last executing test programs: 4.509226126s ago: executing program 2 (id=4687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x70, 0x1, 0x1, 0x381, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf28755a3f8e5b6b4}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0xfffffffa, 0x8, 0x9, 0x0, 0xe, 0x8, 0x7, 0x2]}]}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x1) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x70, 0x1, 0x1, 0x381, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf28755a3f8e5b6b4}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0xfffffffa, 0x8, 0x9, 0x0, 0xe, 0x8, 0x7, 0x2]}]}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x1) 3.949375915s ago: executing program 3 (id=4694): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x11, r2, 0x1, 0x81}, 0x14) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) openat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f0000000240)=""/125, 0x7d}, &(0x7f00000002c0)}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024000}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 3.406865217s ago: executing program 0 (id=4702): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000005cc0)) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x8041) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x1757, 0x7fff, 0xc, 0x1, 0x2, 0x8, 0x6, 0xfffffff9, 0x40ae8416, 0xa, 0x4, 0x0, 0x5, 0x6, 0x2}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0xd8, 0x1403, 0x1, 0x70bd28, 0x25dfdc02, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14}}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc890}, 0x20000000) 3.330273833s ago: executing program 4 (id=4703): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000280)={@local, @link_local, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x3, 0x1, 0x2}}, {@generic={0x1, "7de681d1"}}}, 0x0) setsockopt(r1, 0xa5, 0xea, &(0x7f00000002c0)="126273394aa01c765345c38a31f4f6c07016cd1c708eb4bb8645d178beb9e916309d0ddbc83fa419cbd3bb202d4da22a806e2c70a2569ac6aa0ad1c623a08b2e51d8cb4a51fb474677bfef5775ad6171e9f0dfccf173436b692fb6cd422619558d733978171207634b60251d1906d13af887c43b65742edaa6de979cd03b01da509fad1945876de451cda69301a78e9aec1e3f39ad0086ded3b7", 0x9a) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r3, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2cd7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000540)) r4 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000580)={0xc0002011}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e22, @empty}}, [0xac, 0x7, 0xffffffffffffffff, 0xd60b, 0xffffffff, 0x1, 0x9, 0x2, 0x4, 0x70b, 0x5, 0x938, 0x1ff, 0x1, 0x1]}, &(0x7f00000006c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000700)={r6, 0x8}, &(0x7f0000000740)=0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1d4, r7, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1b8, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6c72}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x19}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x62}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x6, 0x24, 0x0, 0x12, 0x12, 0x2, 0x60, 0x6c, 0x3, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0xd, 0x0, 0xf, 0x1, 0x8, 0x7fff, 0xd182]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x1, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc95, 0x2, 0xc, 0x0, 0xb233, 0xffff, 0xb, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x80, 0x7, 0xade, 0x2, 0x6, 0xdb, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ce, 0xa8, 0x0, 0x2440, 0x8001, 0xb, 0x5, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0xe9, 0x25, 0x6, 0x5, 0x4, 0x17]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x80}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb0}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x41a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000001}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x4}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x81}, 0x8000) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r9, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r11, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4040) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000c80)=0x1, 0x4) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000cc0)) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), r10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000dc0)={'syztnl0\x00', &(0x7f0000000d80)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0x4, 0xffffff7f, {{0x8, 0x4, 0x2, 0x1, 0x20, 0x65, 0x0, 0x91, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xc1, 0x3, 0x9, [{@empty}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000e80)={'syztnl1\x00', &(0x7f0000000e00)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x8, 0xffffffff, 0x40, @local, @empty, 0x80, 0x8000, 0xfffffff8, 0xe}}) getpeername$packet(r10, &(0x7f0000000ec0)={0x11, 0x0, 0x0}, &(0x7f0000000f00)=0x14) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000f40)={@local, 0x0}, &(0x7f0000000f80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001040)={'ip6tnl0\x00', &(0x7f0000000fc0)={'ip6gre0\x00', 0x0, 0x29, 0x36, 0x7, 0x40, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x7800, 0x8000, 0xc23, 0x2}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000001180)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x88, r12, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r16}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r17}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10011) 3.315226204s ago: executing program 0 (id=4704): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_out(r1, 0x0, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x2e, &(0x7f0000002080)=""/4102}, 0x94) close(r2) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000000)=""/103, &(0x7f0000000080)=0x67) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a80900300003003000000060ce902d"], 0xfdef) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r0, 0x12574000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.18944454s ago: executing program 2 (id=4705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x1c, r3, 0x909, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.090718918s ago: executing program 0 (id=4706): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x3}], 0x1, 0x40800) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) recvmmsg(r1, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/51, 0x33}], 0x1}, 0xfca}], 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.041797062s ago: executing program 0 (id=4707): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b01", 0xc0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)="e24fc801dffdf37981a92f7f4005844301258a0ec141f1ec014bd9d03d1db52a75dfb8e04daddc3fac31adda350235262d9e1b8e20d406b97372033032d7623ff84bbf544a91c12eb644b323e9653fd76852c025e718cc91d9e9e274a7ed2dc15d8efec8d11a7983cdc8f3c39dbf764fc28873b760c435743929653c359ee706dcf2658403b25fbf3382f179562dc64883887ead6a916ef430ee4f67e21a3f01a3a35627bfb2f6ba204da0280c9f2fb5443879616a431884af82606286c4760a9ef4aa264e0000137f28dbe594332062120a76b565165987eef46c1d523f0fba98cd51f14537e313952f76574e3137aa1b41ae8e16f4087ddbaa7de98ca609a1b01b64ab10613204e4d18f376138fe7735ffb2fa09843922ce5a365e1e84286f09c432e0f521be13182256dcf534e03efb1735e55a8dce53e32ac669207d21e3b79414a8e61204f7c4173f2381e4c5e6cce12f6bae60d5bff199d5da50e40f87efbcec332173caba740a1b12c915bccf04940399b9a72a7dca4b8c7d46a2c444f6c7e30cf1f811a4a31cabb9b512a949105e2aa4081a3d613ad9ae4cf209d684e4b27c204bc5a395da552b8638df42d4c3522b64eaf11c988fce5634757ed41b39c338aea3ed2171e86fd34cde22dc3519edd2108641f3c3d4ca2016524b8f7d67e80ef5474d0a4a157eca9e5c0c5fcd7f459f64e91effe3bbcdcf9aba5704952cf0b82b1b0d4533a9c7ddc914bc7dfd8eea591be5806408191e3cca1cd6101f575b7c7206cd219b9f379fc3d03c3c867e5c36a8fcc75e86988a1897876b5a3bb2b3e102a742ebaeb50e08096c1990fa8d8755c187f86213f3cfc322f7997da73594e30f68a1da5768201916dfd52711ad79caae751260cc054dda58307f4031aebc75514795e6d7ae7725c27f7bc8f1e2115603e1f8b18517a74ddd901752a194cfb37535c949f4a5eefc98b231e03fd7a5d7643817567c7fbdcad37365a1a063c11bfd7e6474e9608391f3f3ebcd97a3ad7a9873d8615a9a4dac09ebc528b9277f71d5c2e6012645c643764319941206e6957987b5423b3864e6acb89c0e0371d66c5e16dfd920305cf5dc39ea0d48cea652236f3492f5b60a2a648e8ac61bf13811a81be593e430f504d0fe3d38222acd10e188605410900c55f203e0f6d553cf4e7cdfdfdbf4b60ee166c8be15757c6042f7f7b0c0c75932f795b075ba4116f1336622bafc47e58206255af610b3a7e88fed94a1c4a8b29e7e379b084431d5e059c0d0342678ef5b2ad08d10be3b48e4a1d0de16e8ca0175e1453fa15f8086f7b93d15e5f0769d56cbcec255fd1e82c43a61d50b893a8e7bc84c7cc1b9cffbc4d8f8d703d1ca879acf93e82f35a534665bd5a5a9e13e35ed00d796b830c45f87ba6c90857d05774506611c940e391752237af000473cfff41236801a9e78c48206e03e2a4b1c9164eb1f8cfb71d1559d3b5650327868ef87906b5a0e05470b0655f51090a57a65895608866ac0e008c44898ea0fa968ae510b561b8ebb9f0a38c2572f93aa6a8f5aaab1ff62ad761af234379adfc397c186a99bbecd534266358c5e053de4698e37fb0c512d72492c6f0d18e686c21665224d23fb6b15670e235a96bab63d63df51624f73d78fc38e0c8956882ebbbe0207f3b13be74b70ef29e64912cac49dd90a7f4d5fd09bec08dcb8413578f9e4456079c3673ffd33b366d4a203af63f25ba792a722a4d36749c6724e0b37cfd71761f3ff122861e362aab7a26a8c8090b65ab080535fa912d5b58a9b65410b94acc42396796e35a308cac7594439f4ed2afc8cc4676159751d9ce63ff894a7cad95b375f852d9bd493719ab9bac41cd9ec817b835628a6a9f4869fc9ce72ea3fc7119341ceaf23e85f7a990b7eeb35ef2ef2c84f6fafa0c186a0b2490c72cfe2ce7607634e0d651e4c87514a177300f4f3b762e386cc1522e9b859fb9297329a73b89b8a97184864823d1829fe7a6bf30c69f24b61338e3f341e05e3f70ec6cd6f3544652f69ade293dc896836632271cde36ebb6f515dc8d13121def9d2911ed0d19f2fc31a12b1de3b43dbfb32c0df664c85d4b978f3a41b43546844c8581590dade2db066d5a948a386438232b0be334232800fd164aac8047a96b85356820597a0ef21b2df300a8ef2a08155b7a8eb7793e5ec768db868432c9d65cd748369f24909862131553af695be43c95f2e65a9ef1f8fbad3d03bee4640639c0351c6ed58113b86ec0530aff32f4e4b786285ce72afd6dce83b3a82f58a0bc62735e3402848690d2865438c81f174588e6046ba95935ec0dfbbbb87dda17d8fdcf07b8322bdf18b1421293ead6a8b38119724c9c122f457f85129cbd50338a7e3194418c00ed91cd39878f7753477a17856281ae743c8dcdfc7d5c7142348f9fae4f7767f2c89c394c3fd5d8f261bde3b2055ccddf05c36643e21ec542a62be492501b470813fcedf01c876da0e1e822c3867f32951053f2963b5d1f90e713df0b2c526f36e685b4153d4ae4e8c607df1308c84e500c0bd9fe80dc3cf28187a39fd09643afb25eaa9411f3ce6304dc8bfd02afc9a6bad59887a1cad44a1f613a0779059a90248f09e357af291b1cce42cb9ac766dac70e599c1bbba4a58715adf2426a865eb1e0b80f10602db39c400b45131700490a9c38345022acc79851c2368bc7d191bc1f995722c564198669a68c971f60779e6983508a7c8077cdc7677d9a8b70b8fd1183f57cbc2d653ef6e96110c0c6730be7add59392b4082a6478447cc307d35512dfb2c4e27122b9749eeed9b5a5906f99ee57d7b565822bd4d78aed8f1567409a59ae77b3a1552a5cdb1558ff3ffd2b4cd0e141fce5ad11de5509c6dac5858bbb222bc403e3a307294afbe9633e162bfc5231284f58d475ef19cc1012cb4a81bd26e7e24509ecb5bd859a04a8e39f373188fc58573a52bf8a5de50aa082a4ad28202d01da2f0c7d3a6d1d3b9c3dab9d3ad9a663af4894904236632514d668e5f5016a350ae5accae2902cb9cba8d5262abc4e934329f410739831d447b798bb1da19bd3c98e90f43e54b8911ab9da8d594c9d0617396a53469ec2eb6ca0843ffd39e65b79bf856c755d8fda71b66e16cba537adac14de21a16a379513555d13ee6e021e6bb1cb5db35a7cb0162c3dbf631e8b6b42cc98fba74396971be184b910dbf0fbc29c0e45acfe59c789a134bcc01f7c3b2513d4ef988e7f66e5002d9ee8766870b9502d173953b78b654f020349b7af7845462822a6c78a63416606a265389216f141ca8269a11f18edf1d11de7f11906b787a0189a4fe5a55bb0f78c25319583b5f81c4ad25dd4544d35a2f8afce5b8a117b16104c45997f9ad31421414006f158881e9c7f553f3b7364e274bff39236720d67346e8270b2fd6b5b33c0cece3251b62ec09c709ad1adee626e43a54356b803adf23e45ddbe2bbade69974ca43c3f2246389612398a5247678299995592002f369b0a779ffa60d0785edecab597cb6fa11e2ce68d5e956c5fe95c12ce24cb334a2d1fe9e63491b7d85d58ba4150df6c42f29223eaa607837fee3c71667d7c4a69d5bd2a88e548429e4630c59c38689a52cbc9099f303d680c053cce1a0b24c17a918f7dd08a9348a414e30c8c91e9680facb185914018e1c5a090cd00578c837d9f69e49eae3e45326b679678cca81ca20cf3bfa8e4e548dc446d168382695319ea9fdc14bf29c2b15e2acb925f7db4723f6b382efcbdb10f00837278564a2d0e0da63b755206bdf69faba7e5d7406ec324ca089729a68ca29cbccd17256cb465b91e718b3b64429b8a8e70a72d85b470d85f4b8169ebc74809334db04384c3c2887f09374e60cb3d5c93f3ce5077bcea293b37215ba345f6a30b1d6e08c1cf7024b65ecac5063e177d9af7f687a35c377871d87b00fe7c453199e5c0588a49bf9981651f57468bb37d1812cce02cf1a6df234cf50aabb65959fb7863384d46cbf43600aeb2858a8bea733eec75bcf02f2dfc0c2df6b6c0f807236e67cf6e7253a6f0582cad219daad67c91b8c2f38ad91a9db3bc284f6301f28ad3d1ade08cfc4a8b63268de502d7b4cad5973ce2867a534e576789fe2bd60b15da33d7a5a5e728f6e5ab7052c4636439258979a804bf67aec5546343d7cbee90b4be9d5ef0775d64bfade2daae18d7de4240dd1d88ff3816f2d5c871174b3b48e9fab898abd4cd2df8cb1c3cfff889594a3f08cb935031edbe34aab3433ffd50263a406deef158bbabfa2ec70e79c761d95fcfbef0800c95413068b3789c6b12de5ebe9b414e65ce4f86a6bbccd5ec8e4e220f8ad07255abbaef719ebe1e5d066db4dd1f639cb156c34755eb14053824a1003e97ee54e8dab35f441ee563d80d3163a7b8f71d4f17e240cfae9f2e50c164cf373bb174f5dadafe2430a17be757e30f251d5d60863526a8f46addb932c8170c4a383348c5441aa353e5f1181482d4d0cc0e5d2809c11ee1fac29230c907926c2d3fa55298ae9835c46218650421497d060d15a4194c4d7382a886333375098156a9f0fd6b1d0d94933bb6f285fe51d4aa3037739f143ba20f9b326565f6db49787d1aeb30055ce588dd3c008c0bc1a08935c991067d63003b68b9e2db95360d8aaf2103bb5142c590bb799b268488febc7414b9ae8e108ca4ab4f031adbb9fbe4631c29adb14fb9726df3c6192a3e81b6c34d68e15ee309503ccc1ab240d4ce3c9a099cd7f8782eea9bd1c7005582b9c1fe08030b47958865723652fed003c90703e07f9f1782e33f3bf3d0b83691cd5970fb4af65afa2244bff41e93fa24c33c26c43c93c33a2144aac437a4ab2b4f498104278ec5f2cd38de61eb8b436f5a9dbc3d8b2405ff0598cbcaa964377f61daaf935c42e0db4567520cfee195da1c6090d62031dd0865b2f5aa88be1746a761e3a64b78de338b8996136bbd6b859eb730aa8ab1f68bb5a02b713d8b303ab2ef1e5433d225b0dd485d40a049a1953b488df5314fdbc1c654132498838043c35c7b168e786b0f35a04ec4417968c5561c45735cc09163e8fdbbe67a4c04d672948037e957968c6bf672668d1f6369475d4a238f46af939dbca37cc96ae88b152c1b8b524883e296e5e915a928e9a54268c28e14a85c87fe3bde0e9175dd2eb2645852464ddeae29aefc01d05ef668914829f340f6b14a7bc0f2ce4114f1bef1e2afc37583670a900c58affc6c55bb69e737e5fd02322536ec1e4249f8cca7171394d97c930656beb437ea1b7ac8f6b69d8c1499371deeff7608dde446d4a50f29ce015c655885fcc090aeed40d52390ef952c6b9f937197718aae27fe924c419d1468b45bc0e88688425c3a451dac67f29460fce27a5b753f60b244c1832e9b485e321e8d8d4f547eda56680d9d01aa6d4d7881ab760f926157315a3fcb4d7f9653b91270fc43637420215c71274e4effaf6b67fea48c05393272e288e103e28d26eb39fcb9afdef67686485e90e605b45d2f36a39b4973426f843c2db1e861c67d7c2ca2b8e92ca98ad1297d3fd913258081fff78d981097a2c22b0a9d881f649582e49fd9baaaa89d0d7091f9cfeb8bec3c9b7dfb85e53bee2fb051ff0f7d57ef4af134a7ca9ab91271411a0c95be1af414689425f985faa808a2520c96403788d71af4314023af7a2761ee7ba7e135edfaa51f9f89caa784d853886c147d11f3ccab318250aa65d366396b5dfcda0dda9f8cca5ad6815252ebc061c47f871785e0b3edbdcfb2d74c6fa3eaabaf9f3", 0x1000}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639", 0xca}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e", 0xea}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7", 0x47}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3", 0x27}], 0x2, &(0x7f0000000f40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d", 0x13}], 0x1}}], 0x4, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'ip6gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000004000000040000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x82, 0x2, 0x5a, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x40, 0x5, 0x6}}) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)=@newqdisc={0x188, 0x24, 0x20, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xd, 0x8}, {0x2, 0xfff1}, {0xfff8, 0x6}}, [@q_dsmark={{0xb}, {0x50, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xd}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7ff}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x80}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x200}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x583}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x81}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x20004005) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 855.106477ms ago: executing program 2 (id=4714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000000000000008000d"], 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) r5 = socket(0x400000000010, 0x3, 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x2, 0x6) syz_emit_ethernet(0x52, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbbd9aadffd7e08004800004400368000dd00059078ac1e0103e0000002000000217f000001000000008903c583020000000000000b0000000000000000", @ANYRES32=0x41424344, @ANYRES32=r6, @ANYBLOB="5c01000090780000"], 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r7, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) sendmsg$sock(r7, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x4000884) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r5], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="183000000000000000000000030000001830000000000000000000000000000018000000000000000000000000000000000000000000000000000000080000001800000000000000000000000000000018100000", @ANYRES32, @ANYBLOB="414bd7d90000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x44}, 0x94) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x4, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @mcast1}, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, &(0x7f0000000000)='syzkaller\x00', 0xa) 854.611826ms ago: executing program 3 (id=4715): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000000)={0xfffff000}, 0x8) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$SIOCNRDECOBS(r1, 0x89e2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x49, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x39) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000001480)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYRES8=r6, @ANYRES32=0x0, @ANYBLOB="0c0006000000000000000000"], 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001440)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03ef000000000000240012800c0001006d6163766c616e00140002800800010008000000060002200100000008000500", @ANYRES32=r8], 0x54}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) getpeername$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @default}, [@null, @netrom, @rose, @bcast, @remote, @null, @rose, @default]}, &(0x7f0000001640)=0x48) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x5, 0x3, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 806.153582ms ago: executing program 0 (id=4716): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000061102c0000000000d4000000100020009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 805.70833ms ago: executing program 4 (id=4717): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f00000000c0)={0x4}) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) accept4$rose(r2, &(0x7f0000000240)=@short={0xb, @remote, @remote, 0x1, @null}, &(0x7f0000000280)=0x1c, 0x80000) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="280000006dc96416dbccc6a7", @ANYRES32=0x0, @ANYBLOB="0800028004000280"], 0x28}, 0x1, 0x0, 0x0, 0x4c010}, 0xc010) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000140)=0x2c) 791.241388ms ago: executing program 1 (id=4718): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002180)='-', 0x1}], 0x1}}], 0x2, 0x4000000) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 720.6223ms ago: executing program 1 (id=4719): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x8810) accept$packet(r1, 0x0, 0x0) 642.242544ms ago: executing program 0 (id=4720): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200e86d753a0000b3790ce9b57a01000003000000850000002f0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) unshare(0x20000400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x17, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x80000000, 0xdb5}, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000107f0000010000000000000000000000000000000000000000fe80000000000000002621e693d8de0fa01414bb000000000000000000000000fc00000000000000000000000000000005000000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d53c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000020010000000000000000000000000001000004d4320000000a000000ac1414190000000000000000000000000635000000020100090000000101000008000000"], 0x1ac}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000004590001002ebd7000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0180000008000200030000001400010000000000000000000000000000000001"], 0x38}}, 0x0) socket$kcm(0xa, 0x3, 0x87) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0xffe0}, {0x1, 0x6}, {0x6, 0x8}}, ["", ""]}, 0x24}}, 0x24000044) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000033e2cf9746056499d16c70cb444ed08c11e311bcaf3217b6fed9b221f30435ed841f3c", @ANYRES16=r6, @ANYBLOB="040025bd7000fedbdf2501000000000000000141000000180017000000080000cced7564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x240008c1}, 0x20000000) r7 = socket$kcm(0x2, 0x7, 0x2) pselect6(0x40, &(0x7f0000000040)={0x5, 0x8, 0xc97, 0xdd43, 0x4, 0x3c, 0xfffffffffffffffd, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0xfe, 0x0}, 0x4e23, 0x3, 'wlc\x00', 0x25, 0x10000004, 0x7}, 0x2c) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'sh\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x3, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f00000000c0)=0x1) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 641.553102ms ago: executing program 4 (id=4721): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000040000701feffffff00000100017c0000040042800c00018006000600800a00001c0002802b000b8014000164a493882ecb2796e9eb44a0c6c829fab15704aff52166fb2c6de438641418a88ec441d1ab11147eaacbb527fa4a996f84de"], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 563.671201ms ago: executing program 1 (id=4722): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000050000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000050000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$ax25(0x3, 0x2, 0x8) (async) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r2, 0x0, r5}, 0x10) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r2, 0x0, r5}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x50, r6, 0xffffe000) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x4803}, 0x4008014) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x9, 0x40, 0x4, 0x2400, 0x1, 0x0, '\x00', 0x0, r6, 0x3, 0x0, 0x2, 0xd}, 0x50) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000000000)=0x7) 557.040031ms ago: executing program 4 (id=4723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x810, r0, 0x2c568000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x11, r1, 0xfffff000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) close(0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'sit0\x00', 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x8, 0x0, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='9', 0x1}], 0x1) close(0x3) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x2000}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$XFS_IOC_GOINGDOWN(r9, 0x8004587d, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000001080)=ANY=[@ANYBLOB="000086dd00001200ffff0000000060ec970000802c00fe8000000000000000000000000000aa0000000000000000000000000000000106000400"], 0xb6) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bddc05fbdbdf254b0000000500000000000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a60010000000000000000e0001006e657464657673696d00000095238f3666657464657673696d3000000c000600000000000000000015be6dc45a73d049623132103f4d1e4d1783d331b2ad06b9b51c5c4141968ed6945967371a160b497fb165c6841d38da1220ca1932dfa50c3da72e3da7966e4d345c13d73d2b78f7ac68b8b205be2c36f09fbcf0a2"], 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008855) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x368}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 349.905198ms ago: executing program 1 (id=4724): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0400001800dd8d0000000000000000020000000000000600000000060015000100000008041680040401"], 0x42c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050029bd7000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08000500060000000c00268004000400040005009f9a3d18d76bf8a4b2b9d70f01000000bcedf7724b0b18e3f4a88a"], 0x30}, 0x1, 0x0, 0x0, 0x200008d5}, 0x0) 349.682021ms ago: executing program 2 (id=4725): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x18}, 0xc) preadv(r1, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000500)=""/4096, 0x1000}], 0xa, 0x2800, 0x6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) 304.838324ms ago: executing program 3 (id=4726): unshare(0x20000400) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x1}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2) ppoll(&(0x7f0000000340)=[{r1, 0x4000}], 0x1, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) 274.334758ms ago: executing program 2 (id=4727): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000040)=0x9, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c, r4, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r7 = socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(0x4) 210.028468ms ago: executing program 1 (id=4728): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000240)={'pim6reg1\x00', 0xdf40}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket(0x400000000010, 0x3, 0x0) vmsplice(r2, &(0x7f0000000800)=[{&(0x7f0000000000)='YQ', 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x4) write(r1, &(0x7f00000003c0)="fa8a4e785a73c662822e2a36d22d367923ebddbd84fa85c9a3f7dc1654ae0104000000406c871ea9242fbd18cd095244a6e008cf21ae324f61695077205f70dcdd73b02358d5ce668eaca298a8b7b3da", 0x50) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001040)=""/28, 0x1c}, {&(0x7f0000000000)=""/169, 0xa9}], 0x2}}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000300)="8b", 0xfdc7, 0x11, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) close(0x3) r5 = socket(0x26, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000100)={r8, 0xe, 0x30, 0x5}, &(0x7f0000000180)=0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f00000001c0)=""/85, 0x0, 0x4000000, 0x0, 0x9, &(0x7f0000000000), &(0x7f0000000180)="bab13d9d7127637f69", 0x0, 0x4}, 0x50) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) shutdown(r3, 0x0) shutdown(r3, 0x1) 209.419857ms ago: executing program 4 (id=4729): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56561, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x36, 0x2, 0x7}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) 189.899177ms ago: executing program 3 (id=4730): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x17d4}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[], 0xe) 137.552213ms ago: executing program 1 (id=4731): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) connect$pppoe(r0, &(0x7f00000003c0)={0x18, 0x0, {0x2, @remote, 'macvlan0\x00'}}, 0x1e) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000bbbbbbbb030000000000000086dd6d002008000c11ff2001005baa5a000000000000000000000006a73bf900000000000000000000000000014f194e20000c907881"], 0x46) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0xfc, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_USERDATA={0x31, 0xd, 0x1, 0x0, "2e95a726725bcee7f424a30c8ce25ac793d1fafbcfde1c43a8663993767757bb9e47950394dfbbc2a69e8b136a"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x7c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x878}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x11, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000010000000a00000439010000a249010000000000000000000100000a"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000080) pselect6(0x40, &(0x7f0000000140)={0x1000, 0xd2, 0x0, 0xba, 0xfffffffffffffff9, 0x7}, &(0x7f0000000300)={0x7, 0xf, 0x1ff, 0x71a, 0x0, 0x7, 0x7, 0x8001}, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x1, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) 66.616706ms ago: executing program 3 (id=4732): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (async) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0xffff, @empty, 0x1}}, 0x7}, &(0x7f0000000200)=0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x130}, [@generic={0x40, 0xa, 0x2, 0x2, 0x9}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 59.65192ms ago: executing program 4 (id=4733): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x80000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local}) pread64(r1, &(0x7f0000001040)=""/84, 0xffffffffffffffb6, 0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000001280)={0x1, {{0x2, 0x4e20, @multicast2}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000107000000000000000001"], 0x114}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='veth0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x20, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000050000000000000000000000711000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000280)={r5, &(0x7f0000000000)='&\x00', 0x2a080, &(0x7f00000010c0)={@align=0x5, {0x3ff, 0x1000, 0x9, 0x29b4}}, 0x4, &(0x7f0000000180), &(0x7f0000001100)=0x219e}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910435000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 49.125419ms ago: executing program 2 (id=4734): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7100fbdbdf258900000008000300", @ANYRES32=r2, @ANYBLOB="18003d0000000000000002e0b50000000500090001000000"], 0x34}}, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000640)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c622379dc46a287748e2e673742f3ce5d57be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442ced8d387fe7282d16851afdc", 0x96}, {0x0}, {&(0x7f0000000ac0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8", 0x2f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f00000002c0)="8584958f28b0e376d97ada717dc6fbe06bc3d007e47f7c9cd23923fe76d6bfd3b7278cbb2c820b9299e923f5ff1daba6011e6aaa41cd06579802b4db22dfaf261e4bda3c239d2fde3a2730388d41c948eaaa27d1ab52f2ad88e3d2293546e2c756296b99d5fb330d2b3547fd07c7aa81c2aba1a1963a40f2aeee7cc9d14cf4a03f68b3b290d12ccde99e89e3d6b7557cb98c5eefac031c97758c6c1f9fb1264854b66ea7688105621743e2d5009a7d18dcc2082e565cc3f27f9a02c4ab3c582b63d229ee8e0e39e5ca5f2406ba7565247134eefa1e27aaf3b6129e95893031208591195ca4", 0xe5}, {&(0x7f0000000400)="9fddd0328c9b06a12c364390df300267c14ebda63306", 0x16}, {&(0x7f0000000440)}, {&(0x7f0000001e00)="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", 0x82c}, {&(0x7f00000001c0)="547ecf9b2beb6e54c8340ad42ce9ab", 0xf}], 0x5}}], 0x3, 0x2090) readv(r3, &(0x7f0000000a40)=[{&(0x7f0000000700)=""/92, 0x5c}, {&(0x7f0000000780)=""/155, 0x9b}], 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) 0s ago: executing program 3 (id=4735): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) kernel console output (not intermixed with test programs): 89.216759][T18728] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 389.223817][T18728] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 389.241007][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 389.247987][T18720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.283394][ T5825] Bluetooth: hci1: command tx timeout [ 389.283651][T18728] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 389.332777][T18728] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 389.396241][T18728] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 389.404197][T18728] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 389.456678][T18728] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 389.473699][T18728] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 389.790061][T18747] netlink: 'syz.3.3217': attribute type 12 has an invalid length. [ 390.044413][T18763] netlink: 'syz.2.3221': attribute type 5 has an invalid length. [ 390.325366][T18731] chnl_net:caif_netlink_parms(): no params data found [ 390.614321][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c81d400: rx timeout, send abort [ 390.711846][T18731] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.745340][T18731] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.776123][T18731] bridge_slave_0: entered allmulticast mode [ 390.808729][T18731] bridge_slave_0: entered promiscuous mode [ 390.849526][T18731] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.876325][T18731] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.883674][T18731] bridge_slave_1: entered allmulticast mode [ 390.899847][T18731] bridge_slave_1: entered promiscuous mode [ 390.973812][T18795] __nla_validate_parse: 6 callbacks suppressed [ 390.973829][T18795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3228'. [ 390.995385][T18731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.114493][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c81d000: rx timeout, send abort [ 391.123143][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c81d400: abort rx timeout. Force session deactivation [ 391.333384][ T7127] bond12 (unregistering): (slave gretap1): Releasing active interface [ 391.359324][ T5822] Bluetooth: hci4: command tx timeout [ 391.361529][ T5825] Bluetooth: hci1: command tx timeout [ 391.382353][ T7127] bond6 (unregistering): (slave geneve2): Releasing active interface [ 391.480129][ T7127] bond8 (unregistering): (slave bridge2): Releasing backup interface [ 391.560270][ T7127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.571016][ T7127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.582961][ T7127] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 391.595455][ T7127] bond0 (unregistering): Released all slaves [ 391.608833][ T7127] bond1 (unregistering): Released all slaves [ 391.621273][ T7127] bond2 (unregistering): Released all slaves [ 391.622806][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c81d000: abort rx timeout. Force session deactivation [ 391.638183][ T7127] bond3 (unregistering): Released all slaves [ 391.652203][ T7127] bond4 (unregistering): Released all slaves [ 391.671497][ T7127] bond5 (unregistering): Released all slaves [ 391.687034][ T7127] bond6 (unregistering): Released all slaves [ 391.703188][ T7127] bond7 (unregistering): Released all slaves [ 391.716940][ T7127] bond8 (unregistering): Released all slaves [ 391.729808][ T7127] bond9 (unregistering): (slave lo): Releasing backup interface [ 391.738002][ T7127] bond9 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 391.755111][ T7127] bond9 (unregistering): Released all slaves [ 391.766310][ T7102] wlan1: Trigger new scan to find an IBSS to join [ 391.775992][ T7127] bond10 (unregistering): (slave veth15): Releasing active interface [ 391.785251][ T7127] bond10 (unregistering): (slave veth17): Releasing active interface [ 391.796635][ T7127] bond10 (unregistering): Released all slaves [ 391.810431][ T7127] bond11 (unregistering): Released all slaves [ 391.822539][ T7127] bond12 (unregistering): Released all slaves [ 391.840951][T18731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.948598][T18731] team0: Port device team_slave_0 added [ 391.975361][T18810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3231'. [ 392.069630][T18731] team0: Port device team_slave_1 added [ 392.081411][ T7127] : left promiscuous mode [ 392.086471][ T3526] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 392.172274][ T7127] hm3): left promiscuous mode [ 392.221957][T18731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.231954][T18731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.271170][T18731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.296431][ T7127] : left promiscuous mode [ 392.331916][T18731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.345979][T18731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.372645][T18731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.403882][ T7127] tipc: Left network mode [ 392.501301][T18731] hsr_slave_0: entered promiscuous mode [ 392.507983][T18731] hsr_slave_1: entered promiscuous mode [ 392.514286][T18731] debugfs: 'hsr0' already exists in 'hsr' [ 392.520161][T18731] Cannot create hsr debugfs directory [ 392.744456][ T7101] wlan1: Creating new IBSS network, BSSID d6:eb:97:3f:c8:67 [ 392.806906][ T7127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.372862][ T7127] IPVS: stop unused estimator thread 0... [ 393.436460][ T5825] Bluetooth: hci4: command tx timeout [ 393.843665][ T7102] bridge_slave_1: left allmulticast mode [ 393.849625][ T7102] bridge_slave_1: left promiscuous mode [ 393.855492][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.864801][ T7102] bridge_slave_0: left promiscuous mode [ 393.870758][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.930248][ T7102] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 394.135107][ T7102] bond2 (unregistering): (slave bridge1): Releasing active interface [ 394.411916][ T7102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.421893][ T7102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.432094][ T7102] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 394.441447][ T7102] bond0 (unregistering): Released all slaves [ 394.452700][ T7102] bond1 (unregistering): Released all slaves [ 394.464893][ T7102] bond2 (unregistering): Released all slaves [ 394.480132][ T7102] bond3 (unregistering): Released all slaves [ 394.504549][ T7102] bond4 (unregistering): Released all slaves [ 394.517360][ T7102] bond5 (unregistering): Released all slaves [ 394.530963][ T7102] bond6 (unregistering): Released all slaves [ 394.547889][ T7102] bond7 (unregistering): Released all slaves [ 394.562176][ T7102] bond8 (unregistering): Released all slaves [ 394.574860][ T7102] bond9 (unregistering): Released all slaves [ 394.588734][ T7102] bond10 (unregistering): Released all slaves [ 394.603153][ T7102] bond11 (unregistering): Released all slaves [ 394.621263][ T7102] bond12 (unregistering): Released all slaves [ 394.634722][ T7102] bond13 (unregistering): Released all slaves [ 394.647406][ T7102] bond14 (unregistering): Released all slaves [ 394.660510][ T7102] bond15 (unregistering): Released all slaves [ 394.819039][ T7102] : left promiscuous mode [ 394.895265][ T7102] tipc: Left network mode [ 394.909153][T18810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.959254][T18731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 395.033981][T18731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 395.125476][T18842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3236'. [ 395.137967][T18731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 395.157270][ T7102] IPVS: stopping backup sync thread 7646 ... [ 395.160552][T18731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 395.193990][T18842] dummy0: left allmulticast mode [ 395.207076][T18842] dummy0: left promiscuous mode [ 395.212238][T18842] bridge0: port 3(dummy0) entered disabled state [ 395.249055][T18842] bridge_slave_1: left allmulticast mode [ 395.265461][T18842] bridge_slave_1: left promiscuous mode [ 395.282032][T18842] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.288805][T18853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3240'. [ 395.317059][T18842] bridge_slave_0: left allmulticast mode [ 395.324040][T18842] bridge_slave_0: left promiscuous mode [ 395.339299][T18842] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.519101][ T5825] Bluetooth: hci4: command tx timeout [ 395.549693][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3241'. [ 395.688570][T18876] Bluetooth: MGMT ver 1.23 [ 395.955515][T18890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3245'. [ 396.118244][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3251'. [ 396.135744][T18731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.268821][T18731] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.421308][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.428517][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.508073][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.515229][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.590641][T18940] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3256'. [ 396.607441][T18940] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3256'. [ 396.678953][T18936] Cannot find del_set index 1 as target [ 396.702717][T18944] netlink: 'syz.4.3257': attribute type 1 has an invalid length. [ 396.807624][ T7102] hsr_slave_0: left promiscuous mode [ 396.822835][ T7102] hsr_slave_1: left promiscuous mode [ 396.831713][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.850870][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.960268][T18945] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3258'. [ 396.972618][T18945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3258'. [ 396.981966][T18945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3258'. [ 397.415126][ T7102] team_slave_1 (unregistering): left promiscuous mode [ 397.453725][ T7102] team0 (unregistering): Port device team_slave_1 removed [ 397.501341][ T7102] team_slave_0 (unregistering): left promiscuous mode [ 397.521012][ T7102] team0 (unregistering): Port device team_slave_0 removed [ 397.525957][T18976] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3261'. [ 397.594207][T18979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3261'. [ 397.606779][ T5825] Bluetooth: hci4: command tx timeout [ 397.646747][T18981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3261'. [ 397.708268][T18983] netlink: 'syz.0.3261': attribute type 21 has an invalid length. [ 397.721126][T18983] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3261'. [ 398.250425][T18731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.263841][T19000] netlink: 'syz.2.3265': attribute type 9 has an invalid length. [ 398.362816][T18731] veth0_vlan: entered promiscuous mode [ 398.379928][T18731] veth1_vlan: entered promiscuous mode [ 398.410295][T19015] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 398.490162][T18731] veth0_macvtap: entered promiscuous mode [ 398.519929][T18731] veth1_macvtap: entered promiscuous mode [ 398.627984][T18731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.679581][T18731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.693109][ T7102] IPVS: stop unused estimator thread 0... [ 398.709279][ T7101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.770770][ T7101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.816662][ T7101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.086958][ T7101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.252891][ T7101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.283205][ T7101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.362235][T19058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.386711][T19058] batadv_slave_0: entered promiscuous mode [ 399.401234][T19058] batadv_slave_0: entered allmulticast mode [ 399.459486][ T3526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.476639][ T3526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.748439][T19083] netlink: 'syz.3.3285': attribute type 3 has an invalid length. [ 399.868140][T19083] nbd: must specify an index to disconnect [ 399.929935][T19083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.190364][T19113] netlink: 'syz.3.3290': attribute type 11 has an invalid length. [ 400.313490][T19115] vlan2: entered promiscuous mode [ 400.332171][T19115] erspan0: entered promiscuous mode [ 400.673601][T19137] geneve2: entered promiscuous mode [ 400.750875][T19141] netlink: 'syz.3.3297': attribute type 3 has an invalid length. [ 400.990313][T19151] syzkaller0: entered promiscuous mode [ 400.995887][T19151] syzkaller0: entered allmulticast mode [ 401.253556][T19174] netlink: 'syz.3.3307': attribute type 10 has an invalid length. [ 401.268441][T19174] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.279438][T19174] bond0: (slave team0): Enslaving as an active interface with an up link [ 401.313408][T19172] bond0: (slave sit0): Error: Device type is different from other slaves [ 401.314020][T19176] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 401.354311][T19179] __nla_validate_parse: 14 callbacks suppressed [ 401.354327][T19179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3309'. [ 401.455943][T19176] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 401.488125][T19176] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 401.517454][T19174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3307'. [ 401.662206][T19194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3310'. [ 401.679274][T19193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3310'. [ 402.406207][T19229] netlink: 'syz.0.3322': attribute type 21 has an invalid length. [ 402.424335][T19229] IPv6: NLM_F_CREATE should be specified when creating new route [ 402.900074][T19250] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 402.910332][T19250] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 402.919772][T19250] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 403.339594][T19265] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3334'. [ 403.448499][T19265] ip6gre1: entered promiscuous mode [ 403.594805][T19269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.770680][T19279] netlink: 'syz.4.3339': attribute type 1 has an invalid length. [ 404.109451][T19301] bridge_slave_0: left allmulticast mode [ 404.133653][T19301] bridge_slave_0: left promiscuous mode [ 404.164893][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3346'. [ 404.177639][T19301] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.192948][T19301] bridge_slave_1: left allmulticast mode [ 404.199614][T19301] bridge_slave_1: left promiscuous mode [ 404.206365][T19301] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.221481][T19301] bond0: (slave bond_slave_0): Releasing backup interface [ 404.237343][T19309] netlink: 'syz.4.3346': attribute type 1 has an invalid length. [ 404.250987][T19301] bond0: (slave bond_slave_1): Releasing backup interface [ 404.270498][T19301] team0: Port device team_slave_0 removed [ 404.299497][T19301] team0: Port device team_slave_1 removed [ 404.324503][T19301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.333853][T19301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.343084][T19301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.354548][T19301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 404.377913][T19305] pim6reg: entered allmulticast mode [ 404.838217][T19343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 405.023725][T19357] netlink: 'syz.3.3362': attribute type 1 has an invalid length. [ 405.121006][T19357] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 405.130532][T19367] sctp: [Deprecated]: syz.4.3367 (pid 19367) Use of int in maxseg socket option. [ 405.130532][T19367] Use struct sctp_assoc_value instead [ 405.234380][T19370] netlink: 'syz.4.3367': attribute type 8 has an invalid length. [ 405.355157][T19379] openvswitch: netlink: IP tunnel dst address not specified [ 405.368699][T19379] syzkaller1: entered promiscuous mode [ 405.374303][T19379] syzkaller1: entered allmulticast mode [ 405.417008][T19384] siw: device registration error -23 [ 405.548394][T19393] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 405.556762][T19393] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 405.806017][T19410] netlink: 'syz.2.3382': attribute type 16 has an invalid length. [ 405.813870][T19410] netlink: 'syz.2.3382': attribute type 17 has an invalid length. [ 405.854717][T19410] netlink: 'syz.2.3382': attribute type 27 has an invalid length. [ 406.075559][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3386'. [ 406.227991][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3387'. [ 406.250987][T19431] mac80211_hwsim hwsim39 syzkaller0: Caught tx_queue_len zero misconfig [ 406.286280][T19437] netlink: 'syz.4.3386': attribute type 1 has an invalid length. [ 406.534097][T19447] openvswitch: netlink: Actions may not be safe on all matching packets [ 406.625644][T19458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3392'. [ 406.720504][T19461] netlink: 'syz.4.3392': attribute type 11 has an invalid length. [ 406.946533][T19471] netlink: 'syz.3.3395': attribute type 30 has an invalid length. [ 406.973933][T19471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3395'. [ 407.022741][T19473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3395'. [ 407.100031][T19471] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 407.117504][T19471] bond1 (unregistering): Released all slaves [ 407.184630][T19473] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 407.220705][T19473] bond1 (unregistering): Released all slaves [ 407.333508][T19460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3393'. [ 407.693873][T19497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.137198][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3404'. [ 408.171645][T19520] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3407'. [ 408.213935][T19505] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3404'. [ 408.251788][T19527] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3408'. [ 408.446977][T19537] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 408.485872][T19537] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 408.499223][T19543] lo: entered allmulticast mode [ 408.517963][T19537] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 408.650764][T19547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3414'. [ 408.814532][T19557] m1Ie5n: entered promiscuous mode [ 408.969402][T19563] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3418'. [ 409.095170][T19567] validate_nla: 2 callbacks suppressed [ 409.095189][T19567] netlink: 'syz.1.3420': attribute type 5 has an invalid length. [ 410.062160][T19589] vlan2: entered allmulticast mode [ 410.067582][T19589] bridge_slave_0: entered allmulticast mode [ 410.842144][T19618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.939403][T19610] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 410.974966][T19610] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 411.110620][ T9096] lec:lec_start_xmit: lec0:No lecd attached [ 411.145290][T19624] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 411.175618][T19615] macvlan0: entered promiscuous mode [ 411.210620][T19615] macvlan0: entered allmulticast mode [ 411.219046][T19615] bond2: (slave macvlan0): Error -98 calling set_mac_address [ 411.461112][T19636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.535314][T19480] Set syz1 is full, maxelem 65536 reached [ 411.748071][T19653] __nla_validate_parse: 10 callbacks suppressed [ 411.748088][T19653] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3440'. [ 411.878545][T19663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3442'. [ 412.152692][T19677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3446'. [ 412.167790][T19681] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3445'. [ 412.350493][T19698] netlink: 'syz.3.3452': attribute type 2 has an invalid length. [ 412.383360][T19698] netlink: 'syz.3.3452': attribute type 1 has an invalid length. [ 412.427049][T19698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3452'. [ 412.507546][T19710] netlink: 'syz.1.3454': attribute type 1 has an invalid length. [ 412.627024][T19717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3454'. [ 412.648163][T19710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.740952][T19714] bond1: (slave veth5): Enslaving as an active interface with a down link [ 412.794837][T19717] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 413.095020][T19750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3462'. [ 413.113104][T19750] erspan0: entered promiscuous mode [ 413.125003][T19747] openvswitch: netlink: Key type 310 is out of range max 32 [ 413.177781][T19753] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 413.186337][T19753] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 413.194766][T19753] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 413.267977][T19757] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3466'. [ 413.280604][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3466'. [ 413.290068][T19755] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 413.590416][T19723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.608225][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3466'. [ 413.768147][T19761] : entered promiscuous mode [ 414.016459][T19784] SET target dimension over the limit! [ 414.115324][T19790] netlink: 'syz.1.3476': attribute type 16 has an invalid length. [ 414.153484][T19790] netlink: 'syz.1.3476': attribute type 17 has an invalid length. [ 414.215690][T19789] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.228707][T19789] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.289961][T19790] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.301706][T19790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.425660][T19813] netlink: 'syz.0.3483': attribute type 2 has an invalid length. [ 414.452981][T19813] netlink: 'syz.0.3483': attribute type 1 has an invalid length. [ 414.836393][T19842] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 415.000917][T19846] vlan3: entered allmulticast mode [ 415.020205][T19846] macvtap0: entered allmulticast mode [ 415.232722][T19858] x_tables: duplicate underflow at hook 2 [ 415.314904][T19862] veth5: entered allmulticast mode [ 415.873371][T19881] netlink: 'syz.4.3504': attribute type 1 has an invalid length. [ 416.243687][T19904] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 416.357622][T19908] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 416.388613][T19908] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 416.421281][T19918] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 416.606335][T19932] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 416.795875][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 416.803966][ C0] lec:lec_tx_timeout: lec0 [ 417.396797][T19972] netlink: 'syz.1.3530': attribute type 1 has an invalid length. [ 417.436176][T19972] __nla_validate_parse: 13 callbacks suppressed [ 417.436194][T19972] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3530'. [ 417.722433][T19986] netlink: 'syz.3.3532': attribute type 1 has an invalid length. [ 417.795536][T19994] netlink: 'syz.0.3535': attribute type 1 has an invalid length. [ 418.273762][T20009] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3539'. [ 418.471624][T20019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.559873][T20024] netlink: 'syz.0.3545': attribute type 2 has an invalid length. [ 418.580382][T20024] netlink: 'syz.0.3545': attribute type 2 has an invalid length. [ 418.732863][T20030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3547'. [ 418.886923][T20045] syzkaller0: entered promiscuous mode [ 418.892436][T20045] syzkaller0: entered allmulticast mode [ 418.917528][T20046] batman_adv: batadv0: Adding interface: wlan1 [ 418.926298][T20046] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.966906][T20046] batman_adv: batadv0: Interface activated: wlan1 [ 419.111597][T20054] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3554'. [ 419.137574][T20061] syzkaller1: entered promiscuous mode [ 419.158718][T20061] syzkaller1: entered allmulticast mode [ 419.183358][T20061] syzkaller1: left promiscuous mode [ 419.191433][T20061] syzkaller1: left allmulticast mode [ 419.351202][T20060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 419.428321][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3564'. [ 420.138045][T20114] veth1_vlan: entered allmulticast mode [ 420.207226][T20121] netlink: 'syz.1.3574': attribute type 1 has an invalid length. [ 420.226377][T20121] netlink: 'syz.1.3574': attribute type 3 has an invalid length. [ 420.245950][T20121] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3574'. [ 420.630160][T20140] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 420.652382][T20140] syzkaller1: linktype set to 825 [ 420.663249][T20140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3579'. [ 420.839771][T20152] netlink: 'syz.2.3583': attribute type 1 has an invalid length. [ 420.903054][T20145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.927464][T20152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 420.989883][T20157] syzkaller0: entered promiscuous mode [ 420.995386][T20157] syzkaller0: entered allmulticast mode [ 421.025487][T20162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'. [ 421.062294][T20162] bond2: option broadcast_neighbor: invalid value (30) [ 421.077807][T20162] bond2 (unregistering): Released all slaves [ 421.459699][T20190] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3594'. [ 421.493059][T20190] TCP: TCP_TX_DELAY enabled [ 421.543112][T20196] bond2: entered promiscuous mode [ 421.569014][T20196] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.695587][T20211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3597'. [ 421.780955][T20218] syzkaller0: entered promiscuous mode [ 421.786571][T20218] syzkaller0: entered allmulticast mode [ 421.799923][T20213] netlink: 'syz.0.3599': attribute type 4 has an invalid length. [ 421.851117][T20213] netlink: 'syz.0.3599': attribute type 4 has an invalid length. [ 422.050586][T20233] veth1: entered promiscuous mode [ 422.056822][T20233] veth1: entered allmulticast mode [ 422.087360][T20233] syzkaller0: entered promiscuous mode [ 422.092874][T20233] syzkaller0: entered allmulticast mode [ 422.129422][T18180] IPVS: starting estimator thread 0... [ 422.237959][T20241] IPVS: using max 32 ests per chain, 76800 per kthread [ 422.383706][T20254] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 422.486462][T20253] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 422.562389][T20261] netlink: 'syz.3.3611': attribute type 10 has an invalid length. [ 422.600631][T20265] __nla_validate_parse: 4 callbacks suppressed [ 422.600648][T20265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3613'. [ 422.626552][T20265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3613'. [ 422.638714][T20261] bond0: (slave team0): Releasing backup interface [ 422.671890][T20266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3611'. [ 422.675951][T20261] team0 (unregistering): Port device team_slave_0 removed [ 422.718076][T20261] team0 (unregistering): Port device team_slave_1 removed [ 422.770034][ T7119] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 422.947323][T20287] netlink: 'syz.2.3616': attribute type 1 has an invalid length. [ 422.979418][T20289] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3619'. [ 423.008301][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3616'. [ 423.060761][T20285] ieee802154 phy0 wpan0: encryption failed: -22 [ 423.194985][T20305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.219698][T20307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3624'. [ 423.382123][T20319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.431470][T20323] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3629'. [ 423.623571][T20325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3630'. [ 423.977673][T20339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3635'. [ 424.015865][T20339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3635'. [ 424.048454][T20339] netlink: 'syz.1.3635': attribute type 3 has an invalid length. [ 424.140833][T20348] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 424.168779][T20348] bond1 (unregistering): Released all slaves [ 424.258130][T20364] netlink: 'syz.3.3642': attribute type 1 has an invalid length. [ 424.409351][T20374] dummy0: entered promiscuous mode [ 424.416962][T20374] dummy0: entered allmulticast mode [ 425.188002][T20408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 425.195286][T20408] IPv6: NLM_F_CREATE should be set when creating new route [ 425.202563][T20408] IPv6: NLM_F_CREATE should be set when creating new route [ 425.331062][T20415] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 425.945444][T20442] netlink: 'syz.0.3662': attribute type 8 has an invalid length. [ 426.010979][T20435] dummy0: left promiscuous mode [ 426.016296][T20435] dummy0: left allmulticast mode [ 426.210592][T20435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.236953][T20435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.281640][T20435] veth1_vlan: left allmulticast mode [ 426.330026][T20435] geneve1: left promiscuous mode [ 426.468170][ T7119] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.496587][ T7119] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.519389][ T7119] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.550572][ T7119] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.638184][T20453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.645818][T20456] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 426.648016][T20462] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 426.666663][T20462] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 426.676714][T20462] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 426.748012][T20458] bond1: entered promiscuous mode [ 426.758746][T20458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.780622][T20465] bond2 (unregistering): Released all slaves [ 426.830893][T20469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.840428][T20469] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 426.851651][T20469] bond1: (slave ip6gre2): Error -95 calling set_mac_address [ 427.018953][T20482] macvtap1: entered promiscuous mode [ 427.024359][T20482] macvtap1: entered allmulticast mode [ 427.030147][T20482] veth1_vlan: entered allmulticast mode [ 427.042407][T20486] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 427.099384][T20482] macvtap2: entered promiscuous mode [ 427.104769][T20482] macvtap2: entered allmulticast mode [ 427.261059][T20499] batadv_slave_0: Caught tx_queue_len zero misconfig [ 427.280211][T20491] netlink: 'syz.2.3674': attribute type 39 has an invalid length. [ 427.356113][T20506] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000 [ 427.436479][T20509] syzkaller0: entered promiscuous mode [ 427.441994][T20509] syzkaller0: entered allmulticast mode [ 428.037525][T20557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.180818][T20560] __nla_validate_parse: 15 callbacks suppressed [ 428.180838][T20560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3685'. [ 429.510645][T20573] nbd: socks must be embedded in a SOCK_ITEM attr [ 429.537529][T20573] block nbd1: shutting down sockets [ 429.723539][T20600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3695'. [ 429.775142][T20605] netlink: 'syz.0.3695': attribute type 1 has an invalid length. [ 429.783494][T20605] netlink: 'syz.0.3695': attribute type 2 has an invalid length. [ 429.929325][T20605] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3695'. [ 429.949592][T20600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.969428][T20610] atomic_op ffff888066e93198 conn xmit_atomic 0000000000000000 [ 430.038794][T20614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3700'. [ 430.059082][T20600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.069520][T20614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3700'. [ 430.114866][T20616] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 430.124736][T20616] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 430.133705][T20616] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 430.163209][T20600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.210772][T20621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3703'. [ 430.221470][T20621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3703'. [ 430.272885][T20600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.377567][ T7127] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.401929][ T7101] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.440373][ T7101] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.490471][ T7127] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.500821][T20629] ieee802154 phy0 wpan0: encryption failed: -22 [ 430.544159][T20631] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3707'. [ 430.558701][T20632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3705'. [ 430.589890][T20631] pim6reg99999991: entered allmulticast mode [ 430.601891][T20632] nbd: illegal input index 38656 [ 430.647454][T20632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3705'. [ 430.655201][T20637] bridge4: entered allmulticast mode [ 430.884068][T20648] netlink: 'syz.0.3713': attribute type 13 has an invalid length. [ 430.909153][T20648] netlink: 'syz.0.3713': attribute type 17 has an invalid length. [ 431.054423][T20648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.261687][T20672] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 431.298969][T20670] syzkaller0: entered promiscuous mode [ 431.314842][T20670] syzkaller0: entered allmulticast mode [ 431.325499][T20673] pim6reg1: entered promiscuous mode [ 431.335078][T20673] pim6reg1: entered allmulticast mode [ 431.484708][T20675] netlink: 'syz.2.3717': attribute type 12 has an invalid length. [ 432.249481][T20735] netlink: zone id is out of range [ 432.254922][T20735] netlink: del zone limit has 8 unknown bytes [ 432.600588][T20762] bond3: option lacp_active: invalid value (8) [ 432.633939][T20762] bond3 (unregistering): Released all slaves [ 432.662631][T20747] netlink: 'syz.2.3741': attribute type 13 has an invalid length. [ 432.675474][T20756] netlink: 'syz.2.3741': attribute type 13 has an invalid length. [ 432.796741][ T5825] Bluetooth: hci5: link tx timeout [ 432.803642][ T5825] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 432.815399][ T5825] Bluetooth: hci5: link tx timeout [ 432.821796][ T5825] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 433.294444][T20819] __nla_validate_parse: 11 callbacks suppressed [ 433.294463][T20819] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3756'. [ 433.373327][T20819] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 433.417622][T20819] bridge2: entered allmulticast mode [ 433.887562][T20859] dummy0: entered promiscuous mode [ 433.893901][T20859] macsec1: entered promiscuous mode [ 433.917605][T20859] dummy0: left promiscuous mode [ 433.927728][T20862] openvswitch: netlink: Missing valid actions attribute. [ 433.953340][T20862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.116377][T20871] dummy0: entered promiscuous mode [ 434.447674][T20896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3779'. [ 434.456340][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3780'. [ 434.659720][T20912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3782'. [ 434.672245][T20911] netlink: 'syz.4.3783': attribute type 3 has an invalid length. [ 434.692784][T20911] netlink: 'syz.4.3783': attribute type 3 has an invalid length. [ 434.754935][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 434.823190][T20924] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 434.891767][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 435.560817][T20952] tipc: Started in network mode [ 435.565908][T20952] tipc: Node identity 080211000001, cluster identity 4711 [ 435.584223][T20952] tipc: Enabled bearer , priority 0 [ 435.615137][T20959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3792'. [ 435.641170][T20959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3792'. [ 435.679116][T20959] netlink: 'syz.0.3792': attribute type 13 has an invalid length. [ 435.706299][T20959] netlink: 'syz.0.3792': attribute type 11 has an invalid length. [ 436.350056][T20998] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 436.358964][T20998] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 436.375192][T20998] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 436.580342][T21016] netlink: 'syz.2.3808': attribute type 1 has an invalid length. [ 436.590472][T21016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3808'. [ 436.621226][T21016] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.696313][ T5875] tipc: Node number set to 134418688 [ 437.030912][T21029] IPv6: addrconf: prefix option has invalid lifetime [ 437.051380][T21029] xt_hashlimit: invalid rate [ 437.115963][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 437.308361][T21038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3813'. [ 437.325228][T21042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3814'. [ 437.618640][T21054] netlink: 'syz.1.3817': attribute type 30 has an invalid length. [ 437.668731][T21054] netlink: 'syz.1.3817': attribute type 29 has an invalid length. [ 438.383902][T21095] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 438.392212][T21095] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 438.410366][T21095] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 438.542732][T21107] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 438.801354][T21119] netlink: 'syz.0.3831': attribute type 1 has an invalid length. [ 438.822829][T21119] __nla_validate_parse: 3 callbacks suppressed [ 438.822845][T21119] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3831'. [ 438.860623][T21121] netlink: 'syz.0.3831': attribute type 1 has an invalid length. [ 438.878934][T21121] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3831'. [ 439.047964][T21134] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3834'. [ 439.279900][T21142] lo: entered allmulticast mode [ 439.347630][T21142] dvmrp6: entered allmulticast mode [ 439.367634][T21141] lo: left allmulticast mode [ 439.919053][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.931552][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 439.937770][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 444.945815][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 444.953810][ C0] lec:lec_tx_timeout: lec0 [ 452.477180][T21211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3841'. [ 452.518488][T21215] syzkaller0: entered promiscuous mode [ 452.524003][T21215] syzkaller0: entered allmulticast mode [ 452.627522][T21220] netlink: 'syz.0.3845': attribute type 1 has an invalid length. [ 452.634957][T21227] netlink: 'syz.1.3847': attribute type 2 has an invalid length. [ 452.635284][T21220] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3845'. [ 452.658102][T21219] delete_channel: no stack [ 452.674266][T21230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3848'. [ 452.781242][T21227] hmac(sha224): entered promiscuous mode [ 452.796350][T21227] netlink: 'syz.1.3847': attribute type 2 has an invalid length. [ 452.832002][T21227] netlink: 'syz.1.3847': attribute type 2 has an invalid length. [ 452.849803][T21227] netlink: 'syz.1.3847': attribute type 2 has an invalid length. [ 452.867734][T21227] netlink: 'syz.1.3847': attribute type 2 has an invalid length. [ 452.888327][T21227] netlink: 'syz.1.3847': attribute type 2 has an invalid length. [ 452.933418][T21227] netlink: 'syz.1.3847': attribute type 2 has an invalid length. [ 452.996811][T21227] netlink: 'syz.1.3847': attribute type 2 has an invalid length. [ 453.011096][T21227] netlink: 'syz.1.3847': attribute type 2 has an invalid length. [ 453.119326][T21252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3854'. [ 453.144525][T21252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3854'. [ 453.207149][ T7127] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.234748][ T7127] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.260577][ T7127] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.289637][ T7127] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.299042][T21258] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 453.612807][T21283] xt_l2tp: invalid flags combination: 0 [ 453.694324][ T7127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 453.734907][T21293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3863'. [ 453.784436][T21299] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3865'. [ 453.793887][T21300] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3865'. [ 453.807686][T21294] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 453.862506][T21299] bond2 (unregistering): Released all slaves [ 453.938786][T21304] bridge2: entered promiscuous mode [ 453.952456][T21304] bridge2: entered allmulticast mode [ 454.009190][T21314] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 454.109908][T21323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3872'. [ 454.248834][T21326] xt_l2tp: unknown flags: 51 [ 454.348421][T21337] xt_connbytes: Forcing CT accounting to be enabled [ 454.531365][T21344] batman_adv: batadv0: Adding interface: macvtap1 [ 454.565129][T21344] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.596008][T21344] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 454.678053][T21352] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3882'. [ 454.838018][T21363] ip6gre1: entered promiscuous mode [ 455.285393][T21398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.062513][T21412] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 456.079081][T21412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.105112][T21493] bond2 (unregistering): Released all slaves [ 457.478568][T21522] sock: sock_timestamping_bind_phc: sock not bind to device [ 457.598425][T21530] syzkaller0: entered promiscuous mode [ 457.603930][T21530] syzkaller0: entered allmulticast mode [ 457.624954][T21534] __nla_validate_parse: 7 callbacks suppressed [ 457.624970][T21534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3932'. [ 457.682162][T21536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3934'. [ 457.800002][T21543] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3936'. [ 457.902576][T21550] syzkaller0: entered promiscuous mode [ 457.913260][T21550] syzkaller0: entered allmulticast mode [ 457.922844][T21552] tipc: Enabling of bearer rejected, failed to enable media [ 458.083351][T21560] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3942'. [ 458.445695][T21569] vlan4: entered promiscuous mode [ 458.453803][T21569] geneve1: entered promiscuous mode [ 458.467972][T21569] vlan4: entered allmulticast mode [ 458.480791][T21569] geneve1: entered allmulticast mode [ 458.492212][T21566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3944'. [ 458.591832][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3948'. [ 458.739854][T21595] geneve2: entered promiscuous mode [ 458.766739][ T7115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.775483][ T7115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.802629][ T7115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.821721][ T7115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.930854][T21613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3956'. [ 458.967156][T21610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3956'. [ 458.980422][T21601] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 458.981484][T21612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3957'. [ 458.997366][T18183] IPVS: starting estimator thread 0... [ 459.037515][T21619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3958'. [ 459.116870][T21618] IPVS: using max 28 ests per chain, 67200 per kthread [ 459.246579][T21626] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20003 [ 459.277656][T21629] team_slave_1: Caught tx_queue_len zero misconfig [ 459.794232][T21665] sctp: [Deprecated]: syz.4.3971 (pid 21665) Use of int in maxseg socket option. [ 459.794232][T21665] Use struct sctp_assoc_value instead [ 459.991404][T21677] batadv0: entered promiscuous mode [ 460.033816][T21677] bridge_slave_0: entered promiscuous mode [ 460.049075][T21677] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 460.061410][T21677] hsr1: Slave B (bridge_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.084893][T21677] hsr1: entered allmulticast mode [ 460.096468][T21677] batadv0: entered allmulticast mode [ 460.105574][T21677] bridge_slave_0: entered allmulticast mode [ 460.262986][T21697] xt_TCPMSS: Only works on TCP SYN packets [ 460.280399][T21697] syzkaller0: entered promiscuous mode [ 460.286295][T21697] syzkaller0: entered allmulticast mode [ 460.770734][T21722] syzkaller1: entered promiscuous mode [ 460.778002][T21722] syzkaller1: entered allmulticast mode [ 460.939745][T21724] batadv_slave_0: left promiscuous mode [ 460.958872][T21724] batadv_slave_0: left allmulticast mode [ 461.124946][T21724] veth1_vlan: left allmulticast mode [ 461.133404][T21724] macvtap1: left promiscuous mode [ 461.138556][T21724] macvtap1: left allmulticast mode [ 461.145632][T21724] bridge2: left allmulticast mode [ 461.157194][ T7100] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.166904][ T7100] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.183144][ T7100] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.287597][ T7100] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.458279][T21760] validate_nla: 60 callbacks suppressed [ 461.458297][T21760] netlink: 'syz.1.4002': attribute type 1 has an invalid length. [ 461.539320][T21765] netlink: 'syz.3.4004': attribute type 21 has an invalid length. [ 461.585984][T21765] netlink: 'syz.3.4004': attribute type 1 has an invalid length. [ 461.694303][T21779] netlink: 'syz.0.4006': attribute type 3 has an invalid length. [ 461.799795][ T30] audit: type=1800 audit(1775501051.194:9): pid=21789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4005" name="memory.events" dev="tmpfs" ino=1132 res=0 errno=0 [ 462.349685][T21807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.583766][T21822] netlink: 'syz.4.4019': attribute type 10 has an invalid length. [ 462.595547][T21824] netlink: 'syz.2.4018': attribute type 13 has an invalid length. [ 462.603619][T21824] netlink: 'syz.2.4018': attribute type 17 has an invalid length. [ 462.619370][T21824] lo: left allmulticast mode [ 462.687111][T21824] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.694309][T21824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.710954][T21824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.730245][T21822] veth0_vlan: left promiscuous mode [ 462.736524][T21822] veth0_vlan: entered promiscuous mode [ 462.744819][T21822] team0: Device veth0_vlan failed to register rx_handler [ 463.141170][T21856] __nla_validate_parse: 16 callbacks suppressed [ 463.141188][T21856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4028'. [ 463.276685][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4029'. [ 463.445126][T21868] FAULT_INJECTION: forcing a failure. [ 463.445126][T21868] name failslab, interval 1, probability 0, space 0, times 1 [ 463.479869][T21868] CPU: 0 UID: 0 PID: 21868 Comm: syz.3.4030 Not tainted syzkaller #0 PREEMPT(full) [ 463.479893][T21868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 463.479910][T21868] Call Trace: [ 463.479918][T21868] [ 463.479925][T21868] dump_stack_lvl+0xe8/0x150 [ 463.479955][T21868] should_fail_ex+0x412/0x560 [ 463.479990][T21868] should_failslab+0xa8/0x100 [ 463.480014][T21868] __kmalloc_noprof+0xe8/0x760 [ 463.480035][T21868] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 463.480059][T21868] tomoyo_realpath_from_path+0xe3/0x5d0 [ 463.480087][T21868] ? tomoyo_path_number_perm+0x219/0x630 [ 463.480111][T21868] tomoyo_path_number_perm+0x246/0x630 [ 463.480138][T21868] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 463.480164][T21868] ? __lock_acquire+0x6b5/0x2cf0 [ 463.480196][T21868] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 463.480238][T21868] ? __fget_files+0x2a/0x420 [ 463.480256][T21868] ? __fget_files+0x2a/0x420 [ 463.480271][T21868] ? __fget_files+0x3a0/0x420 [ 463.480286][T21868] ? __fget_files+0x2a/0x420 [ 463.480305][T21868] security_file_ioctl+0xc3/0x2a0 [ 463.480330][T21868] __se_sys_ioctl+0x47/0x170 [ 463.480353][T21868] do_syscall_64+0x14d/0xf80 [ 463.480373][T21868] ? trace_irq_disable+0x3b/0x150 [ 463.480388][T21868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.480406][T21868] ? clear_bhb_loop+0x40/0x90 [ 463.480427][T21868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.480450][T21868] RIP: 0033:0x7f933739c819 [ 463.480465][T21868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.480479][T21868] RSP: 002b:00007f93382f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.480504][T21868] RAX: ffffffffffffffda RBX: 00007f9337615fa0 RCX: 00007f933739c819 [ 463.480516][T21868] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 463.480528][T21868] RBP: 00007f93382f1090 R08: 0000000000000000 R09: 0000000000000000 [ 463.480538][T21868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.480548][T21868] R13: 00007f9337616038 R14: 00007f9337615fa0 R15: 00007ffd21412518 [ 463.480576][T21868] [ 463.480682][T21868] ERROR: Out of memory at tomoyo_realpath_from_path. [ 463.500709][T21870] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 463.525478][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4031'. [ 463.733649][T21870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4031'. [ 463.765200][T21868] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 463.774458][T21877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 463.798786][T21868] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 463.820334][T21868] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 463.923453][T21889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4035'. [ 464.088464][T21899] syz_tun: entered allmulticast mode [ 464.400208][T21910] netlink: 'syz.3.4038': attribute type 1 has an invalid length. [ 464.418736][T21910] netlink: 'syz.3.4038': attribute type 2 has an invalid length. [ 464.619327][T21921] netlink: 'syz.1.4042': attribute type 8 has an invalid length. [ 464.914252][T21898] syz_tun: left allmulticast mode [ 464.986638][T21944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4044'. [ 465.048052][T21939] xt_limit: Overflow, try lower: 324382443/0 [ 465.068226][T21948] macsec0: entered promiscuous mode [ 465.074497][T21948] macsec0: left promiscuous mode [ 466.632592][T21877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.870105][T21977] bridge0: entered promiscuous mode [ 467.087400][T21992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4055'. [ 467.116221][T21995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4062'. [ 467.229176][T21995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.535508][T22014] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 467.558451][T22014] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 467.590331][T22014] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 467.723789][T22024] netlink: 'syz.0.4067': attribute type 13 has an invalid length. [ 467.802283][T22024] netlink: 'syz.0.4067': attribute type 17 has an invalid length. [ 467.847925][T22024] erspan0: left promiscuous mode [ 467.900150][T22024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.908548][T22024] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.934482][T22024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.086616][T22035] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4070'. [ 468.180808][T22041] __nla_validate_parse: 2 callbacks suppressed [ 468.180827][T22041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4072'. [ 468.230359][T22043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4073'. [ 468.537059][T22065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4080'. [ 468.608538][T22065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4080'. [ 468.659803][T22069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4081'. [ 468.678766][T22065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4080'. [ 468.728985][T22065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4080'. [ 468.819834][T22078] netlink: 'syz.0.4084': attribute type 7 has an invalid length. [ 468.867764][T22078] netlink: 'syz.0.4084': attribute type 7 has an invalid length. [ 469.505260][T22094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4088'. [ 469.913364][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4099'. [ 469.943155][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4099'. [ 470.351923][T22181] pim6reg1: entered allmulticast mode [ 471.213939][T22238] bond3: option tlb_dynamic_lb: invalid value (5) [ 471.224604][T22238] bond3 (unregistering): Released all slaves [ 471.262678][T22243] netlink: 'syz.1.4119': attribute type 1 has an invalid length. [ 471.283938][T22245] openvswitch: netlink: IP tunnel dst address not specified [ 471.302324][T22245] nbd: must specify an index to disconnect [ 471.428338][T22243] 8021q: adding VLAN 0 to HW filter on device bond6 [ 471.473688][T22247] bond6: (slave geneve2): making interface the new active one [ 471.483895][T22247] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 471.508465][ T7100] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 471.548224][ T7100] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 471.559645][ T7100] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 471.634801][ T7100] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 471.923636][T22272] netlink: 'syz.0.4128': attribute type 13 has an invalid length. [ 472.486770][T22316] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 472.613958][T22321] syzkaller0: entered promiscuous mode [ 472.620351][T22321] syzkaller0: entered allmulticast mode [ 472.648697][T22321] tipc: Started in network mode [ 472.654418][T22321] tipc: Node identity 66969f5441b7, cluster identity 4711 [ 472.663904][T22321] tipc: Enabled bearer , priority 0 [ 472.702524][T22319] tipc: Resetting bearer [ 472.800211][T22319] tipc: Disabling bearer [ 473.188001][T22345] __nla_validate_parse: 8 callbacks suppressed [ 473.188018][T22345] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4148'. [ 473.203856][T22345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4148'. [ 473.266106][T22345] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4148'. [ 473.275053][T22345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4148'. [ 473.286507][T22345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4148'. [ 473.321404][T22365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4152'. [ 473.374972][T22365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 473.451607][T22368] bond2 (unregistering): Released all slaves [ 473.747054][T22382] tipc: Enabled bearer , priority 0 [ 473.762584][T22382] syzkaller0: entered promiscuous mode [ 473.779753][T22382] syzkaller0: entered allmulticast mode [ 473.821171][T22382] tipc: Resetting bearer [ 473.838336][T22380] tipc: Resetting bearer [ 473.922153][T22380] tipc: Disabling bearer [ 473.953265][T22390] netlink: 'syz.4.4159': attribute type 1 has an invalid length. [ 474.029372][T22390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 474.168410][T22402] vlan3: entered promiscuous mode [ 474.203478][T22402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4162'. [ 474.230566][T22402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4162'. [ 474.451064][T22425] netlink: 'syz.4.4169': attribute type 1 has an invalid length. [ 474.678106][T22443] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 474.818818][T22446] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 474.828580][T22446] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 474.841853][ T9096] lec:lec_start_xmit: lec0:No lecd attached [ 474.842467][T22446] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 474.928428][T22456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4177'. [ 475.063043][T22456] bridge4: entered promiscuous mode [ 475.220015][T22470] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4182'. [ 475.235034][T22470] siw: device registration error -23 [ 475.319985][T22474] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 479.855976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 479.872989][ C0] lec:lec_tx_timeout: lec0 [ 484.618667][ T7100] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 486.017942][ T7100] bridge_slave_1: left promiscuous mode [ 486.023724][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.032931][ T7100] bridge_slave_0: left promiscuous mode [ 486.038680][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.060416][ T7100] tipc: Resetting bearer [ 486.170559][ T7100] bond13 (unregistering): (slave geneve3): Releasing active interface [ 486.249046][ T7100] tipc: Disabling bearer [ 486.684585][ T7100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.696952][ T7100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.708508][ T7100] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 486.720655][ T7100] bond0 (unregistering): Released all slaves [ 486.731647][ T7100] bond1 (unregistering): Released all slaves [ 486.744318][ T7100] bond2 (unregistering): Released all slaves [ 486.757962][ T7100] bond3 (unregistering): Released all slaves [ 486.774426][ T7100] bond4 (unregistering): Released all slaves [ 486.786739][ T7100] bond5 (unregistering): Released all slaves [ 486.800254][ T7100] bond6 (unregistering): Released all slaves [ 486.812832][ T7100] bond7 (unregistering): Released all slaves [ 486.831634][ T7100] bond8 (unregistering): Released all slaves [ 486.844214][ T7100] bond9 (unregistering): Released all slaves [ 486.863228][ T7100] bond10 (unregistering): Released all slaves [ 486.878039][ T7100] bond11 (unregistering): Released all slaves [ 486.890427][ T7100] bond12 (unregistering): Released all slaves [ 486.902695][ T7100] bond13 (unregistering): Released all slaves [ 486.922847][ T7100] bond14 (unregistering): (slave veth7): Releasing active interface [ 486.931633][ T7100] bond14 (unregistering): Released all slaves [ 486.943602][ T7100] bond15 (unregistering): Released all slaves [ 486.960384][ T8550] infiniband syz2: ib_query_port failed (-19) [ 487.106836][ T7100] : left promiscuous mode [ 487.184986][ T7100] tipc: Left network mode [ 488.080001][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 488.143138][ T7100] IPVS: stop unused estimator thread 0... [ 491.656222][T22519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4188'. [ 491.657267][T22522] netlink: 'syz.3.4187': attribute type 2 has an invalid length. [ 491.743217][T22519] veth5: entered allmulticast mode [ 491.763478][T22519] bond3: (slave veth5): Enslaving as an active interface with an up link [ 491.781173][T22522] hmac(sha224): entered promiscuous mode [ 491.800640][T22531] vlan0: entered allmulticast mode [ 491.828783][T22531] bridge0: port 2(vlan0) entered blocking state [ 491.845712][T22531] bridge0: port 2(vlan0) entered disabled state [ 491.864995][T22531] vlan0: entered promiscuous mode [ 491.880008][T22535] bond3 (unregistering): (slave veth5): Releasing backup interface [ 491.908078][T22535] bond3 (unregistering): Released all slaves [ 492.032576][T22546] ipt_ECN: cannot use operation on non-tcp rule [ 492.142298][T22549] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 492.175162][T22554] netlink: 656 bytes leftover after parsing attributes in process `syz.1.4192'. [ 492.283044][T22563] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 492.297176][T22563] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 492.306194][T22563] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 492.317203][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4194'. [ 492.326339][T22563] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 492.334779][T22565] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4194'. [ 492.927466][T22603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4204'. [ 492.985008][T22611] openvswitch: netlink: IP tunnel TTL not specified. [ 493.000897][T22612] 8021q: adding VLAN 0 to HW filter on device bond3 [ 493.017538][T22612] block nbd1: Unsupported socket: should be TCP or UNIX. [ 493.375272][T22625] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 493.600554][T22642] batadv_slave_1: entered promiscuous mode [ 493.616161][T22639] netlink: 'syz.3.4216': attribute type 8 has an invalid length. [ 493.624647][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4217'. [ 493.641413][T22642] batadv_slave_1 (unregistering): left promiscuous mode [ 493.656032][T22642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.780633][T22645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4218'. [ 493.798119][T22645] IPVS: length: 111 != 505864 [ 494.059603][T22665] FAULT_INJECTION: forcing a failure. [ 494.059603][T22665] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 494.089859][T22665] CPU: 0 UID: 0 PID: 22665 Comm: syz.4.4224 Not tainted syzkaller #0 PREEMPT(full) [ 494.089883][T22665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 494.089893][T22665] Call Trace: [ 494.089900][T22665] [ 494.089907][T22665] dump_stack_lvl+0xe8/0x150 [ 494.089935][T22665] should_fail_ex+0x412/0x560 [ 494.089966][T22665] _copy_from_user+0x2d/0xb0 [ 494.089987][T22665] ___sys_sendmsg+0x1c6/0x360 [ 494.090016][T22665] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.090070][T22665] ? __fget_files+0x2a/0x420 [ 494.090086][T22665] ? __fget_files+0x3a0/0x420 [ 494.090110][T22665] __x64_sys_sendmsg+0x1bd/0x2a0 [ 494.090136][T22665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.090168][T22665] ? __pfx_ksys_write+0x10/0x10 [ 494.090199][T22665] do_syscall_64+0x14d/0xf80 [ 494.090221][T22665] ? trace_irq_disable+0x3b/0x150 [ 494.090235][T22665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.090254][T22665] ? clear_bhb_loop+0x40/0x90 [ 494.090275][T22665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.090292][T22665] RIP: 0033:0x7ff93c19c819 [ 494.090308][T22665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.090323][T22665] RSP: 002b:00007ff93d111028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.090340][T22665] RAX: ffffffffffffffda RBX: 00007ff93c416090 RCX: 00007ff93c19c819 [ 494.090353][T22665] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 494.090365][T22665] RBP: 00007ff93d111090 R08: 0000000000000000 R09: 0000000000000000 [ 494.090376][T22665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.090386][T22665] R13: 00007ff93c416128 R14: 00007ff93c416090 R15: 00007fffd03aa5c8 [ 494.090416][T22665] [ 494.308797][T22653] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4221'. [ 494.346039][T22676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4226'. [ 494.416440][T22679] netlink: 'syz.1.4225': attribute type 16 has an invalid length. [ 494.542178][T22675] sch_fq: defrate 53322 ignored. [ 494.680773][T22687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4228'. [ 495.075022][T22707] netlink: 'syz.0.4233': attribute type 1 has an invalid length. [ 495.204005][T22707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.305146][T22712] bond2: (slave geneve3): making interface the new active one [ 495.326400][T22712] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 495.348179][ T7119] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.357241][ T7119] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.381489][ T7119] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.405954][T22714] team0: No ports can be present during mode change [ 495.416052][ T7119] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.045188][T22753] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 496.178792][T22755] team0 (unregistering): Port device team_slave_0 removed [ 496.217460][T22755] team0 (unregistering): Port device team_slave_1 removed [ 496.265960][T22768] FAULT_INJECTION: forcing a failure. [ 496.265960][T22768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.287703][T22758] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.307092][T22758] bridge0: entered allmulticast mode [ 496.330917][T22768] CPU: 0 UID: 0 PID: 22768 Comm: syz.4.4247 Not tainted syzkaller #0 PREEMPT(full) [ 496.330941][T22768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 496.330952][T22768] Call Trace: [ 496.330959][T22768] [ 496.330967][T22768] dump_stack_lvl+0xe8/0x150 [ 496.330997][T22768] should_fail_ex+0x412/0x560 [ 496.331030][T22768] _copy_from_iter+0x1d3/0x1670 [ 496.331052][T22768] ? rcu_is_watching+0x15/0xb0 [ 496.331083][T22768] ? __pfx__copy_from_iter+0x10/0x10 [ 496.331098][T22768] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 496.331128][T22768] ? netlink_sendmsg+0x650/0xb40 [ 496.331147][T22768] ? skb_put+0x11b/0x210 [ 496.331173][T22768] netlink_sendmsg+0x6c0/0xb40 [ 496.331201][T22768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.331224][T22768] ? aa_sock_msg_perm+0xf1/0x1b0 [ 496.331254][T22768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 496.331278][T22768] ____sys_sendmsg+0x972/0x9f0 [ 496.331310][T22768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.331342][T22768] ? import_iovec+0x73/0xa0 [ 496.331366][T22768] ___sys_sendmsg+0x2a5/0x360 [ 496.331395][T22768] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.331453][T22768] ? __fget_files+0x2a/0x420 [ 496.331466][T22768] ? __fget_files+0x3a0/0x420 [ 496.331492][T22768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 496.331519][T22768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.331551][T22768] ? __pfx_ksys_write+0x10/0x10 [ 496.331578][T22768] do_syscall_64+0x14d/0xf80 [ 496.331598][T22768] ? trace_irq_disable+0x3b/0x150 [ 496.331613][T22768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.331630][T22768] ? clear_bhb_loop+0x40/0x90 [ 496.331651][T22768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.331667][T22768] RIP: 0033:0x7ff93c19c819 [ 496.331683][T22768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.331698][T22768] RSP: 002b:00007ff93d111028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.331725][T22768] RAX: ffffffffffffffda RBX: 00007ff93c416090 RCX: 00007ff93c19c819 [ 496.331738][T22768] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 496.331749][T22768] RBP: 00007ff93d111090 R08: 0000000000000000 R09: 0000000000000000 [ 496.331759][T22768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.331769][T22768] R13: 00007ff93c416128 R14: 00007ff93c416090 R15: 00007fffd03aa5c8 [ 496.331798][T22768] [ 496.911340][T22775] syzkaller0: entered promiscuous mode [ 496.926465][T22775] syzkaller0: entered allmulticast mode [ 497.022993][T22783] __nla_validate_parse: 11 callbacks suppressed [ 497.023011][T22783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4253'. [ 497.219436][T22805] FAULT_INJECTION: forcing a failure. [ 497.219436][T22805] name failslab, interval 1, probability 0, space 0, times 0 [ 497.251120][T22805] CPU: 0 UID: 0 PID: 22805 Comm: syz.2.4259 Not tainted syzkaller #0 PREEMPT(full) [ 497.251145][T22805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 497.251155][T22805] Call Trace: [ 497.251163][T22805] [ 497.251171][T22805] dump_stack_lvl+0xe8/0x150 [ 497.251201][T22805] should_fail_ex+0x412/0x560 [ 497.251232][T22805] should_failslab+0xa8/0x100 [ 497.251255][T22805] ? skb_clone+0x212/0x3a0 [ 497.251279][T22805] kmem_cache_alloc_noprof+0x87/0x650 [ 497.251297][T22805] ? __netlink_lookup+0xc6/0x8b0 [ 497.251324][T22805] skb_clone+0x212/0x3a0 [ 497.251352][T22805] __netlink_deliver_tap+0x404/0x850 [ 497.251383][T22805] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.251404][T22805] netlink_deliver_tap+0x19c/0x1b0 [ 497.251433][T22805] netlink_unicast+0x7e3/0x9b0 [ 497.251459][T22805] ? __pfx_netlink_unicast+0x10/0x10 [ 497.251479][T22805] ? netlink_sendmsg+0x650/0xb40 [ 497.251497][T22805] ? skb_put+0x11b/0x210 [ 497.251522][T22805] netlink_sendmsg+0x813/0xb40 [ 497.251551][T22805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.251574][T22805] ? aa_sock_msg_perm+0xf1/0x1b0 [ 497.251603][T22805] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.251627][T22805] ____sys_sendmsg+0x972/0x9f0 [ 497.251660][T22805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.251692][T22805] ? import_iovec+0x73/0xa0 [ 497.251717][T22805] ___sys_sendmsg+0x2a5/0x360 [ 497.251746][T22805] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.251804][T22805] ? __fget_files+0x2a/0x420 [ 497.251820][T22805] ? __fget_files+0x3a0/0x420 [ 497.251846][T22805] __x64_sys_sendmsg+0x1bd/0x2a0 [ 497.251872][T22805] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.251905][T22805] ? __pfx_ksys_write+0x10/0x10 [ 497.251937][T22805] do_syscall_64+0x14d/0xf80 [ 497.251960][T22805] ? trace_irq_disable+0x3b/0x150 [ 497.251977][T22805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.251994][T22805] ? clear_bhb_loop+0x40/0x90 [ 497.252016][T22805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.252033][T22805] RIP: 0033:0x7f1c90f9c819 [ 497.252049][T22805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.252064][T22805] RSP: 002b:00007f1c91f44028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.252083][T22805] RAX: ffffffffffffffda RBX: 00007f1c91215fa0 RCX: 00007f1c90f9c819 [ 497.252096][T22805] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 497.252108][T22805] RBP: 00007f1c91f44090 R08: 0000000000000000 R09: 0000000000000000 [ 497.252119][T22805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.252129][T22805] R13: 00007f1c91216038 R14: 00007f1c91215fa0 R15: 00007ffd71337ed8 [ 497.252159][T22805] [ 497.593038][T22813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4261'. [ 497.773033][T22823] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4262'. [ 497.783487][T22820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.820529][T22823] netlink: 'syz.1.4262': attribute type 5 has an invalid length. [ 497.859796][T22830] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4266'. [ 497.908839][T22828] tipc: Started in network mode [ 497.914133][T22828] tipc: Node identity d, cluster identity 12 [ 497.923483][T22828] tipc: Node number set to 13 [ 498.106270][T22841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4268'. [ 498.142179][T22841] nbd: must specify at least one socket [ 498.174267][T22849] nbd: must specify an index to disconnect [ 498.318147][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 498.393273][T22868] FAULT_INJECTION: forcing a failure. [ 498.393273][T22868] name failslab, interval 1, probability 0, space 0, times 0 [ 498.446757][T22868] CPU: 1 UID: 0 PID: 22868 Comm: syz.4.4271 Not tainted syzkaller #0 PREEMPT(full) [ 498.446782][T22868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 498.446792][T22868] Call Trace: [ 498.446800][T22868] [ 498.446808][T22868] dump_stack_lvl+0xe8/0x150 [ 498.446837][T22868] should_fail_ex+0x412/0x560 [ 498.446869][T22868] should_failslab+0xa8/0x100 [ 498.446892][T22868] ? skb_clone+0x212/0x3a0 [ 498.446916][T22868] kmem_cache_alloc_noprof+0x87/0x650 [ 498.446935][T22868] ? __netlink_lookup+0xc6/0x8b0 [ 498.446963][T22868] skb_clone+0x212/0x3a0 [ 498.446990][T22868] __netlink_deliver_tap+0x404/0x850 [ 498.447021][T22868] ? netlink_deliver_tap+0x2e/0x1b0 [ 498.447043][T22868] netlink_deliver_tap+0x19c/0x1b0 [ 498.447064][T22868] netlink_unicast+0x7e3/0x9b0 [ 498.447090][T22868] ? __pfx_netlink_unicast+0x10/0x10 [ 498.447109][T22868] ? netlink_sendmsg+0x650/0xb40 [ 498.447127][T22868] ? skb_put+0x11b/0x210 [ 498.447152][T22868] netlink_sendmsg+0x813/0xb40 [ 498.447182][T22868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.447205][T22868] ? aa_sock_msg_perm+0xf1/0x1b0 [ 498.447234][T22868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.447258][T22868] ____sys_sendmsg+0x972/0x9f0 [ 498.447291][T22868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.447323][T22868] ? import_iovec+0x73/0xa0 [ 498.447348][T22868] ___sys_sendmsg+0x2a5/0x360 [ 498.447375][T22868] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.447435][T22868] ? __fget_files+0x2a/0x420 [ 498.447451][T22868] ? __fget_files+0x3a0/0x420 [ 498.447477][T22868] __x64_sys_sendmsg+0x1bd/0x2a0 [ 498.447504][T22868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.447538][T22868] ? __pfx_ksys_write+0x10/0x10 [ 498.447570][T22868] do_syscall_64+0x14d/0xf80 [ 498.447593][T22868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.447618][T22868] ? clear_bhb_loop+0x40/0x90 [ 498.447639][T22868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.447661][T22868] RIP: 0033:0x7ff93c19c819 [ 498.447677][T22868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.447692][T22868] RSP: 002b:00007ff93d111028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.447711][T22868] RAX: ffffffffffffffda RBX: 00007ff93c416090 RCX: 00007ff93c19c819 [ 498.447724][T22868] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 498.447735][T22868] RBP: 00007ff93d111090 R08: 0000000000000000 R09: 0000000000000000 [ 498.447746][T22868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.447757][T22868] R13: 00007ff93c416128 R14: 00007ff93c416090 R15: 00007fffd03aa5c8 [ 498.447791][T22868] [ 499.130335][T22894] netlink: 'syz.0.4282': attribute type 1 has an invalid length. [ 499.182339][T22897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4282'. [ 499.259424][T22894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 499.277739][T22902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4286'. [ 499.362695][T22902] bridge2: port 1(veth7) entered blocking state [ 499.385287][T22912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4286'. [ 499.414788][T22902] bridge2: port 1(veth7) entered disabled state [ 499.428084][T22902] veth7: entered allmulticast mode [ 499.448073][T22902] veth7: entered promiscuous mode [ 499.808159][T22921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4289'. [ 500.029158][T22916] bridge2: port 2(veth9) entered blocking state [ 500.035634][T22916] bridge2: port 2(veth9) entered disabled state [ 500.042168][T22916] veth9: entered allmulticast mode [ 500.049524][T22916] veth9: entered promiscuous mode [ 500.059147][T22917] FAULT_INJECTION: forcing a failure. [ 500.059147][T22917] name failslab, interval 1, probability 0, space 0, times 0 [ 500.111491][ T7101] bond0: (slave bond_slave_0): interface is now down [ 500.123881][ T7101] bond0: (slave bond_slave_1): interface is now down [ 500.138126][T22917] CPU: 1 UID: 0 PID: 22917 Comm: syz.4.4288 Not tainted syzkaller #0 PREEMPT(full) [ 500.138149][T22917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 500.138159][T22917] Call Trace: [ 500.138166][T22917] [ 500.138173][T22917] dump_stack_lvl+0xe8/0x150 [ 500.138202][T22917] should_fail_ex+0x412/0x560 [ 500.138233][T22917] should_failslab+0xa8/0x100 [ 500.138257][T22917] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 500.138277][T22917] ? __alloc_skb+0x186/0x7d0 [ 500.138295][T22917] ? __alloc_skb+0x1d0/0x7d0 [ 500.138314][T22917] ? __local_bh_enable_ip+0xd0/0x130 [ 500.138341][T22917] __alloc_skb+0x1d0/0x7d0 [ 500.138361][T22917] ? netlink_ack_tlv_len+0x6c/0x210 [ 500.138384][T22917] netlink_ack+0x146/0xa50 [ 500.138399][T22917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 500.138417][T22917] ? ref_tracker_free+0x693/0x840 [ 500.138432][T22917] ? __copy_skb_header+0xa3/0x4a0 [ 500.138454][T22917] ? __pfx_ref_tracker_free+0x10/0x10 [ 500.138479][T22917] netlink_rcv_skb+0x2b6/0x4b0 [ 500.138499][T22917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 500.138521][T22917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.138556][T22917] ? netlink_deliver_tap+0x2e/0x1b0 [ 500.138580][T22917] netlink_unicast+0x80f/0x9b0 [ 500.138604][T22917] ? __pfx_netlink_unicast+0x10/0x10 [ 500.138622][T22917] ? netlink_sendmsg+0x650/0xb40 [ 500.138639][T22917] ? skb_put+0x11b/0x210 [ 500.138661][T22917] netlink_sendmsg+0x813/0xb40 [ 500.138689][T22917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.138712][T22917] ? aa_sock_msg_perm+0xf1/0x1b0 [ 500.138738][T22917] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 500.138762][T22917] ____sys_sendmsg+0x972/0x9f0 [ 500.138794][T22917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.138826][T22917] ? import_iovec+0x73/0xa0 [ 500.138849][T22917] ___sys_sendmsg+0x2a5/0x360 [ 500.138876][T22917] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.138928][T22917] ? __fget_files+0x2a/0x420 [ 500.138944][T22917] ? __fget_files+0x3a0/0x420 [ 500.138969][T22917] __x64_sys_sendmsg+0x1bd/0x2a0 [ 500.138994][T22917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 500.139024][T22917] ? __pfx_ksys_write+0x10/0x10 [ 500.139052][T22917] do_syscall_64+0x14d/0xf80 [ 500.139073][T22917] ? trace_irq_disable+0x3b/0x150 [ 500.139089][T22917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.139105][T22917] ? clear_bhb_loop+0x40/0x90 [ 500.139127][T22917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.139143][T22917] RIP: 0033:0x7ff93c19c819 [ 500.139159][T22917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.139173][T22917] RSP: 002b:00007ff93d111028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.139191][T22917] RAX: ffffffffffffffda RBX: 00007ff93c416090 RCX: 00007ff93c19c819 [ 500.139203][T22917] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 500.139214][T22917] RBP: 00007ff93d111090 R08: 0000000000000000 R09: 0000000000000000 [ 500.139225][T22917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.139235][T22917] R13: 00007ff93c416128 R14: 00007ff93c416090 R15: 00007fffd03aa5c8 [ 500.139263][T22917] [ 500.140803][T22927] netlink: 'syz.2.4290': attribute type 10 has an invalid length. [ 500.483743][ T7101] bond0: now running without any active interface! [ 500.498224][T22927] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4290'. [ 500.595103][T22927] hsr0: entered promiscuous mode [ 500.606302][T22927] bridge0: port 3(hsr0) entered blocking state [ 500.618992][T22927] bridge0: port 3(hsr0) entered disabled state [ 500.632516][T22927] hsr0: entered allmulticast mode [ 500.639703][T22927] hsr_slave_0: entered allmulticast mode [ 500.645711][T22927] hsr_slave_1: entered allmulticast mode [ 500.666789][T22924] tipc: Resetting bearer [ 500.767159][T22924] batman_adv: batadv0: Interface deactivated: wlan1 [ 501.131796][T22968] 8021q: VLANs not supported on ip6_vti0 [ 501.321593][T22980] x_tables: duplicate underflow at hook 2 [ 501.366267][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.373353][T22988] ieee802154 phy0 wpan0: encryption failed: -90 [ 501.384538][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 501.393962][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 501.689839][T23018] netlink: 'syz.2.4306': attribute type 12 has an invalid length. [ 501.762782][T23024] netlink: 'syz.0.4307': attribute type 12 has an invalid length. [ 501.774833][T23024] netlink: 'syz.0.4307': attribute type 12 has an invalid length. [ 501.858763][T23030] syzkaller0: entered promiscuous mode [ 501.907045][T23030] syzkaller0: entered allmulticast mode [ 501.964518][T23032] bridge0: port 3(vlan5) entered blocking state [ 501.989670][T23032] bridge0: port 3(vlan5) entered disabled state [ 502.008886][T23032] vlan5: entered allmulticast mode [ 502.018569][T23032] bridge0: entered allmulticast mode [ 502.033335][T23039] netlink: 'syz.4.4309': attribute type 11 has an invalid length. [ 502.052022][T23032] vlan5: left allmulticast mode [ 502.067560][T23032] bridge0: left allmulticast mode [ 502.094341][T23038] erspan1: entered promiscuous mode [ 502.099828][T23038] erspan1: entered allmulticast mode [ 502.350751][T23061] FAULT_INJECTION: forcing a failure. [ 502.350751][T23061] name failslab, interval 1, probability 0, space 0, times 0 [ 502.381710][T23061] CPU: 1 UID: 0 PID: 23061 Comm: syz.4.4316 Not tainted syzkaller #0 PREEMPT(full) [ 502.381735][T23061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 502.381746][T23061] Call Trace: [ 502.381753][T23061] [ 502.381761][T23061] dump_stack_lvl+0xe8/0x150 [ 502.381790][T23061] should_fail_ex+0x412/0x560 [ 502.381822][T23061] should_failslab+0xa8/0x100 [ 502.381844][T23061] ? skb_clone+0x212/0x3a0 [ 502.381868][T23061] kmem_cache_alloc_noprof+0x87/0x650 [ 502.381896][T23061] skb_clone+0x212/0x3a0 [ 502.381922][T23061] __netlink_deliver_tap+0x404/0x850 [ 502.381954][T23061] ? netlink_deliver_tap+0x2e/0x1b0 [ 502.381975][T23061] netlink_deliver_tap+0x19c/0x1b0 [ 502.381996][T23061] netlink_sendskb+0x68/0x140 [ 502.382024][T23061] netlink_unicast+0x3a3/0x9b0 [ 502.382050][T23061] ? __pfx_netlink_unicast+0x10/0x10 [ 502.382077][T23061] netlink_rcv_skb+0x2b6/0x4b0 [ 502.382097][T23061] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 502.382120][T23061] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.382150][T23061] ? netlink_deliver_tap+0x2e/0x1b0 [ 502.382177][T23061] netlink_unicast+0x80f/0x9b0 [ 502.382202][T23061] ? __pfx_netlink_unicast+0x10/0x10 [ 502.382222][T23061] ? netlink_sendmsg+0x650/0xb40 [ 502.382239][T23061] ? skb_put+0x11b/0x210 [ 502.382264][T23061] netlink_sendmsg+0x813/0xb40 [ 502.382293][T23061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.382316][T23061] ? aa_sock_msg_perm+0xf1/0x1b0 [ 502.382344][T23061] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 502.382368][T23061] ____sys_sendmsg+0x972/0x9f0 [ 502.382411][T23061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.382442][T23061] ? import_iovec+0x73/0xa0 [ 502.382464][T23061] ___sys_sendmsg+0x2a5/0x360 [ 502.382491][T23061] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.382549][T23061] ? __fget_files+0x2a/0x420 [ 502.382565][T23061] ? __fget_files+0x3a0/0x420 [ 502.382589][T23061] __x64_sys_sendmsg+0x1bd/0x2a0 [ 502.382615][T23061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 502.382646][T23061] ? __pfx_ksys_write+0x10/0x10 [ 502.382674][T23061] do_syscall_64+0x14d/0xf80 [ 502.382694][T23061] ? trace_irq_disable+0x3b/0x150 [ 502.382709][T23061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.382725][T23061] ? clear_bhb_loop+0x40/0x90 [ 502.382749][T23061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.382765][T23061] RIP: 0033:0x7ff93c19c819 [ 502.382781][T23061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.382793][T23061] RSP: 002b:00007ff93d111028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.382811][T23061] RAX: ffffffffffffffda RBX: 00007ff93c416090 RCX: 00007ff93c19c819 [ 502.382824][T23061] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 502.382835][T23061] RBP: 00007ff93d111090 R08: 0000000000000000 R09: 0000000000000000 [ 502.382845][T23061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.382854][T23061] R13: 00007ff93c416128 R14: 00007ff93c416090 R15: 00007fffd03aa5c8 [ 502.382882][T23061] [ 502.727862][T23067] netlink: 'syz.2.4318': attribute type 3 has an invalid length. [ 502.736313][T23067] netlink: 'syz.2.4318': attribute type 3 has an invalid length. [ 502.744139][T23067] __nla_validate_parse: 7 callbacks suppressed [ 502.744154][T23067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4318'. [ 503.015537][T23079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4323'. [ 503.056578][T23079] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4323'. [ 503.073357][T23079] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4323'. [ 503.407120][T23101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4326'. [ 503.499122][T23077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4321'. [ 503.508173][T23077] lo: Caught tx_queue_len zero misconfig [ 504.109735][T23163] ip6tnl0: Caught tx_queue_len zero misconfig [ 504.116413][T23163] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4343'. [ 504.326920][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4346'. [ 504.336752][T23182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4346'. [ 504.356160][T23182] netlink: 'syz.2.4346': attribute type 5 has an invalid length. [ 504.384986][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4346'. [ 504.394133][ T7107] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.402856][T23182] netlink: 'syz.2.4346': attribute type 5 has an invalid length. [ 504.414429][ T7107] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.443255][ T7107] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.463023][ T7107] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.545266][T23196] ip6_vti0: entered promiscuous mode [ 504.608594][T23198] bond4: option min_links: invalid value (18446744073709551612) [ 504.630000][T23198] bond4: option min_links: allowed values 0 - 2147483647 [ 504.671079][T23198] bond4 (unregistering): Released all slaves [ 505.134406][T23234] netlink: 'syz.0.4359': attribute type 1 has an invalid length. [ 505.229755][T23234] bond4: entered promiscuous mode [ 505.249677][T23234] 8021q: adding VLAN 0 to HW filter on device bond4 [ 505.416376][T23251] netlink: 'syz.0.4364': attribute type 8 has an invalid length. [ 505.430413][T23251] bond0: entered promiscuous mode [ 505.438016][T23251] gretap0: entered promiscuous mode [ 505.444333][T23251] debugfs: 'hsr1' already exists in 'hsr' [ 505.450779][T23251] Cannot create hsr debugfs directory [ 505.456791][T23251] hsr1: entered promiscuous mode [ 505.580858][T23258] netlink: 'syz.4.4368': attribute type 1 has an invalid length. [ 505.730759][T23258] bond3: (slave gretap1): making interface the new active one [ 505.785972][T23258] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 505.839320][T23258] syz.4.4368 (23258) used greatest stack depth: 17352 bytes left [ 506.032961][T23290] netlink: 'syz.0.4374': attribute type 21 has an invalid length. [ 506.070148][T23296] nbd: couldn't find a device at index 0 [ 506.074471][T23290] IPv6: NLM_F_CREATE should be specified when creating new route [ 506.129168][T23290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.136452][T23290] IPv6: NLM_F_CREATE should be set when creating new route [ 506.143690][T23290] IPv6: NLM_F_CREATE should be set when creating new route [ 506.150954][T23290] IPv6: NLM_F_CREATE should be set when creating new route [ 506.162594][T23296] bond7: option lp_interval: invalid value (0) [ 506.225711][T23296] bond7: option lp_interval: allowed values 1 - 2147483647 [ 506.278697][T23296] bond7 (unregistering): Released all slaves [ 506.509992][T23327] openvswitch: netlink: Flow actions attr not present in new flow. [ 506.600668][T23330] 8021q: VLANs not supported on nlmon0 [ 506.795852][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5400 ms [ 506.803876][ C0] lec:lec_tx_timeout: lec0 [ 507.027330][T23352] vlan4: entered promiscuous mode [ 507.044245][T23346] netlink: 'syz.4.4388': attribute type 89 has an invalid length. [ 507.265984][T23372] netlink: 'syz.1.4395': attribute type 2 has an invalid length. [ 507.278944][T23373] netlink: 'syz.1.4395': attribute type 2 has an invalid length. [ 507.320137][T23372] !9: entered promiscuous mode [ 507.332534][T23373] !9: left promiscuous mode [ 507.669373][T23387] netlink: 'syz.3.4399': attribute type 29 has an invalid length. [ 507.835129][T23361] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 507.913674][T23404] __nla_validate_parse: 60 callbacks suppressed [ 507.913692][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4404'. [ 508.046326][T23413] ipvlan2: entered promiscuous mode [ 508.063450][T23413] bridge0: port 1(ipvlan2) entered blocking state [ 508.073438][T23418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4409'. [ 508.087539][T23413] bridge0: port 1(ipvlan2) entered disabled state [ 508.094338][T23413] ipvlan2: entered allmulticast mode [ 508.100326][T23413] bridge0: entered allmulticast mode [ 508.108804][T23413] ipvlan2: left allmulticast mode [ 508.113906][T23413] bridge0: left allmulticast mode [ 508.137067][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.146417][T23418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4409'. [ 508.155367][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.165014][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.214144][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.288067][T23422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4412'. [ 508.427166][T23434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4415'. [ 508.540555][T23440] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4417'. [ 508.555924][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 508.767904][T23456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4422'. [ 508.945560][T23472] nbd: must specify a size in bytes for the device [ 508.951982][T23461] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.4424'. [ 509.164381][T23489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4430'. [ 509.219828][T23496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4432'. [ 509.276959][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 509.280699][T23496] bond6: entered promiscuous mode [ 509.289781][T23496] 8021q: adding VLAN 0 to HW filter on device bond6 [ 509.321541][T23501] 8021q: adding VLAN 0 to HW filter on device bond6 [ 509.350279][T23501] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 509.363499][T23501] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 509.417261][T23496] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 509.455494][T23496] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 509.855265][T23536] syzkaller0: entered promiscuous mode [ 509.863765][T23536] syzkaller0: entered allmulticast mode [ 510.170430][T23557] syzkaller0: entered promiscuous mode [ 510.185975][T23557] syzkaller0: entered allmulticast mode [ 510.627340][T23582] pim6reg1: entered promiscuous mode [ 510.635950][T23582] pim6reg1: entered allmulticast mode [ 511.144309][T23605] tipc: Started in network mode [ 511.149760][T23605] tipc: Node identity ac14140f, cluster identity 4711 [ 511.158227][T23605] tipc: Enabled bearer , priority 10 [ 511.401418][T23610] gre0: entered promiscuous mode [ 511.407396][T23610] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 511.874122][T23627] validate_nla: 9 callbacks suppressed [ 511.874139][T23627] netlink: 'syz.0.4465': attribute type 1 has an invalid length. [ 511.909244][T23626] bond8: option packets_per_slave: invalid value (1048582) [ 511.916710][T23626] bond8: option packets_per_slave: allowed values 0 - 65535 [ 511.926824][T23626] bond8 (unregistering): Released all slaves [ 512.295925][ T7205] tipc: Node number set to 2886997007 [ 512.417952][T23649] veth1_macvtap: left promiscuous mode [ 512.545219][T23651] netlink: 'syz.0.4472': attribute type 1 has an invalid length. [ 512.553076][T23651] netlink: 'syz.0.4472': attribute type 4 has an invalid length. [ 512.562962][T23651] netlink: 'syz.0.4472': attribute type 1 has an invalid length. [ 512.570720][T23653] IPv6: Can't replace route, no match found [ 512.718105][T23661] netlink: 'syz.0.4474': attribute type 1 has an invalid length. [ 512.785874][T23661] 8021q: adding VLAN 0 to HW filter on device bond8 [ 512.834904][T23661] veth5: entered promiscuous mode [ 512.857623][T23661] bond8: (slave veth5): Enslaving as an active interface with an up link [ 513.470497][T23694] __nla_validate_parse: 10 callbacks suppressed [ 513.470514][T23694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4485'. [ 513.511949][T23697] xt_TCPMSS: Only works on TCP SYN packets [ 513.536424][T23694] vlan1: entered promiscuous mode [ 513.541484][T23694] erspan0: entered promiscuous mode [ 513.838506][T23715] bond4: (slave vlan0): Opening slave failed [ 513.868368][T23719] netlink: 'syz.3.4492': attribute type 1 has an invalid length. [ 513.970148][T23719] 8021q: adding VLAN 0 to HW filter on device bond4 [ 514.068968][T23736] netlink: zone id is out of range [ 514.074118][T23736] netlink: zone id is out of range [ 514.105885][T23736] netlink: zone id is out of range [ 514.115627][T23740] netlink: 1244 bytes leftover after parsing attributes in process `syz.3.4498'. [ 514.125866][T23736] netlink: zone id is out of range [ 514.125880][T23736] netlink: zone id is out of range [ 514.125887][T23736] netlink: zone id is out of range [ 514.125896][T23736] netlink: zone id is out of range [ 514.136610][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4496'. [ 514.178561][T23736] netlink: zone id is out of range [ 514.197237][T23736] netlink: zone id is out of range [ 514.211112][T23742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4497'. [ 514.226099][T23736] netlink: zone id is out of range [ 514.293275][T23742] team0: Port device team_slave_0 removed [ 514.338509][T23748] batman_adv: batadv0: Adding interface: ipvlan0 [ 514.351139][T23748] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.411800][T23748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.423062][T23748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.433369][T23748] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 514.489845][T23747] bond5: option arp_all_targets: invalid value (129) [ 514.498449][T23747] bond5 (unregistering): Released all slaves [ 514.532368][T23751] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 514.745930][T23765] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4501'. [ 514.758081][T23761] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 514.775019][T23761] tipc: Resetting bearer [ 514.862482][T23770] tipc: Started in network mode [ 514.867584][T23770] tipc: Node identity e22fd4022b61, cluster identity 4711 [ 514.874942][T23770] tipc: Enabled bearer , priority 0 [ 514.885142][T23770] syzkaller0: entered promiscuous mode [ 514.912384][T23770] syzkaller0: entered allmulticast mode [ 514.951016][T23769] tipc: Resetting bearer [ 514.997785][T23769] tipc: Disabling bearer [ 515.027541][T23779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4508'. [ 515.037505][T23778] batman_adv: batadv0: Adding interface: gretap2 [ 515.043853][T23778] batman_adv: batadv0: The MTU of interface gretap2 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.089545][T23778] batman_adv: batadv0: Interface activated: gretap2 [ 515.531954][T23798] ip6tnl3: entered promiscuous mode [ 515.549399][T23798] ip6tnl3: entered allmulticast mode [ 515.564055][T23810] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4516'. [ 515.604467][T23804] syzkaller0: entered promiscuous mode [ 515.610192][T23804] syzkaller0: entered allmulticast mode [ 515.758893][T23812] netlink: 'syz.1.4517': attribute type 8 has an invalid length. [ 515.766940][T23812] sch_fq: defrate 0 ignored. [ 515.771999][T23814] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 515.858558][T23824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4520'. [ 515.967348][T23832] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4523'. [ 516.021069][T23827] netlink: 'syz.3.4520': attribute type 2 has an invalid length. [ 516.035697][T23827] !: entered promiscuous mode [ 516.065547][T23827] netlink: 'syz.3.4520': attribute type 2 has an invalid length. [ 516.158964][T23826] syzkaller0: entered promiscuous mode [ 516.164535][T23826] syzkaller0: entered allmulticast mode [ 516.211782][T23842] netlink: 'syz.4.4527': attribute type 2 has an invalid length. [ 516.540500][T23871] Cannot find del_set index 1536 as target [ 517.905937][T23873] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4531'. [ 518.254794][T23901] bridge_slave_0: left allmulticast mode [ 518.298550][T23901] bridge_slave_0: left promiscuous mode [ 518.329643][T23901] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.356120][T23901] bridge_slave_1: left allmulticast mode [ 518.366080][T23901] bridge_slave_1: left promiscuous mode [ 518.381889][T23901] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.416394][ T7127] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 518.439604][T23901] bond0: (slave bond_slave_0): Releasing backup interface [ 518.465966][T23901] bond0: (slave bond_slave_1): Releasing backup interface [ 518.482327][T23901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.489988][T23901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.498338][T23901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.505724][T23901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.577509][T23927] __nla_validate_parse: 1 callbacks suppressed [ 518.577527][T23927] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4542'. [ 518.597784][T23927] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4542'. [ 518.840173][T23884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.911893][T23935] validate_nla: 3 callbacks suppressed [ 518.911911][T23935] netlink: 'syz.3.4544': attribute type 1 has an invalid length. [ 518.943091][T23935] netlink: 'syz.3.4544': attribute type 2 has an invalid length. [ 518.958052][T23935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4544'. [ 518.974063][T23935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4544'. [ 519.097337][T23944] net_ratelimit: 432 callbacks suppressed [ 519.097355][T23944] openvswitch: netlink: IP tunnel dst address not specified [ 519.116194][T23944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4546'. [ 519.191607][T23948] netlink: 'syz.1.4548': attribute type 64 has an invalid length. [ 519.280882][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4550'. [ 519.301825][T23951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4549'. [ 519.319148][T23951] ip6tnl4: entered allmulticast mode [ 519.829834][T23995] : renamed from bond_slave_0 [ 519.860480][T23989] syzkaller0: entered promiscuous mode [ 519.866254][T23989] syzkaller0: entered allmulticast mode [ 520.098150][T24008] netlink: 'syz.1.4564': attribute type 1 has an invalid length. [ 520.156176][T24018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4564'. [ 520.211103][T24021] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 520.264858][T24024] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20000 [ 520.332835][T24027] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4568'. [ 520.403548][T24021] bond7: (slave gretap1): making interface the new active one [ 520.413437][T24021] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 520.522087][T24032] netlink: 'syz.3.4571': attribute type 1 has an invalid length. [ 520.563542][T24042] netlink: 'syz.4.4575': attribute type 1 has an invalid length. [ 520.563826][T24032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4571'. [ 520.601002][T24042] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 520.694011][T24032] syzkaller0: entered promiscuous mode [ 520.707919][T24032] syzkaller0: entered allmulticast mode [ 520.737519][T24058] netlink: 'syz.4.4578': attribute type 21 has an invalid length. [ 521.389209][T24051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.117104][T24058] netlink: 'syz.4.4578': attribute type 1 has an invalid length. [ 522.241588][T24076] x_tables: duplicate underflow at hook 2 [ 522.366087][T24087] netlink: 'syz.1.4587': attribute type 8 has an invalid length. [ 522.442269][T24092] netlink: 'syz.1.4587': attribute type 11 has an invalid length. [ 523.144213][T24130] syzkaller0: entered promiscuous mode [ 523.150208][T24130] syzkaller0: entered allmulticast mode [ 523.160452][T24130] tc action pedit offset must be on 32 bit boundaries [ 523.437477][T24148] hsr_slave_0: left promiscuous mode [ 523.447266][T24148] hsr_slave_1: left promiscuous mode [ 523.469853][T24148] hsr0 (unregistering): left allmulticast mode [ 523.490183][T24148] bridge0: port 3(hsr0) entered disabled state [ 523.593718][T24158] __nla_validate_parse: 18 callbacks suppressed [ 523.593737][T24158] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4608'. [ 523.751424][T24169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4612'. [ 523.840319][T24171] bond5: (slave geneve3): making interface the new active one [ 523.855010][T24171] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 523.865913][ T7100] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 523.875289][ T7100] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 523.884333][ T7100] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 523.893541][ T7100] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 523.937490][T24171] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4614'. [ 523.975305][T24171] 8021q: adding VLAN 0 to HW filter on device bond5 [ 524.030542][T24171] tipc: Resetting bearer [ 524.038829][T24171] tipc: Resetting bearer [ 524.110507][T24192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4617'. [ 524.259275][T24202] block nbd4: not configured, cannot reconfigure [ 524.367153][ T7100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.034439][T24229] validate_nla: 7 callbacks suppressed [ 525.034458][T24229] netlink: 'syz.2.4624': attribute type 5 has an invalid length. [ 525.282485][T24245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.293748][T24245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.318093][T24245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.326552][T24245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.332873][T24249] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4629'. [ 525.334832][T24245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.345223][T24240] netlink: 'syz.3.4627': attribute type 16 has an invalid length. [ 525.359619][T24240] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4627'. [ 525.375001][T24245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.391791][T24245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.403524][T24245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.454549][T24245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.912389][T24263] xfrm0: Caught tx_queue_len zero misconfig [ 526.271794][T24278] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4636'. [ 526.282948][T24278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4636'. [ 526.287929][ T3526] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.323726][ T3526] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.367717][ T3526] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.394710][ T3526] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.628166][T24295] syzkaller0: entered promiscuous mode [ 526.633666][T24295] syzkaller0: entered allmulticast mode [ 526.696244][T24297] ip6tnl2: entered promiscuous mode [ 526.701470][T24297] ip6tnl2: entered allmulticast mode [ 526.843590][T24302] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 526.875276][T24302] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 526.889244][T24302] bond5 (unregistering): Released all slaves [ 527.041389][T24307] netlink: 'syz.0.4644': attribute type 39 has an invalid length. [ 527.408169][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.430036][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.453440][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.465697][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.485839][T24326] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 527.491821][T24326] syzkaller1: linktype set to 768 [ 527.508454][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.514551][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.520907][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.527241][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.537367][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.545327][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.553804][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.562266][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.569779][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.576077][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.583522][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.590843][T24331] xt_hashlimit: size too large, truncated to 1048576 [ 527.599694][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.605599][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.630019][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.639526][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.645427][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.654601][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.662059][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.668512][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.674404][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.681237][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.694416][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.717488][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.737995][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.746564][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.762960][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.780155][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.798182][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.804087][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.833689][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.848931][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.848982][T24339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4653'. [ 527.854955][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.913116][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.946198][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.954249][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.965284][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.980798][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.987847][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 527.993815][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.001660][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.008172][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.014035][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.023528][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.029662][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.035545][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.042652][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.049197][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.055092][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.061686][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.067727][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.073678][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.080296][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.086297][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.092148][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.098162][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.104234][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.110399][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.116398][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.122306][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.129145][T24328] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 528.147095][T24349] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.157115][T24349] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.249108][T24349] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.261936][T24349] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.345347][T24349] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.360854][T24349] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.417893][T24349] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.429508][T24349] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.559366][ T7130] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.568201][ T7130] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.589855][ T7130] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.598186][ T7130] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.606549][ T7130] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.614923][ T7130] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.623375][ T7130] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.631910][ T7130] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.690636][T24375] netlink: 'syz.2.4663': attribute type 8 has an invalid length. [ 528.699373][T24375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4663'. [ 528.912222][T24383] xt_bpf: check failed: parse error [ 529.156465][T24391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4670'. [ 529.165520][T24391] netlink: 356 bytes leftover after parsing attributes in process `syz.0.4670'. [ 529.718148][T24414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4678'. [ 529.849464][T24419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4680'. [ 529.861545][T24419] netlink: 'syz.2.4680': attribute type 29 has an invalid length. [ 529.869573][T24419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4680'. [ 530.012979][T24423] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20003 [ 530.137412][ T7102] net_ratelimit: 743 callbacks suppressed [ 530.137430][ T7102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.712934][T24453] netlink: 'syz.3.4690': attribute type 1 has an invalid length. [ 530.737213][T24453] 8021q: adding VLAN 0 to HW filter on device bond5 [ 530.758259][T24453] bond5: (slave veth11): Enslaving as an active interface with a down link [ 530.775671][T24453] bond5: (slave dummy0): making interface the new active one [ 530.784278][T24453] dummy0: entered promiscuous mode [ 530.789981][T24453] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 530.866657][T24459] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4692'. [ 530.893496][T24461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4693'. [ 530.905137][T24461] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4693'. [ 530.914432][T24461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4693'. [ 530.933957][T24461] syzkaller0: entered promiscuous mode [ 530.939602][T24461] syzkaller0: entered allmulticast mode [ 531.257038][ T7130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.265550][T24485] gtp0: entered allmulticast mode [ 531.600667][T24502] syzkaller1: entered promiscuous mode [ 531.608176][T24502] syzkaller1: entered allmulticast mode [ 531.619787][T24502] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.238171][ T7119] batman_adv: batadv0: Removing interface: gretap1 [ 532.284469][ T7119] bond2 (unregistering): (slave bridge2): Releasing active interface [ 532.292656][ T7119] bridge2 (unregistering): left promiscuous mode [ 532.299126][ T7119] bridge2 (unregistering): left allmulticast mode [ 532.315999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.324701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.376671][ T3526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.551681][ T7119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.562465][ T7119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.574994][ T7119] bond0 (unregistering): Released all slaves [ 532.584942][ T7119] bond1 (unregistering): Released all slaves [ 532.603050][ T7119] bond2 (unregistering): Released all slaves [ 532.615467][ T7119] bond3 (unregistering): Released all slaves [ 532.630877][ T7119] bond4 (unregistering): Released all slaves [ 532.649384][ T7119] bond5 (unregistering): Released all slaves [ 532.662364][ T7119] bond6 (unregistering): Released all slaves [ 532.674693][ T7119] bond7 (unregistering): Released all slaves [ 532.689510][ T7119] bond8 (unregistering): Released all slaves [ 532.713002][ T7119] bond9 (unregistering): Released all slaves [ 532.830785][ T7119] tipc: Left network mode [ 533.071208][T24539] netlink: 'syz.1.4711': attribute type 13 has an invalid length. [ 533.096325][T24539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.167111][ T7119] hsr_slave_0: left promiscuous mode [ 533.173121][ T7119] hsr_slave_1: left promiscuous mode [ 533.179703][ T7119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.241674][T24547] netlink: 'syz.1.4713': attribute type 28 has an invalid length. [ 533.506377][ T7128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.674595][ T7119] IPVS: stop unused estimator thread 0... [ 533.926885][T24463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.162894][T24551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4714'. [ 534.268442][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4715'. [ 534.368112][ T8550] IPVS: starting estimator thread 0... [ 534.368355][T24567] veth0_to_hsr: entered promiscuous mode [ 534.407207][T24567] macvlan2: entered promiscuous mode [ 534.412691][T24567] macvlan2: entered allmulticast mode [ 534.419129][T24567] veth0_to_hsr: entered allmulticast mode [ 534.465901][T24579] IPVS: using max 34 ests per chain, 81600 per kthread [ 534.530955][T24583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4724'. [ 534.550487][T24583] netlink: 'syz.1.4724': attribute type 38 has an invalid length. [ 534.608986][ T7107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.731577][T24594] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4729'. [ 534.747307][T24594] veth0: Caught tx_queue_len zero misconfig [ 534.809039][T24601] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.4732'. [ 534.818727][T24602] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.4732'. [ 534.852292][T24603] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4733'. [ 534.885123][T24608] netlink: 'syz.3.4735': attribute type 1 has an invalid length. [ 534.900902][T24607] netlink: 'syz.2.4734': attribute type 61 has an invalid length. [ 534.958917][T24604] [ 534.961279][T24604] ====================================================== [ 534.968292][T24604] WARNING: possible circular locking dependency detected [ 534.975311][T24604] syzkaller #0 Not tainted [ 534.979730][T24604] ------------------------------------------------------ [ 534.986742][T24604] syz.1.4731/24604 is trying to acquire lock: [ 534.992792][T24604] ffffffff8fd46298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 535.002093][T24604] [ 535.002093][T24604] but task is already holding lock: [ 535.009440][T24604] ffff88802af2d470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 535.018821][T24604] [ 535.018821][T24604] which lock already depends on the new lock. [ 535.018821][T24604] [ 535.029202][T24604] [ 535.029202][T24604] the existing dependency chain (in reverse order) is: [ 535.038199][T24604] [ 535.038199][T24604] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 535.046180][T24604] _raw_spin_lock_bh+0x36/0x50 [ 535.051460][T24604] nr_rt_device_down+0x153/0x860 [ 535.056899][T24604] nr_device_event+0x137/0x150 [ 535.062172][T24604] notifier_call_chain+0x1be/0x400 [ 535.067793][T24604] netif_close_many+0x2ae/0x420 [ 535.073148][T24604] netif_close+0x160/0x220 [ 535.078072][T24604] dev_close+0x10a/0x220 [ 535.082821][T24604] bpq_device_event+0x377/0x6a0 [ 535.088176][T24604] notifier_call_chain+0x1be/0x400 [ 535.093803][T24604] netif_close_many+0x2ae/0x420 [ 535.099158][T24604] netif_close+0x160/0x220 [ 535.104078][T24604] dev_close+0x10a/0x220 [ 535.108825][T24604] bond_setup_by_slave+0x5f/0x3e0 [ 535.114354][T24604] bond_enslave+0x847/0x3c10 [ 535.119449][T24604] bond_do_ioctl+0x6ec/0x8d0 [ 535.124538][T24604] dev_ifsioc+0x961/0x1280 [ 535.129457][T24604] dev_ioctl+0x7b4/0x1150 [ 535.134303][T24604] sock_do_ioctl+0x23e/0x320 [ 535.139420][T24604] sock_ioctl+0x5c6/0x7f0 [ 535.144250][T24604] __se_sys_ioctl+0xfc/0x170 [ 535.149347][T24604] do_syscall_64+0x14d/0xf80 [ 535.154445][T24604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.160870][T24604] [ 535.160870][T24604] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 535.168680][T24604] _raw_spin_lock_bh+0x36/0x50 [ 535.173963][T24604] nr_rt_device_down+0xbe/0x860 [ 535.179324][T24604] nr_device_event+0x137/0x150 [ 535.184600][T24604] notifier_call_chain+0x1be/0x400 [ 535.190224][T24604] netif_close_many+0x2ae/0x420 [ 535.195581][T24604] netif_close+0x160/0x220 [ 535.200501][T24604] dev_close+0x10a/0x220 [ 535.205251][T24604] bpq_device_event+0x377/0x6a0 [ 535.210603][T24604] notifier_call_chain+0x1be/0x400 [ 535.216225][T24604] netif_close_many+0x2ae/0x420 [ 535.221580][T24604] netif_close+0x160/0x220 [ 535.226500][T24604] dev_close+0x10a/0x220 [ 535.231250][T24604] bond_setup_by_slave+0x5f/0x3e0 [ 535.236779][T24604] bond_enslave+0x847/0x3c10 [ 535.241875][T24604] bond_do_ioctl+0x6ec/0x8d0 [ 535.246966][T24604] dev_ifsioc+0x961/0x1280 [ 535.251886][T24604] dev_ioctl+0x7b4/0x1150 [ 535.256720][T24604] sock_do_ioctl+0x23e/0x320 [ 535.261814][T24604] sock_ioctl+0x5c6/0x7f0 [ 535.266647][T24604] __se_sys_ioctl+0xfc/0x170 [ 535.271767][T24604] do_syscall_64+0x14d/0xf80 [ 535.276868][T24604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.283266][T24604] [ 535.283266][T24604] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 535.291157][T24604] __lock_acquire+0x15a5/0x2cf0 [ 535.296519][T24604] lock_acquire+0xf0/0x2e0 [ 535.301476][T24604] _raw_spin_lock_bh+0x36/0x50 [ 535.306750][T24604] nr_remove_neigh+0x25/0xe0 [ 535.311846][T24604] nr_add_node+0x1e41/0x2630 [ 535.316938][T24604] nr_rt_ioctl+0xe59/0xf90 [ 535.321854][T24604] sock_do_ioctl+0x101/0x320 [ 535.326954][T24604] sock_ioctl+0x5c6/0x7f0 [ 535.331782][T24604] __se_sys_ioctl+0xfc/0x170 [ 535.336875][T24604] do_syscall_64+0x14d/0xf80 [ 535.341974][T24604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.348376][T24604] [ 535.348376][T24604] other info that might help us debug this: [ 535.348376][T24604] [ 535.358583][T24604] Chain exists of: [ 535.358583][T24604] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 535.358583][T24604] [ 535.372472][T24604] Possible unsafe locking scenario: [ 535.372472][T24604] [ 535.379903][T24604] CPU0 CPU1 [ 535.385247][T24604] ---- ---- [ 535.390593][T24604] lock(&nr_node->node_lock); [ 535.395343][T24604] lock(nr_node_list_lock); [ 535.402435][T24604] lock(&nr_node->node_lock); [ 535.409709][T24604] lock(nr_neigh_list_lock); [ 535.414383][T24604] [ 535.414383][T24604] *** DEADLOCK *** [ 535.414383][T24604] [ 535.422513][T24604] 1 lock held by syz.1.4731/24604: [ 535.427622][T24604] #0: ffff88802af2d470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 535.437475][T24604] [ 535.437475][T24604] stack backtrace: [ 535.443445][T24604] CPU: 0 UID: 0 PID: 24604 Comm: syz.1.4731 Not tainted syzkaller #0 PREEMPT(full) [ 535.443464][T24604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 535.443474][T24604] Call Trace: [ 535.443480][T24604] [ 535.443487][T24604] dump_stack_lvl+0xe8/0x150 [ 535.443511][T24604] print_circular_bug+0x2e1/0x300 [ 535.443536][T24604] check_noncircular+0x12e/0x150 [ 535.443560][T24604] __lock_acquire+0x15a5/0x2cf0 [ 535.443587][T24604] lock_acquire+0xf0/0x2e0 [ 535.443605][T24604] ? nr_remove_neigh+0x25/0xe0 [ 535.443622][T24604] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 535.443637][T24604] ? nr_remove_neigh+0x25/0xe0 [ 535.443651][T24604] _raw_spin_lock_bh+0x36/0x50 [ 535.443668][T24604] ? nr_remove_neigh+0x25/0xe0 [ 535.443682][T24604] nr_remove_neigh+0x25/0xe0 [ 535.443696][T24604] nr_add_node+0x1e41/0x2630 [ 535.443712][T24604] ? dev_get_by_name+0x21/0x200 [ 535.443734][T24604] ? dev_get_by_name+0x21/0x200 [ 535.443754][T24604] ? nr_call_to_digi+0x136/0x1b0 [ 535.443768][T24604] nr_rt_ioctl+0xe59/0xf90 [ 535.443784][T24604] ? kasan_quarantine_put+0xbb/0x1f0 [ 535.443800][T24604] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 535.443817][T24604] ? apparmor_capable+0x126/0x170 [ 535.443837][T24604] ? capable+0x88/0xe0 [ 535.443857][T24604] ? nr_ioctl+0x1b1/0x3b0 [ 535.443877][T24604] sock_do_ioctl+0x101/0x320 [ 535.443892][T24604] ? __pfx_sock_do_ioctl+0x10/0x10 [ 535.443905][T24604] ? do_futex+0x395/0x420 [ 535.443927][T24604] sock_ioctl+0x5c6/0x7f0 [ 535.443941][T24604] ? __pfx_sock_ioctl+0x10/0x10 [ 535.443953][T24604] ? __fget_files+0x2a/0x420 [ 535.443966][T24604] ? __fget_files+0x3a0/0x420 [ 535.443977][T24604] ? __fget_files+0x2a/0x420 [ 535.443990][T24604] ? bpf_lsm_file_ioctl+0x9/0x20 [ 535.444010][T24604] ? __pfx_sock_ioctl+0x10/0x10 [ 535.444022][T24604] __se_sys_ioctl+0xfc/0x170 [ 535.444040][T24604] do_syscall_64+0x14d/0xf80 [ 535.444058][T24604] ? trace_irq_disable+0x3b/0x150 [ 535.444071][T24604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.444086][T24604] ? clear_bhb_loop+0x40/0x90 [ 535.444102][T24604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.444117][T24604] RIP: 0033:0x7efe75f9c819 [ 535.444132][T24604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.444145][T24604] RSP: 002b:00007efe76d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.444160][T24604] RAX: ffffffffffffffda RBX: 00007efe76216090 RCX: 00007efe75f9c819 [ 535.444172][T24604] RDX: 0000200000000000 RSI: 000000000000890b RDI: 000000000000000c [ 535.444181][T24604] RBP: 00007efe76032c91 R08: 0000000000000000 R09: 0000000000000000 [ 535.444191][T24604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.444200][T24604] R13: 00007efe76216128 R14: 00007efe76216090 R15: 00007ffe7108e248 [ 535.444216][T24604] [ 535.748195][T24614] syzkaller0: entered promiscuous mode [ 535.754429][T24614] syzkaller0: entered allmulticast mode [ 536.386220][ T7128] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.506228][ T7119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.475951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.484200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.616011][ T7107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.346461][ T9096] lec:lec_start_xmit: lec0:No lecd attached [ 539.726134][ T7119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.855949][ T7107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.956054][ T7107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.535995][ T7119] dummy0: left promiscuous mode [ 543.086129][ T7102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.185969][ T7119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.805806][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms [ 544.813836][ C0] lec:lec_tx_timeout: lec0