlink+0x237/0x8f0 [ 1207.185538][T11627] ip_tunnel_newlink+0x261/0x8f0 [ 1207.185564][T11627] ? __pfx_ip_tunnel_newlink+0x10/0x10 [ 1207.185589][T11627] ? ip_tunnel_netlink_parms+0x3d0/0x5b0 [ 1207.185610][T11627] ipip_newlink+0x2db/0x3c0 [ 1207.185629][T11627] ? __pfx_ipip_newlink+0x10/0x10 [ 1207.185659][T11627] ? __pfx_ipip_newlink+0x10/0x10 [ 1207.185677][T11627] rtnl_newlink_create+0x329/0xb70 [ 1207.185697][T11627] ? __pfx___nla_validate_parse+0x10/0x10 [ 1207.185728][T11627] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1207.185753][T11627] ? __pfx___mutex_lock+0x10/0x10 [ 1207.185786][T11627] ? ns_capable+0x89/0xe0 [ 1207.185807][T11627] rtnl_newlink+0x1666/0x1be0 [ 1207.185844][T11627] ? __pfx_rtnl_newlink+0x10/0x10 [ 1207.185864][T11627] ? is_bpf_text_address+0x26/0x2b0 [ 1207.185890][T11627] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.185920][T11627] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.185944][T11627] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.185975][T11627] ? unwind_next_frame+0xa5/0x23c0 [ 1207.186002][T11627] ? unwind_next_frame+0xa5/0x23c0 [ 1207.186023][T11627] ? is_bpf_text_address+0x26/0x2b0 [ 1207.186049][T11627] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.186080][T11627] ? is_bpf_text_address+0x292/0x2b0 [ 1207.186099][T11627] ? is_bpf_text_address+0x26/0x2b0 [ 1207.186130][T11627] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1207.186165][T11627] ? __pfx_rtnl_newlink+0x10/0x10 [ 1207.186185][T11627] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1207.186209][T11627] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1207.186228][T11627] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1207.186248][T11627] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.186284][T11627] netlink_rcv_skb+0x232/0x4b0 [ 1207.186311][T11627] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1207.186334][T11627] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1207.186365][T11627] ? netlink_deliver_tap+0x2e/0x1b0 [ 1207.186393][T11627] netlink_unicast+0x80f/0x9b0 [ 1207.186420][T11627] ? __pfx_netlink_unicast+0x10/0x10 [ 1207.186440][T11627] ? netlink_sendmsg+0x650/0xb40 [ 1207.186456][T11627] ? skb_put+0x11b/0x210 [ 1207.186481][T11627] netlink_sendmsg+0x813/0xb40 [ 1207.186510][T11627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.186531][T11627] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1207.186552][T11627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1207.186571][T11627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.186590][T11627] ____sys_sendmsg+0xa68/0xad0 [ 1207.186612][T11627] ? __might_fault+0xaf/0x130 [ 1207.186641][T11627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1207.186673][T11627] ? import_iovec+0x73/0xa0 [ 1207.186704][T11627] ___sys_sendmsg+0x2a5/0x360 [ 1207.186725][T11627] ? __lock_acquire+0x6b5/0x2cf0 [ 1207.186752][T11627] ? __pfx____sys_sendmsg+0x10/0x10 [ 1207.186812][T11627] ? __fget_files+0x2a/0x420 [ 1207.186830][T11627] ? __fget_files+0x3a0/0x420 [ 1207.186859][T11627] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1207.186885][T11627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1207.186917][T11627] ? __pfx_ksys_write+0x10/0x10 [ 1207.186952][T11627] do_syscall_64+0xe2/0xf80 [ 1207.186974][T11627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.186992][T11627] ? clear_bhb_loop+0x60/0xb0 [ 1207.187013][T11627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.187031][T11627] RIP: 0033:0x7f0045f9af79 [ 1207.187048][T11627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1207.187063][T11627] RSP: 002b:00007f0046daa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1207.187083][T11627] RAX: ffffffffffffffda RBX: 00007f0046215fa0 RCX: 00007f0045f9af79 [ 1207.187096][T11627] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1207.187108][T11627] RBP: 00007f0046daa090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.187119][T11627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1207.187130][T11627] R13: 00007f0046216038 R14: 00007f0046215fa0 R15: 00007ffd6d445398 [ 1207.187160][T11627] [ 1207.191872][T11566] lo speed is unknown, defaulting to 1000 [ 1207.625967][T11643] ipvlan4: entered promiscuous mode [ 1207.756981][T11643] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1207.767173][T11643] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1208.293945][T11672] vlan0: entered promiscuous mode [ 1208.307019][T11672] vlan0: entered allmulticast mode [ 1208.312783][T11672] hsr_slave_1: entered allmulticast mode [ 1208.808794][T11701] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1208.842379][T11701] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1208.883384][T11701] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 1208.933680][T11706] netlink: 'syz.1.10344': attribute type 1 has an invalid length. [ 1208.953640][T11706] __nla_validate_parse: 1 callbacks suppressed [ 1208.953659][T11706] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10344'. [ 1209.044049][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10345'. [ 1209.292592][T11720] vlan1: entered promiscuous mode [ 1209.300052][T11720] vlan1: entered allmulticast mode [ 1209.306188][T11720] hsr_slave_1: entered allmulticast mode [ 1209.360064][T11724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10350'. [ 1209.476741][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10352'. [ 1209.502565][T11730] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10353'. [ 1209.578320][T11734] ipvlan0: entered promiscuous mode [ 1209.587001][T11734] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1209.594678][T11734] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1209.883054][T11746] netlink: 'syz.1.10359': attribute type 12 has an invalid length. [ 1210.576933][T11778] syzkaller0: entered promiscuous mode [ 1210.606404][T11778] syzkaller0: entered allmulticast mode [ 1210.675412][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10368'. [ 1210.859573][T11796] netlink: 192 bytes leftover after parsing attributes in process `syz.0.10376'. [ 1210.911618][T11801] netlink: 'syz.4.10377': attribute type 4 has an invalid length. [ 1211.120247][T11812] sctp: [Deprecated]: syz.4.10381 (pid 11812) Use of int in max_burst socket option. [ 1211.120247][T11812] Use struct sctp_assoc_value instead [ 1211.167875][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10385'. [ 1211.471703][T11826] netlink: 'syz.3.10386': attribute type 1 has an invalid length. [ 1211.531155][T11826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1211.579567][T11836] bond3: (slave geneve2): making interface the new active one [ 1211.594385][T11836] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1211.811890][T10066] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.863518][T10066] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.890685][T10066] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.905567][T10066] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.994441][T11860] netlink: 43 bytes leftover after parsing attributes in process `syz.2.10396'. [ 1212.037521][T11860] IPv6: sit2: Disabled Multicast RS [ 1212.043813][T11860] sit2: entered allmulticast mode [ 1212.188770][T11865] lo speed is unknown, defaulting to 1000 [ 1212.478774][T11865] lo speed is unknown, defaulting to 1000 [ 1212.808975][T11865] lo speed is unknown, defaulting to 1000 [ 1212.878809][T11898] netlink: 'syz.1.10408': attribute type 30 has an invalid length. [ 1212.974147][T11895] lo speed is unknown, defaulting to 1000 [ 1212.992986][T11903] netlink: 'syz.4.10410': attribute type 1 has an invalid length. [ 1212.993370][T11904] netlink: 'syz.4.10410': attribute type 1 has an invalid length. [ 1213.014351][T11902] netlink: 'syz.3.10411': attribute type 8 has an invalid length. [ 1213.042573][T11904] bond6: entered promiscuous mode [ 1213.049166][T11904] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1213.463371][T11895] lo speed is unknown, defaulting to 1000 [ 1213.702928][T11935] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10415'. [ 1214.259166][T11895] lo speed is unknown, defaulting to 1000 [ 1214.404635][T11931] lo speed is unknown, defaulting to 1000 [ 1214.805722][T11963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10427'. [ 1215.086139][T11971] netlink: 260 bytes leftover after parsing attributes in process `syz.2.10429'. [ 1215.209196][T11979] syzkaller0: entered promiscuous mode [ 1215.215702][T11979] syzkaller0: entered allmulticast mode [ 1215.292203][T11931] lo speed is unknown, defaulting to 1000 [ 1215.850072][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10433'. [ 1217.469772][T11931] lo speed is unknown, defaulting to 1000 [ 1217.496300][T11994] netlink: 'syz.0.10433': attribute type 5 has an invalid length. [ 1217.504129][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10433'. [ 1217.566105][T11989] lo speed is unknown, defaulting to 1000 [ 1217.868454][T12008] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10437'. [ 1218.171292][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10442'. [ 1218.199714][T11989] lo speed is unknown, defaulting to 1000 [ 1218.372109][T12022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10445'. [ 1218.387875][T12025] netlink: 'syz.1.10446': attribute type 2 has an invalid length. [ 1218.411260][T12025] netlink: 'syz.1.10446': attribute type 1 has an invalid length. [ 1218.426362][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10445'. [ 1218.437841][T12025] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10446'. [ 1218.682129][T12036] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10447'. [ 1218.791841][T11989] lo speed is unknown, defaulting to 1000 [ 1219.070292][ T5937] IPVS: starting estimator thread 0... [ 1219.165410][T12050] IPVS: using max 36 ests per chain, 86400 per kthread [ 1219.679108][T12061] lo speed is unknown, defaulting to 1000 [ 1219.816258][T12070] __nla_validate_parse: 2 callbacks suppressed [ 1219.816279][T12070] netlink: 1084 bytes leftover after parsing attributes in process `syz.3.10457'. [ 1220.026688][T12080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10460'. [ 1220.049045][ T5937] IPVS: starting estimator thread 0... [ 1220.062903][T12074] net_ratelimit: 2 callbacks suppressed [ 1220.062919][T12074] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1220.090107][T12080] tipc: Enabled bearer , priority 10 [ 1220.107917][T12078] lo speed is unknown, defaulting to 1000 [ 1220.145489][T12082] IPVS: using max 35 ests per chain, 84000 per kthread [ 1220.157247][T12061] lo speed is unknown, defaulting to 1000 [ 1220.439966][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10464'. [ 1220.949722][T12061] lo speed is unknown, defaulting to 1000 [ 1220.977604][T12078] lo speed is unknown, defaulting to 1000 [ 1221.396318][T12123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10475'. [ 1221.397184][T12078] lo speed is unknown, defaulting to 1000 [ 1221.578686][T12130] netlink: 'syz.3.10477': attribute type 2 has an invalid length. [ 1221.599177][T12130] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10477'. [ 1222.600550][T12159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10483'. [ 1223.021582][T12169] veth7: entered promiscuous mode [ 1223.196258][T12178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10486'. [ 1223.217605][T12178] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1223.273151][T12176] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1223.797903][T12204] ..0ªî{X¹¦: left allmulticast mode [ 1223.814436][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10496'. [ 1224.241356][T12223] netlink: 'syz.1.10497': attribute type 2 has an invalid length. [ 1224.437823][T12232] netlink: 'syz.1.10497': attribute type 2 has an invalid length. [ 1224.836196][T12204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1224.887742][T12204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1225.323014][T12204] vlan3: left promiscuous mode [ 1225.337506][T12204] geneve1: left promiscuous mode [ 1225.342706][T12204] vlan3: left allmulticast mode [ 1225.352306][T12204] geneve1: left allmulticast mode [ 1225.359962][T12204] bridge0: left promiscuous mode [ 1225.365869][T12204] bridge0: left allmulticast mode [ 1225.473586][T12223] !: entered promiscuous mode [ 1225.486424][T12225] syzkaller1: entered promiscuous mode [ 1225.493658][T12225] syzkaller1: entered allmulticast mode [ 1225.503554][T12238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10499'. [ 1225.516721][T10056] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.597478][T10056] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.607323][T10056] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.627502][T10056] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.989542][T12253] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10504'. [ 1226.038587][T12253] ksmbd: Unknown IPC event: 1, ignore. [ 1226.368432][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.377608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.381992][T12280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10510'. [ 1226.399189][T12277] lo speed is unknown, defaulting to 1000 [ 1226.408969][T12272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1226.471302][T12283] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10511'. [ 1226.572096][T12280] lo speed is unknown, defaulting to 1000 [ 1226.690452][T12291] syzkaller0: entered promiscuous mode [ 1226.705557][T12291] syzkaller0: entered allmulticast mode [ 1226.813408][T12291] netlink: 'syz.1.10512': attribute type 13 has an invalid length. [ 1227.024485][T12293] tipc: Enabled bearer , priority 0 [ 1227.046392][T12277] lo speed is unknown, defaulting to 1000 [ 1227.133778][T12290] tipc: Resetting bearer [ 1227.154626][T12301] netlink: 47 bytes leftover after parsing attributes in process `syz.0.10514'. [ 1227.301242][T12290] tipc: Disabling bearer [ 1227.538002][T12311] FAULT_INJECTION: forcing a failure. [ 1227.538002][T12311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.555507][T12311] CPU: 0 UID: 0 PID: 12311 Comm: syz.1.10516 Not tainted syzkaller #0 PREEMPT(full) [ 1227.555530][T12311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1227.555539][T12311] Call Trace: [ 1227.555547][T12311] [ 1227.555555][T12311] dump_stack_lvl+0xe8/0x150 [ 1227.555580][T12311] should_fail_ex+0x412/0x560 [ 1227.555604][T12311] _copy_to_user+0x31/0xb0 [ 1227.555628][T12311] sk_getsockopt+0x1cc4/0x2840 [ 1227.555647][T12311] ? get_pid_task+0x20/0x1f0 [ 1227.555671][T12311] ? __pfx_sk_getsockopt+0x10/0x10 [ 1227.555732][T12311] do_sock_getsockopt+0x223/0x3f0 [ 1227.555756][T12311] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1227.555777][T12311] ? __fget_files+0x3a0/0x420 [ 1227.555794][T12311] ? __fget_files+0x2a/0x420 [ 1227.555830][T12311] __x64_sys_getsockopt+0x1a4/0x240 [ 1227.555858][T12311] do_syscall_64+0xe2/0xf80 [ 1227.555877][T12311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.555892][T12311] ? trace_irq_disable+0x37/0x100 [ 1227.555908][T12311] ? clear_bhb_loop+0x60/0xb0 [ 1227.555928][T12311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.555946][T12311] RIP: 0033:0x7f629f19af79 [ 1227.555963][T12311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.555977][T12311] RSP: 002b:00007f62a0094028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1227.555996][T12311] RAX: ffffffffffffffda RBX: 00007f629f415fa0 RCX: 00007f629f19af79 [ 1227.556009][T12311] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000003 [ 1227.556020][T12311] RBP: 00007f62a0094090 R08: 0000200000000100 R09: 0000000000000000 [ 1227.556032][T12311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.556043][T12311] R13: 00007f629f416038 R14: 00007f629f415fa0 R15: 00007ffdef892ff8 [ 1227.556070][T12311] [ 1227.911564][T12280] lo speed is unknown, defaulting to 1000 [ 1227.921411][T12277] lo speed is unknown, defaulting to 1000 [ 1228.342516][T12326] lo speed is unknown, defaulting to 1000 [ 1228.766542][T12342] netlink: 'syz.0.10523': attribute type 10 has an invalid length. [ 1228.785460][T12280] lo speed is unknown, defaulting to 1000 [ 1228.785473][T12326] lo speed is unknown, defaulting to 1000 [ 1229.024668][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10525'. [ 1229.263588][T12358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10526'. [ 1229.674027][T12326] lo speed is unknown, defaulting to 1000 [ 1229.850823][T12374] ipvlan0: entered promiscuous mode [ 1229.887757][T12374] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1229.926042][T12374] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1230.281269][T12388] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10533'. [ 1230.573221][T12277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.585984][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.643405][T12277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.653300][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.668990][T12210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.678679][T12277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.688482][T12395] vlan2: entered promiscuous mode [ 1230.698328][T12211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.899299][T12407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10538'. [ 1230.927961][T12407] nbd: illegal input index -1113835520 [ 1231.033231][T12412] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10538'. [ 1231.037502][T12411] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1231.070878][T12416] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10540'. [ 1231.116110][T12416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10540'. [ 1231.117952][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10538'. [ 1231.132565][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10540'. [ 1231.150534][T12412] hsr_slave_0: left promiscuous mode [ 1231.205710][T12412] hsr_slave_1: left promiscuous mode [ 1231.247753][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10540'. [ 1231.261322][T12424] netlink: 'syz.4.10542': attribute type 1 has an invalid length. [ 1231.322356][T12425] mac80211_hwsim hwsim100 wlan0: entered promiscuous mode [ 1231.330923][T12425] mac80211_hwsim hwsim100 wlan0: left allmulticast mode [ 1231.353186][T12425] team0: Port device wlan0 removed [ 1231.373784][T12424] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1231.382989][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10541'. [ 1231.683538][T12439] lo speed is unknown, defaulting to 1000 [ 1232.025751][T12462] lo speed is unknown, defaulting to 1000 [ 1232.159040][T12453] net_ratelimit: 1 callbacks suppressed [ 1232.159060][T12453] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1232.291194][T12474] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10551'. [ 1232.396363][T12439] lo speed is unknown, defaulting to 1000 [ 1232.599203][T12479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10552'. [ 1232.999842][T12462] lo speed is unknown, defaulting to 1000 [ 1233.009196][T12439] lo speed is unknown, defaulting to 1000 [ 1233.606869][T12462] lo speed is unknown, defaulting to 1000 [ 1235.128177][T12543] lo speed is unknown, defaulting to 1000 [ 1235.398755][T12568] IPv6: Can't replace route, no match found [ 1235.595920][T12543] lo speed is unknown, defaulting to 1000 [ 1235.695977][ T5828] Bluetooth: hci1: command 0x0405 tx timeout [ 1235.700334][T12585] vlan2: entered promiscuous mode [ 1235.991132][T12543] lo speed is unknown, defaulting to 1000 [ 1236.019592][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1236.020507][T12603] FAULT_INJECTION: forcing a failure. [ 1236.020507][T12603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.042054][T12603] CPU: 1 UID: 0 PID: 12603 Comm: syz.3.10587 Not tainted syzkaller #0 PREEMPT(full) [ 1236.042078][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1236.042089][T12603] Call Trace: [ 1236.042097][T12603] [ 1236.042105][T12603] dump_stack_lvl+0xe8/0x150 [ 1236.042133][T12603] should_fail_ex+0x412/0x560 [ 1236.042158][T12603] _copy_from_iter+0x1d3/0x1670 [ 1236.042190][T12603] ? rcu_is_watching+0x15/0xb0 [ 1236.042208][T12603] ? __pfx__copy_from_iter+0x10/0x10 [ 1236.042226][T12603] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 1236.042259][T12603] ? netlink_sendmsg+0x650/0xb40 [ 1236.042278][T12603] ? skb_put+0x11b/0x210 [ 1236.042303][T12603] netlink_sendmsg+0x6c0/0xb40 [ 1236.042331][T12603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1236.042354][T12603] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1236.042377][T12603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1236.042399][T12603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1236.042417][T12603] ____sys_sendmsg+0xa68/0xad0 [ 1236.042439][T12603] ? __might_fault+0xaf/0x130 [ 1236.042478][T12603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1236.042509][T12603] ? import_iovec+0x73/0xa0 [ 1236.042535][T12603] ___sys_sendmsg+0x2a5/0x360 [ 1236.042555][T12603] ? __lock_acquire+0x6b5/0x2cf0 [ 1236.042581][T12603] ? __pfx____sys_sendmsg+0x10/0x10 [ 1236.042636][T12603] ? __fget_files+0x2a/0x420 [ 1236.042655][T12603] ? __fget_files+0x3a0/0x420 [ 1236.042684][T12603] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1236.042709][T12603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1236.042741][T12603] ? __pfx_ksys_write+0x10/0x10 [ 1236.042775][T12603] do_syscall_64+0xe2/0xf80 [ 1236.042798][T12603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.042814][T12603] ? trace_irq_disable+0x37/0x100 [ 1236.042832][T12603] ? clear_bhb_loop+0x60/0xb0 [ 1236.042853][T12603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.042871][T12603] RIP: 0033:0x7f0045f9af79 [ 1236.042888][T12603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.042902][T12603] RSP: 002b:00007f0046daa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1236.042922][T12603] RAX: ffffffffffffffda RBX: 00007f0046215fa0 RCX: 00007f0045f9af79 [ 1236.042935][T12603] RDX: 0000000000004800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1236.042947][T12603] RBP: 00007f0046daa090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.042959][T12603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.042970][T12603] R13: 00007f0046216038 R14: 00007f0046215fa0 R15: 00007ffd6d445398 [ 1236.043000][T12603] [ 1236.302403][ T56] block nbd5: Possible stuck request ffff888025690000: control (read@17181900800,65536B). Runtime 210 seconds [ 1236.354439][T12608] __nla_validate_parse: 7 callbacks suppressed [ 1236.354457][T12608] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10588'. [ 1236.510599][T12616] siw: device registration error -23 [ 1236.662748][T12623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1236.939732][T12630] mac80211_hwsim hwsim97 wlan1: Caught tx_queue_len zero misconfig [ 1237.057642][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10593'. [ 1237.582691][T12652] FAULT_INJECTION: forcing a failure. [ 1237.582691][T12652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.596873][T12652] CPU: 0 UID: 0 PID: 12652 Comm: syz.3.10599 Not tainted syzkaller #0 PREEMPT(full) [ 1237.596901][T12652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1237.596912][T12652] Call Trace: [ 1237.596920][T12652] [ 1237.596929][T12652] dump_stack_lvl+0xe8/0x150 [ 1237.596957][T12652] should_fail_ex+0x412/0x560 [ 1237.596982][T12652] _copy_from_iter+0x1d3/0x1670 [ 1237.597014][T12652] ? rcu_is_watching+0x15/0xb0 [ 1237.597032][T12652] ? __pfx__copy_from_iter+0x10/0x10 [ 1237.597052][T12652] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 1237.597084][T12652] ? netlink_sendmsg+0x650/0xb40 [ 1237.597101][T12652] ? skb_put+0x11b/0x210 [ 1237.597124][T12652] netlink_sendmsg+0x6c0/0xb40 [ 1237.597152][T12652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1237.597175][T12652] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1237.597198][T12652] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1237.597219][T12652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1237.597237][T12652] ____sys_sendmsg+0xa68/0xad0 [ 1237.597259][T12652] ? __might_fault+0xaf/0x130 [ 1237.597288][T12652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1237.597320][T12652] ? import_iovec+0x73/0xa0 [ 1237.597346][T12652] ___sys_sendmsg+0x2a5/0x360 [ 1237.597375][T12652] ? __lock_acquire+0x6b5/0x2cf0 [ 1237.597402][T12652] ? __pfx____sys_sendmsg+0x10/0x10 [ 1237.597458][T12652] ? __fget_files+0x2a/0x420 [ 1237.597476][T12652] ? __fget_files+0x3a0/0x420 [ 1237.597504][T12652] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1237.597529][T12652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1237.597561][T12652] ? __pfx_ksys_write+0x10/0x10 [ 1237.597595][T12652] do_syscall_64+0xe2/0xf80 [ 1237.597617][T12652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.597634][T12652] ? trace_irq_disable+0x37/0x100 [ 1237.597651][T12652] ? clear_bhb_loop+0x60/0xb0 [ 1237.597672][T12652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.597689][T12652] RIP: 0033:0x7f0045f9af79 [ 1237.597706][T12652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.597721][T12652] RSP: 002b:00007f0046daa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1237.597740][T12652] RAX: ffffffffffffffda RBX: 00007f0046215fa0 RCX: 00007f0045f9af79 [ 1237.597753][T12652] RDX: 0000000000004800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1237.597765][T12652] RBP: 00007f0046daa090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.597777][T12652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.597788][T12652] R13: 00007f0046216038 R14: 00007f0046215fa0 R15: 00007ffd6d445398 [ 1237.597822][T12652] [ 1238.276611][T12666] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10602'. [ 1238.286234][T12666] netlink: 35 bytes leftover after parsing attributes in process `syz.3.10602'. [ 1238.326079][T12666] netlink: 'syz.3.10602': attribute type 6 has an invalid length. [ 1238.350116][T12666] netlink: 'syz.3.10602': attribute type 5 has an invalid length. [ 1238.376388][T12666] netlink: 35 bytes leftover after parsing attributes in process `syz.3.10602'. [ 1238.396926][T12666] netlink: 'syz.3.10602': attribute type 4 has an invalid length. [ 1238.409030][T12666] netlink: 'syz.3.10602': attribute type 4 has an invalid length. [ 1238.501142][T12658] netlink: 116 bytes leftover after parsing attributes in process `syz.0.10601'. [ 1238.520299][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10601'. [ 1238.608194][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10601'. [ 1238.740580][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.753191][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1238.781593][T12674] syzkaller0: entered promiscuous mode [ 1238.787846][T12674] syzkaller0: entered allmulticast mode [ 1239.299017][T12692] netlink: 5460 bytes leftover after parsing attributes in process `syz.1.10609'. [ 1239.857410][T12703] FAULT_INJECTION: forcing a failure. [ 1239.857410][T12703] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.870748][T12703] CPU: 0 UID: 0 PID: 12703 Comm: syz.4.10612 Not tainted syzkaller #0 PREEMPT(full) [ 1239.870765][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1239.870771][T12703] Call Trace: [ 1239.870776][T12703] [ 1239.870781][T12703] dump_stack_lvl+0xe8/0x150 [ 1239.870799][T12703] should_fail_ex+0x412/0x560 [ 1239.870815][T12703] should_failslab+0xa8/0x100 [ 1239.870828][T12703] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1239.870844][T12703] ? __alloc_skb+0x186/0x7d0 [ 1239.870856][T12703] ? __alloc_skb+0x1d0/0x7d0 [ 1239.870869][T12703] ? __local_bh_enable_ip+0xd0/0x130 [ 1239.870881][T12703] __alloc_skb+0x1d0/0x7d0 [ 1239.870899][T12703] ? netlink_ack_tlv_len+0x6c/0x210 [ 1239.870912][T12703] netlink_ack+0x146/0xa50 [ 1239.870944][T12703] netlink_rcv_skb+0x2b6/0x4b0 [ 1239.870963][T12703] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1239.870983][T12703] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1239.871005][T12703] ? bpf_lsm_capable+0x9/0x20 [ 1239.871018][T12703] ? security_capable+0x7e/0x2c0 [ 1239.871034][T12703] nfnetlink_rcv+0x2c0/0x27b0 [ 1239.871048][T12703] ? is_bpf_text_address+0x292/0x2b0 [ 1239.871060][T12703] ? is_bpf_text_address+0x26/0x2b0 [ 1239.871072][T12703] ? kernel_text_address+0xa5/0xe0 [ 1239.871085][T12703] ? __kernel_text_address+0xd/0x30 [ 1239.871097][T12703] ? unwind_get_return_address+0x4d/0x90 [ 1239.871111][T12703] ? __lock_acquire+0x6b5/0x2cf0 [ 1239.871134][T12703] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1239.871143][T12703] ? stack_trace_save+0xa9/0x100 [ 1239.871158][T12703] ? __lock_acquire+0x6b5/0x2cf0 [ 1239.871176][T12703] ? __lock_acquire+0x6b5/0x2cf0 [ 1239.871194][T12703] ? __netlink_lookup+0xc6/0x8b0 [ 1239.871211][T12703] ? netlink_deliver_tap+0x2e/0x1b0 [ 1239.871223][T12703] ? netlink_deliver_tap+0x2e/0x1b0 [ 1239.871237][T12703] ? netlink_deliver_tap+0x2e/0x1b0 [ 1239.871251][T12703] netlink_unicast+0x80f/0x9b0 [ 1239.871265][T12703] ? __pfx_netlink_unicast+0x10/0x10 [ 1239.871276][T12703] ? netlink_sendmsg+0x650/0xb40 [ 1239.871286][T12703] ? skb_put+0x11b/0x210 [ 1239.871300][T12703] netlink_sendmsg+0x813/0xb40 [ 1239.871316][T12703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.871328][T12703] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1239.871342][T12703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1239.871353][T12703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.871364][T12703] ____sys_sendmsg+0xa68/0xad0 [ 1239.871378][T12703] ? __might_fault+0xaf/0x130 [ 1239.871395][T12703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1239.871414][T12703] ? import_iovec+0x73/0xa0 [ 1239.871430][T12703] ___sys_sendmsg+0x2a5/0x360 [ 1239.871444][T12703] ? __lock_acquire+0x6b5/0x2cf0 [ 1239.871459][T12703] ? __pfx____sys_sendmsg+0x10/0x10 [ 1239.871489][T12703] ? __fget_files+0x2a/0x420 [ 1239.871500][T12703] ? __fget_files+0x3a0/0x420 [ 1239.871516][T12703] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1239.871531][T12703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1239.871549][T12703] ? __pfx_ksys_write+0x10/0x10 [ 1239.871570][T12703] do_syscall_64+0xe2/0xf80 [ 1239.871585][T12703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.871594][T12703] ? trace_irq_disable+0x37/0x100 [ 1239.871604][T12703] ? clear_bhb_loop+0x60/0xb0 [ 1239.871616][T12703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.871626][T12703] RIP: 0033:0x7f05c8d9af79 [ 1239.871637][T12703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1239.871646][T12703] RSP: 002b:00007f05c9cc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1239.871657][T12703] RAX: ffffffffffffffda RBX: 00007f05c9015fa0 RCX: 00007f05c8d9af79 [ 1239.871665][T12703] RDX: 0000000000004800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1239.871671][T12703] RBP: 00007f05c9cc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.871678][T12703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.871684][T12703] R13: 00007f05c9016038 R14: 00007f05c9015fa0 R15: 00007ffc5b933188 [ 1239.871699][T12703] [ 1241.104653][T12660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1241.473326][T12728] vlan6: entered promiscuous mode [ 1241.481486][T12728] hsr_slave_1: entered promiscuous mode [ 1241.513477][T12728] vlan6: entered allmulticast mode [ 1241.535919][T12728] hsr_slave_1: entered allmulticast mode [ 1241.594706][T12729] macsec0: entered allmulticast mode [ 1241.606988][T12729] veth1_macvtap: entered allmulticast mode [ 1241.613649][T12739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10627'. [ 1241.630280][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10625'. [ 1241.643210][T12735] netlink: 'syz.2.10625': attribute type 30 has an invalid length. [ 1241.707704][T10053] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.716606][T10053] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.738209][T10053] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1241.814028][T10053] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1242.097479][T12769] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10637'. [ 1242.372597][T12798] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10646'. [ 1242.702752][T12818] Bluetooth: MGMT ver 1.23 [ 1242.800356][T12826] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1242.853756][T12826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10656'. [ 1243.080182][T12843] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.132649][T12847] ipvlan0: entered promiscuous mode [ 1243.140034][T12847] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1243.174045][T12843] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.212457][T12851] bridge0: port 3(syz_tun) entered blocking state [ 1243.220364][T12851] bridge0: port 3(syz_tun) entered disabled state [ 1243.227657][T12851] syz_tun: entered allmulticast mode [ 1243.243876][T12843] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.284573][T12840] lo speed is unknown, defaulting to 1000 [ 1243.291658][T12853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10662'. [ 1243.335077][T12843] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.368534][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10663'. [ 1243.485893][T32646] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.515731][ T1090] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.527462][T12840] lo speed is unknown, defaulting to 1000 [ 1243.538759][ T1090] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.563080][T32646] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1243.756796][T12840] lo speed is unknown, defaulting to 1000 [ 1244.338285][T12886] netlink: 'syz.4.10673': attribute type 1 has an invalid length. [ 1244.362524][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10673'. [ 1244.496719][T12894] netlink: zone id is out of range [ 1244.503177][T12894] netlink: zone id is out of range [ 1244.518661][T12894] netlink: get zone limit has 8 unknown bytes [ 1244.523893][T12895] ip6gre2: entered promiscuous mode [ 1244.543670][T12895] ip6gre2: entered allmulticast mode [ 1244.578627][T12897] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1244.639302][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10676'. [ 1244.702576][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10677'. [ 1244.716967][T12901] netlink: 'syz.2.10677': attribute type 1 has an invalid length. [ 1244.746568][T12901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1245.039381][T12919] lo speed is unknown, defaulting to 1000 [ 1245.325402][ T6739] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1245.334271][T12955] bond0: Caught tx_queue_len zero misconfig [ 1245.536177][T10056] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1245.546091][T10056] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1245.565856][ T6739] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1245.614555][T12919] lo speed is unknown, defaulting to 1000 [ 1245.735889][T10056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1245.786656][ T5881] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1245.876131][ T5881] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1245.925968][T12973] syz_tun: entered promiscuous mode [ 1245.931287][T12973] vlan0: entered promiscuous mode [ 1245.963157][T12975] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1246.025775][ T5881] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1246.039187][T12978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.042553][T12980] netlink: 'syz.0.10700': attribute type 3 has an invalid length. [ 1246.150288][T12919] lo speed is unknown, defaulting to 1000 [ 1246.200847][T12985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.208627][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.558282][T12994] ipvlan4: entered promiscuous mode [ 1246.582774][T12994] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 1246.630074][T12994] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1246.819076][T10056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1247.068936][T13010] vlan5: entered promiscuous mode [ 1247.074023][T13010] syz_tun: entered promiscuous mode [ 1247.181427][T13017] team_slave_0: entered promiscuous mode [ 1247.187755][T13017] team_slave_1: entered promiscuous mode [ 1247.202524][T13017] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1247.459412][T13035] ipvlan2: entered promiscuous mode [ 1247.474331][T13035] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1247.486205][T13035] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1247.537127][T13034] lo speed is unknown, defaulting to 1000 [ 1247.603882][T13043] FAULT_INJECTION: forcing a failure. [ 1247.603882][T13043] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.628754][T13043] CPU: 0 UID: 0 PID: 13043 Comm: syz.1.10723 Not tainted syzkaller #0 PREEMPT(full) [ 1247.628781][T13043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1247.628792][T13043] Call Trace: [ 1247.628801][T13043] [ 1247.628810][T13043] dump_stack_lvl+0xe8/0x150 [ 1247.628837][T13043] should_fail_ex+0x412/0x560 [ 1247.628864][T13043] should_failslab+0xa8/0x100 [ 1247.628886][T13043] __kmalloc_noprof+0xde/0x7e0 [ 1247.628904][T13043] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1247.628927][T13043] ? rcu_is_watching+0x15/0xb0 [ 1247.628949][T13043] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1247.628980][T13043] genl_family_rcv_msg_doit+0xd9/0x330 [ 1247.629004][T13043] ? __asan_memcpy+0x40/0x70 [ 1247.629031][T13043] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1247.629055][T13043] ? __pfx___mutex_lock+0x10/0x10 [ 1247.629078][T13043] ? __pfx_genl_get_cmd+0x10/0x10 [ 1247.629098][T13043] ? __pfx_tipc_nl_bearer_add+0x10/0x10 [ 1247.629124][T13043] ? __dev_queue_xmit+0x274/0x3850 [ 1247.629156][T13043] genl_rcv_msg+0x61c/0x7a0 [ 1247.629184][T13043] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1247.629205][T13043] ? __pfx_tipc_nl_bearer_add+0x10/0x10 [ 1247.629233][T13043] ? __pfx_ref_tracker_free+0x10/0x10 [ 1247.629262][T13043] netlink_rcv_skb+0x232/0x4b0 [ 1247.629282][T13043] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1247.629306][T13043] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1247.629323][T13043] ? genl_rcv+0x19/0x40 [ 1247.629362][T13043] ? down_read+0x272/0x2e0 [ 1247.629377][T13043] ? genl_rcv+0xd/0x40 [ 1247.629400][T13043] genl_rcv+0x28/0x40 [ 1247.629421][T13043] netlink_unicast+0x80f/0x9b0 [ 1247.629449][T13043] ? __pfx_netlink_unicast+0x10/0x10 [ 1247.629470][T13043] ? netlink_sendmsg+0x650/0xb40 [ 1247.629488][T13043] ? skb_put+0x11b/0x210 [ 1247.629513][T13043] netlink_sendmsg+0x813/0xb40 [ 1247.629549][T13043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.629573][T13043] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1247.629596][T13043] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1247.629618][T13043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.629637][T13043] ____sys_sendmsg+0xa68/0xad0 [ 1247.629660][T13043] ? __might_fault+0xaf/0x130 [ 1247.629690][T13043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.629723][T13043] ? import_iovec+0x73/0xa0 [ 1247.629751][T13043] ___sys_sendmsg+0x2a5/0x360 [ 1247.629773][T13043] ? __lock_acquire+0x6b5/0x2cf0 [ 1247.629801][T13043] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.629861][T13043] ? __fget_files+0x2a/0x420 [ 1247.629880][T13043] ? __fget_files+0x3a0/0x420 [ 1247.629919][T13043] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1247.629944][T13043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1247.629977][T13043] ? __pfx_ksys_write+0x10/0x10 [ 1247.630014][T13043] do_syscall_64+0xe2/0xf80 [ 1247.630036][T13043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.630053][T13043] ? trace_irq_disable+0x37/0x100 [ 1247.630070][T13043] ? clear_bhb_loop+0x60/0xb0 [ 1247.630091][T13043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.630108][T13043] RIP: 0033:0x7f629f19af79 [ 1247.630124][T13043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.630141][T13043] RSP: 002b:00007f62a0094028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.630161][T13043] RAX: ffffffffffffffda RBX: 00007f629f415fa0 RCX: 00007f629f19af79 [ 1247.630174][T13043] RDX: 000000002400c000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1247.630186][T13043] RBP: 00007f62a0094090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.630198][T13043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.630209][T13043] R13: 00007f629f416038 R14: 00007f629f415fa0 R15: 00007ffdef892ff8 [ 1247.630241][T13043] [ 1248.058475][T13047] __nla_validate_parse: 8 callbacks suppressed [ 1248.058494][T13047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10725'. [ 1248.133383][T13052] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10726'. [ 1248.209477][T13034] lo speed is unknown, defaulting to 1000 [ 1248.400507][T13062] ipvlan2: entered promiscuous mode [ 1248.421522][T13064] netlink: 'syz.1.10731': attribute type 5 has an invalid length. [ 1248.432565][T13062] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1248.457465][T13068] netlink: 'syz.2.10733': attribute type 21 has an invalid length. [ 1248.471896][T13034] lo speed is unknown, defaulting to 1000 [ 1248.535382][T13068] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10733'. [ 1248.543185][T13071] sctp: [Deprecated]: syz.3.10734 (pid 13071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1248.543185][T13071] Use struct sctp_sack_info instead [ 1248.660886][T13080] netlink: 'syz.0.10736': attribute type 2 has an invalid length. [ 1248.704081][T13084] FAULT_INJECTION: forcing a failure. [ 1248.704081][T13084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1248.742013][T13084] CPU: 0 UID: 0 PID: 13084 Comm: syz.3.10737 Not tainted syzkaller #0 PREEMPT(full) [ 1248.742038][T13084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1248.742048][T13084] Call Trace: [ 1248.742056][T13084] [ 1248.742063][T13084] dump_stack_lvl+0xe8/0x150 [ 1248.742090][T13084] should_fail_ex+0x412/0x560 [ 1248.742124][T13084] _copy_from_user+0x2d/0xb0 [ 1248.742149][T13084] kstrtouint_from_user+0xd6/0x180 [ 1248.742172][T13084] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1248.742208][T13084] proc_fail_nth_write+0x8e/0x210 [ 1248.742239][T13084] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1248.742267][T13084] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1248.742290][T13084] vfs_write+0x29a/0xb90 [ 1248.742322][T13084] ? __pfx_vfs_write+0x10/0x10 [ 1248.742345][T13084] ? __fget_files+0x2a/0x420 [ 1248.742368][T13084] ? __fget_files+0x3a0/0x420 [ 1248.742384][T13084] ? __fget_files+0x2a/0x420 [ 1248.742412][T13084] ksys_write+0x150/0x270 [ 1248.742437][T13084] ? __pfx_ksys_write+0x10/0x10 [ 1248.742469][T13084] do_syscall_64+0xe2/0xf80 [ 1248.742488][T13084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.742504][T13084] ? trace_irq_disable+0x37/0x100 [ 1248.742520][T13084] ? clear_bhb_loop+0x60/0xb0 [ 1248.742541][T13084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.742557][T13084] RIP: 0033:0x7f0045f5b84e [ 1248.742573][T13084] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1248.742587][T13084] RSP: 002b:00007f0046da9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1248.742613][T13084] RAX: ffffffffffffffda RBX: 00007f0046daa6c0 RCX: 00007f0045f5b84e [ 1248.742625][T13084] RDX: 0000000000000001 RSI: 00007f0046daa0a0 RDI: 0000000000000005 [ 1248.742636][T13084] RBP: 00007f0046daa090 R08: 0000000000000000 R09: 0000000000000000 [ 1248.742646][T13084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.742657][T13084] R13: 00007f0046216038 R14: 00007f0046215fa0 R15: 00007ffd6d445398 [ 1248.742687][T13084] [ 1249.050569][T13101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10741'. [ 1249.615615][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1249.615636][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1250.815017][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1252.455535][ T5190] udevd[5190]: worker [5367] /devices/virtual/block/nbd5 timeout; kill it [ 1252.464229][ T5190] udevd[5190]: seq 55066 '/devices/virtual/block/nbd5' killed [ 1257.935012][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1258.575005][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1266.895714][ T56] block nbd5: Possible stuck request ffff888025690000: control (read@17181900800,65536B). Runtime 240 seconds [ 1273.295056][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1273.935247][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1294.988664][T13114] ip6tnl0: Caught tx_queue_len zero misconfig [ 1295.003326][T13115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10746'. [ 1295.026619][T13119] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1295.040219][T13117] openvswitch: netlink: Duplicate key (type 21). [ 1295.045426][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10746'. [ 1295.046937][T13119] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1295.056099][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1295.078442][T13119] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 1295.251610][T13122] netlink: 'syz.1.10748': attribute type 13 has an invalid length. [ 1295.359048][T13134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10752'. [ 1295.398752][T13131] lo speed is unknown, defaulting to 1000 [ 1295.609119][T13143] SET target dimension over the limit! [ 1295.677363][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10757'. [ 1295.731571][T13152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10759'. [ 1295.904251][T13131] lo speed is unknown, defaulting to 1000 [ 1295.999176][T13164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10763'. [ 1296.061439][T13163] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1296.097344][T13163] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1296.136371][T13163] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 1296.159406][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10765'. [ 1296.181021][T13170] x_tables: duplicate underflow at hook 1 [ 1296.211185][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10767'. [ 1296.267737][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10767'. [ 1296.290383][T13131] lo speed is unknown, defaulting to 1000 [ 1296.400301][T13180] nbd: socks must be embedded in a SOCK_ITEM attr [ 1296.457490][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10770'. [ 1296.980264][ T56] block nbd5: Possible stuck request ffff888025690000: control (read@17181900800,65536B). Runtime 270 seconds [ 1296.996841][T13209] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20004 [ 1297.778892][T13227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1298.239274][T13271] netlink: 'syz.3.10797': attribute type 1 has an invalid length. [ 1298.252821][T13270] bond0: entered promiscuous mode [ 1298.263435][T13270] bond_slave_0: entered promiscuous mode [ 1298.272619][T13270] bond_slave_1: entered promiscuous mode [ 1298.280705][T13270] bridge_slave_1: entered promiscuous mode [ 1298.293056][T13270] batadv0: entered promiscuous mode [ 1298.300443][T13270] batadv0: left promiscuous mode [ 1298.306986][T13270] bond0: left promiscuous mode [ 1298.311866][T13270] bond_slave_0: left promiscuous mode [ 1298.319964][T13270] bond_slave_1: left promiscuous mode [ 1298.328567][T13270] bridge_slave_1: left promiscuous mode [ 1298.342683][T13268] lo speed is unknown, defaulting to 1000 [ 1298.356307][T13271] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1298.370714][T13267] lo speed is unknown, defaulting to 1000 [ 1298.683307][T13268] lo speed is unknown, defaulting to 1000 [ 1298.964118][T13268] lo speed is unknown, defaulting to 1000 [ 1299.043101][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.201979][T13267] lo speed is unknown, defaulting to 1000 [ 1299.333438][T13300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.346668][T13300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.370960][T13302] lo: Caught tx_queue_len zero misconfig [ 1299.487278][T13300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.542368][T13300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.649050][T13267] lo speed is unknown, defaulting to 1000 [ 1299.822037][T13300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.837159][T13300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.967526][T13300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1299.995810][T13300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.178498][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.194215][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.311583][T13335] __nla_validate_parse: 9 callbacks suppressed [ 1300.311601][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10818'. [ 1300.416398][T10053] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1300.424621][T10053] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.518554][ T1090] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1300.529560][ T1090] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.590120][T10053] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1300.611914][T10053] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.689097][T13340] lo speed is unknown, defaulting to 1000 [ 1300.695483][T10056] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1300.703685][T10056] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.781013][T13349] l2tp_ppp: sess 2/0: no socket in recv [ 1300.971673][T13354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10823'. [ 1301.005467][T13340] lo speed is unknown, defaulting to 1000 [ 1301.122316][T13359] lo speed is unknown, defaulting to 1000 [ 1301.435967][T13374] lo speed is unknown, defaulting to 1000 [ 1301.663327][T13359] lo speed is unknown, defaulting to 1000 [ 1301.671574][T13340] lo speed is unknown, defaulting to 1000 [ 1302.073708][T13381] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1302.087523][T13374] lo speed is unknown, defaulting to 1000 [ 1302.094993][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1302.187756][T13384] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1302.207725][T13384] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 1302.512330][T13374] lo speed is unknown, defaulting to 1000 [ 1302.528930][T13359] lo speed is unknown, defaulting to 1000 [ 1302.548318][T13404] netlink: 'syz.3.10836': attribute type 13 has an invalid length. [ 1302.754211][T13407] syzkaller0: entered promiscuous mode [ 1302.785315][T13407] syzkaller0: entered allmulticast mode [ 1302.846404][T13407] netlink: 'syz.0.10837': attribute type 13 has an invalid length. [ 1303.001855][T13415] tipc: Enabled bearer , priority 0 [ 1303.105694][T13403] tipc: Resetting bearer [ 1303.151276][T13403] tipc: Disabling bearer [ 1303.508861][T13437] lo: Caught tx_queue_len zero misconfig [ 1303.550614][T13431] lo speed is unknown, defaulting to 1000 [ 1304.128724][T13430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1304.271435][T13431] lo speed is unknown, defaulting to 1000 [ 1304.493324][T13446] vlan0: entered promiscuous mode [ 1304.556082][T13431] lo speed is unknown, defaulting to 1000 [ 1304.654976][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1304.822072][T13455] vlan5: entered allmulticast mode [ 1304.837382][T13455] bridge0: port 4(vlan5) entered blocking state [ 1304.856409][T13455] bridge0: port 4(vlan5) entered disabled state [ 1304.865598][T13455] vlan5: entered promiscuous mode [ 1305.303127][T13472] netlink: 'syz.4.10855': attribute type 11 has an invalid length. [ 1305.733783][T13484] xfrm0: entered promiscuous mode [ 1305.770031][T13484] xfrm0: entered allmulticast mode [ 1306.152389][T13500] vlan0: entered promiscuous mode [ 1306.674485][T13521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10869'. [ 1306.690435][T13524] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1306.724132][T13521] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1306.754160][T13519] lo speed is unknown, defaulting to 1000 [ 1306.790451][T13521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.800480][T13521] bond4: (slave bond0): Enslaving as an active interface with an up link [ 1306.983839][T13519] lo speed is unknown, defaulting to 1000 [ 1307.310709][T13519] lo speed is unknown, defaulting to 1000 [ 1307.537175][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10880'. [ 1307.953135][T13568] netlink: zone id is out of range [ 1307.958873][T13568] netlink: zone id is out of range [ 1307.964165][T13568] netlink: zone id is out of range [ 1307.971197][T13568] netlink: zone id is out of range [ 1307.977245][T13568] netlink: zone id is out of range [ 1307.982376][T13568] netlink: zone id is out of range [ 1307.988368][T13568] netlink: zone id is out of range [ 1307.993492][T13568] netlink: zone id is out of range [ 1307.999359][T13568] netlink: zone id is out of range [ 1308.163458][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10889'. [ 1308.245496][T13580] netlink: 'syz.4.10889': attribute type 1 has an invalid length. [ 1308.528634][T13592] tipc: Enabled bearer , priority 0 [ 1308.602145][T13592] syzkaller0: entered promiscuous mode [ 1308.608327][T13592] syzkaller0: entered allmulticast mode [ 1308.672973][T13602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10897'. [ 1308.688160][T13603] tipc: Resetting bearer [ 1308.742321][T13591] tipc: Resetting bearer [ 1308.769661][T13591] tipc: Disabling bearer [ 1309.054268][T13619] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1309.066876][T13619] bond7 (unregistering): Released all slaves [ 1309.166489][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10904'. [ 1309.408330][T13633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10906'. [ 1309.417825][T13633] IPv6: NLM_F_CREATE should be specified when creating new route [ 1309.480633][T13636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10907'. [ 1309.480633][T13637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10907'. [ 1309.522549][T13636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10907'. [ 1309.618664][T13647] netlink: 'syz.1.10910': attribute type 8 has an invalid length. [ 1309.780426][T13654] syzkaller0: entered promiscuous mode [ 1309.786864][T13654] syzkaller0: entered allmulticast mode [ 1309.831327][T13654] tipc: Enabled bearer , priority 0 [ 1309.848117][T13652] tipc: Resetting bearer [ 1309.884696][T13652] tipc: Disabling bearer [ 1309.931891][T13656] lo speed is unknown, defaulting to 1000 [ 1310.120547][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10920'. [ 1310.232490][T13656] lo speed is unknown, defaulting to 1000 [ 1310.468399][T13656] lo speed is unknown, defaulting to 1000 [ 1310.723483][T13704] netlink: 'syz.1.10928': attribute type 1 has an invalid length. [ 1311.146852][T32643] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.195475][T32643] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.239083][T32643] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.292581][T32643] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1311.690537][T13753] __nla_validate_parse: 6 callbacks suppressed [ 1311.690560][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10938'. [ 1311.720365][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10938'. [ 1311.779498][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10938'. [ 1311.797325][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10938'. [ 1311.810541][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10938'. [ 1311.822017][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10938'. [ 1311.848519][T13761] syzkaller0: entered promiscuous mode [ 1311.854089][T13761] syzkaller0: entered allmulticast mode [ 1312.337979][T13766] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10942'. [ 1312.383262][T13803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10951'. [ 1312.418682][T13804] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10950'. [ 1312.868704][T13818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10957'. [ 1313.129883][T13833] syzkaller0: entered promiscuous mode [ 1313.136040][T13833] syzkaller0: entered allmulticast mode [ 1313.203122][T13836] netlink: 'syz.2.10961': attribute type 5 has an invalid length. [ 1313.264249][T13843] ipvlan0: entered promiscuous mode [ 1313.290651][T13843] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1313.298606][T13843] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1313.348695][T13846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1313.356026][T13846] IPv6: NLM_F_CREATE should be set when creating new route [ 1313.516015][T13863] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 1313.575593][ T5881] hid-generic 0005:0006:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1313.587719][T13856] syzkaller0: entered promiscuous mode [ 1313.593328][T13856] syzkaller0: entered allmulticast mode [ 1313.896370][T13884] syzkaller0: entered promiscuous mode [ 1313.911871][T13884] syzkaller0: entered allmulticast mode [ 1314.075908][T13898] netlink: 'syz.2.10975': attribute type 7 has an invalid length. [ 1315.210056][T13989] vti0: entered promiscuous mode [ 1315.230498][T13989] vti0: entered allmulticast mode [ 1315.485637][T14002] ipvlan2: entered promiscuous mode [ 1315.496319][T14002] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1315.732664][T14008] lo speed is unknown, defaulting to 1000 [ 1316.323211][T14030] bridge0: entered allmulticast mode [ 1316.330068][T14030] vlan5: left promiscuous mode [ 1316.335884][T14030] bridge0: port 3(vlan5) entered disabled state [ 1316.406468][T14030] bridge_slave_1: left allmulticast mode [ 1316.414386][T14030] bridge_slave_1: left promiscuous mode [ 1316.428919][T14030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.446271][T14030] bridge_slave_0: left promiscuous mode [ 1316.465848][T14030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.474330][T14037] netlink: 'syz.4.11015': attribute type 1 has an invalid length. [ 1316.489452][T14030] bridge0 (unregistering): left allmulticast mode [ 1316.553239][T14008] lo speed is unknown, defaulting to 1000 [ 1316.717519][T14050] bridge_slave_0: entered promiscuous mode [ 1316.749349][T14052] __nla_validate_parse: 86 callbacks suppressed [ 1316.749371][T14052] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11020'. [ 1316.953517][T14060] netlink: 'syz.0.11024': attribute type 1 has an invalid length. [ 1316.967618][T14062] netlink: 'syz.2.11026': attribute type 1 has an invalid length. [ 1317.070398][T14008] lo speed is unknown, defaulting to 1000 [ 1317.569594][T14098] syzkaller0: entered promiscuous mode [ 1317.600038][T14098] syzkaller0: entered allmulticast mode [ 1317.629906][T14095] tipc: Enabled bearer , priority 0 [ 1317.651098][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11037'. [ 1317.704568][T14095] tipc: Resetting bearer [ 1317.759640][T14095] tipc: Disabling bearer [ 1317.803891][T14108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11038'. [ 1317.819712][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11039'. [ 1318.201603][T14130] syzkaller1: entered promiscuous mode [ 1318.221634][T14130] syzkaller1: entered allmulticast mode [ 1318.252288][T14132] geneve2: entered promiscuous mode [ 1318.273033][T14135] tipc: Started in network mode [ 1318.278673][T14135] tipc: Node identity 06a8865b0909, cluster identity 4711 [ 1318.287349][T14135] tipc: Enabled bearer , priority 0 [ 1318.294116][T32646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.305686][T14136] syzkaller0: entered promiscuous mode [ 1318.311251][T14136] syzkaller0: entered allmulticast mode [ 1318.319653][T32646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.329456][T32646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.354433][T32646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.400452][T14136] tipc: Resetting bearer [ 1318.447889][T14136] tipc: Disabling bearer [ 1318.572525][T14154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11050'. [ 1320.709985][T32646] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1321.069135][T32646] bond2 (unregistering): (slave macvlan3): Removing an active aggregator [ 1321.078470][T32646] bond2 (unregistering): (slave macvlan3): Releasing backup interface [ 1321.091854][T32646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1321.101065][T32646] bond_slave_0: left promiscuous mode [ 1321.109579][T32646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.118953][T32646] bond_slave_1: left promiscuous mode [ 1321.126211][T32646] bond0 (unregistering): (slave team0): Releasing backup interface [ 1321.134627][T32646] team0: left promiscuous mode [ 1321.139731][T32646] team_slave_0: left promiscuous mode [ 1321.145519][T32646] team_slave_1: left promiscuous mode [ 1321.151485][T32646] bond0 (unregistering): Released all slaves [ 1321.161332][T32646] bond1 (unregistering): Released all slaves [ 1321.173392][T32646] bond2 (unregistering): Released all slaves [ 1321.185873][T32646] bond3 (unregistering): Released all slaves [ 1321.273112][T32646] mÿ5nè‹Ò: left promiscuous mode [ 1321.325809][T32646] tipc: Disabling bearer [ 1321.331276][T32646] tipc: Left network mode [ 1322.031137][T32646] hsr_slave_0: left promiscuous mode [ 1322.037169][T32646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.044903][T32646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.325707][T32646] team0 (unregistering): Port device team_slave_1 removed [ 1322.343834][T32646] team0 (unregistering): Port device team_slave_0 removed [ 1322.790083][T32646] IPVS: stop unused estimator thread 0... [ 1327.065565][ T56] block nbd5: Possible stuck request ffff888025690000: control (read@17181900800,65536B). Runtime 300 seconds [ 1357.135104][ T56] block nbd5: Possible stuck request ffff888025690000: control (read@17181900800,65536B). Runtime 330 seconds [ 1361.615095][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1361.625919][ T1301] net_ratelimit: 62 callbacks suppressed [ 1361.625937][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.642075][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.813200][T13943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.215701][ T56] block nbd5: Possible stuck request ffff888025690000: control (read@17181900800,65536B). Runtime 360 seconds [ 1405.775028][ T31] INFO: task udevd:5367 blocked for more than 143 seconds. [ 1405.782279][ T31] Not tainted syzkaller #0 [ 1405.787569][ T31] Blocked by coredump. [ 1405.792262][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1405.801054][ T31] task:udevd state:D stack:23480 pid:5367 tgid:5367 ppid:5190 task_flags:0x40054c flags:0x00080003 [ 1405.813192][ T31] Call Trace: [ 1405.816522][ T31] [ 1405.819455][ T31] __schedule+0x14ea/0x5050 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1405.823970][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1405.829122][ T31] ? __pfx___schedule+0x10/0x10 [ 1405.834008][ T31] ? schedule+0x90/0x360 [ 1405.838412][ T31] schedule+0x164/0x360 [ 1405.842588][ T31] io_schedule+0x7f/0xd0 [ 1405.846984][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 1405.852296][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1405.858278][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1405.863844][ T31] ? __filemap_fdatawait_range+0x220/0x2c0 [ 1405.869887][ T31] truncate_inode_pages_range+0xad3/0xe30 [ 1405.875753][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 1405.882039][ T31] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 1405.888723][ T31] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1405.895141][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1405.900187][ T31] ? __pfx_has_bh_in_lru+0x10/0x10 [ 1405.955123][ T31] blkdev_flush_mapping+0x109/0x2f0 [ 1405.960388][ T31] bdev_release+0x417/0x650 [ 1405.994836][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 1406.000093][ T31] blkdev_release+0x15/0x20 [ 1406.004622][ T31] __fput+0x44f/0xa70 [ 1406.034835][ T31] task_work_run+0x1d9/0x270 [ 1406.039485][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1406.044630][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1406.064896][ T31] do_exit+0x69b/0x2310 [ 1406.069119][ T31] ? __up_read+0x291/0x6b0 [ 1406.073549][ T31] ? __pfx_do_exit+0x10/0x10 [ 1406.099129][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1406.104219][ T31] do_group_exit+0x21b/0x2d0 [ 1406.115282][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1406.120539][ T31] get_signal+0x1284/0x1330 [ 1406.135528][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 1406.141127][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1406.165779][ T31] ? ksys_read+0x1fc/0x270 [ 1406.170279][ T31] exit_to_user_mode_loop+0x86/0x480 [ 1406.187892][ T31] ? rcu_is_watching+0x15/0xb0 [ 1406.192713][ T31] do_syscall_64+0x2b7/0xf80 [ 1406.215286][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.221416][ T31] ? trace_irq_disable+0x37/0x100 [ 1406.235279][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1406.240012][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.256528][ T31] RIP: 0033:0x7f267b8a7407 [ 1406.261003][ T31] RSP: 002b:00007ffd49c66d50 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1406.287395][ T31] RAX: fffffffffffffffc RBX: 00007f267bfe3880 RCX: 00007f267b8a7407 [ 1406.305354][ T31] RDX: 0000000000010000 RSI: 00007f267bfd3000 RDI: 0000000000000009 [ 1406.313376][ T31] RBP: 0000556490573050 R08: 0000000000000000 R09: 0000000000000000 [ 1406.322178][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1406.331087][ T31] R13: 00000004001f0000 R14: 0000556490581aa8 R15: 00007f267c10a39c [ 1406.340147][ T31] [ 1406.343305][ T31] [ 1406.343305][ T31] Showing all locks held in the system: [ 1406.376229][ T31] 1 lock held by khungtaskd/31: [ 1406.381162][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1406.423155][ T31] 2 locks held by getty/5579: [ 1406.455358][ T31] #0: ffff8880306870a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1406.495501][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1406.525487][ T31] 3 locks held by syz-executor/5304: [ 1406.530899][ T31] #0: ffff88804ae0cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1406.575338][ T31] #1: ffff88804ae0c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1406.605530][ T31] #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1406.644894][ T31] 1 lock held by udevd/5367: [ 1406.649534][ T31] #0: ffff8880255e3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 1406.660271][ T31] 1 lock held by syz-executor/6256: [ 1406.665903][ T31] 3 locks held by syz-executor/6721: [ 1406.671404][ T31] #0: ffff88804aef8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1406.682292][ T31] #1: ffff88804aef80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1406.692340][ T31] #2: ffffffff8fb38628 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1406.703277][ T31] 4 locks held by syz-executor/9366: [ 1406.709034][ T31] #0: ffff8880484e0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1406.719584][ T31] #1: ffff8880484e00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1406.730061][ T31] #2: ffffffff8fb38628 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 1406.746506][ T31] #3: ffff8880293c12f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0 [ 1406.756276][ T31] 3 locks held by kworker/0:3/12210: [ 1406.761570][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1406.784891][ T31] #1: ffffc9000bda7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1406.804791][ T31] #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1406.846296][ T31] [ 1406.862568][ T31] ============================================= [ 1406.862568][ T31] [ 1406.885490][ T31] NMI backtrace for cpu 0 [ 1406.885509][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1406.885529][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1406.885540][ T31] Call Trace: [ 1406.885548][ T31] [ 1406.885557][ T31] dump_stack_lvl+0xe8/0x150 [ 1406.885593][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1406.885613][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1406.885639][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1406.885661][ T31] sys_info+0x135/0x170 [ 1406.885677][ T31] watchdog+0xf90/0xfe0 [ 1406.885700][ T31] ? watchdog+0x209/0xfe0 [ 1406.885726][ T31] kthread+0x726/0x8b0 [ 1406.885748][ T31] ? __pfx_watchdog+0x10/0x10 [ 1406.885767][ T31] ? __pfx_kthread+0x10/0x10 [ 1406.885789][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1406.885808][ T31] ? __pfx_kthread+0x10/0x10 [ 1406.885827][ T31] ret_from_fork+0x51b/0xa40 [ 1406.885847][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1406.885871][ T31] ? __switch_to+0xc82/0x1410 [ 1406.885897][ T31] ? __pfx_kthread+0x10/0x10 [ 1406.885917][ T31] ret_from_fork_asm+0x1a/0x30 [ 1406.885953][ T31] [ 1406.885960][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1407.005707][ C1] NMI backtrace for cpu 1 [ 1407.005724][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1407.005741][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1407.005751][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1407.005775][ C1] Code: 28 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 11 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1407.005789][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1407.005803][ C1] RAX: 00000000004bcfe7 RBX: ffffffff8199370d RCX: 0000000080000001 [ 1407.005820][ C1] RDX: 0000000000000001 RSI: ffffffff8dcd0c10 RDI: ffffffff8c073a00 [ 1407.005831][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1407.005843][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef4970 [ 1407.005854][ C1] R13: 1ffff11003a54b70 R14: 0000000000000001 R15: 0000000000000001 [ 1407.005865][ C1] FS: 0000000000000000(0000) GS:ffff8881257ea000(0000) knlGS:0000000000000000 [ 1407.005878][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1407.005888][ C1] CR2: 000055a24fd8eee8 CR3: 000000000e346000 CR4: 00000000003526f0 [ 1407.005901][ C1] Call Trace: [ 1407.005909][ C1] [ 1407.005915][ C1] default_idle+0x9/0x20 [ 1407.005929][ C1] default_idle_call+0x72/0xb0 [ 1407.005945][ C1] do_idle+0x1bd/0x500 [ 1407.005958][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1407.005978][ C1] ? __pfx_do_idle+0x10/0x10 [ 1407.005995][ C1] cpu_startup_entry+0x43/0x60 [ 1407.006009][ C1] start_secondary+0x101/0x110 [ 1407.006027][ C1] common_startup_64+0x13e/0x147 [ 1407.006052][ C1] [ 1407.172508][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1407.179367][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1407.188571][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1407.198629][ T31] Call Trace: [ 1407.201909][ T31] [ 1407.204835][ T31] vpanic+0x1e0/0x670 [ 1407.208821][ T31] panic+0xc5/0xd0 [ 1407.212526][ T31] ? __pfx_panic+0x10/0x10 [ 1407.216931][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1407.222316][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1407.228488][ T31] watchdog+0xfda/0xfe0 [ 1407.232635][ T31] ? watchdog+0x209/0xfe0 [ 1407.236950][ T31] kthread+0x726/0x8b0 [ 1407.241003][ T31] ? __pfx_watchdog+0x10/0x10 [ 1407.245658][ T31] ? __pfx_kthread+0x10/0x10 [ 1407.250319][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1407.255502][ T31] ? __pfx_kthread+0x10/0x10 [ 1407.260093][ T31] ret_from_fork+0x51b/0xa40 [ 1407.264674][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1407.269793][ T31] ? __switch_to+0xc82/0x1410 [ 1407.274558][ T31] ? __pfx_kthread+0x10/0x10 [ 1407.279142][ T31] ret_from_fork_asm+0x1a/0x30 [ 1407.283909][ T31] [ 1407.287308][ T31] Kernel Offset: disabled [ 1407.291619][ T31] Rebooting in 86400 seconds..